$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json) Hash identifier: lxKxB79cU5sbegv1toCjKGeX/XFvhrOis5Hh+FM0oTo= Subject key identifier: 1D:39:63:21:74:A8:D2:00:F8:D0:7A:0C:6B:0A:AF:0D:FA:25:46:1D Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft Manifest number: 056A Signing time: Sun 19 Oct 2025 01:04:42 +0000 Manifest this update: Sun 19 Oct 2025 01:04:41 +0000 Manifest next update: Sun 26 Oct 2025 01:04:41 +0000 Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: MYhBgjyW09HDOnd0mg1ba+4jB5KYi13KP0eFf5ivo30=) 2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632 Validity Not Before: Oct 19 01:04:41 2025 GMT Not After : Oct 26 01:04:41 2025 GMT Subject: CN=68f4392a-80e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:91:0a:41:1e:c4:cb:62:3e:48:62:92:85: 5b:cd:9d:27:b8:30:6b:80:46:83:a1:94:e9:a4:ae: 2d:3b:60:19:79:80:a4:c3:07:fc:2b:b3:e0:e5:6d: 05:0c:11:55:23:ae:24:77:61:9c:ae:c0:5a:3b:a3: 1a:8d:4a:85:88:9f:60:81:15:43:a7:07:82:cb:ff: 39:aa:4d:e1:45:40:c7:28:b7:d8:ed:45:7e:6b:a7: 10:2f:4d:a0:4e:f2:91:5d:ca:30:6e:32:ad:71:84: a1:e5:92:7e:54:ac:fe:5c:a9:e1:cf:c9:92:0a:e4: 51:6a:2a:22:b7:59:27:4e:81:c3:b6:42:41:bf:43: 41:7a:83:42:64:21:30:46:e3:de:c8:67:d1:f3:e3: 05:ad:0e:f8:72:21:a9:58:a5:9e:bd:e5:0c:f9:36: 62:80:fd:be:cd:5f:a2:66:39:77:55:2c:03:cf:25: e5:94:72:68:08:5c:60:88:d7:bf:8d:f2:4b:84:f5: 46:ad:f1:52:3b:22:dd:4c:44:f0:33:c3:8a:1b:4e: 77:f3:af:95:bf:39:da:06:70:2f:ac:1d:3d:03:93: 8d:44:f8:73:c8:bf:bf:3a:f3:87:1b:0a:d3:79:03: c2:3b:e6:c8:c2:b3:83:64:6f:04:06:c1:93:96:c6: f8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:39:63:21:74:A8:D2:00:F8:D0:7A:0C:6B:0A:AF:0D:FA:25:46:1D X509v3 Authority Key Identifier: keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:f3:13:25:16:ac:c2:72:99:e8:b1:c8:d5:46:db:33:b5: 41:86:49:0e:0d:0a:c5:b6:fb:6b:8b:80:43:f7:ec:fd:57:f2: aa:7b:6e:75:e3:45:3f:9a:08:ec:76:9e:5b:cb:23:71:31:1d: 53:6c:be:74:dd:8a:13:cd:12:bf:e6:b1:4a:90:71:4b:71:46: 2e:7b:a3:9a:fa:ca:ea:fd:0c:4e:3a:9e:ac:a5:3f:a4:be:0e: c9:70:c5:27:e0:8c:da:51:c0:45:97:ad:c6:7c:fe:44:ca:76: 0b:a6:74:3e:4a:b4:58:45:fb:81:7b:f5:0b:f6:e7:33:00:b4: 56:43:d4:5e:26:cd:33:c5:47:13:67:86:26:5a:3b:20:be:b4: b9:cf:6b:92:f8:ca:2e:8e:36:4a:17:86:3c:30:e9:67:e5:bd: 3a:b8:98:10:88:1c:43:95:35:3f:20:b2:16:67:c6:77:46:88: e6:19:e9:3a:4f:34:f3:ea:0e:e0:71:78:0a:22:d0:ae:da:77: 51:06:ec:58:ad:4f:7e:8a:79:51:59:0f:31:e3:3a:1b:f7:27: 03:75:70:9f:b4:ee:55:fb:db:23:65:1a:ce:66:13:e0:f3:aa: 60:14:49:ba:9b:41:93:0a:49:ed:25:29:26:7e:30:79:3f:08: 5e:25:dc:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF NkZDQzg2MzIwHhcNMjUxMDE5MDEwNDQxWhcNMjUxMDI2MDEwNDQxWjAYMRYwFAYD VQQDEw02OGY0MzkyYS04MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6GRCkEexMtiPkhikoVbzZ0nuDBrgEaDoZTppK4tO2AZeYCkwwf8K7Pg5W0F DBFVI64kd2GcrsBaO6MajUqFiJ9ggRVDpweCy/85qk3hRUDHKLfY7UV+a6cQL02g TvKRXcowbjKtcYSh5ZJ+VKz+XKnhz8mSCuRRaioit1knToHDtkJBv0NBeoNCZCEw RuPeyGfR8+MFrQ74ciGpWKWeveUM+TZigP2+zV+iZjl3VSwDzyXllHJoCFxgiNe/ jfJLhPVGrfFSOyLdTETwM8OKG05386+VvznaBnAvrB09A5ONRPhzyL+/OvOHGwrT eQPCO+bIwrODZG8EBsGTlsb4RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB05YyF0 qNIA+NB6DGsKrw36JUYdMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu NmJtZTQ0YXhSUm5tX01oakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6CfMTJRaswnKZ6LHI1UbbM7VBhkkODQrFtvtri4BD9+z9V/Kqe251 40U/mgjsdp5byyNxMR1TbL503YoTzRK/5rFKkHFLcUYue6Oa+srq/QxOOp6spT+k vg7JcMUn4IzaUcBFl63GfP5EynYLpnQ+SrRYRfuBe/UL9uczALRWQ9ReJs0zxUcT Z4YmWjsgvrS5z2uS+MoujjZKF4Y8MOln5b06uJgQiBxDlTU/ILIWZ8Z3RojmGek6 TzTz6g7gcXgKItCu2ndRBuxYrU9+inlRWQ8x4zob9ycDdXCftO5V+9sjZRrOZhPg 86pgFEm6m0GTCkntJSkmfjB5PwheJdyt -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:23 2025 by rpki-client