$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: TUQ1hWqwz+F/dAkCBuJHgYCUem4KQ/Yp4Rr9BuMkMF8= Subject key identifier: 8A:44:90:DA:21:A6:2C:6B:69:39:31:2D:B0:3A:2E:56:8B:EA:BD:6F Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 34D1 Signing time: Sat 18 Oct 2025 15:09:17 +0000 Manifest this update: Sat 18 Oct 2025 15:09:16 +0000 Manifest next update: Sat 25 Oct 2025 15:09:16 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: ZEg6oATHU1W+6wFwaSgN4G7Q5TafY4FAOta+V8g1UpQ=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Ijy1uWFshu2uXbMSDNdrdIor4pwld2OcIkcbdYGoQws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Oct 18 15:09:16 2025 GMT Not After : Oct 25 15:09:16 2025 GMT Subject: CN=68f3ad9d-d0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:7d:04:3d:a2:3c:4e:a9:37:52:5e:b4:76: 16:48:06:51:fd:ff:eb:ba:f6:7d:25:c0:27:09:f0: cb:ec:06:2e:c1:42:ab:f8:60:62:ba:f4:a8:ee:07: e2:f9:f3:83:f1:85:b9:ea:db:87:dd:0b:c9:c8:db: e8:2f:df:45:b0:34:49:96:6f:db:40:07:d6:cd:60: 3f:85:b4:59:e4:33:89:4c:10:34:63:0a:29:59:78: f4:e3:4f:c7:53:8f:3f:62:24:2d:23:22:1b:9a:89: f2:99:5b:6e:67:de:ce:82:0a:7d:56:19:38:d6:fc: de:fc:68:98:44:d8:06:f3:60:f4:1e:d8:b3:54:1b: d8:4a:3d:56:87:ef:3c:c8:ce:91:d5:32:4f:7e:f4: ed:c1:a0:91:47:82:68:a9:54:40:96:d0:55:4d:0e: 70:56:6a:d3:78:7e:37:7e:99:77:15:af:1e:35:21: c1:b5:d8:51:21:11:17:c4:a7:b6:04:6b:aa:05:e6: 3e:1a:be:19:53:75:d7:0c:7a:04:82:f9:ba:fe:82: 7a:34:c7:59:3d:68:e8:a6:b8:da:ea:01:73:97:c2: 9e:c6:7c:03:94:a7:97:ac:c0:91:2c:4c:88:46:de: 40:a5:3f:3e:a3:a7:95:d0:82:ce:af:37:71:6d:38: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:90:DA:21:A6:2C:6B:69:39:31:2D:B0:3A:2E:56:8B:EA:BD:6F X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6d:d6:3b:70:55:ad:dc:bd:e6:67:cd:5a:e5:2c:19:a1:f5: 29:42:21:65:56:f6:e8:d5:7e:aa:56:f3:a1:01:32:b4:5d:e5: f4:1c:9f:57:d6:c5:71:0c:0c:a0:eb:90:2e:ef:07:e6:65:4f: 4f:0b:ea:b2:46:56:68:ef:a4:86:ca:08:1d:a4:5d:6b:89:06: 4e:3e:03:6f:e3:c7:98:ad:16:18:67:54:0e:0d:1a:de:f4:a4: e5:61:81:a6:1a:52:db:45:07:53:c0:f1:6b:80:22:30:9e:db: f8:cd:4b:65:ff:eb:14:e8:d4:ff:26:1f:fd:cc:a0:f4:9e:7e: 2e:e6:ec:87:38:e8:86:39:40:80:1d:e0:31:59:9f:d7:49:71: 65:e9:d0:cc:82:8b:a4:96:7f:a0:e1:c4:39:c7:56:4c:2e:4d: df:2d:21:9d:43:27:77:41:0f:18:9c:57:8c:76:dc:1d:0c:32: 2c:c9:a2:30:e6:87:13:84:b4:89:f2:2a:2f:a3:2f:e4:6e:55: c3:fe:79:d8:54:8a:8f:ee:98:d1:e6:af:92:77:99:3f:d5:4c: bf:65:c6:e1:29:5b:51:20:dc:04:5c:cc:a6:60:1d:00:ec:b9: e4:cb:04:9f:bd:63:2e:92:e1:e2:44:ce:bf:ab:9c:28:b9:3c: d1:14:00:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUxMDE4MTUwOTE2WhcNMjUxMDI1MTUwOTE2WjAYMRYwFAYD VQQDEw02OGYzYWQ5ZC1kMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiF9BD2iPE6pN1JetHYWSAZR/f/ruvZ9JcAnCfDL7AYuwUKr+GBiuvSo7gfi +fOD8YW56tuH3QvJyNvoL99FsDRJlm/bQAfWzWA/hbRZ5DOJTBA0YwopWXj040/H U48/YiQtIyIbmonymVtuZ97Oggp9Vhk41vze/GiYRNgG82D0HtizVBvYSj1Wh+88 yM6R1TJPfvTtwaCRR4JoqVRAltBVTQ5wVmrTeH43fpl3Fa8eNSHBtdhRIREXxKe2 BGuqBeY+Gr4ZU3XXDHoEgvm6/oJ6NMdZPWjoprja6gFzl8KexnwDlKeXrMCRLEyI Rt5ApT8+o6eV0ILOrzdxbTipdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpEkNoh pixraTkxLbA6LlaL6r1vMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7bdY7cFWt3L3mZ81a5SwZofUpQiFlVvbo1X6qVvOhATK0XeX0HJ9X 1sVxDAyg65Au7wfmZU9PC+qyRlZo76SGyggdpF1riQZOPgNv48eYrRYYZ1QODRre 9KTlYYGmGlLbRQdTwPFrgCIwntv4zUtl/+sU6NT/Jh/9zKD0nn4u5uyHOOiGOUCA HeAxWZ/XSXFl6dDMgoukln+g4cQ5x1ZMLk3fLSGdQyd3QQ8YnFeMdtwdDDIsyaIw 5ocThLSJ8iovoy/kblXD/nnYVIqP7pjR5q+Sd5k/1Uy/ZcbhKVtRINwEXMymYB0A 7LnkywSfvWMukuHiRM6/q5wouTzRFAAL -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:41 2025 by rpki-client