$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: QWoXYukBB0iY6WAzLI03MAxj3c8Euw+wTo2V9MiqDos= Subject key identifier: D8:63:4A:CB:43:2A:B5:83:4F:7A:C2:66:7E:DB:19:77:BC:75:35:CA Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0483 Signing time: Sun 19 Oct 2025 01:55:09 +0000 Manifest this update: Sun 19 Oct 2025 01:55:09 +0000 Manifest next update: Sun 26 Oct 2025 01:55:09 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: jzDTuN1wnZTYBBrficKL6QoxGqygjm8cMM1ahlIoxhc=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Oct 19 01:55:09 2025 GMT Not After : Oct 26 01:55:09 2025 GMT Subject: CN=68f444fd-ab35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:30:e2:02:6c:8d:f3:2e:05:fb:49:11:5a:95: 53:07:68:8c:3c:10:9e:59:e2:84:9f:02:4b:20:e0: e8:e8:32:9f:e6:6d:b6:1e:58:e0:ce:07:d0:b8:87: 51:c4:d8:d1:ce:ee:4b:e5:16:14:7b:0f:07:76:9f: 09:15:c2:63:42:ab:fc:68:56:b0:a7:c2:fe:44:32: 3c:17:77:22:b0:8b:d2:32:52:ff:13:e3:1c:eb:16: db:2b:d5:3e:35:5d:0a:e4:7d:d5:1c:24:b9:e3:ec: 2a:88:17:14:3c:25:60:f1:84:a0:0e:f3:81:7a:4e: 93:a9:58:09:26:37:01:d6:98:37:96:70:e4:a0:2a: 2a:67:01:9c:5f:33:f2:bd:ef:f6:d0:53:0e:86:e9: 43:b3:62:06:af:ce:8a:a0:a8:50:1e:fa:fe:c3:20: 69:4f:e3:5f:6f:24:7b:62:de:f0:5d:24:3b:0f:e3: 70:8c:55:4d:49:be:63:a4:e6:ae:4e:7c:bb:db:41: 49:e1:99:42:c9:b0:65:9b:a7:48:26:fe:bf:e7:a3: e9:0b:03:8f:7e:c5:9b:04:85:ee:7f:2b:0d:c4:66: e6:43:bc:df:f7:83:bf:26:fb:81:e7:df:ff:5b:94: 78:df:33:2e:c7:bf:bf:07:2f:aa:d6:0e:4f:7b:0c: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:4A:CB:43:2A:B5:83:4F:7A:C2:66:7E:DB:19:77:BC:75:35:CA X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:60:99:3f:ee:86:ca:68:51:12:4e:a3:85:25:f3:a9:07:47: 16:70:65:3d:49:6e:d1:dd:49:c9:02:77:a8:f4:66:e5:44:91: 36:79:d3:e4:cc:4a:88:5b:b5:71:d9:16:ef:8e:65:3d:e4:a3: df:7e:a8:bf:1f:62:6e:37:5c:b6:22:b0:15:b6:9c:d0:7e:c1: 04:40:84:88:8f:c9:9f:d5:4f:a8:d4:d3:2e:82:18:16:1c:6c: a3:e4:65:d7:85:2f:0f:88:22:c3:ea:07:8f:24:39:b1:34:5e: 6f:be:81:d2:fc:28:4b:72:c9:29:59:d6:d3:bb:93:b0:16:0f: 04:3e:ff:00:44:f6:3f:69:1b:ce:5d:cc:7c:d2:68:20:7b:b0: 04:09:30:fa:c4:a0:1b:0a:8b:8f:3c:0a:8c:ff:c6:b8:45:ac: 8d:a5:4b:95:9f:63:3f:77:e2:33:fd:3f:50:0a:04:7f:93:98: d4:0b:48:73:03:09:5f:1f:58:33:89:53:57:bb:7c:30:0a:f1: ec:f5:9d:06:c7:63:80:2d:79:9b:c5:84:38:68:60:c0:53:62: 26:bd:23:6d:ae:0b:13:88:7e:41:7a:4b:42:e7:d1:05:d8:2e: 90:de:7a:1d:22:cc:ee:97:86:ef:1a:fd:19:ac:30:e8:44:16: 03:a7:58:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUxMDE5MDE1NTA5WhcNMjUxMDI2MDE1NTA5WjAYMRYwFAYD VQQDEw02OGY0NDRmZC1hYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDDiAmyN8y4F+0kRWpVTB2iMPBCeWeKEnwJLIODo6DKf5m22HljgzgfQuIdR xNjRzu5L5RYUew8Hdp8JFcJjQqv8aFawp8L+RDI8F3cisIvSMlL/E+Mc6xbbK9U+ NV0K5H3VHCS54+wqiBcUPCVg8YSgDvOBek6TqVgJJjcB1pg3lnDkoCoqZwGcXzPy ve/20FMOhulDs2IGr86KoKhQHvr+wyBpT+NfbyR7Yt7wXSQ7D+NwjFVNSb5jpOau Tny720FJ4ZlCybBlm6dIJv6/56PpCwOPfsWbBIXufysNxGbmQ7zf94O/JvuB59// W5R43zMux7+/By+q1g5Pewze8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhjSstD KrWDT3rCZn7bGXe8dTXKMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUYJk/7obKaFESTqOFJfOpB0cWcGU9SW7R3UnJAneo9GblRJE2edPk zEqIW7Vx2RbvjmU95KPffqi/H2JuN1y2IrAVtpzQfsEEQISIj8mf1U+o1NMughgW HGyj5GXXhS8PiCLD6gePJDmxNF5vvoHS/ChLcskpWdbTu5OwFg8EPv8ARPY/aRvO Xcx80mgge7AECTD6xKAbCouPPAqM/8a4RayNpUuVn2M/d+Iz/T9QCgR/k5jUC0hz AwlfH1gziVNXu3wwCvHs9Z0Gx2OALXmbxYQ4aGDAU2ImvSNtrgsTiH5BektC59EF 2C6Q3nodIszul4bvGv0ZrDDoRBYDp1iZ -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:53 2025 by rpki-client