$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: jTBexXhOHdoRoCXpxSynUD6qZfu1QMBcunHq74a6ifI= Subject key identifier: CD:13:9D:61:B7:69:37:51:3A:6D:07:A3:F2:B3:31:70:75:51:FE:41 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 11:05:10 +0000 Manifest this update: Sun 19 Oct 2025 11:05:09 +0000 Manifest next update: Sun 26 Oct 2025 11:05:09 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: 9luI8k9bRrCmD3KU0g/u9NzJU+QOhjn6PKKJVKUGFt8=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Oct 19 11:05:09 2025 GMT Not After : Oct 26 11:05:09 2025 GMT Subject: CN=68f4c5e6-deb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:1e:39:5c:35:07:70:99:86:38:7e:95:63: f3:24:4b:6a:c1:ea:23:de:b1:06:16:94:b5:c9:d1: 59:6e:05:3e:81:2f:2f:02:9c:73:3b:cc:17:14:d3: 79:86:d3:88:48:1b:78:07:72:5e:07:0f:37:0f:44: 96:24:b8:4b:0c:2b:94:29:57:85:87:2b:e5:ab:8d: f4:a7:bb:c0:20:e0:55:49:9c:48:6e:d1:08:80:2d: e9:6c:71:aa:22:28:d5:01:40:af:5b:9f:5b:0a:b7: e3:e2:e0:a4:6f:09:fe:0f:06:e0:b5:fe:2b:7b:17: fb:34:e7:bf:7f:43:b3:20:bf:7a:2c:47:51:76:73: 41:86:fc:17:a7:06:2d:8d:81:1e:ab:b9:af:6e:fb: f0:32:f0:a1:5b:22:a8:f2:87:61:ca:29:d1:a3:8b: c0:e7:8c:2c:39:a1:73:cc:f3:86:01:ed:63:15:ae: 6d:18:c5:d3:d4:a7:77:ce:b3:f2:a4:5f:7f:b2:65: 2e:a7:78:85:c0:26:34:e9:cf:3f:7d:7d:dc:a9:fb: 44:20:49:a3:c5:79:bf:48:7e:af:9d:d0:8d:ab:41: c2:e3:6d:1e:18:f9:5e:0c:68:6e:f7:ec:1a:ea:bb: 94:75:ec:21:a9:f6:33:6d:34:04:46:76:c0:57:4e: 33:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:13:9D:61:B7:69:37:51:3A:6D:07:A3:F2:B3:31:70:75:51:FE:41 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e4:36:46:1b:bb:51:e5:46:af:3c:4d:61:37:b5:6d:d6:3d: d4:d7:40:5f:5d:eb:84:17:bd:3c:e2:e2:26:74:ae:9f:03:0b: de:fc:c9:a7:c4:a2:f3:94:0a:11:75:1a:04:1a:14:fd:b9:33: d4:5a:00:10:38:ad:61:9e:0e:4d:83:4d:ee:3b:ba:fb:8d:7c: 52:1b:da:17:d1:86:a7:a1:c6:cc:a3:65:7f:2c:1c:7f:da:83: bf:88:59:08:dc:bd:19:98:e8:f2:f5:20:03:7b:5b:74:98:97: ef:cc:6d:b8:5b:c3:0e:ce:8f:af:c2:d8:eb:26:2a:74:0e:59: 8f:75:62:f4:d7:4b:86:9f:1c:16:88:ec:fb:df:cb:4e:17:42: ef:ff:c0:4a:bb:cd:e5:50:ea:6a:12:d0:99:e8:16:03:cf:e4: db:dd:08:4c:2b:86:9b:57:0c:03:b2:33:fd:38:b0:df:78:6e: 1b:1b:d1:38:1a:80:08:e4:f0:82:26:58:06:46:b9:19:51:f2: 73:3d:34:fb:02:1e:9c:47:5e:e2:1b:c3:e7:b9:73:a8:f8:b3: ee:d3:8e:dc:cb:8f:f7:b7:17:3c:b6:b1:92:94:05:ea:03:90: 4a:60:67:9d:27:84:b9:7c:9b:16:f8:38:89:d4:52:6f:63:0b: 14:a7:cb:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTEwMTkxMTA1MDlaFw0yNTEwMjYxMTA1MDlaMBgxFjAUBgNV BAMTDTY4ZjRjNWU2LWRlYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAFB45XDUHcJmGOH6VY/MkS2rB6iPesQYWlLXJ0VluBT6BLy8CnHM7zBcU03mG 04hIG3gHcl4HDzcPRJYkuEsMK5QpV4WHK+WrjfSnu8Ag4FVJnEhu0QiALelscaoi KNUBQK9bn1sKt+Pi4KRvCf4PBuC1/it7F/s0579/Q7Mgv3osR1F2c0GG/BenBi2N gR6rua9u+/Ay8KFbIqjyh2HKKdGji8DnjCw5oXPM84YB7WMVrm0YxdPUp3fOs/Kk X3+yZS6neIXAJjTpzz99fdyp+0QgSaPFeb9Ifq+d0I2rQcLjbR4Y+V4MaG737Brq u5R17CGp9jNtNARGdsBXTjNrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzROdYbdp N1E6bQej8rMxcHVR/kEwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzkNkYbu1HlRq88TWE3tW3WPdTXQF9d64QXvTzi4iZ0rp8DC978yafE ovOUChF1GgQaFP25M9RaABA4rWGeDk2DTe47uvuNfFIb2hfRhqehxsyjZX8sHH/a g7+IWQjcvRmY6PL1IAN7W3SYl+/Mbbhbww7Oj6/C2OsmKnQOWY91YvTXS4afHBaI 7Pvfy04XQu//wEq7zeVQ6moS0JnoFgPP5NvdCEwrhptXDAOyM/04sN94bhsb0Tga gAjk8IImWAZGuRlR8nM9NPsCHpxHXuIbw+e5c6j4s+7TjtzLj/e3Fzy2sZKUBeoD kEpgZ50nhLl8mxb4OInUUm9jCxSnyxs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:19 2025 by rpki-client