$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json) Hash identifier: KQHARaJqvzIog9nb4aEbi5c45tW3VwnSIGED5pKoJh0= Subject key identifier: 2E:79:1A:F5:65:A0:74:B2:F1:6B:10:AA:69:8B:19:58:25:0D:41:35 Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft Manifest number: 3D Signing time: Mon 03 Nov 2025 07:33:11 +0000 Manifest this update: Mon 03 Nov 2025 07:33:10 +0000 Manifest next update: Mon 10 Nov 2025 07:33:10 +0000 Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: k9RpPg1xu4cijjVyTsfXXkI8RtiDOOE6fCXLFVbze+M=) 2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM=) 3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: R9MuPEXmcb9QPVduJszFJZ3jI05Vo9fUIK/CYjPl3pQ=) 4: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: Vi+X8eC77LW+19x04LHYzDEZAgS3KYmTg+MI+Li5Sts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Nov 3 07:33:10 2025 GMT Not After : Nov 10 07:33:10 2025 GMT Subject: CN=69085ab7-c354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:d4:00:fa:24:81:ad:3e:2f:59:ea:25:61: 6c:a9:8c:a5:9f:a3:8e:7e:f3:d2:95:be:20:e2:9d: 83:92:54:3f:90:5c:a0:bb:e4:b2:ad:8e:ec:c8:73: 15:db:5d:e9:9f:17:c0:4c:6a:26:4c:5f:ab:f6:21: 2a:ee:e8:85:d7:6f:dd:36:4e:fa:1c:9c:ca:41:fb: 65:f8:e0:74:0e:9a:04:96:8a:ff:27:6f:06:35:59: 56:44:d6:8c:be:11:65:65:d0:0c:c8:7e:08:81:46: 38:6b:55:d7:be:a2:0b:b5:d0:3c:2e:49:aa:2b:ec: 60:a0:1d:e3:e8:31:41:0b:00:25:7f:11:6c:a8:7f: 08:d0:22:02:df:26:53:39:f6:ba:4f:f3:f5:58:d7: 24:d0:73:d1:60:cd:88:b8:be:e6:e5:43:06:ec:dc: a5:45:4e:24:e7:ec:df:a8:a6:55:fa:c4:b9:ce:65: 03:38:08:6b:4d:50:3c:2d:0a:d9:68:b1:d1:78:48: 27:d5:f6:84:31:de:5e:c0:65:6d:6c:a2:50:5e:07: b2:ca:c5:cf:c4:d5:80:d0:f1:81:15:09:98:bc:c0: d7:a7:bb:db:a9:57:57:60:37:35:8d:b8:8b:9e:91: 54:a1:88:e6:0b:9c:9c:dc:05:82:16:0e:c3:d6:76: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:79:1A:F5:65:A0:74:B2:F1:6B:10:AA:69:8B:19:58:25:0D:41:35 X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:fb:30:42:08:01:65:4f:03:2e:95:de:31:26:b5:d5:3c: 34:5e:b9:2e:c5:25:ee:9f:a0:ff:77:79:fb:f3:0c:bf:81:2a: 3a:6a:ae:fd:9b:40:9f:ac:33:58:04:62:e1:25:53:65:a9:b3: 3d:46:81:42:86:26:09:46:d5:84:0d:54:14:65:f5:e3:ea:0a: 2a:5b:bc:ba:3a:c3:a0:10:4b:f6:e8:79:8d:1b:7b:ec:3e:63: 7e:b6:b5:a1:78:31:de:1a:d2:c2:06:f6:2a:39:1c:37:80:7a: 93:86:5c:4b:dc:16:06:3a:10:b8:c9:4d:be:ea:ee:9b:a5:2f: 40:a4:4a:14:71:9d:9f:fd:99:d9:c6:28:76:90:19:e7:f2:27: e8:e8:d5:ff:2e:dc:64:87:be:89:cd:b9:d2:9c:1c:dd:8f:98: 11:74:0f:d4:ea:af:f4:17:e1:48:84:f6:a5:79:cb:7d:53:6b: 90:2f:b9:b8:54:1b:f5:15:74:91:0e:0d:9d:1d:c4:49:e7:91: 16:6d:0d:b4:b2:c6:57:c6:f2:5d:24:78:55:75:27:76:ed:52: 88:c9:c9:fd:ed:d7:20:42:07:9e:35:d6:60:2f:1c:d2:f4:a5: fd:91:72:2f:db:3c:19:02:26:f6:6b:7e:6d:c9:8c:cd:dd:b0: 33:61:d7:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1 MzMwQ0U0MjAeFw0yNTExMDMwNzMzMTBaFw0yNTExMTAwNzMzMTBaMBgxFjAUBgNV BAMTDTY5MDg1YWI3LWMzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIatQA+iSBrT4vWeolYWypjKWfo45+89KVviDinYOSVD+QXKC75LKtjuzIcxXb XemfF8BMaiZMX6v2ISru6IXXb902TvocnMpB+2X44HQOmgSWiv8nbwY1WVZE1oy+ EWVl0AzIfgiBRjhrVde+ogu10DwuSaor7GCgHePoMUELACV/EWyofwjQIgLfJlM5 9rpP8/VY1yTQc9FgzYi4vublQwbs3KVFTiTn7N+oplX6xLnOZQM4CGtNUDwtCtlo sdF4SCfV9oQx3l7AZW1solBeB7LKxc/E1YDQ8YEVCZi8wNenu9upV1dgNzWNuIue kVShiOYLnJzcBYIWDsPWdmcxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULnka9WWg dLLxaxCqaYsZWCUNQTUwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzRCRTY5RDAyNjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0 VWFmSGRzd0diRmxNd3prSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKIR+zBCCAFlTwMuld4xJrXVPDReuS7FJe6foP93efvzDL+BKjpqrv2b QJ+sM1gEYuElU2Wpsz1GgUKGJglG1YQNVBRl9ePqCipbvLo6w6AQS/boeY0be+w+ Y362taF4Md4a0sIG9io5HDeAepOGXEvcFgY6ELjJTb7q7pulL0CkShRxnZ/9mdnG KHaQGefyJ+jo1f8u3GSHvonNudKcHN2PmBF0D9Tqr/QX4UiE9qV5y31Ta5AvubhU G/UVdJEODZ0dxEnnkRZtDbSyxlfG8l0keFV1J3btUojJyf3t1yBCB5411mAvHNL0 pf2Rci/bPBkCJvZrfm3JjM3dsDNh19o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:34 2025 by rpki-client