$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json) Hash identifier: /c/h40//JIpoDVTCLfCKO3SIhCBq+dZ6klf5QlVI7v4= Subject key identifier: C6:E7:F7:7B:09:93:F7:0B:81:20:2F:60:52:8B:C5:71:CE:C3:6A:BA Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft Manifest number: 75 Signing time: Wed 05 Nov 2025 07:04:02 +0000 Manifest this update: Wed 05 Nov 2025 07:04:01 +0000 Manifest next update: Wed 12 Nov 2025 07:04:01 +0000 Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: 5jDuW9FTAn+LMdvmysd9ViUZUrnL88Yv2xROa0vZZ5k=) 2: 78DE938EACF611F0B7108B77C4F9AE02.roa (hash: 0lWMdOzn8JsOFNV5zHVowX9ZpAtUiG0Mngxq9SwqdPw=) 3: DE48485AACF611F09C3A4F81C4F9AE02.roa (hash: cP40ap8CBMpy7Xix6leaPe20TppMEaWJFbCrqt13ecE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5 Validity Not Before: Nov 5 07:04:01 2025 GMT Not After : Nov 12 07:04:01 2025 GMT Subject: CN=690af6e1-6b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:a4:56:d0:3c:3c:b8:a6:aa:81:fb:c1:f2: f2:35:8d:e3:4c:63:bd:57:b4:e8:b7:14:f8:d7:7d: bc:d3:a4:94:65:ec:95:06:79:00:f4:80:f0:bf:9b: b4:9e:d7:bb:10:87:b9:c7:26:ba:62:20:b6:45:01: a0:eb:fe:c5:46:12:63:1e:b6:b7:fb:53:5d:b4:95: b3:0e:80:a7:4f:00:60:1a:29:66:4b:c4:a6:c9:54: b2:29:c9:5c:7e:4d:3f:8c:6d:0b:ed:3b:bc:55:1f: 26:45:a7:6b:b3:f8:57:7b:4f:03:b0:bf:d0:fe:f3: 23:56:49:b4:c7:3c:0a:f4:71:1b:02:d7:2d:64:4f: ec:c1:f6:80:3e:e3:51:d6:fd:43:bf:8c:28:a7:5c: c4:77:7f:88:c8:1b:f9:e6:12:32:af:2a:e1:ea:dd: d8:61:a4:d0:e6:9d:17:f2:4e:e6:a1:ff:f6:55:cd: dd:5f:98:15:1e:61:a9:e3:93:f5:56:83:56:3a:d5: eb:e1:42:37:69:ba:1e:9f:84:0f:a3:a5:a9:38:9b: 7b:5e:a2:a5:7a:36:7a:26:e2:4a:53:65:cd:15:3b: 7c:37:6d:1d:48:8c:9d:38:a8:8f:45:d0:52:7e:24: 63:1f:7e:aa:cf:95:58:24:dc:75:e1:f5:7a:14:9f: 02:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:F7:7B:09:93:F7:0B:81:20:2F:60:52:8B:C5:71:CE:C3:6A:BA X509v3 Authority Key Identifier: keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:81:a3:fe:58:e3:cc:2b:11:10:cd:85:3c:00:d0:b9:06:eb: 92:2e:79:70:b8:85:22:78:50:3a:2d:6c:79:22:b8:88:1f:3e: e8:9b:e1:22:46:88:20:b6:68:ba:0a:7a:69:f5:da:c8:97:f7: f3:83:2a:4e:64:f4:22:2f:fc:6b:c2:5e:45:3c:9a:26:75:fe: 98:29:90:da:86:a1:fe:96:15:0a:c0:ca:88:bb:1d:1d:43:19: e5:b1:87:0e:ee:b4:d0:30:58:08:a9:3c:6a:2c:00:0c:ae:d1: 63:de:c6:ee:9c:37:3d:72:e2:a2:f0:a1:b4:f0:7d:1a:b1:5b: 00:b1:13:20:65:6e:c0:58:7b:fa:b9:2a:6b:ee:94:3a:13:90: 2b:3c:5c:6f:7f:2f:a4:56:31:49:39:7f:21:ff:54:8d:51:c9: 11:ee:e4:65:46:33:f9:f3:5f:ca:06:c6:32:a6:ea:8b:87:6e: 9c:b1:13:fe:29:91:f9:e9:13:80:08:42:77:cd:2a:9c:47:b9: fc:f4:10:85:28:ea:7a:4b:df:47:60:6d:36:96:e3:77:02:98: 0d:2f:8a:ff:f6:69:f1:6d:3e:e9:fc:3f:00:cd:6c:fc:cb:46: b1:99:7c:52:47:ed:8e:44:a6:66:81:48:87:64:58:08:63:65: b9:f0:89:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODBFNDExMC8GA1UEBRMoNDJFMzg2MkQ3NDUzNUMyQ0E5QUFCMzdBNzE5NUI1OTFF QUVFMjFFNTAeFw0yNTExMDUwNzA0MDFaFw0yNTExMTIwNzA0MDFaMBgxFjAUBgNV BAMTDTY5MGFmNmUxLTZiN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOXqRW0Dw8uKaqgfvB8vI1jeNMY71XtOi3FPjXfbzTpJRl7JUGeQD0gPC/m7Se 17sQh7nHJrpiILZFAaDr/sVGEmMetrf7U120lbMOgKdPAGAaKWZLxKbJVLIpyVx+ TT+MbQvtO7xVHyZFp2uz+Fd7TwOwv9D+8yNWSbTHPAr0cRsC1y1kT+zB9oA+41HW /UO/jCinXMR3f4jIG/nmEjKvKuHq3dhhpNDmnRfyTuah//ZVzd1fmBUeYanjk/VW g1Y61evhQjdpuh6fhA+jpak4m3teoqV6Nnom4kpTZc0VO3w3bR1IjJ04qI9F0FJ+ JGMffqrPlVgk3HXh9XoUnwJHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxuf3ewmT 9wuBIC9gUovFcc7DarowHwYDVR0jBBgwFoAUQuOGLXRTXCypqrN6cZW1keruIeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MEU0LzVDMEM5NTUwMDhC QzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5cHFyTjZjWlcxa2VydUll VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXVPR0xYUlRYQ3lwcXJONmNaVzFrZXJ1SWVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 MEU0LzVDMEM5NTUwMDhCQzExRjBCRUI0RjU1MkM0RjlBRTAyL1F1T0dMWFJUWEN5 cHFyTjZjWlcxa2VydUllVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCBo/5Y48wrERDNhTwA0LkG65IueXC4hSJ4UDotbHkiuIgfPuib4SJG iCC2aLoKemn12siX9/ODKk5k9CIv/GvCXkU8miZ1/pgpkNqGof6WFQrAyoi7HR1D GeWxhw7utNAwWAipPGosAAyu0WPexu6cNz1y4qLwobTwfRqxWwCxEyBlbsBYe/q5 KmvulDoTkCs8XG9/L6RWMUk5fyH/VI1RyRHu5GVGM/nzX8oGxjKm6ouHbpyxE/4p kfnpE4AIQnfNKpxHufz0EIUo6npL30dgbTaW43cCmA0viv/2afFtPun8PwDNbPzL RrGZfFJH7Y5EpmaBSIdkWAhjZbnwiV4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:03 2025 by rpki-client