$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: L30WCPxmyhIlbD+iWYZLBeEv/kbdJmbJsI6tG+jriL8= Subject key identifier: C2:48:52:FE:38:5C:7A:09:BB:43:67:68:60:51:BA:1E:30:3F:C7:D5 Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 3500 Signing time: Mon 20 Oct 2025 04:51:35 +0000 Manifest this update: Mon 20 Oct 2025 04:51:34 +0000 Manifest next update: Mon 27 Oct 2025 04:51:34 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 44++JLCKuKVQp/IhCzMtE1uL4LJRg+mBaLEI4uyyDPM=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: IJhdmy/yaxT+3c7CLBVZdDHqC15tF8wOYJzJ42dHOw4=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: dXPESe0AS5zU2YANDMu05Iuv4X+774tiDNq9FoG/6Go=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: Jj1NVOgg11V9rBHXb/ngLI6yeEIfUQhi8bFPhl/4/hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 04:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Oct 20 04:51:34 2025 GMT Not After : Oct 27 04:51:34 2025 GMT Subject: CN=68f5bfd7-d07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:ce:4d:07:4f:dc:6d:8c:bc:b9:0a:e3:e3: ef:33:87:08:12:dc:7c:b1:8d:13:5b:0d:40:2c:51: ed:3f:45:03:0c:3e:d4:e3:71:3b:2e:bc:4b:27:fa: d4:43:40:b2:11:a5:c2:38:15:ea:f8:0a:18:b5:55: 2e:a5:bd:2d:80:91:2d:b6:9e:0e:34:d2:09:63:25: 49:9a:2b:db:7b:89:4c:3b:41:86:5c:e0:1f:4a:ad: 07:3e:f2:0b:46:22:98:3a:8a:ef:1a:b5:66:ad:d5: 9b:7b:8b:98:1c:61:6d:4f:84:d9:14:7c:2a:d2:47: a5:91:c7:47:5f:ea:0a:f3:8c:c6:49:d7:a5:d5:aa: 1f:58:6d:21:3e:e5:bf:33:64:0d:df:ea:5c:80:09: d8:cc:25:9a:fa:e0:d2:7a:8c:2c:bf:04:54:bc:38: 0b:20:d5:72:1b:02:e2:3a:4c:80:87:4f:11:25:b8: 01:9e:dd:03:00:31:c8:44:80:69:b0:e6:5d:e7:42: ae:77:6f:8c:e1:79:c7:a3:27:87:46:ed:b1:ce:df: a1:45:7f:9c:c5:b7:96:6e:10:c3:64:78:0b:a8:4a: a2:e0:6b:0d:79:04:2d:d4:a4:07:08:d1:a1:df:e5: a3:a8:75:8b:8b:ba:8c:e6:44:12:2b:53:8c:20:84: bc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:48:52:FE:38:5C:7A:09:BB:43:67:68:60:51:BA:1E:30:3F:C7:D5 X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1f:bc:e0:80:32:10:e2:a4:65:b6:4f:9a:cf:28:f0:79:86: d3:c9:5c:2b:01:68:80:23:20:5b:db:85:57:6b:5f:31:b6:ff: eb:75:b9:69:c3:1a:b9:39:44:4b:a7:a3:2b:4a:b9:0d:dc:57: f8:1c:5f:59:9c:a4:dd:a4:47:d4:bb:a8:51:64:4d:f5:8b:6f: 26:fd:90:85:64:10:43:06:01:0b:40:1d:57:78:43:13:eb:8f: 2c:f8:c3:ac:4e:cd:50:ca:25:4f:60:37:4c:2f:8f:b8:36:11: d8:36:d1:c9:df:64:4b:c1:8b:59:75:c6:0c:b6:a4:fe:6c:1a: b9:30:16:51:68:31:9f:a9:98:33:8b:4b:8a:94:2c:23:b5:f4: 9f:d4:05:9f:8b:0e:f3:b5:56:ba:88:6f:48:8a:0c:b0:b1:a7: 6d:38:79:c8:2f:ed:06:1e:2d:9c:37:da:87:4a:32:cb:e6:08: eb:07:3c:99:d7:2a:ec:1c:5e:3c:a3:ed:fc:d5:48:97:da:db: 19:a7:6f:60:61:a5:ee:46:7f:13:d7:ea:0f:c8:5f:a6:45:a8: ad:8f:18:42:ed:fb:74:13:73:06:36:09:31:67:62:67:fa:16: dc:ec:58:17:cd:b2:df:9b:e4:29:d0:b6:69:e6:c4:0c:07:fe: 6f:15:23:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUxMDIwMDQ1MTM0WhcNMjUxMDI3MDQ1MTM0WjAYMRYwFAYD VQQDEw02OGY1YmZkNy1kMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlTOTQdP3G2MvLkK4+PvM4cIEtx8sY0TWw1ALFHtP0UDDD7U43E7LrxLJ/rU Q0CyEaXCOBXq+AoYtVUupb0tgJEttp4ONNIJYyVJmivbe4lMO0GGXOAfSq0HPvIL RiKYOorvGrVmrdWbe4uYHGFtT4TZFHwq0kelkcdHX+oK84zGSdel1aofWG0hPuW/ M2QN3+pcgAnYzCWa+uDSeowsvwRUvDgLINVyGwLiOkyAh08RJbgBnt0DADHIRIBp sOZd50Kud2+M4XnHoyeHRu2xzt+hRX+cxbeWbhDDZHgLqEqi4GsNeQQt1KQHCNGh 3+WjqHWLi7qM5kQSK1OMIIS8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJIUv44 XHoJu0NnaGBRuh4wP8fVMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7H7zggDIQ4qRltk+azyjweYbTyVwrAWiAIyBb24VXa18xtv/rdblp wxq5OURLp6MrSrkN3Ff4HF9ZnKTdpEfUu6hRZE31i28m/ZCFZBBDBgELQB1XeEMT 648s+MOsTs1QyiVPYDdML4+4NhHYNtHJ32RLwYtZdcYMtqT+bBq5MBZRaDGfqZgz i0uKlCwjtfSf1AWfiw7ztVa6iG9IigywsadtOHnIL+0GHi2cN9qHSjLL5gjrBzyZ 1yrsHF48o+381UiX2tsZp29gYaXuRn8T1+oPyF+mRaitjxhC7ft0E3MGNgkxZ2Jn +hbc7FgXzbLfm+Qp0LZp5sQMB/5vFSMp -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:32 2025 by rpki-client