$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: jg17YDjsP8GrCWqw+Q1QFiHJB+g2ZcyxYgfKhQ7NCao= Subject key identifier: 24:77:E5:F0:B0:34:89:7F:E9:51:CE:22:05:82:91:1B:D5:51:3F:0D Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 0909 Signing time: Sun 02 Nov 2025 20:15:47 +0000 Manifest this update: Sun 02 Nov 2025 20:15:47 +0000 Manifest next update: Sun 09 Nov 2025 20:15:47 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: wNsiBWEaHBLxtjxgcKY48Monc5KLyjR98dFUepJUnRU=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Nov 2 20:15:47 2025 GMT Not After : Nov 9 20:15:47 2025 GMT Subject: CN=6907bbf3-9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:72:52:ac:0c:9f:c5:1c:ed:b5:58:00:a5:22: e7:2d:03:6a:ab:84:2c:86:e4:e1:1e:bf:dd:f9:d2: 9b:54:4e:aa:23:73:e0:60:74:2a:07:4f:9f:a9:ff: 24:ac:6d:b1:b5:4c:52:7e:d7:e7:fe:d9:88:b8:a5: c1:33:6b:6d:bc:22:97:9c:31:9a:37:ee:81:f0:6a: 91:6b:73:6d:3a:73:7d:a1:24:16:4b:f2:b8:e8:da: 9e:c6:69:c2:f6:65:04:d7:be:86:da:ff:55:40:5d: 90:0a:2e:0a:dd:98:62:9b:a7:43:9a:c1:52:55:88: ff:a0:05:11:ed:d5:30:b7:d0:06:90:ed:8c:4a:3e: fc:37:2f:6d:44:a0:82:3e:e9:cc:e6:f2:94:71:e6: 84:b1:39:20:cb:c2:1a:49:0e:a0:0b:28:0e:08:c1: 4b:a3:ba:5e:3e:b7:23:d1:82:b6:73:ad:3a:18:56: c2:2c:9c:b4:0c:aa:d5:7f:b6:42:08:30:23:86:36: 28:ca:0e:6c:65:a5:4b:d3:e6:52:7f:d6:9a:45:bb: d1:6a:8d:f6:d8:b4:9b:b0:09:77:f4:1d:58:f0:4e: 5f:e6:2a:45:15:16:66:88:8e:cb:33:2c:06:9b:eb: 60:b0:7c:5c:91:be:9f:9f:56:fe:ec:4d:a4:7b:53: 5f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:E5:F0:B0:34:89:7F:E9:51:CE:22:05:82:91:1B:D5:51:3F:0D X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:19:21:d6:94:07:f6:c0:91:d5:c2:01:39:be:0a:01:07:cd: 5f:b9:74:78:bc:51:14:68:68:ed:19:91:43:66:05:42:a0:15: 75:be:b4:e3:d5:63:46:bf:1b:61:b9:ef:e5:22:a2:ff:bf:76: e3:87:bb:e5:5a:bc:22:88:ea:c2:df:95:d0:33:d9:b4:54:fd: ce:2f:3b:97:61:d7:0c:83:6d:05:f5:29:29:d9:67:39:9a:9d: 9c:c0:48:ae:bb:8f:7c:8e:ca:7e:a2:53:8c:50:6b:b2:3c:c3: c1:ae:67:07:45:91:7d:2f:57:1d:09:9b:d3:59:db:50:9c:89: 12:d2:cf:5b:cb:e7:98:7e:c1:49:74:8a:d8:d0:2b:b3:69:54: d1:c6:f3:92:cb:22:b3:0b:fc:3f:d5:b1:6b:af:06:03:43:8a: fd:e8:01:0a:9e:97:89:66:02:b2:02:ff:02:15:a8:3c:9c:bc: 7e:74:1f:00:6c:32:db:38:f3:18:cf:15:ce:b1:ce:10:6a:b0: f8:6f:6e:e7:b5:cf:fc:c5:4f:54:74:8e:d6:ca:2b:72:bb:c7: cb:c4:74:dc:84:78:02:b8:df:e6:58:09:68:76:de:ea:80:94: 73:b8:fe:45:b0:96:6f:c0:64:52:66:97:98:2f:65:b4:16:10: cf:4c:22:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUxMTAyMjAxNTQ3WhcNMjUxMTA5MjAxNTQ3WjAYMRYwFAYD VQQDEw02OTA3YmJmMy05ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HJSrAyfxRzttVgApSLnLQNqq4QshuThHr/d+dKbVE6qI3PgYHQqB0+fqf8k rG2xtUxSftfn/tmIuKXBM2ttvCKXnDGaN+6B8GqRa3NtOnN9oSQWS/K46NqexmnC 9mUE176G2v9VQF2QCi4K3Zhim6dDmsFSVYj/oAUR7dUwt9AGkO2MSj78Ny9tRKCC PunM5vKUceaEsTkgy8IaSQ6gCygOCMFLo7pePrcj0YK2c606GFbCLJy0DKrVf7ZC CDAjhjYoyg5sZaVL0+ZSf9aaRbvRao322LSbsAl39B1Y8E5f5ipFFRZmiI7LMywG m+tgsHxckb6fn1b+7E2ke1NfOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR35fCw NIl/6VHOIgWCkRvVUT8NMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYGSHWlAf2wJHVwgE5vgoBB81fuXR4vFEUaGjtGZFDZgVCoBV1vrTj 1WNGvxthue/lIqL/v3bjh7vlWrwiiOrC35XQM9m0VP3OLzuXYdcMg20F9Skp2Wc5 mp2cwEiuu498jsp+olOMUGuyPMPBrmcHRZF9L1cdCZvTWdtQnIkS0s9by+eYfsFJ dIrY0CuzaVTRxvOSyyKzC/w/1bFrrwYDQ4r96AEKnpeJZgKyAv8CFag8nLx+dB8A bDLbOPMYzxXOsc4QarD4b27ntc/8xU9UdI7Wyityu8fLxHTchHgCuN/mWAlodt7q gJRzuP5FsJZvwGRSZpeYL2W0FhDPTCLo -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:23 2025 by rpki-client