$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: 1eaTuMv3Xa1gzndrBYdgrIfZFTh+66MI0FlgAaF2bCg= Subject key identifier: 8D:D0:89:EB:C8:D9:4A:EF:D1:C2:C2:39:97:92:D6:8F:17:2E:CB:EC Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 04A7 Signing time: Sun 02 Nov 2025 23:56:32 +0000 Manifest this update: Sun 02 Nov 2025 23:56:31 +0000 Manifest next update: Sun 09 Nov 2025 23:56:31 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: 38bDK867zEY9jIeke4B6vX49zrKdL5svOomh2/15/Fw=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Nov 2 23:56:31 2025 GMT Not After : Nov 9 23:56:31 2025 GMT Subject: CN=6907efaf-4c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:50:e7:75:a6:fe:98:57:eb:3e:c1:6f:e1: 7d:b2:5d:66:36:60:31:86:87:79:bf:99:27:f6:fa: 89:27:6f:37:72:52:1d:c9:1c:7f:81:2d:06:d2:93: 81:e5:d0:e6:1a:d3:80:bf:88:48:7c:28:a1:af:9d: aa:71:d1:ef:d8:28:b4:75:0f:1c:56:e6:74:87:32: a8:ed:dd:0f:9b:cb:1a:8e:fa:ae:97:47:d0:67:86: 0d:84:6c:2f:28:f3:d4:bc:1e:70:0a:db:c0:11:fc: a7:d0:6d:a5:37:97:55:c0:22:1d:a6:06:b5:55:03: 1e:fa:06:0c:44:1b:19:13:a0:93:5a:d8:27:8c:a4: d2:c7:ec:35:d2:a9:a0:f3:6b:9e:6f:60:9c:46:3b: 6e:e8:6a:02:62:18:6b:c8:9f:25:7e:43:ff:c4:3c: 7a:37:58:aa:b1:a0:32:06:d8:ec:f8:40:cd:fd:68: 97:aa:18:5f:03:22:75:28:4c:b7:14:18:37:52:1d: 66:e5:0c:ac:d9:bf:35:da:58:1e:5c:de:47:ba:93: a9:71:72:13:81:ea:eb:6f:2f:a9:ea:50:c4:1d:89: 84:6c:a3:01:ed:58:bb:78:66:60:6c:b7:30:21:14: b5:4a:ab:46:b8:d5:46:0f:ed:28:25:2d:29:d2:5c: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D0:89:EB:C8:D9:4A:EF:D1:C2:C2:39:97:92:D6:8F:17:2E:CB:EC X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:14:ca:f2:bd:00:76:b6:42:38:a5:27:f0:30:2d:38:9a:25: 8a:ab:7d:46:67:db:65:a7:e3:25:08:e6:80:bb:06:65:ce:0e: 25:f7:76:65:26:d4:07:fb:8b:06:7e:ca:e5:5a:9f:cb:ca:23: ab:6e:0b:e9:34:32:86:99:d7:b0:cf:89:de:ab:d0:ef:5b:87: 0a:b5:5e:cb:cf:bf:28:bd:b1:12:79:29:4a:d8:f7:0f:73:35: 37:85:36:e0:51:b7:c4:cb:8f:b2:ad:fa:2c:dc:6b:b6:c2:32: cb:7b:b8:74:ec:39:9c:6e:c0:b9:6b:56:24:2e:6f:7e:51:b9: 1f:76:9f:c0:38:09:39:ad:7b:80:b5:60:b1:fb:3b:4f:10:52: 38:8c:b1:1e:1b:f9:cf:6e:93:72:ac:97:7a:47:83:b6:82:e5: e3:9a:a8:9b:98:6e:7f:5a:3d:56:6a:d5:03:08:58:55:fc:cb: e4:60:82:38:cd:8d:e2:82:6b:e8:13:83:83:ad:3d:58:72:19: 81:56:81:b5:33:cb:c5:3a:34:ce:72:09:40:15:b0:04:70:56: f1:34:7a:13:1c:6f:bf:bc:c9:58:69:e6:a5:dd:21:31:ef:4f: 1e:20:fe:da:ea:35:be:29:74:28:62:eb:34:4c:d2:51:ff:35: 51:1d:95:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUxMTAyMjM1NjMxWhcNMjUxMTA5MjM1NjMxWjAYMRYwFAYD VQQDEw02OTA3ZWZhZi00YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6DtQ53Wm/phX6z7Bb+F9sl1mNmAxhod5v5kn9vqJJ283clIdyRx/gS0G0pOB 5dDmGtOAv4hIfCihr52qcdHv2Ci0dQ8cVuZ0hzKo7d0Pm8sajvqul0fQZ4YNhGwv KPPUvB5wCtvAEfyn0G2lN5dVwCIdpga1VQMe+gYMRBsZE6CTWtgnjKTSx+w10qmg 82ueb2CcRjtu6GoCYhhryJ8lfkP/xDx6N1iqsaAyBtjs+EDN/WiXqhhfAyJ1KEy3 FBg3Uh1m5Qys2b812lgeXN5HupOpcXITgerrby+p6lDEHYmEbKMB7Vi7eGZgbLcw IRS1SqtGuNVGD+0oJS0p0lwxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3QievI 2Urv0cLCOZeS1o8XLsvsMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoFMryvQB2tkI4pSfwMC04miWKq31GZ9tlp+MlCOaAuwZlzg4l93Zl JtQH+4sGfsrlWp/LyiOrbgvpNDKGmdewz4neq9DvW4cKtV7Lz78ovbESeSlK2PcP czU3hTbgUbfEy4+yrfos3Gu2wjLLe7h07DmcbsC5a1YkLm9+Ubkfdp/AOAk5rXuA tWCx+ztPEFI4jLEeG/nPbpNyrJd6R4O2guXjmqibmG5/Wj1WatUDCFhV/MvkYII4 zY3igmvoE4ODrT1YchmBVoG1M8vFOjTOcglAFbAEcFbxNHoTHG+/vMlYaeal3SEx 708eIP7a6jW+KXQoYus0TNJR/zVRHZUe -----END CERTIFICATE-----Generated at Wed Nov 5 01:19:19 2025 by rpki-client