$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft File: qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json) Hash identifier: aU9zaYGnQFEDVwyJjzxEjGG0vviFJAY+r1gwsarZqeA= Subject key identifier: 8F:FA:50:38:A4:94:37:BB:3C:65:E8:EF:60:5A:41:91:51:3C:CD:7D Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 Certificate issuer: /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft Manifest number: 57 Signing time: Wed 05 Nov 2025 07:23:04 +0000 Manifest this update: Wed 05 Nov 2025 07:23:04 +0000 Manifest next update: Wed 12 Nov 2025 07:23:04 +0000 Files and hashes: 1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: AjGoHtPmXzF8WCeEvbJFR3MWturNn9v1sxTyvZqOGGw=) 2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: Auw5uUJUlH0h3jd1n17bH+PmYxfm8Py3oCH4Qygadeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9 Validity Not Before: Nov 5 07:23:04 2025 GMT Not After : Nov 12 07:23:04 2025 GMT Subject: CN=690afb58-7a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fc:10:e0:55:b6:1d:f6:cb:00:fe:6b:ac:3b: 34:bd:8c:37:1f:1b:48:6a:fa:be:9d:7a:6d:3e:3c: 7d:68:69:b5:5b:ff:62:d7:96:b0:c5:4b:6b:80:27: b8:07:05:5b:36:c1:66:95:56:79:98:5a:f1:0a:3e: 19:8a:ca:8a:4c:b1:64:9a:e5:23:5d:ce:aa:95:6e: 50:98:8c:5b:f6:5b:22:d5:f4:b4:0c:f5:8f:1e:8d: 79:39:2d:e3:60:4e:bf:76:80:64:3b:c3:a4:00:1b: 32:ff:bd:58:ff:83:0b:87:c5:36:e4:fc:ee:f3:14: 8a:aa:fc:93:eb:bd:2c:27:84:67:55:30:f7:b2:33: 4c:a7:29:fd:ba:b8:59:70:35:53:26:31:25:f6:d8: 72:c4:d6:51:68:02:07:47:b3:cc:e9:c8:db:d1:c7: d3:c2:08:00:94:51:0e:82:31:2e:8d:64:a1:9d:79: 09:4b:33:48:2c:e0:d5:90:e9:be:38:99:05:a6:3d: 8c:05:f6:57:c1:fc:5e:ff:8f:fc:59:b3:8e:aa:17: 8c:83:57:73:25:44:43:d7:a6:8d:c1:c9:a3:a7:93: 03:27:27:fd:3a:61:ee:1f:ce:f7:27:7c:8e:f3:0a: 1d:a7:c2:d7:9e:f9:49:b9:44:3e:8e:af:19:31:45: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FA:50:38:A4:94:37:BB:3C:65:E8:EF:60:5A:41:91:51:3C:CD:7D X509v3 Authority Key Identifier: keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4f:1b:e6:aa:e6:5d:01:6f:fa:90:e2:ed:d9:d9:e6:c8:bb: 40:2a:e5:f3:f0:db:f4:5f:58:c9:17:c0:5e:24:4f:d3:ef:e3: 01:dc:f6:be:16:73:0b:50:40:a7:55:f0:f2:c6:68:69:24:04: a1:3a:ff:c7:d2:68:75:ef:e6:cd:ae:c4:3c:18:28:3a:11:fa: a1:3c:89:35:80:4d:20:2d:2d:60:6a:83:81:35:69:87:d0:e7: a8:76:df:b0:16:ce:eb:d9:a2:e7:a1:61:a9:c5:1c:10:f6:8e: 74:0f:2c:78:04:ce:cb:62:bb:b5:78:3a:d3:87:35:ef:16:71: 3d:5e:07:ac:78:c1:f9:74:e3:52:60:cd:02:35:de:4c:95:18: 23:fa:3a:46:9f:4e:59:85:2d:46:a4:f8:37:37:23:9d:6e:93: 61:b9:ce:38:47:cd:69:5f:7c:ec:f4:e0:dc:f1:39:c8:8e:d7: 2d:eb:76:41:b5:93:95:40:68:ce:68:ca:78:ce:18:87:00:83: dd:c8:2e:b7:2b:94:39:c7:c9:b2:70:61:3e:e4:da:a4:7b:ef: c3:44:bd:97:2c:b4:4a:6f:26:57:7e:eb:fa:ef:71:79:88:5f: 01:9b:1b:ee:f6:ba:bd:33:07:8d:60:e8:9a:df:f1:07:89:9a: 71:bd:5d:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDgzMjExMC8GA1UEBRMoQTkzOEVGRkI5NjNBRTJBRUI2RjBCMjY2NTk2QjhBNDEy Mzc3QzlEOTAeFw0yNTExMDUwNzIzMDRaFw0yNTExMTIwNzIzMDRaMBgxFjAUBgNV BAMTDTY5MGFmYjU4LTdhNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe/BDgVbYd9ssA/musOzS9jDcfG0hq+r6dem0+PH1oabVb/2LXlrDFS2uAJ7gH BVs2wWaVVnmYWvEKPhmKyopMsWSa5SNdzqqVblCYjFv2WyLV9LQM9Y8ejXk5LeNg Tr92gGQ7w6QAGzL/vVj/gwuHxTbk/O7zFIqq/JPrvSwnhGdVMPeyM0ynKf26uFlw NVMmMSX22HLE1lFoAgdHs8zpyNvRx9PCCACUUQ6CMS6NZKGdeQlLM0gs4NWQ6b44 mQWmPYwF9lfB/F7/j/xZs46qF4yDV3MlREPXpo3ByaOnkwMnJ/06Ye4fzvcnfI7z Ch2nwtee+Um5RD6OrxkxRQK7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj/pQOKSU N7s8ZejvYFpBkVE8zX0wHwYDVR0jBBgwFoAUqTjv+5Y64q628LJmWWuKQSN3ydkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwODMyL0MyNTlGNkIyMzYy NjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVRqdi01WTY0cTYyOExKbVdXdUtRU04zeWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw ODMyL0MyNTlGNkIyMzYyNjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2 MjhMSm1XV3VLUVNOM3lkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJPG+aq5l0Bb/qQ4u3Z2ebIu0Aq5fPw2/RfWMkXwF4kT9Pv4wHc9r4W cwtQQKdV8PLGaGkkBKE6/8fSaHXv5s2uxDwYKDoR+qE8iTWATSAtLWBqg4E1aYfQ 56h237AWzuvZouehYanFHBD2jnQPLHgEzstiu7V4OtOHNe8WcT1eB6x4wfl041Jg zQI13kyVGCP6OkafTlmFLUak+Dc3I51uk2G5zjhHzWlffOz04NzxOciO1y3rdkG1 k5VAaM5oynjOGIcAg93ILrcrlDnHybJwYT7k2qR778NEvZcstEpvJld+6/rvcXmI XwGbG+72ur0zB41g6Jrf8QeJmnG9XWw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:01 2025 by rpki-client