$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json) Hash identifier: zW/kXYXVF5uqI5OaPZwqEOTv6amoZWV8vlV6qMCmdFA= Subject key identifier: 62:B2:2F:50:53:0C:E5:5B:49:89:85:6B:A7:0D:ED:EA:EE:34:22:28 Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48 Certificate serial: 1E89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft Manifest number: 32F7 Signing time: Tue 04 Nov 2025 15:44:36 +0000 Manifest this update: Tue 04 Nov 2025 15:44:36 +0000 Manifest next update: Tue 11 Nov 2025 15:44:36 +0000 Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: 0iUic5wfPxQIiVuGKPEX69/LSjUzG+dpr9cKQrk3Kzw=) 2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: rgEBVfEHrHQCIYu+8cT3x0Mx0w03fqFbIgZigqEcJN4=) 3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: r0CHOQu1cJbmjwRlYBEiavWoEM4N4g/XqSKR2NA/Xr4=) 4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: m2nIep6ftkfrIPBLf24Qcs2kiAMJ/4wpttb2LM7mGxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7817 (0x1e89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48 Validity Not Before: Nov 4 15:44:36 2025 GMT Not After : Nov 11 15:44:36 2025 GMT Subject: CN=690a1f64-8035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:bf:b3:3c:f7:4d:69:16:44:a0:6b:60:e4: 24:7d:7f:a1:54:8e:08:bd:fd:8c:a7:e5:dc:ef:11: 03:7e:0e:a5:02:4c:6f:e8:97:45:d8:3e:29:f9:6b: 78:25:85:eb:f3:8c:a8:ce:eb:b7:02:07:27:f1:ed: 98:e8:81:c5:9b:42:9c:71:63:e5:68:18:0f:b7:db: 43:cf:81:ba:0e:ae:43:82:0c:41:5e:23:c6:18:0f: 25:44:06:87:87:aa:5e:22:85:bd:2e:e7:d8:12:54: 63:88:c0:20:5b:70:03:b7:fe:6c:3f:ce:76:ad:a6: ef:66:b4:7e:3c:33:b2:6c:f4:25:6b:ea:e3:e5:1f: cd:93:7d:73:11:0c:69:0c:1d:1a:65:ff:1c:75:fb: 75:17:49:4a:fe:d4:2d:9e:27:2d:7b:c4:39:19:39: c3:c8:bd:4a:31:c4:09:c4:ce:ee:3f:28:0e:42:30: 0a:bd:2c:fb:b7:78:17:92:51:96:42:8c:12:fa:c1: a9:fa:aa:47:92:8e:f8:d0:a6:dd:42:f8:89:38:88: a8:9e:46:07:33:0a:d1:2f:6c:06:d8:e4:19:cc:b0: 7f:bb:a7:8c:78:b9:e7:37:a2:39:8a:5c:bd:3f:f7: 12:ca:bf:bd:cb:b1:29:76:c2:46:d0:cb:08:73:a9: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B2:2F:50:53:0C:E5:5B:49:89:85:6B:A7:0D:ED:EA:EE:34:22:28 X509v3 Authority Key Identifier: keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:72:11:12:a8:23:36:77:01:98:68:4f:02:ee:ce:8b:fa:49: 1f:1e:9d:85:9f:55:50:a3:36:72:e7:80:a0:64:3b:dc:b4:2d: 94:03:af:15:18:59:83:a6:48:e4:b9:33:cf:a0:de:1c:0c:6a: 7d:a9:38:c5:86:52:4f:15:b2:54:39:ee:2c:e5:27:0d:c0:05: bd:8e:1b:c7:3d:34:a1:7a:07:d3:83:49:40:07:d9:97:3b:9b: e9:e2:14:3c:6c:a3:a1:f5:68:f3:95:44:89:b9:2a:f8:8c:4f: d6:bf:73:ab:aa:f9:bb:cc:4e:36:b7:a3:cf:bf:4d:9e:70:5d: 64:f7:37:ad:5e:d3:51:63:cb:57:60:67:a8:68:c6:b8:0d:d8: 12:35:08:e4:8e:b3:03:42:29:e8:1b:dc:9a:e4:de:9d:dd:0e: 71:05:db:3f:52:c5:0f:40:88:b9:81:b4:2a:2e:e5:7f:78:3f: 33:85:bb:04:af:2c:41:7f:f6:38:b0:34:60:b0:f5:33:8a:dc: 72:c4:26:ff:e5:30:3f:ce:80:f4:79:90:15:e0:54:53:d0:98: 01:50:89:eb:42:5d:53:4a:de:c8:09:37:bf:3e:d9:ea:52:1a: c8:ec:0d:ef:70:0c:ed:d5:45:e1:08:1b:3b:b7:85:e8:f6:44: 60:79:41:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCREQxMTAvBgNVBAUTKDQyODdCMzMzMjE3NkRCNDg2QTJDQkM0MjU0MDJGQTlD ODZCNkRDNDgwHhcNMjUxMTA0MTU0NDM2WhcNMjUxMTExMTU0NDM2WjAYMRYwFAYD VQQDEw02OTBhMWY2NC04MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAa/szz3TWkWRKBrYOQkfX+hVI4Ivf2Mp+Xc7xEDfg6lAkxv6JdF2D4p+Wt4 JYXr84yozuu3Agcn8e2Y6IHFm0KccWPlaBgPt9tDz4G6Dq5DggxBXiPGGA8lRAaH h6peIoW9LufYElRjiMAgW3ADt/5sP852rabvZrR+PDOybPQla+rj5R/Nk31zEQxp DB0aZf8cdft1F0lK/tQtnicte8Q5GTnDyL1KMcQJxM7uPygOQjAKvSz7t3gXklGW QowS+sGp+qpHko740KbdQviJOIionkYHMwrRL2wG2OQZzLB/u6eMeLnnN6I5ily9 P/cSyr+9y7EpdsJG0MsIc6ke2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKyL1BT DOVbSYmFa6cN7eruNCIoMB8GA1UdIwQYMBaAFEKHszMhdttIaiy8QlQC+pyGttxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJERC8zQUUwMDRCNEQ3 NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIwaHFMTHhDVkFMNm5JYTIz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FvZXpNeUYyMjBocUxMeENWQUw2bklhMjNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJERC8zQUUwMDRCNEQ3NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIw aHFMTHhDVkFMNm5JYTIzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3chESqCM2dwGYaE8C7s6L+kkfHp2Fn1VQozZy54CgZDvctC2UA68V GFmDpkjkuTPPoN4cDGp9qTjFhlJPFbJUOe4s5ScNwAW9jhvHPTShegfTg0lAB9mX O5vp4hQ8bKOh9WjzlUSJuSr4jE/Wv3Orqvm7zE42t6PPv02ecF1k9zetXtNRY8tX YGeoaMa4DdgSNQjkjrMDQinoG9ya5N6d3Q5xBds/UsUPQIi5gbQqLuV/eD8zhbsE ryxBf/Y4sDRgsPUzitxyxCb/5TA/zoD0eZAV4FRT0JgBUInrQl1TSt7ICTe/Ptnq UhrI7A3vcAzt1UXhCBs7t4Xo9kRgeUFy -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:38 2025 by rpki-client