$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: AgA6G8ZClABZycB1L9TyyUdnqwm5bm77NZmFd8gicTU= Subject key identifier: 01:D5:2D:FB:46:A7:E2:1C:80:09:62:4D:04:3A:C0:BB:4E:9E:EF:92 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 36A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 35D4 Signing time: Tue 04 Nov 2025 14:29:15 +0000 Manifest this update: Tue 04 Nov 2025 14:29:14 +0000 Manifest next update: Tue 11 Nov 2025 14:29:14 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: ifcW4YwnxZE9DKf29pzlx/R7uigNq1Gn9CA7BNTcfWA=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13992 (0x36a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Nov 4 14:29:14 2025 GMT Not After : Nov 11 14:29:14 2025 GMT Subject: CN=690a0dba-5915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:15:4e:f1:cb:ce:c6:20:6f:22:26:ae:bf: 41:3e:43:81:b8:0b:dc:da:92:37:e4:47:3c:93:27: bc:13:14:20:0a:12:94:a6:f7:dd:37:69:8a:cb:99: ca:78:32:71:88:00:56:a6:ef:19:b1:21:e8:eb:70: 69:c6:75:29:f6:61:d0:77:0f:32:3b:e1:d6:46:29: 40:0a:44:5f:aa:73:72:5b:32:9f:57:46:56:73:7a: 37:b5:21:38:a6:92:7b:f0:50:cb:af:10:74:f5:1d: 4b:74:33:0c:4c:78:77:30:e8:49:5e:88:0f:ec:56: 84:2b:61:9d:35:6f:97:9f:85:07:24:ee:5b:5b:25: e7:4e:37:4b:a3:6e:f6:5a:a2:60:d0:8f:37:81:6d: b7:1a:51:ee:fc:61:13:93:af:fa:bc:cb:ed:c2:40: 76:6a:62:7e:57:d2:3a:97:d3:eb:66:48:1a:df:24: 40:b3:d3:1f:64:56:81:3c:2d:bb:4f:f8:c2:de:72: b4:23:b9:84:0a:1e:dd:db:33:d3:2e:c6:25:3b:98: a4:89:f3:76:7d:b6:b1:e3:8b:14:b1:41:e4:9b:ee: 23:63:03:b7:51:92:b3:0e:bc:7a:89:7f:fb:91:eb: ff:24:62:a7:16:11:74:bc:14:6e:ff:6b:b8:b7:4a: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D5:2D:FB:46:A7:E2:1C:80:09:62:4D:04:3A:C0:BB:4E:9E:EF:92 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6d:4b:53:39:56:0f:06:dd:9c:e9:e9:65:c8:9a:8b:4b:44: 67:f0:21:97:39:d8:a0:9b:64:bf:45:1b:fb:6a:df:8f:b7:65: 8d:33:fb:f7:9a:bd:44:f3:34:ad:82:1c:bf:90:01:de:53:d8: ad:e2:09:7a:67:f5:a9:80:27:f6:d4:bc:41:87:24:64:3f:83: 26:37:b4:22:04:3e:d0:9f:5f:27:46:4d:21:22:f1:da:6c:8a: ab:2b:a3:f9:3b:f4:0a:d7:8f:db:54:19:27:15:6b:8a:25:6c: 1b:35:d4:94:e2:80:8c:26:d0:a3:cc:8c:0f:d4:e2:e3:1e:b8: 08:9f:e6:d5:07:62:0d:3f:61:2b:1f:b5:58:be:da:dd:a5:74: b3:a6:1d:ba:bd:84:97:c3:d4:ff:8c:1b:a1:51:3d:18:44:98: 85:93:17:57:b5:af:ae:70:97:bc:bb:74:bc:fd:94:0f:82:34: 12:04:1b:67:a1:a0:80:ae:df:21:1c:f2:30:54:38:1f:71:c6: c2:d2:ab:f5:e7:1f:23:c0:9c:d1:59:a4:e7:13:ee:91:a8:21: f0:c8:3f:d8:d2:56:79:a6:9b:2b:44:1e:57:3d:4c:87:99:31: e1:6e:66:e4:54:e6:96:40:87:8a:49:a3:6e:dc:4d:c4:9e:58: 6d:37:9a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUxMTA0MTQyOTE0WhcNMjUxMTExMTQyOTE0WjAYMRYwFAYD VQQDEw02OTBhMGRiYS01OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOwVTvHLzsYgbyImrr9BPkOBuAvc2pI35Ec8kye8ExQgChKUpvfdN2mKy5nK eDJxiABWpu8ZsSHo63BpxnUp9mHQdw8yO+HWRilACkRfqnNyWzKfV0ZWc3o3tSE4 ppJ78FDLrxB09R1LdDMMTHh3MOhJXogP7FaEK2GdNW+Xn4UHJO5bWyXnTjdLo272 WqJg0I83gW23GlHu/GETk6/6vMvtwkB2amJ+V9I6l9PrZkga3yRAs9MfZFaBPC27 T/jC3nK0I7mECh7d2zPTLsYlO5ikifN2fbax44sUsUHkm+4jYwO3UZKzDrx6iX/7 kev/JGKnFhF0vBRu/2u4t0oFIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHVLftG p+IcgAliTQQ6wLtOnu+SMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALbUtTOVYPBt2c6ellyJqLS0Rn8CGXOdigm2S/RRv7at+Pt2WNM/v3 mr1E8zStghy/kAHeU9it4gl6Z/WpgCf21LxBhyRkP4MmN7QiBD7Qn18nRk0hIvHa bIqrK6P5O/QK14/bVBknFWuKJWwbNdSU4oCMJtCjzIwP1OLjHrgIn+bVB2INP2Er H7VYvtrdpXSzph26vYSXw9T/jBuhUT0YRJiFkxdXta+ucJe8u3S8/ZQPgjQSBBtn oaCArt8hHPIwVDgfccbC0qv15x8jwJzRWaTnE+6RqCHwyD/Y0lZ5ppsrRB5XPUyH mTHhbmbkVOaWQIeKSaNu3E3EnlhtN5oC -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:53 2025 by rpki-client