$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft File: Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft (raw, json) Hash identifier: kqKFVF6/B0sFWeTHsFNAoMbG1V9DXBG2GB4M1vfisyo= Subject key identifier: 93:4D:FF:55:25:E3:28:FD:42:8E:C1:CB:FE:9D:83:86:DD:76:6A:7B Authority key identifier: 42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 Certificate issuer: /CN=A918ABAC/serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft Manifest number: 47 Signing time: Wed 05 Nov 2025 07:34:13 +0000 Manifest this update: Wed 05 Nov 2025 07:34:12 +0000 Manifest next update: Wed 12 Nov 2025 07:34:12 +0000 Files and hashes: 1: Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl (hash: wXZzfrOVD11itWopgkBPh2wTaGNO9DFDbUt9AIXHktI=) 2: F3A1F32E51E111F0B810EE3AC4F9AE02.roa (hash: jxu2i0AbbyNEnTbuxTH6+1BC3Aaiwa6vcqioCG/wOIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=42FFE951F9C3904738A92BACA53D08459899E884 Validity Not Before: Nov 5 07:34:12 2025 GMT Not After : Nov 12 07:34:12 2025 GMT Subject: CN=690afdf4-d606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:30:ad:8b:e6:5a:37:a3:0e:0c:7a:79:b9: f0:86:da:82:2f:9a:2e:3f:0e:5a:97:86:fc:c3:99: 64:cf:d3:84:c9:22:a8:13:f2:b8:93:5b:bf:91:86: df:02:b1:75:a2:74:8d:78:1a:94:88:27:1b:56:c3: 47:54:f7:04:33:65:0f:14:62:21:fc:0d:db:53:c2: 0d:e3:d8:3f:d3:87:53:94:12:d9:91:cf:64:74:55: 9f:98:ed:e3:a5:da:97:ea:71:57:55:75:72:6d:9c: b0:ab:54:c6:9b:68:05:71:f6:c8:a0:90:dd:3f:f3: 48:9b:dc:a9:4d:60:cf:98:3c:41:72:12:e5:b5:6e: 80:16:a6:17:6b:1c:48:1e:e1:5e:e8:c0:fc:00:ad: cb:39:89:13:49:b5:b6:46:d6:b6:56:9e:78:82:7b: 1c:cd:15:e5:2c:97:41:69:a8:16:9a:02:c6:a7:29: f6:26:8c:00:26:12:83:b0:64:83:df:b5:28:04:1d: 58:8b:57:df:d7:6d:33:88:38:54:b9:0f:5c:6e:66: 3c:7d:0b:12:3f:8b:75:ca:21:00:e1:02:30:a4:01: a8:d4:ec:cc:62:92:93:be:30:47:98:f9:50:a8:ce: fb:08:da:01:f4:70:d2:2e:a4:bd:6a:0c:ed:3f:e4: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4D:FF:55:25:E3:28:FD:42:8E:C1:CB:FE:9D:83:86:DD:76:6A:7B X509v3 Authority Key Identifier: keyid:42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:42:1a:46:01:fd:24:68:21:3e:16:ba:9a:0e:e3:a9:47:05: 8f:4b:39:11:9d:23:72:1f:83:69:b6:93:ee:ca:19:95:31:b7: 6c:32:d0:10:9b:16:a4:82:b0:26:81:8c:36:ea:cf:c4:a2:8f: 02:fd:18:60:af:18:ef:82:ca:d9:83:db:9c:f5:60:6d:67:e0: c0:75:5a:24:2a:db:41:a0:b4:f9:60:c2:51:77:34:b2:fb:17: f3:93:16:f6:a8:af:7e:db:6c:1d:f4:e6:99:dc:20:52:ed:56: 31:5f:4c:68:c6:0c:0a:07:9e:ab:d6:ec:9a:5c:7d:79:34:5d: e5:f5:1a:3d:8b:77:58:0b:3e:f2:45:6d:90:f3:59:4d:10:23: 7a:c4:50:b9:a6:6b:81:7d:bc:ae:ca:5e:1f:b4:c1:ec:08:a3: 20:c3:4c:94:95:93:74:4b:3d:72:f3:3b:e2:2e:46:f8:78:cf: 7f:72:e2:95:cd:38:5f:7d:38:d4:ef:82:b3:73:13:9b:e9:de: 90:ce:89:dd:80:93:ec:7c:9b:a7:9c:a7:27:43:83:1e:5b:bd: f1:0e:bd:00:2e:4c:be:bb:c9:89:c7:cb:ef:da:d7:84:5c:fc: 7a:ec:d2:85:fc:2e:a2:9c:e6:dc:96:3d:82:f8:38:64:0b:26: 2d:52:df:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoNDJGRkU5NTFGOUMzOTA0NzM4QTkyQkFDQTUzRDA4NDU5 ODk5RTg4NDAeFw0yNTExMDUwNzM0MTJaFw0yNTExMTIwNzM0MTJaMBgxFjAUBgNV BAMTDTY5MGFmZGY0LWQ2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXwzCti+ZaN6MODHp5ufCG2oIvmi4/DlqXhvzDmWTP04TJIqgT8riTW7+Rht8C sXWidI14GpSIJxtWw0dU9wQzZQ8UYiH8DdtTwg3j2D/Th1OUEtmRz2R0VZ+Y7eOl 2pfqcVdVdXJtnLCrVMabaAVx9sigkN0/80ib3KlNYM+YPEFyEuW1boAWphdrHEge 4V7owPwArcs5iRNJtbZG1rZWnniCexzNFeUsl0FpqBaaAsanKfYmjAAmEoOwZIPf tSgEHViLV9/XbTOIOFS5D1xuZjx9CxI/i3XKIQDhAjCkAajU7MxikpO+MEeY+VCo zvsI2gH0cNIupL1qDO0/5BB1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk03/VSXj KP1CjsHL/p2Dht12answHwYDVR0jBBgwFoAUQv/pUfnDkEc4qSuspT0IRZiZ6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzZENEIyOTZDNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL1F2X3BVZm5Ea0VjNHFTdXNwVDBJUlppWjZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXZfcFVmbkRrRWM0cVN1c3BUMElSWmlaNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzZENEIyOTZDNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL1F2X3BVZm5Ea0Vj NHFTdXNwVDBJUlppWjZJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAPBCGkYB/SRoIT4WupoO46lHBY9LORGdI3Ifg2m2k+7KGZUxt2wy0BCb FqSCsCaBjDbqz8SijwL9GGCvGO+CytmD25z1YG1n4MB1WiQq20GgtPlgwlF3NLL7 F/OTFvaor37bbB305pncIFLtVjFfTGjGDAoHnqvW7JpcfXk0XeX1Gj2Ld1gLPvJF bZDzWU0QI3rEULmma4F9vK7KXh+0wewIoyDDTJSVk3RLPXLzO+IuRvh4z39y4pXN OF99ONTvgrNzE5vp3pDOid2Ak+x8m6ecpydDgx5bvfEOvQAuTL67yYnHy+/a14Rc /Hrs0oX8LqKc5tyWPYL4OGQLJi1S3wA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:26 2025 by rpki-client