$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: PqeWfIjQ1bV6zaEjPMRZTLrFTGLjY/KM1MN00JZcUck= Subject key identifier: EB:A2:80:4C:4C:B3:86:EA:FA:A1:8B:A0:5B:BB:AC:11:C8:4A:94:CB Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 03D4 Signing time: Sun 19 Oct 2025 02:35:54 +0000 Manifest this update: Sun 19 Oct 2025 02:35:53 +0000 Manifest next update: Sun 26 Oct 2025 02:35:53 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: c7oYarT/BRUFaVwNrtj1P71MEl0fx2Faldor/sJ+tTw=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Oct 19 02:35:53 2025 GMT Not After : Oct 26 02:35:53 2025 GMT Subject: CN=68f44e8a-ee8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:d7:60:6d:32:9a:f2:da:80:ff:8c:8f:c1: b0:25:dd:69:fe:8c:ff:46:9f:0d:c4:7f:1a:08:44: 27:79:55:00:26:db:e2:52:2a:38:82:d0:78:ca:1d: 10:9c:c1:95:06:5d:9b:e3:b3:1d:49:18:ec:46:2c: 7a:df:fa:09:ab:9a:6e:d0:5f:64:c4:ad:12:c9:49: be:0c:92:69:89:1b:a1:c8:c0:4f:aa:dd:62:db:e0: dc:5d:62:22:24:e3:f4:b7:27:c3:75:7c:6e:54:58: e2:13:7b:92:09:c6:e7:a8:d7:a0:cd:76:e2:d4:8a: 5a:91:92:7a:b2:1b:d4:73:fd:0e:b5:05:2f:52:8e: 7c:2b:8e:cb:f0:70:5c:0e:31:86:14:89:99:b8:94: cd:87:e4:6e:2e:8a:00:44:db:ac:35:e2:04:96:3b: 4a:96:13:1c:65:d7:5d:90:7d:e1:62:d4:a1:bb:19: fd:d7:65:54:0a:56:2d:23:01:e8:23:93:da:51:c4: ba:ce:f3:08:8c:43:76:50:77:75:79:10:bd:c7:92: 73:b4:b8:15:ca:09:15:30:33:c6:2f:fb:55:09:f3: e7:fe:83:da:db:0b:5f:08:a5:b9:ab:5e:6d:fe:07: 14:62:a2:a2:8e:7c:b1:78:50:77:e8:f5:c8:49:56: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A2:80:4C:4C:B3:86:EA:FA:A1:8B:A0:5B:BB:AC:11:C8:4A:94:CB X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ab:32:bd:fc:30:22:ab:72:54:34:46:e3:1a:33:9a:6c:08: d3:78:d6:a0:16:55:b3:63:7d:24:8a:2d:e9:84:66:46:a4:d6: f7:d2:a3:42:10:84:a5:76:90:de:09:49:8f:db:3d:8d:35:3f: 50:41:12:b1:77:68:c4:95:5d:eb:1f:62:8d:8d:94:39:3e:86: ab:9e:e0:d1:e6:80:9d:6d:a5:f8:0c:56:e6:f3:22:4d:e4:d1: 9b:b8:39:47:6c:91:1e:d2:a3:0b:9d:cc:11:5a:93:2e:94:34: e6:0b:3f:ae:ca:c7:b1:69:1b:d0:5f:fb:75:53:df:a4:32:bf: c3:50:bc:f0:9d:4e:9b:33:19:e5:f9:4f:97:92:36:5a:db:98: 85:61:1a:90:7b:6e:ad:d7:4d:16:7e:01:d6:ac:ba:cf:0f:8b: ac:40:10:8f:6f:fd:d6:6e:6e:0c:fd:c8:c7:aa:c0:ad:b8:ad: 8a:31:36:a6:e0:c3:44:ac:84:84:3a:e8:55:a5:f2:7a:df:c6: 0f:c3:55:8b:68:fc:5a:a1:c5:91:8c:d2:16:00:16:ae:13:20: 3c:11:41:13:2c:77:5d:53:63:e6:f5:3a:ad:49:3b:fd:8b:7c: 09:25:90:d1:eb:f3:5c:05:14:f6:4f:4f:dd:6f:36:7d:21:f3: 5c:56:86:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUxMDE5MDIzNTUzWhcNMjUxMDI2MDIzNTUzWjAYMRYwFAYD VQQDEw02OGY0NGU4YS1lZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNzXYG0ymvLagP+Mj8GwJd1p/oz/Rp8NxH8aCEQneVUAJtviUio4gtB4yh0Q nMGVBl2b47MdSRjsRix63/oJq5pu0F9kxK0SyUm+DJJpiRuhyMBPqt1i2+DcXWIi JOP0tyfDdXxuVFjiE3uSCcbnqNegzXbi1IpakZJ6shvUc/0OtQUvUo58K47L8HBc DjGGFImZuJTNh+RuLooARNusNeIEljtKlhMcZdddkH3hYtShuxn912VUClYtIwHo I5PaUcS6zvMIjEN2UHd1eRC9x5JztLgVygkVMDPGL/tVCfPn/oPa2wtfCKW5q15t /gcUYqKijnyxeFB36PXISVat8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuigExM s4bq+qGLoFu7rBHISpTLMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtqzK9/DAiq3JUNEbjGjOabAjTeNagFlWzY30kii3phGZGpNb30qNC EISldpDeCUmP2z2NNT9QQRKxd2jElV3rH2KNjZQ5PoarnuDR5oCdbaX4DFbm8yJN 5NGbuDlHbJEe0qMLncwRWpMulDTmCz+uysexaRvQX/t1U9+kMr/DULzwnU6bMxnl +U+XkjZa25iFYRqQe26t100WfgHWrLrPD4usQBCPb/3Wbm4M/cjHqsCtuK2KMTam 4MNErISEOuhVpfJ638YPw1WLaPxaocWRjNIWABauEyA8EUETLHddU2Pm9TqtSTv9 i3wJJZDR6/NcBRT2T0/dbzZ9IfNcVoau -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:24 2025 by rpki-client