$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json) Hash identifier: Hj8BPwcEtacqvCcdIs9PJrHv84HKQO6zlb3M7o4Io9U= Subject key identifier: 0C:60:67:B1:4A:3F:E2:8C:72:23:F2:DE:9D:EE:C9:87:5A:0D:42:68 Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft Manifest number: 01F2 Signing time: Tue 04 Nov 2025 16:00:46 +0000 Manifest this update: Tue 04 Nov 2025 16:00:46 +0000 Manifest next update: Tue 11 Nov 2025 16:00:46 +0000 Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: Gr5gFmY9TY6A1VdDk+hGe6B1yrp6/0Tz1vU+z0xph0o=) 2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1 Validity Not Before: Nov 4 16:00:46 2025 GMT Not After : Nov 11 16:00:46 2025 GMT Subject: CN=690a232e-6560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:1e:7e:67:25:b2:41:52:de:24:81:25:ea: fa:28:a1:af:d2:8a:eb:1a:e0:dd:b6:ec:ea:9e:9b: 3c:56:8e:01:a8:c7:4e:92:1e:c5:88:1a:6a:33:df: 0b:37:ce:c2:79:3a:40:e9:20:ee:63:5a:37:21:89: a6:f7:48:9d:ee:4f:c4:81:de:b3:27:0d:41:60:08: 40:8d:6e:75:3d:85:85:bf:4a:ae:df:52:b2:ce:35: 67:cb:62:c1:db:ae:7b:6e:f6:86:7d:3f:15:5a:45: 44:b1:15:7e:09:2a:0b:41:e4:69:a2:6a:88:28:a7: 50:ea:fe:8b:60:77:f1:3b:d5:fe:28:4c:8b:28:42: 54:d9:11:3a:17:5a:ea:3c:24:cb:c9:c2:aa:b3:c3: 92:29:3e:68:eb:48:7f:9c:29:d2:7c:ee:89:e5:14: 4d:9e:8c:af:e1:cd:af:6e:4b:75:ad:ca:35:37:67: 42:3b:5b:a0:12:bd:47:19:3a:14:61:e5:68:dc:99: e9:11:d9:e9:90:e7:fe:91:89:16:dd:79:1b:d0:9c: a3:a1:ef:0e:79:a7:dc:c9:59:af:a5:0c:97:33:d1: 22:02:92:a3:49:44:b1:de:f1:18:30:80:94:f3:aa: 0d:0c:df:6b:34:b9:21:12:57:53:92:70:02:94:b9: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:67:B1:4A:3F:E2:8C:72:23:F2:DE:9D:EE:C9:87:5A:0D:42:68 X509v3 Authority Key Identifier: keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c2:8f:ac:33:aa:ed:42:ac:7a:de:02:7f:b7:11:9c:3e:77: f7:78:c0:29:5e:d4:d7:3f:c2:02:84:5e:fa:11:af:cc:fc:d9: 2e:16:c5:56:fa:4f:1a:71:3d:c2:43:1f:24:8e:5d:eb:b9:1f: 55:d3:5d:8e:e7:cb:27:00:88:ad:17:36:d2:bd:5c:25:10:b0: 40:26:4e:49:09:40:51:a4:ee:52:06:27:86:ce:a9:4a:26:89: 49:bb:4f:17:9b:75:ba:d4:fb:5a:67:e2:ed:94:c9:be:da:91: a8:ed:d8:64:e7:2f:07:b9:e3:84:aa:d8:37:1d:d3:7b:b3:3f: 6d:18:c7:d4:61:ae:bc:7c:de:3c:20:83:90:36:68:08:e2:e3: 6d:95:0f:93:15:2a:30:10:8c:94:db:16:d1:18:29:73:40:86: d6:45:b6:27:37:bb:9a:97:03:8c:76:71:bb:bd:65:ba:d5:4c: 0b:8c:9f:21:29:4c:10:28:6d:38:b5:c7:45:34:a8:a4:63:ab: 10:f4:21:8a:3f:50:1e:bc:f4:db:eb:b6:37:5e:00:a0:92:c7: 2d:b5:b0:07:94:d9:a8:ef:7d:e4:fe:ae:2a:38:78:83:68:9b: 35:ea:56:8f:8e:e7:92:cf:86:06:ea:57:b3:99:97:4f:50:4d: b6:fa:ac:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE NkJDMzE3RTEwHhcNMjUxMTA0MTYwMDQ2WhcNMjUxMTExMTYwMDQ2WjAYMRYwFAYD VQQDEw02OTBhMjMyZS02NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1YefmclskFS3iSBJer6KKGv0orrGuDdtuzqnps8Vo4BqMdOkh7FiBpqM98L N87CeTpA6SDuY1o3IYmm90id7k/Egd6zJw1BYAhAjW51PYWFv0qu31KyzjVny2LB 2657bvaGfT8VWkVEsRV+CSoLQeRpomqIKKdQ6v6LYHfxO9X+KEyLKEJU2RE6F1rq PCTLycKqs8OSKT5o60h/nCnSfO6J5RRNnoyv4c2vbkt1rco1N2dCO1ugEr1HGToU YeVo3JnpEdnpkOf+kYkW3Xkb0Jyjoe8OeafcyVmvpQyXM9EiApKjSUSx3vEYMICU 86oNDN9rNLkhEldTknAClLnK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxgZ7FK P+KMciPy3p3uyYdaDUJoMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlwo+sM6rtQqx63gJ/txGcPnf3eMApXtTXP8IChF76Ea/M/NkuFsVW +k8acT3CQx8kjl3ruR9V012O58snAIitFzbSvVwlELBAJk5JCUBRpO5SBieGzqlK JolJu08Xm3W61PtaZ+LtlMm+2pGo7dhk5y8HueOEqtg3HdN7sz9tGMfUYa68fN48 IIOQNmgI4uNtlQ+TFSowEIyU2xbRGClzQIbWRbYnN7ualwOMdnG7vWW61UwLjJ8h KUwQKG04tcdFNKikY6sQ9CGKP1AevPTb67Y3XgCgkscttbAHlNmo733k/q4qOHiD aJs16laPjueSz4YG6lezmZdPUE22+qw4 -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:44 2025 by rpki-client