$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: uxTIFk4gdBlLpF736p43i0AvU3K5bM1yEVJE/cGJC+U= Subject key identifier: B2:C4:61:26:4B:BD:B5:37:F7:A6:C8:1A:BB:C5:7C:A6:0F:D6:43:05 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: D2 Signing time: Sun 19 Oct 2025 08:44:59 +0000 Manifest this update: Sun 19 Oct 2025 08:44:58 +0000 Manifest next update: Sun 26 Oct 2025 08:44:58 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: 2Pa+xrWj83mEdfEee/SZNdfO7qn1ZQCWHjBo8h7LUyg=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: mtRkpBofIEP/NFZvK+kr1cdx0dZa5TNObQf1xWdBFqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Oct 19 08:44:58 2025 GMT Not After : Oct 26 08:44:58 2025 GMT Subject: CN=68f4a50b-aa44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:c7:86:c6:5b:2f:10:b0:50:23:27:f2:49: 8e:9e:97:da:ba:43:34:ea:1e:00:3c:17:ac:bc:9f: e4:c0:b7:e8:5b:30:a3:34:c3:5d:d4:a2:7a:46:05: d3:3e:9f:7f:bd:f4:f1:74:e7:ad:7e:29:fe:82:42: c9:77:53:99:72:aa:e3:bc:8b:b4:d7:fb:f5:8d:4c: ef:8f:d0:c2:b8:f8:e7:b0:53:ce:54:74:98:47:a9: 87:83:1a:86:d1:ea:45:c1:60:0e:d8:88:93:90:62: d5:98:f0:a1:57:ac:f2:49:fa:19:f6:ea:4d:ee:a9: bd:c2:6b:f1:a3:8e:b2:99:3e:da:0f:2b:0c:63:7e: 4c:a9:13:bb:9d:01:27:a6:32:c5:56:07:d1:c0:27: 7a:31:ae:f3:f1:8e:31:7a:90:9c:53:4b:de:ae:91: fa:87:12:2f:20:d5:77:1a:a8:12:3e:43:6c:ec:c8: 17:3a:03:dd:98:9f:4e:5b:ef:0e:b4:64:c1:97:bc: ab:db:25:57:6a:b3:ef:72:31:0e:1f:9a:db:5d:2d: 62:1f:4f:76:3b:16:16:9a:18:5e:a8:43:d1:4a:56: da:42:95:23:a5:15:7f:46:e7:14:6c:58:c4:23:84: 4d:f7:a1:67:49:f2:fd:e2:a7:e0:ce:ba:58:a5:21: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C4:61:26:4B:BD:B5:37:F7:A6:C8:1A:BB:C5:7C:A6:0F:D6:43:05 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:16:23:c2:82:2a:65:5b:6a:df:a7:12:fb:2f:4d:d4:aa:07: 76:b1:75:fc:84:6d:30:ff:b8:69:8d:61:f3:7e:86:69:6d:e9: 32:2c:ae:c9:e0:65:12:78:9a:48:0a:3d:ff:87:f7:67:3d:fd: 4c:56:55:18:97:cb:d2:3d:fa:76:bb:64:58:dc:90:ab:f9:4d: dd:57:96:70:76:74:6f:d7:cf:e3:e9:a4:bc:a5:22:f5:f0:9f: fc:29:fa:98:17:b6:a2:a5:70:ee:10:b1:e4:aa:63:d7:8e:f2: 87:13:f8:c0:74:f1:2c:21:c2:13:f8:41:be:a9:40:5b:03:b0: e2:67:9d:fb:e9:c1:66:93:bc:33:05:d3:4d:9e:ba:9f:c4:f3: b4:53:f0:fc:cd:95:aa:c0:40:08:78:7f:ed:d4:8a:46:90:83: 35:24:9f:cc:ad:85:28:8f:5f:a7:b0:5c:f0:92:87:82:31:c5: 0e:64:ab:ed:51:1f:a3:b0:5c:f4:78:ed:48:b6:15:7f:28:08: c0:22:42:bd:a2:ea:76:de:f1:e3:20:53:d7:94:07:a1:62:ba: 30:7f:cd:e6:c2:60:2e:c7:a1:00:f8:61:c6:72:13:e0:b3:14: 15:8d:ec:a3:9a:bf:76:48:7c:47:46:08:19:cf:ad:79:24:ea: b0:2d:19:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjUxMDE5MDg0NDU4WhcNMjUxMDI2MDg0NDU4WjAYMRYwFAYD VQQDEw02OGY0YTUwYi1hYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT3HhsZbLxCwUCMn8kmOnpfaukM06h4APBesvJ/kwLfoWzCjNMNd1KJ6RgXT Pp9/vfTxdOetfin+gkLJd1OZcqrjvIu01/v1jUzvj9DCuPjnsFPOVHSYR6mHgxqG 0epFwWAO2IiTkGLVmPChV6zySfoZ9upN7qm9wmvxo46ymT7aDysMY35MqRO7nQEn pjLFVgfRwCd6Ma7z8Y4xepCcU0verpH6hxIvINV3GqgSPkNs7MgXOgPdmJ9OW+8O tGTBl7yr2yVXarPvcjEOH5rbXS1iH092OxYWmhheqEPRSlbaQpUjpRV/RucUbFjE I4RN96FnSfL94qfgzrpYpSHQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLEYSZL vbU396bIGrvFfKYP1kMFMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqFiPCgiplW2rfpxL7L03Uqgd2sXX8hG0w/7hpjWHzfoZpbekyLK7J 4GUSeJpICj3/h/dnPf1MVlUYl8vSPfp2u2RY3JCr+U3dV5ZwdnRv18/j6aS8pSL1 8J/8KfqYF7aipXDuELHkqmPXjvKHE/jAdPEsIcIT+EG+qUBbA7DiZ5376cFmk7wz BdNNnrqfxPO0U/D8zZWqwEAIeH/t1IpGkIM1JJ/MrYUoj1+nsFzwkoeCMcUOZKvt UR+jsFz0eO1IthV/KAjAIkK9oup23vHjIFPXlAehYrowf83mwmAux6EA+GHGchPg sxQVjeyjmr92SHxHRggZz615JOqwLRkc -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:09 2025 by rpki-client