$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft File: qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft (raw, json) Hash identifier: IAD+x+hhfyRLx6r3wWVsfLjtZcAm/ges2SGlV46CVYo= Subject key identifier: 05:EF:96:95:E2:DE:52:48:C1:A2:1B:FE:FD:D3:82:6D:7A:F3:8C:79 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:29:56 +0000 Manifest this update: Mon 03 Nov 2025 07:29:56 +0000 Manifest next update: Mon 10 Nov 2025 07:29:56 +0000 Files and hashes: 1: qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl (hash: /qcWigydEAoDS3Wq5kN6CHSl88DjBy0IqMVGhLRfFhE=) 2: C869343A5FE011F0ABA4A158C4F9AE02.roa (hash: 1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Nov 3 07:29:56 2025 GMT Not After : Nov 10 07:29:56 2025 GMT Subject: CN=690859f4-b4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:b6:65:33:e9:60:67:e9:f4:c1:9b:05:c0: ed:9a:13:3d:3d:d0:5c:1f:47:18:24:a1:62:ec:a9: 5b:7a:b9:31:67:1b:d6:7e:58:54:7d:97:68:9f:b3: 1e:07:93:41:58:c0:73:7e:31:01:3a:39:85:19:52: c4:89:63:4b:ec:a3:ac:1d:21:60:3c:78:6e:51:d3: 56:e1:1d:57:dd:2f:ae:68:57:7c:32:2a:f1:ed:0f: 93:67:db:a0:e2:db:5f:48:ff:62:06:33:ee:07:49: 4d:bf:66:32:65:1f:33:95:59:be:9e:41:ae:27:e4: 08:54:b2:80:a2:5c:da:da:de:bc:1b:7d:7f:f6:66: 11:94:36:54:1e:97:bb:4f:c2:8f:cd:52:fc:29:e5: f4:e8:76:97:1c:4b:9e:53:9f:b1:b5:d2:47:6b:da: 7a:3f:d9:f9:e4:6d:e3:9a:99:7e:41:e6:96:ee:64: 45:62:cc:79:cd:c3:31:26:27:ed:82:23:86:6d:4d: 8a:8d:d9:f1:6f:16:e5:16:a0:af:fa:f3:7d:3f:1c: fa:ba:31:f0:47:3d:0d:dd:d9:f8:69:cd:c8:0e:96: 90:44:c6:99:99:6e:fb:88:c0:48:eb:fb:19:6c:bf: 8d:1b:92:f3:92:a9:8f:1a:38:41:97:10:09:51:55: 95:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EF:96:95:E2:DE:52:48:C1:A2:1B:FE:FD:D3:82:6D:7A:F3:8C:79 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1a:c5:69:d3:ec:51:60:98:76:41:f0:07:ba:7a:be:80:fc: 16:57:fe:ec:ac:57:1d:b4:52:a6:9d:b9:d7:67:73:7e:46:7b: 57:d0:79:62:d0:6c:e8:fa:95:c0:20:33:39:6f:3e:ba:c9:c7: dc:77:71:50:26:ea:99:3e:28:95:e0:37:80:0f:79:45:58:47: c7:99:54:8e:2a:7a:4a:0c:e8:88:41:d1:c8:41:2d:d1:e8:0f: b1:58:4b:a9:d9:bc:44:23:70:ac:25:79:e3:a8:fb:60:91:4b: 34:b1:7a:aa:09:32:cb:33:f1:01:f2:8a:c6:b4:8b:2e:e3:ce: 9a:ac:7b:50:98:12:93:11:e3:f2:4a:19:7e:15:a2:8e:ec:06: 71:bc:6b:0a:3d:f4:aa:ae:36:6b:44:0a:a5:8e:ab:d5:69:27: 6f:5e:c6:6c:2d:61:9f:a2:56:de:b2:bb:9a:63:a4:01:a5:b2: 19:d6:38:9c:62:6c:ad:02:a5:fd:9f:fb:21:16:df:07:e7:d3: 4e:19:0c:13:1a:fc:1f:4c:75:6b:06:db:46:a7:59:ff:64:fe: 3a:3d:83:98:34:5c:77:32:45:3c:9a:77:9f:89:73:93:80:78: 78:c0:8f:5b:d8:41:71:c6:a2:7f:f9:23:0e:a1:ec:aa:8e:ab: 49:79:d1:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MzBENjExMC8GA1UEBRMoQUFDMzlGRDk2M0RFMTczMUQwREEzRDQxNDFFNEExRTQ2 OUU5ODUyMzAeFw0yNTExMDMwNzI5NTZaFw0yNTExMTAwNzI5NTZaMBgxFjAUBgNV BAMTDTY5MDg1OWY0LWI0ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8CLZlM+lgZ+n0wZsFwO2aEz090FwfRxgkoWLsqVt6uTFnG9Z+WFR9l2ifsx4H k0FYwHN+MQE6OYUZUsSJY0vso6wdIWA8eG5R01bhHVfdL65oV3wyKvHtD5Nn26Di 219I/2IGM+4HSU2/ZjJlHzOVWb6eQa4n5AhUsoCiXNra3rwbfX/2ZhGUNlQel7tP wo/NUvwp5fTodpccS55Tn7G10kdr2no/2fnkbeOamX5B5pbuZEVizHnNwzEmJ+2C I4ZtTYqN2fFvFuUWoK/6830/HPq6MfBHPQ3d2fhpzcgOlpBExpmZbvuIwEjr+xls v40bkvOSqY8aOEGXEAlRVZVXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBe+WleLe UkjBohv+/dOCbXrzjHkwHwYDVR0jBBgwFoAUqsOf2WPeFzHQ2j1BQeSh5GnphSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzMEQ2LzE3RjA2QTI0NUZF MDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXNPZjJXUGVGekhRMmoxQlFlU2g1R25waFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz MEQ2LzE3RjA2QTI0NUZFMDExRjBCMkZEOEY1N0M0RjlBRTAyL3FzT2YyV1BlRnpI UTJqMUJRZVNoNUducGhTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcaxWnT7FFgmHZB8Ae6er6A/BZX/uysVx20Uqaduddnc35Ge1fQeWLQ bOj6lcAgMzlvPrrJx9x3cVAm6pk+KJXgN4APeUVYR8eZVI4qekoM6IhB0chBLdHo D7FYS6nZvEQjcKwleeOo+2CRSzSxeqoJMssz8QHyisa0iy7jzpqse1CYEpMR4/JK GX4Voo7sBnG8awo99KquNmtECqWOq9VpJ29exmwtYZ+iVt6yu5pjpAGlshnWOJxi bK0Cpf2f+yEW3wfn004ZDBMa/B9MdWsG20anWf9k/jo9g5g0XHcyRTyad5+Jc5OA eHjAj1vYQXHGon/5Iw6h7KqOq0l50Zo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:22 2025 by rpki-client