$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: zw9w8kj7sw5DuSYaMGOoVg93GRmCKXzqPobVaU/cE5o= Subject key identifier: 05:B5:9F:14:C3:27:13:AB:67:73:89:8B:36:5F:1D:5B:C6:B8:28:8F Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:20:00 +0000 Manifest this update: Sun 19 Oct 2025 07:19:59 +0000 Manifest next update: Sun 26 Oct 2025 07:19:59 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: afbvm+QKt0fwNMous8tqBrS3yc6Eho92yy0gGIbyXK8=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Oct 19 07:19:59 2025 GMT Not After : Oct 26 07:19:59 2025 GMT Subject: CN=68f49120-4750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:71:6c:5a:89:4b:96:39:b1:4c:f5:fc:21: 4e:48:b6:21:aa:95:e4:51:9c:be:b0:6b:fb:ef:d5: 6a:f7:b5:e5:fc:43:f5:61:5f:30:2b:ab:0e:22:cc: fc:a5:27:54:2c:b6:87:43:0d:a5:95:5f:2a:b7:26: 4a:54:72:4a:07:b0:e6:d9:00:36:69:bf:4b:2d:8b: 41:0c:a6:f2:74:4f:a7:b8:0c:d2:ef:20:91:d0:fd: 29:65:5f:7d:47:1a:d3:c5:d0:47:e0:66:46:2b:6d: a4:6f:82:b3:1c:25:1f:75:b1:23:1c:14:a8:31:36: 7f:42:aa:2b:31:cb:aa:39:22:24:76:76:7e:0b:1d: 7a:d1:21:f6:e2:e5:a6:81:97:50:5c:46:5a:af:3c: b4:18:d0:c4:73:8e:57:72:73:bc:7e:fe:d6:39:53: 05:b7:2a:0c:76:dc:ee:d7:f9:24:1c:37:17:18:12: 27:e8:78:ae:7b:8b:fa:98:9c:57:b1:71:30:49:2d: ad:dd:00:eb:c5:18:38:da:9d:a4:41:b8:d9:35:11: a8:50:18:f2:ed:67:13:ed:49:60:f1:c6:1b:67:ff: 40:9c:8e:25:01:0a:b5:76:29:71:a0:e6:94:c9:77: f3:fa:66:65:f2:3a:4f:21:97:63:50:22:2c:4c:bf: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B5:9F:14:C3:27:13:AB:67:73:89:8B:36:5F:1D:5B:C6:B8:28:8F X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:af:2b:d9:6d:dd:85:24:2d:28:ce:3c:2e:b2:03:91:d0:12: 52:92:c1:ea:e6:43:b2:d2:86:0d:51:f9:45:e5:74:46:d8:bd: 4a:b0:ad:56:b0:e0:97:9e:ca:59:38:54:46:82:71:40:48:73: b7:9d:42:a4:4b:53:2a:25:80:07:a7:ff:ee:be:eb:3b:70:16: c9:72:cc:c1:8a:9c:da:b1:07:f0:6e:a8:df:db:6d:96:30:fd: 08:3c:bd:99:72:32:2f:ac:0f:1f:be:65:73:c7:7d:55:eb:4c: 70:57:c5:4a:30:0b:32:a4:7f:a3:d2:29:ad:4f:56:ec:e5:9c: a7:73:9a:7b:a3:79:68:89:fd:5c:30:3f:14:f5:16:02:ba:e7: 64:95:25:3b:ce:b1:fe:e7:93:25:02:eb:fb:9f:a4:60:3f:23: c5:c6:6a:46:9f:c2:8d:ff:0a:21:90:1c:b3:f0:89:2b:1a:d9: 9d:e0:df:f5:89:fa:4c:82:97:3c:d8:6c:ba:89:79:49:eb:ad: d2:e4:23:84:38:c9:6e:30:5d:7e:56:ce:cb:0e:e9:58:d1:e7: 79:c7:4f:4c:1d:f3:e5:c2:e7:7d:83:5f:d0:a8:9d:1c:4e:51: d7:59:75:78:e5:ee:aa:2f:b3:e0:00:b9:35:98:06:70:3a:12: 1a:96:dc:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUxMDE5MDcxOTU5WhcNMjUxMDI2MDcxOTU5WjAYMRYwFAYD VQQDEw02OGY0OTEyMC00NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX9xbFqJS5Y5sUz1/CFOSLYhqpXkUZy+sGv779Vq97Xl/EP1YV8wK6sOIsz8 pSdULLaHQw2llV8qtyZKVHJKB7Dm2QA2ab9LLYtBDKbydE+nuAzS7yCR0P0pZV99 RxrTxdBH4GZGK22kb4KzHCUfdbEjHBSoMTZ/QqorMcuqOSIkdnZ+Cx160SH24uWm gZdQXEZarzy0GNDEc45XcnO8fv7WOVMFtyoMdtzu1/kkHDcXGBIn6Hiue4v6mJxX sXEwSS2t3QDrxRg42p2kQbjZNRGoUBjy7WcT7Ulg8cYbZ/9AnI4lAQq1dilxoOaU yXfz+mZl8jpPIZdjUCIsTL8E0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW1nxTD JxOrZ3OJizZfHVvGuCiPMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoryvZbd2FJC0ozjwusgOR0BJSksHq5kOy0oYNUflF5XRG2L1KsK1W sOCXnspZOFRGgnFASHO3nUKkS1MqJYAHp//uvus7cBbJcszBipzasQfwbqjf222W MP0IPL2ZcjIvrA8fvmVzx31V60xwV8VKMAsypH+j0imtT1bs5Zync5p7o3loif1c MD8U9RYCuudklSU7zrH+55MlAuv7n6RgPyPFxmpGn8KN/wohkByz8IkrGtmd4N/1 ifpMgpc82Gy6iXlJ663S5COEOMluMF1+Vs7LDulY0ed5x09MHfPlwud9g1/QqJ0c TlHXWXV45e6qL7PgALk1mAZwOhIaltx9 -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:38 2025 by rpki-client