$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json) Hash identifier: IA5TT53wk27E9FiCKplAP0bDkzPUrwJjYztojetWN6Q= Subject key identifier: 02:B9:5E:9D:64:C8:F1:8A:82:E9:03:32:55:CB:57:CD:F4:B6:9E:F3 Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft Manifest number: 011F Signing time: Wed 05 Nov 2025 05:01:44 +0000 Manifest this update: Wed 05 Nov 2025 05:01:43 +0000 Manifest next update: Wed 12 Nov 2025 05:01:43 +0000 Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: ox2L1GKsXXne5HibUedTkKiVnV2MOOx8FqNeZKO2cBM=) 2: 4FEDDA6831C511F0996C265EC4F9AE02.roa (hash: G8CAzDlv561lCTXBbNuUwLBStLkoC94IOzFjIj5uYjk=) 3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 32ChZuN5aLmUO2MNOxKOn9C6wDIBYJGI4WGeVTj7tjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Nov 5 05:01:43 2025 GMT Not After : Nov 12 05:01:43 2025 GMT Subject: CN=690ada37-1e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:47:61:25:98:d1:07:ca:9a:5a:23:f1:7b: 93:81:e5:6b:8f:7f:84:31:e2:6d:6c:73:1a:c3:a4: f7:85:f6:82:39:e0:61:4c:40:b9:68:cd:c5:6f:fe: 23:5e:ee:2e:da:9e:a6:81:a8:6f:c4:48:da:b8:a3: 43:84:01:9a:06:b9:31:52:72:73:91:f1:0b:ff:74: e8:d9:44:3f:62:5d:58:34:b6:fc:47:76:40:08:77: 6f:67:27:5f:7a:f9:79:73:7f:b1:c2:dc:67:6c:cd: 15:df:16:82:fb:1b:66:f8:20:0d:43:d0:65:16:ef: fe:ef:18:74:4f:c8:29:ff:88:c4:e7:00:27:ab:db: e7:58:14:b3:79:de:d2:f3:ae:14:2f:e7:25:16:d5: 41:78:25:df:86:3e:00:96:51:f2:c4:97:65:9e:b8: 65:f8:cd:77:0d:02:5e:f8:22:b9:71:e2:24:3a:a5: 03:f6:26:24:b3:c9:98:72:f1:d9:18:11:87:f1:ee: 25:a6:b4:1c:dd:5d:bd:11:51:0c:7a:e2:18:13:39: 5c:21:58:81:c5:e3:1e:dd:86:c2:45:83:2f:1d:6e: fe:99:ac:3d:21:9a:7f:7b:92:a5:40:e2:21:f7:bc: 99:11:8f:99:a9:75:4f:46:11:b1:a6:96:53:50:d2: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B9:5E:9D:64:C8:F1:8A:82:E9:03:32:55:CB:57:CD:F4:B6:9E:F3 X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:66:06:4d:a1:e5:84:f9:b2:19:29:1b:33:38:e3:d7:5f:1c: 0a:92:a9:c0:27:ba:d5:1e:3f:d2:1c:4b:96:76:de:e9:1b:4c: 45:37:80:b2:78:c2:bb:55:86:05:90:e2:82:23:7d:01:3c:dc: af:fa:0d:af:d0:35:2f:69:f2:bc:93:99:a7:45:2a:97:d3:8a: 1f:ef:e3:a3:c6:d3:43:5c:8e:ad:56:4f:f3:5c:15:a6:0b:01: 18:ac:52:63:ec:3a:14:cf:94:ad:63:36:61:e0:c1:66:95:bb: a0:19:f3:33:6a:f8:6d:70:00:d9:da:1b:10:d2:62:3f:69:0b: 0b:62:88:aa:9e:e3:5a:85:40:dd:1a:2d:a6:de:97:03:14:bd: af:f0:55:9b:23:75:3d:8f:d2:fb:e8:05:7b:0b:9c:62:8a:e7: e4:35:a2:c2:0a:35:66:ff:53:9d:a3:b1:e3:13:7b:7c:d0:96: 1f:64:21:b5:f2:d3:89:20:b6:e5:c2:cc:8a:14:7e:bf:5b:ce: d0:f3:ce:94:b9:de:59:9b:2a:6a:04:b3:80:b2:7f:33:4a:20: 42:8f:ff:9b:5b:63:0b:e4:3f:6b:fb:59:9e:d3:c7:c7:9c:5f: e4:b0:e2:d8:dd:54:79:77:95:0d:00:dd:30:9b:5f:3e:fa:af: 7c:2e:96:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4 RjU4QTc3RTUwHhcNMjUxMTA1MDUwMTQzWhcNMjUxMTEyMDUwMTQzWjAYMRYwFAYD VQQDEw02OTBhZGEzNy0xZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1NHYSWY0QfKmloj8XuTgeVrj3+EMeJtbHMaw6T3hfaCOeBhTEC5aM3Fb/4j Xu4u2p6mgahvxEjauKNDhAGaBrkxUnJzkfEL/3To2UQ/Yl1YNLb8R3ZACHdvZydf evl5c3+xwtxnbM0V3xaC+xtm+CANQ9BlFu/+7xh0T8gp/4jE5wAnq9vnWBSzed7S 864UL+clFtVBeCXfhj4AllHyxJdlnrhl+M13DQJe+CK5ceIkOqUD9iYks8mYcvHZ GBGH8e4lprQc3V29EVEMeuIYEzlcIViBxeMe3YbCRYMvHW7+maw9IZp/e5KlQOIh 97yZEY+ZqXVPRhGxppZTUNKI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAK5Xp1k yPGKgukDMlXLV830tp7zMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnZgZNoeWE+bIZKRszOOPXXxwKkqnAJ7rVHj/SHEuWdt7pG0xFN4Cy eMK7VYYFkOKCI30BPNyv+g2v0DUvafK8k5mnRSqX04of7+OjxtNDXI6tVk/zXBWm CwEYrFJj7DoUz5StYzZh4MFmlbugGfMzavhtcADZ2hsQ0mI/aQsLYoiqnuNahUDd Gi2m3pcDFL2v8FWbI3U9j9L76AV7C5xiiufkNaLCCjVm/1Odo7HjE3t80JYfZCG1 8tOJILblwsyKFH6/W87Q886Uud5ZmypqBLOAsn8zSiBCj/+bW2ML5D9r+1me08fH nF/ksOLY3VR5d5UNAN0wm18++q98Lpa9 -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:39 2025 by rpki-client