$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: Xi0uFCbGRYJ1Hx/hO2XhtRzZ6Zu1xj9Nz7LVJxZZPGY= Subject key identifier: 5A:F4:DA:4F:E8:66:81:1B:9D:CA:A8:10:E9:9E:17:DF:8B:EC:B9:02 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 0281 Signing time: Mon 03 Nov 2025 01:34:45 +0000 Manifest this update: Mon 03 Nov 2025 01:34:45 +0000 Manifest next update: Mon 10 Nov 2025 01:34:45 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: T0u9I6wQ0JArni9K1Be5015u1N4KRVuG5lqy4mqw6KY=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: UjqlRAwfwNLo2LEBYwVtNQxCTDJqJ6taRgiSuyPlUdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Nov 3 01:34:45 2025 GMT Not After : Nov 10 01:34:45 2025 GMT Subject: CN=690806b5-0c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:18:9a:b3:5e:bd:3f:ae:8d:50:51:77:7f: 70:41:3d:63:5b:f2:27:48:bf:1c:5b:40:43:93:a5: f6:b4:f6:17:23:2d:c5:b4:eb:55:33:52:a7:07:65: dd:47:bd:70:5b:1a:95:a1:e9:07:de:38:ed:fe:41: fb:bd:9b:ef:bf:23:fb:c3:c4:89:10:85:d8:4a:8d: c9:22:a2:6e:b5:94:b0:48:16:d1:f1:ce:65:70:7c: 9c:3d:80:5e:fe:d9:ba:e3:98:eb:df:b0:6f:1f:9f: 82:29:5a:aa:7e:e8:90:70:c5:f8:12:57:ff:69:29: ad:af:54:9d:7c:92:57:13:8f:75:d3:be:d7:49:dc: 69:57:3f:a8:cb:ff:31:74:b3:2e:2a:d3:fc:9f:ac: c6:70:3c:05:39:01:4a:f3:60:fc:7d:3d:61:5b:57: 93:a1:3a:fd:7d:5e:b8:b5:89:94:84:17:c2:de:30: 05:fb:ed:42:86:92:ff:72:ab:da:54:4e:ad:6c:3a: 41:2e:8c:2c:89:6b:fb:19:59:aa:40:97:ab:c6:11: 9f:60:d1:28:5a:5b:ce:65:c8:ab:a3:6c:d0:15:03: 17:fd:8f:7d:29:c7:ed:33:5d:58:ed:ba:0c:27:93: f4:fc:8c:36:83:17:70:65:28:09:7e:65:d3:2c:5f: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:DA:4F:E8:66:81:1B:9D:CA:A8:10:E9:9E:17:DF:8B:EC:B9:02 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ba:50:ee:c0:c6:42:4b:36:20:f8:06:6f:4d:f1:b2:48:94: b7:a6:80:aa:f5:a4:c5:85:d4:41:23:cb:2a:2a:e4:88:6c:6f: 66:e4:85:e3:23:17:9f:0b:a1:a5:c7:ac:c1:9c:be:70:6f:02: df:fc:f3:09:02:6c:1c:0f:af:f9:fb:43:75:45:d2:6c:ab:ed: c2:ef:db:69:ab:a8:bd:8a:a2:68:f2:e9:93:5e:2e:18:e7:19: 98:5b:2e:a8:ea:e0:11:57:74:be:68:e4:11:56:9d:69:65:44: 69:18:17:54:2f:de:0a:d3:63:87:d6:81:b3:71:98:78:11:c1: 35:be:09:18:b7:34:ab:89:47:d5:65:cd:90:64:fe:34:96:b9: aa:1f:34:1d:a6:3c:7b:8f:91:37:eb:e9:59:5a:04:96:13:b5: bf:c3:7e:c9:83:88:1f:27:55:1c:f2:e2:38:5c:21:aa:d0:ca: 85:f9:45:be:34:67:18:ce:df:c5:0c:3e:b2:22:cf:09:5e:dd: 2e:71:be:bd:cf:55:47:84:7b:b4:73:47:42:5d:84:ad:fa:7e: 75:7a:2a:4e:4e:b2:b1:42:f2:a5:b6:ef:06:97:3e:81:e5:23: 20:42:bb:03:a2:da:55:ad:5b:ef:df:11:86:41:7f:69:27:3b: d6:80:a5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUxMTAzMDEzNDQ1WhcNMjUxMTEwMDEzNDQ1WjAYMRYwFAYD VQQDEw02OTA4MDZiNS0wYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21gYmrNevT+ujVBRd39wQT1jW/InSL8cW0BDk6X2tPYXIy3FtOtVM1KnB2Xd R71wWxqVoekH3jjt/kH7vZvvvyP7w8SJEIXYSo3JIqJutZSwSBbR8c5lcHycPYBe /tm645jr37BvH5+CKVqqfuiQcMX4Elf/aSmtr1SdfJJXE491077XSdxpVz+oy/8x dLMuKtP8n6zGcDwFOQFK82D8fT1hW1eToTr9fV64tYmUhBfC3jAF++1ChpL/cqva VE6tbDpBLowsiWv7GVmqQJerxhGfYNEoWlvOZciro2zQFQMX/Y99KcftM11Y7boM J5P0/Iw2gxdwZSgJfmXTLF/76QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFr02k/o ZoEbncqoEOmeF9+L7LkCMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtulDuwMZCSzYg+AZvTfGySJS3poCq9aTFhdRBI8sqKuSIbG9m5IXj IxefC6Glx6zBnL5wbwLf/PMJAmwcD6/5+0N1RdJsq+3C79tpq6i9iqJo8umTXi4Y 5xmYWy6o6uARV3S+aOQRVp1pZURpGBdUL94K02OH1oGzcZh4EcE1vgkYtzSriUfV Zc2QZP40lrmqHzQdpjx7j5E36+lZWgSWE7W/w37Jg4gfJ1Uc8uI4XCGq0MqF+UW+ NGcYzt/FDD6yIs8JXt0ucb69z1VHhHu0c0dCXYSt+n51eipOTrKxQvKltu8Glz6B 5SMgQrsDotpVrVvv3xGGQX9pJzvWgKUt -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:57 2025 by rpki-client