$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json) Hash identifier: soMZpjjpnFoQmm2RH17MqpPfwmGwLCqCTgQZZzNKJxk= Subject key identifier: CE:6B:9D:37:23:2B:5D:66:88:4C:AB:34:43:56:CA:01:F5:D9:F0:F8 Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft Manifest number: B4 Signing time: Mon 03 Nov 2025 06:03:32 +0000 Manifest this update: Mon 03 Nov 2025 06:03:31 +0000 Manifest next update: Mon 10 Nov 2025 06:03:31 +0000 Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: yxgMZZIoDrIbIH58YewF4gX4R+pd5m/Q3rAqLYCmgpE=) 2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Nov 3 06:03:31 2025 GMT Not After : Nov 10 06:03:31 2025 GMT Subject: CN=690845b4-ab6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:75:45:3f:7a:a1:52:0a:5b:a1:ac:4d:53: 8d:01:48:34:e5:3e:20:4f:1d:2b:1a:3c:59:bc:30: ee:cd:c1:2d:e4:b3:2c:9f:97:7c:30:52:08:6d:5f: ef:77:f9:02:08:6f:b5:bb:fb:0b:8c:04:ef:18:41: 96:b4:7e:e0:a0:4b:de:79:f8:03:7c:44:eb:f3:cf: 4d:29:ff:23:d5:a6:9b:85:ec:f7:b1:b5:02:ec:0c: 5c:51:f4:87:2e:b2:6b:a0:89:21:1e:07:2c:d1:01: 01:ea:e3:36:cb:8c:43:cc:d6:3a:e9:94:8f:24:2b: 1e:2f:7e:4d:1b:f0:4a:54:9b:45:a7:da:15:5b:0b: 87:d1:12:92:95:f1:ab:20:14:28:17:4a:bd:a2:2f: 39:e8:2b:a1:0b:43:63:88:8d:6a:1c:b7:ab:21:28: c7:3d:5e:aa:49:3d:c8:73:65:c9:ab:89:f7:12:7d: 43:82:06:91:d6:75:b4:00:da:43:1f:03:59:3b:2e: 39:5b:03:76:37:a9:7c:29:a1:5e:91:ce:79:7e:92: a0:45:54:f9:13:fc:4e:b3:a5:f6:9f:a0:35:bd:90: 5f:cb:4f:d7:0f:c9:53:ef:30:fe:a0:d8:e1:45:1f: 91:d6:35:9e:82:ea:c9:76:42:77:d3:98:01:a7:86: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:9D:37:23:2B:5D:66:88:4C:AB:34:43:56:CA:01:F5:D9:F0:F8 X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4f:d8:00:ef:e8:0c:04:73:44:48:1e:ac:a9:d0:70:7f:03: 35:41:ad:b6:c9:c0:64:f2:90:0b:e2:9f:38:67:b7:a5:e1:53: 67:71:f0:28:8e:70:b4:7f:2d:66:f6:43:3c:e7:19:a1:9b:2c: 11:38:21:00:6e:ff:a0:15:14:6d:95:19:bc:75:6e:cd:e5:c6: 05:75:da:2d:32:81:64:ee:56:af:16:22:61:79:a5:51:72:28: df:8f:ba:7e:19:19:df:30:59:8d:fd:b4:a6:60:68:7b:77:b4: 63:02:58:27:99:8e:48:ed:1b:d8:7a:34:a9:60:22:a6:a2:a6: 40:13:c5:e1:a4:f8:ad:94:f1:51:1a:de:4c:e7:9a:46:12:43: ba:99:d6:55:86:b2:dd:af:39:d2:0e:9b:29:b8:33:84:7d:28: fa:21:c0:97:a1:40:68:6c:b5:b7:ca:01:81:1c:c4:2a:f4:81: a6:3b:be:a6:a4:41:d7:46:87:c9:e4:76:3e:85:08:ea:f1:53: fb:c0:cc:ca:eb:df:6e:30:e3:ed:d9:d8:14:b1:22:61:18:25: f4:69:c4:60:f2:58:18:35:09:d1:33:4a:4b:87:5f:74:55:58: 70:4d:fa:6a:89:1f:d4:f0:1c:59:6a:cd:42:97:9f:0b:da:2e: 00:3b:26:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKEE4MjkyRjYyMDRDODIxM0Q3OTFGQTZDQ0FBRjU3ODUx OTRFRjgxQTAwHhcNMjUxMTAzMDYwMzMxWhcNMjUxMTEwMDYwMzMxWjAYMRYwFAYD VQQDEw02OTA4NDViNC1hYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ91RT96oVIKW6GsTVONAUg05T4gTx0rGjxZvDDuzcEt5LMsn5d8MFIIbV/v d/kCCG+1u/sLjATvGEGWtH7goEveefgDfETr889NKf8j1aabhez3sbUC7AxcUfSH LrJroIkhHgcs0QEB6uM2y4xDzNY66ZSPJCseL35NG/BKVJtFp9oVWwuH0RKSlfGr IBQoF0q9oi856CuhC0NjiI1qHLerISjHPV6qST3Ic2XJq4n3En1DggaR1nW0ANpD HwNZOy45WwN2N6l8KaFekc55fpKgRVT5E/xOs6X2n6A1vZBfy0/XD8lT7zD+oNjh RR+R1jWegurJdkJ305gBp4ZxcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5rnTcj K11miEyrNENWygH12fD4MB8GA1UdIwQYMBaAFKgpL2IEyCE9eR+mzKr1eFGU74Gg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xMTY0Q0FFMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlUMTVINmJNcXZWNFVaVHZn YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlU MTVINmJNcXZWNFVaVHZnYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIT9gA7+gMBHNESB6sqdBwfwM1Qa22ycBk8pAL4p84Z7el4VNncfAo jnC0fy1m9kM85xmhmywROCEAbv+gFRRtlRm8dW7N5cYFddotMoFk7lavFiJheaVR cijfj7p+GRnfMFmN/bSmYGh7d7RjAlgnmY5I7RvYejSpYCKmoqZAE8XhpPitlPFR Gt5M55pGEkO6mdZVhrLdrznSDpspuDOEfSj6IcCXoUBobLW3ygGBHMQq9IGmO76m pEHXRofJ5HY+hQjq8VP7wMzK699uMOPt2dgUsSJhGCX0acRg8lgYNQnRM0pLh190 VVhwTfpqiR/U8BxZas1Cl58L2i4AOybX -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:30 2025 by rpki-client