$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft File: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft (raw, json) Hash identifier: KfRhwCvSBBnRSZoHXFCyy8pJwvo10l1yuCDO9iGIt1c= Subject key identifier: E7:A5:35:3E:25:BF:1C:A8:43:F2:59:C2:9A:7B:A4:7B:38:30:5C:7F Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4 Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:42:45 +0000 Manifest this update: Wed 05 Nov 2025 07:42:45 +0000 Manifest next update: Wed 12 Nov 2025 07:42:45 +0000 Files and hashes: 1: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl (hash: cnFhb9Q1aNj+MRn56EY0fHeE7fjVqdgipV/HZgOZNhQ=) 2: AE811872614711F0B811645EC4F9AE02.roa (hash: n6Y55/ceR16qJJFVpXKIJxFXBfe/NuJGfnCy2fEW8mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4 Validity Not Before: Nov 5 07:42:45 2025 GMT Not After : Nov 12 07:42:45 2025 GMT Subject: CN=690afff5-1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:19:f1:79:f9:95:ce:0f:20:85:36:83:51: 21:93:9e:c0:7e:41:cc:30:bd:b7:85:77:4c:9f:9b: 5b:d0:da:d9:72:4a:04:c3:1f:b0:de:5c:0d:db:b9: 9f:cf:89:65:9c:5b:f1:5e:d9:19:ec:60:dd:44:93: b2:20:82:ad:e7:59:ab:4c:9d:99:ab:d8:44:e3:1c: 07:85:91:e9:4e:0c:ac:30:c8:af:59:21:95:59:a1: 24:4b:c9:e4:c2:fd:a3:ba:21:b2:a3:73:a0:3e:06: c0:45:a0:ef:cf:b4:3b:e8:1a:23:46:55:19:e6:18: ad:77:25:bf:91:2d:e8:01:50:93:03:2b:a1:94:c0: 8e:c0:ff:01:b9:de:6b:f0:c3:bc:a6:50:c9:c7:b5: 40:90:23:a8:ef:35:c3:7b:90:32:da:21:5e:3f:3c: 5d:2f:ae:44:54:59:6c:e0:de:d3:68:09:4b:f3:50: f8:80:9e:a6:df:27:2d:02:ab:ae:f1:ad:66:f6:68: 24:70:42:e2:0e:d3:16:44:2d:83:7d:34:f6:63:20: a4:fe:95:28:fc:8a:c2:ae:ad:33:1d:2c:1d:bc:ce: dc:b0:aa:cc:45:03:1e:8f:52:38:db:48:1f:31:7e: 24:c5:3b:bc:c9:1d:33:5b:eb:79:c9:1b:2a:fe:47: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A5:35:3E:25:BF:1C:A8:43:F2:59:C2:9A:7B:A4:7B:38:30:5C:7F X509v3 Authority Key Identifier: keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:0d:80:f5:95:6b:92:de:3c:e5:74:36:3f:82:eb:b7:e5:28: 08:ca:54:10:d5:9a:02:69:83:a2:14:d5:3c:8a:5f:7e:63:56: 70:44:25:b4:b4:a4:eb:a1:9c:7a:b0:5d:aa:b7:69:9a:5e:7f: 2e:1c:c8:a0:40:3d:e1:eb:31:74:a6:67:a6:2b:da:a9:a4:ef: d2:3d:7e:d8:46:6c:a5:f2:04:e5:02:47:51:bd:20:dd:aa:3d: 6c:b8:af:df:8d:1c:9f:f9:a2:6d:37:b5:13:41:46:c8:79:3f: 75:c3:68:f6:b0:4c:e7:55:5b:6b:8b:1b:79:fc:6f:b5:a8:6f: 3c:5e:ac:b1:ac:a0:bd:5f:dc:be:9f:5f:81:d7:71:b3:25:5f: af:ba:e9:5a:d6:6f:af:7d:a9:32:4c:c4:56:83:b2:7f:b7:b1: 06:95:09:e6:eb:10:7a:dc:a2:16:e1:a1:bf:b1:08:aa:79:15: 01:e1:97:57:df:0e:4a:95:6d:7a:26:66:d5:06:ff:13:db:a6: 52:42:20:b8:85:cd:08:75:2a:0c:a4:b9:e4:45:ef:ce:48:44: 65:3c:84:20:f5:6c:0c:6e:51:61:ba:af:ce:ce:2b:a7:3d:ff: ae:41:ab:cf:be:ea:f6:33:c0:a8:a8:1b:f7:d0:04:82:2e:59: a8:cf:38:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDg5QjExMC8GA1UEBRMoNDAzRjJFN0U0REFCMTNDNDE5QzY4NjkwQzk0OTk1NDdG MkM1OEZDNDAeFw0yNTExMDUwNzQyNDVaFw0yNTExMTIwNzQyNDVaMBgxFjAUBgNV BAMTDTY5MGFmZmY1LTE1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCNxnxefmVzg8ghTaDUSGTnsB+QcwwvbeFd0yfm1vQ2tlySgTDH7DeXA3buZ/P iWWcW/Fe2RnsYN1Ek7Iggq3nWatMnZmr2ETjHAeFkelODKwwyK9ZIZVZoSRLyeTC /aO6IbKjc6A+BsBFoO/PtDvoGiNGVRnmGK13Jb+RLegBUJMDK6GUwI7A/wG53mvw w7ymUMnHtUCQI6jvNcN7kDLaIV4/PF0vrkRUWWzg3tNoCUvzUPiAnqbfJy0Cq67x rWb2aCRwQuIO0xZELYN9NPZjIKT+lSj8isKurTMdLB28ztywqsxFAx6PUjjbSB8x fiTFO7zJHTNb63nJGyr+R6R1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU56U1PiW/ HKhD8lnCmnukezgwXH8wHwYDVR0jBBgwFoAUQD8ufk2rE8QZxoaQyUmVR/LFj8Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwODlCLzU0NEMyMDUwNjE0 NjExRjBCNDg2NEU1QUM0RjlBRTAyL1FEOHVmazJyRThRWnhvYVF5VW1WUl9MRmo4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUQ4dWZrMnJFOFFaeG9hUXlVbVZSX0xGajhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw ODlCLzU0NEMyMDUwNjE0NjExRjBCNDg2NEU1QUM0RjlBRTAyL1FEOHVmazJyRThR WnhvYVF5VW1WUl9MRmo4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIINgPWVa5LePOV0Nj+C67flKAjKVBDVmgJpg6IU1TyKX35jVnBEJbS0 pOuhnHqwXaq3aZpefy4cyKBAPeHrMXSmZ6Yr2qmk79I9fthGbKXyBOUCR1G9IN2q PWy4r9+NHJ/5om03tRNBRsh5P3XDaPawTOdVW2uLG3n8b7WobzxerLGsoL1f3L6f X4HXcbMlX6+66VrWb699qTJMxFaDsn+3sQaVCebrEHrcohbhob+xCKp5FQHhl1ff DkqVbXomZtUG/xPbplJCILiFzQh1KgykueRF785IRGU8hCD1bAxuUWG6r87OK6c9 /65Bq8++6vYzwKioG/fQBIIuWajPOE8= -----END CERTIFICATE-----Generated at Wed Nov 5 23:07:57 2025 by rpki-client