$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: BuYfDUpDYihBaG/MQAVsPjyW7cksbWwyIh7vq/89vR8= Subject key identifier: 00:60:38:1A:49:FF:37:83:8B:58:F5:4F:AF:2D:7A:5D:4C:4D:F1:27 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34E4 Signing time: Tue 04 Nov 2025 14:41:53 +0000 Manifest this update: Tue 04 Nov 2025 14:41:53 +0000 Manifest next update: Tue 11 Nov 2025 14:41:53 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: pOlUk4/2gTOIIEETmbn8R66Ya7Mw5/p9LY1/PWo1WTY=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Nov 4 14:41:53 2025 GMT Not After : Nov 11 14:41:53 2025 GMT Subject: CN=690a10b1-9cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:90:3a:78:6b:08:78:49:b8:e6:0e:16:fc:17: 15:af:07:f5:b6:28:44:f0:aa:ec:93:cc:38:e7:f4: 82:04:87:fb:76:c8:1b:3c:26:0f:0a:e9:b3:c6:2d: 62:bb:25:0b:01:8e:a3:a6:2a:2a:df:ee:8e:af:2e: 3c:e6:b1:e7:fe:56:d3:0a:89:3b:72:14:95:d4:18: d6:58:73:7c:7a:3c:ac:0b:7f:14:35:b6:ed:cc:f6: ae:fa:e1:6a:b6:77:ff:ce:22:94:c2:32:82:e5:92: 4b:31:67:3f:3b:d9:e5:d8:0e:89:6e:b5:ae:47:4c: e5:4b:3a:aa:40:95:3c:49:e4:a0:3e:09:b4:be:bb: 50:b6:a0:22:38:3e:26:b6:04:91:7f:43:b2:35:07: f9:45:80:0e:3a:04:3b:d2:c0:45:4b:4b:79:1f:29: a8:99:bf:68:34:0a:71:d1:6d:b8:9c:87:0a:73:ad: dc:2c:fa:43:ab:c0:27:b6:0a:26:c4:4d:52:af:d0: e6:1e:bc:9f:bd:2f:cd:96:ae:81:21:71:97:d7:4c: 6f:be:ac:da:07:7c:ea:08:37:7d:64:61:70:76:51: e2:f9:16:1f:6f:c5:9d:fa:ea:1d:e1:4b:3f:a0:52: 02:66:16:ae:3f:3f:9b:e1:09:3d:55:b7:31:14:58: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:38:1A:49:FF:37:83:8B:58:F5:4F:AF:2D:7A:5D:4C:4D:F1:27 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:53:80:d3:e6:1c:bb:81:76:41:a7:b6:c1:cd:58:2b:10:2a: 3d:f3:1a:df:38:e7:b0:c3:d8:c9:a1:f1:c9:e3:24:44:ff:70: bb:06:cd:b6:f5:c5:74:51:64:b2:18:49:6e:cc:01:96:c9:92: 14:6b:8f:81:c5:3e:7b:d3:ba:06:2d:70:45:9d:8d:77:2d:0c: e6:17:47:6a:55:70:3f:f4:c6:37:f4:74:e0:27:66:55:4d:60: 10:a6:a9:22:80:9d:ec:85:1d:66:c0:04:ac:bb:64:70:a2:25: 9e:a2:02:04:6b:29:bc:7c:76:2e:d6:5f:8f:82:ec:85:cc:80: 18:74:d8:a9:24:a2:69:b1:7f:ce:fa:4b:fc:e0:66:b0:8b:e1: 3e:76:d5:ef:12:a9:96:94:4d:25:1b:69:45:95:f1:c6:b7:6a: 8a:13:9f:e0:e4:5a:68:ee:f0:c1:dd:5a:81:0c:30:ed:9d:6a: d7:62:16:e3:5c:b3:3b:3b:d9:a4:d2:81:27:8d:0a:76:9a:9e: ff:fa:ec:68:62:d9:b8:3e:b2:38:18:43:23:54:5c:e1:61:04: aa:64:c2:f4:d5:47:76:76:d3:07:74:62:5f:ee:84:7c:a8:d6: ac:c0:7f:d7:75:cd:57:5f:eb:33:9a:52:50:9b:d2:38:58:c4: 4f:76:96:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUxMTA0MTQ0MTUzWhcNMjUxMTExMTQ0MTUzWjAYMRYwFAYD VQQDEw02OTBhMTBiMS05Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45A6eGsIeEm45g4W/BcVrwf1tihE8Krsk8w45/SCBIf7dsgbPCYPCumzxi1i uyULAY6jpioq3+6Ory485rHn/lbTCok7chSV1BjWWHN8ejysC38UNbbtzPau+uFq tnf/ziKUwjKC5ZJLMWc/O9nl2A6JbrWuR0zlSzqqQJU8SeSgPgm0vrtQtqAiOD4m tgSRf0OyNQf5RYAOOgQ70sBFS0t5Hymomb9oNApx0W24nIcKc63cLPpDq8Antgom xE1Sr9DmHryfvS/Nlq6BIXGX10xvvqzaB3zqCDd9ZGFwdlHi+RYfb8Wd+uod4Us/ oFICZhauPz+b4Qk9VbcxFFhZLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABgOBpJ /zeDi1j1T68tel1MTfEnMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFU4DT5hy7gXZBp7bBzVgrECo98xrfOOeww9jJofHJ4yRE/3C7Bs22 9cV0UWSyGEluzAGWyZIUa4+BxT5707oGLXBFnY13LQzmF0dqVXA/9MY39HTgJ2ZV TWAQpqkigJ3shR1mwASsu2RwoiWeogIEaym8fHYu1l+PguyFzIAYdNipJKJpsX/O +kv84Gawi+E+dtXvEqmWlE0lG2lFlfHGt2qKE5/g5Fpo7vDB3VqBDDDtnWrXYhbj XLM7O9mk0oEnjQp2mp7/+uxoYtm4PrI4GEMjVFzhYQSqZML01Ud2dtMHdGJf7oR8 qNaswH/Xdc1XX+szmlJQm9I4WMRPdpbn -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:43 2025 by rpki-client