$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: z60Wrtt+uZgrPMWYsdhdi3GVwN4O+SLkXPBP90vv0sI= Subject key identifier: 8D:D0:FE:08:2D:F1:85:8F:A7:5A:1D:C0:48:C2:E5:ED:F9:21:C3:40 Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 34DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 34DA Signing time: Tue 04 Nov 2025 14:42:18 +0000 Manifest this update: Tue 04 Nov 2025 14:42:18 +0000 Manifest next update: Tue 11 Nov 2025 14:42:18 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: /b0719kfphHs/bz5S7ghIQrbkrJuWDpZoxen04QDft8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Nov 4 14:42:18 2025 GMT Not After : Nov 11 14:42:18 2025 GMT Subject: CN=690a10ca-e5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:99:72:88:da:3f:05:2f:03:9e:b6:c5:4c: 4b:fd:64:9d:07:84:40:42:91:d2:16:a4:ad:e0:b2: fa:23:20:b8:c8:55:18:52:af:a4:7d:48:02:2d:8d: 48:1c:c1:47:71:06:fc:79:37:1a:e9:79:52:2a:39: 19:8c:b5:c7:7e:96:f3:39:27:a6:8f:c3:37:1e:06: 29:c1:cb:04:80:c8:15:23:63:c8:f4:06:a6:3e:1d: 99:2d:57:d8:84:ea:87:2a:6f:da:3d:c5:75:54:f7: ae:c0:99:dc:37:5b:36:1d:72:3d:e0:8a:19:c1:04: 6b:c3:8f:9f:4b:ac:cf:1c:03:ef:4b:40:47:b6:b6: 1d:07:60:a9:5f:ca:d7:d4:01:df:6e:ae:1f:4f:58: 95:fb:d2:59:71:af:c1:ac:16:cc:d6:16:a2:be:3b: ad:8e:39:ab:a7:6e:b0:2f:cb:f1:a6:aa:0f:73:01: a8:fe:33:00:7e:46:82:02:94:57:0f:63:f3:4c:78: f2:a5:48:dd:30:19:2f:d2:1f:da:a8:01:86:38:02: d8:24:f0:f2:1f:27:46:95:96:7d:ce:03:46:6a:e9: 2a:47:09:3f:88:86:4f:1c:1c:b0:7f:83:96:43:fd: fe:78:bb:c9:9d:b6:65:be:da:9c:2d:5e:45:6a:a7: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D0:FE:08:2D:F1:85:8F:A7:5A:1D:C0:48:C2:E5:ED:F9:21:C3:40 X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:08:53:2d:15:9d:6f:b8:00:54:39:be:81:32:b9:c8:7d:20: a1:14:b0:22:83:4b:08:62:20:5b:b1:1d:f8:5b:80:cf:1d:6b: f8:b0:c5:e6:13:06:18:11:34:0b:9f:89:9b:e4:4e:20:a4:07: 67:e2:3b:be:f1:69:d8:ab:fd:ba:ad:d2:99:21:66:82:31:3c: fb:0f:df:aa:9a:71:db:5b:b8:87:bf:ee:d5:82:4a:4a:8f:ad: ba:9d:2f:dd:19:95:56:0e:3e:00:9c:53:fc:33:d1:58:bd:26: 4f:69:8f:df:35:56:cf:c5:a7:65:7f:78:5e:5c:c4:e7:c6:ab: 56:2f:4c:73:22:fd:56:dd:21:c0:45:f5:7b:67:09:c9:21:45: 2b:8a:4e:11:84:37:d9:d9:66:f0:9b:bc:1c:b0:2b:e2:f2:49: 2c:00:85:7b:e4:84:51:98:59:d1:58:23:e9:a8:a6:52:25:21: d9:62:e4:57:28:71:29:2d:a8:8a:84:c6:88:91:ee:ed:44:6f: cf:43:db:7a:6f:d3:d1:32:9a:f8:f1:64:9e:01:46:1e:ce:93: e1:cb:f3:56:ce:96:ba:92:4a:6e:13:18:03:30:95:41:6b:03: d6:d5:82:38:30:56:c3:99:f7:0c:50:1a:e3:1d:59:db:a0:05: ac:a3:77:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjUxMTA0MTQ0MjE4WhcNMjUxMTExMTQ0MjE4WjAYMRYwFAYD VQQDEw02OTBhMTBjYS1lNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R6ZcojaPwUvA562xUxL/WSdB4RAQpHSFqSt4LL6IyC4yFUYUq+kfUgCLY1I HMFHcQb8eTca6XlSKjkZjLXHfpbzOSemj8M3HgYpwcsEgMgVI2PI9AamPh2ZLVfY hOqHKm/aPcV1VPeuwJncN1s2HXI94IoZwQRrw4+fS6zPHAPvS0BHtrYdB2CpX8rX 1AHfbq4fT1iV+9JZca/BrBbM1haivjutjjmrp26wL8vxpqoPcwGo/jMAfkaCApRX D2PzTHjypUjdMBkv0h/aqAGGOALYJPDyHydGlZZ9zgNGaukqRwk/iIZPHBywf4OW Q/3+eLvJnbZlvtqcLV5Faqd5ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3Q/ggt 8YWPp1odwEjC5e35IcNAMB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACCFMtFZ1vuABUOb6BMrnIfSChFLAig0sIYiBbsR34W4DPHWv4sMXm EwYYETQLn4mb5E4gpAdn4ju+8WnYq/26rdKZIWaCMTz7D9+qmnHbW7iHv+7VgkpK j626nS/dGZVWDj4AnFP8M9FYvSZPaY/fNVbPxadlf3heXMTnxqtWL0xzIv1W3SHA RfV7ZwnJIUUrik4RhDfZ2Wbwm7wcsCvi8kksAIV75IRRmFnRWCPpqKZSJSHZYuRX KHEpLaiKhMaIke7tRG/PQ9t6b9PRMpr48WSeAUYezpPhy/NWzpa6kkpuExgDMJVB awPW1YI4MFbDmfcMUBrjHVnboAWso3fT -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:35 2025 by rpki-client