$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: d21qLkuxoihtzZZ2nnUHAsNlPefFSdF6tBoWy7k8gtU= Subject key identifier: F2:28:F5:4A:10:E6:3D:56:98:0C:C8:82:AB:20:6F:47:75:4F:34:27 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 040C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 0404 Signing time: Sun 19 Oct 2025 02:22:06 +0000 Manifest this update: Sun 19 Oct 2025 02:22:06 +0000 Manifest next update: Sun 26 Oct 2025 02:22:06 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: VOlhcJSh62owP8QV3RxhVFvmwYHEAfl6llXL+dg9MR8=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1036 (0x40c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Oct 19 02:22:06 2025 GMT Not After : Oct 26 02:22:06 2025 GMT Subject: CN=68f44b4e-867e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:53:22:e7:f5:63:a9:38:77:e4:7a:ba:b4:6b: f1:9b:fd:46:df:be:58:5d:89:9f:fb:37:b6:da:d6: 08:a7:4c:e1:d8:37:41:e8:50:82:c2:96:92:1f:6f: e4:22:a7:61:4e:e3:15:3c:3a:37:af:9d:d7:41:64: ad:41:9c:ae:0a:6b:1f:37:c8:17:ef:60:69:36:81: 82:96:29:82:05:48:b2:0b:9f:da:4d:d6:ff:e9:41: 4b:f9:00:97:97:d3:1b:57:98:c3:b8:c4:b5:f8:92: ae:2e:e1:88:03:ef:ed:1b:9c:33:3f:25:81:14:bb: 12:3c:b9:27:8b:01:97:05:5f:5e:d3:09:a1:33:11: 50:25:b7:14:0f:73:21:b1:b4:af:be:0e:e6:83:87: 49:8a:d8:b3:24:6c:d4:8f:9f:d3:1b:cf:b6:12:a7: 5c:07:b2:15:af:fd:25:84:45:93:44:87:d7:24:a9: 8b:52:bf:a1:7f:d1:db:6e:cc:97:27:93:4f:10:6e: da:73:59:95:bc:d9:a6:eb:31:49:be:bf:f1:fc:89: ca:ef:5d:a5:62:d4:67:d5:2e:78:8b:06:fc:e5:4f: c4:54:48:ae:ca:45:36:fa:fc:da:cc:0f:00:7d:e9: da:48:d5:33:91:ac:ec:0c:b1:60:bf:25:c5:33:f0: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:28:F5:4A:10:E6:3D:56:98:0C:C8:82:AB:20:6F:47:75:4F:34:27 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:23:55:91:3c:7a:96:5e:96:4a:43:8a:b8:5d:d0:af:e1:c6: 74:4d:f6:42:ab:ae:ce:2e:f9:b7:37:c8:be:4d:db:f4:ff:d7: 99:2f:30:a0:c5:4d:1a:a9:1c:ab:49:3f:e6:c9:a3:c4:96:50: d0:31:d1:63:46:66:ae:6e:b9:ba:03:b9:0b:23:44:b8:97:89: 20:ca:c0:e1:da:59:fc:8d:1a:35:cb:50:58:fc:01:69:1a:d4: 50:29:9f:ae:0b:ea:bb:fd:6b:7b:8d:e5:3f:1b:0f:5d:6a:be: e7:8a:f3:eb:2f:21:a4:2f:3f:9b:11:b2:7d:b7:5f:88:01:1a: f8:f3:da:2e:1b:c8:41:4c:de:34:f9:15:d0:0a:30:ba:c8:82: db:16:c6:17:7d:f9:bc:2b:72:e9:22:1e:07:2c:f1:40:37:6b: f8:27:9a:04:b3:07:8a:37:13:fe:48:1f:66:82:b0:a7:e8:3f: 5b:ea:1f:30:8f:6c:4f:b1:60:92:f7:ce:97:9c:d4:5e:74:f4: 3a:2f:1a:e0:f8:b9:13:2d:94:81:a6:f6:5d:6f:89:30:91:33: 69:0b:44:38:4d:75:83:6d:9c:f7:d6:73:2e:b1:3d:c5:ed:48: b0:57:4d:80:fd:3f:66:f0:67:22:a5:40:aa:36:90:88:42:84: ac:7e:79:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUxMDE5MDIyMjA2WhcNMjUxMDI2MDIyMjA2WjAYMRYwFAYD VQQDEw02OGY0NGI0ZS04NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FMi5/VjqTh35Hq6tGvxm/1G375YXYmf+ze22tYIp0zh2DdB6FCCwpaSH2/k IqdhTuMVPDo3r53XQWStQZyuCmsfN8gX72BpNoGClimCBUiyC5/aTdb/6UFL+QCX l9MbV5jDuMS1+JKuLuGIA+/tG5wzPyWBFLsSPLkniwGXBV9e0wmhMxFQJbcUD3Mh sbSvvg7mg4dJitizJGzUj5/TG8+2EqdcB7IVr/0lhEWTRIfXJKmLUr+hf9HbbsyX J5NPEG7ac1mVvNmm6zFJvr/x/InK712lYtRn1S54iwb85U/EVEiuykU2+vzazA8A fenaSNUzkazsDLFgvyXFM/B9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIo9UoQ 5j1WmAzIgqsgb0d1TzQnMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLI1WRPHqWXpZKQ4q4XdCv4cZ0TfZCq67OLvm3N8i+Tdv0/9eZLzCg xU0aqRyrST/myaPEllDQMdFjRmaubrm6A7kLI0S4l4kgysDh2ln8jRo1y1BY/AFp GtRQKZ+uC+q7/Wt7jeU/Gw9dar7nivPrLyGkLz+bEbJ9t1+IARr489ouG8hBTN40 +RXQCjC6yILbFsYXffm8K3LpIh4HLPFAN2v4J5oEsweKNxP+SB9mgrCn6D9b6h8w j2xPsWCS986XnNRedPQ6Lxrg+LkTLZSBpvZdb4kwkTNpC0Q4TXWDbZz31nMusT3F 7UiwV02A/T9m8GcipUCqNpCIQoSsfnk5 -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:27 2025 by rpki-client