$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: B7v02PMgWajMsL2cVJHdq52YtRfMhFH27/3bonK9UJc= Subject key identifier: B2:2C:FD:48:A3:7E:7E:28:00:AE:03:60:5C:64:6F:F1:3D:BD:F2:22 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0CB0 Signing time: Tue 04 Nov 2025 18:17:07 +0000 Manifest this update: Tue 04 Nov 2025 18:17:06 +0000 Manifest next update: Tue 11 Nov 2025 18:17:06 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: Y2NYMeZHWymjPqrfQZb0p3xllh6VqXlTh1njvs4W+c4=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Nov 4 18:17:06 2025 GMT Not After : Nov 11 18:17:06 2025 GMT Subject: CN=690a4322-0453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:22:1b:a8:86:30:df:d1:2b:16:f5:65:0d: 00:7c:4b:a4:62:6b:39:6b:ac:79:1a:e5:10:6e:3f: bb:8e:3e:32:e9:5d:81:29:32:08:32:0b:f6:b2:c4: 86:c6:52:a0:a9:ca:5e:09:41:78:67:f7:4a:88:94: a9:5e:09:0e:36:7b:27:e0:20:e8:56:76:85:fb:7e: 7e:67:b0:ee:4f:fb:9e:8d:5d:b2:ca:14:69:f3:d0: 4f:72:b3:b0:4e:c2:c0:1f:ea:f9:26:66:62:f9:f6: b8:cc:8e:8b:ca:38:54:e7:0a:2a:f9:68:29:a3:a2: 53:00:c2:3c:25:90:27:72:50:b8:a7:ab:6e:bc:af: e0:77:20:c7:76:81:07:02:3b:c8:b3:c6:e3:a6:ac: cb:75:06:37:27:a9:a7:f7:e2:59:ed:1a:1f:16:7e: ef:10:58:e0:88:d2:ab:74:31:c7:8d:f1:4b:4a:42: 47:44:85:1e:6e:c3:df:9a:2c:17:7e:89:45:5a:b6: d5:b9:2c:5c:ed:9a:b5:68:81:db:38:90:26:79:ff: ff:e5:e9:b0:13:32:0a:8f:07:c2:d2:9c:e8:75:5b: 7e:1f:18:0d:ab:88:4b:fa:c8:3a:94:72:88:7f:2b: c4:4b:03:cb:82:b8:b3:08:55:4d:c6:cf:c4:c6:51: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:FD:48:A3:7E:7E:28:00:AE:03:60:5C:64:6F:F1:3D:BD:F2:22 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6b:10:b5:79:3e:f6:f0:05:2e:ab:a5:be:25:b8:c6:c5:e2: df:c8:e3:83:52:9a:f3:bf:a5:d4:96:f1:2c:47:94:d6:12:0b: 4c:dd:fb:45:a8:85:a6:58:59:b0:83:fd:6e:03:6d:1f:de:d9: a5:fc:9b:17:79:af:11:34:dd:f4:1f:6a:bd:b7:a7:40:f8:c4: d0:6a:30:f9:68:87:78:06:9f:b8:f9:cb:30:7f:25:e4:af:f6: d9:2e:91:d6:2c:d5:16:f3:cf:c9:8a:46:fb:86:a3:01:00:10: 21:68:c0:29:d5:f4:c5:27:40:f0:70:29:e4:0d:80:7d:07:5c: 8c:ff:49:0f:72:40:9d:9c:0e:be:df:e6:8e:16:df:b2:a8:86: cb:2f:b1:02:39:d2:29:e7:30:84:61:31:5e:c8:0e:af:04:c1: df:79:fc:8f:92:66:6d:d9:33:d8:96:d0:66:c8:db:1c:03:72: 15:ae:e6:53:5a:c3:12:4f:5d:1d:6e:f7:b8:7a:2c:84:29:69: 07:73:1d:f9:0a:1b:2a:e1:40:ad:35:4b:38:94:67:46:0a:d9: 02:dd:88:a5:12:bf:a4:89:5e:65:36:4f:88:2c:ea:ee:2f:1d: ef:56:06:d3:d1:af:84:4d:44:d0:9e:ff:fa:67:be:04:8f:67: df:e8:f0:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUxMTA0MTgxNzA2WhcNMjUxMTExMTgxNzA2WjAYMRYwFAYD VQQDEw02OTBhNDMyMi0wNDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0oiG6iGMN/RKxb1ZQ0AfEukYms5a6x5GuUQbj+7jj4y6V2BKTIIMgv2ssSG xlKgqcpeCUF4Z/dKiJSpXgkONnsn4CDoVnaF+35+Z7DuT/uejV2yyhRp89BPcrOw TsLAH+r5JmZi+fa4zI6LyjhU5woq+Wgpo6JTAMI8JZAnclC4p6tuvK/gdyDHdoEH AjvIs8bjpqzLdQY3J6mn9+JZ7RofFn7vEFjgiNKrdDHHjfFLSkJHRIUebsPfmiwX folFWrbVuSxc7Zq1aIHbOJAmef//5emwEzIKjwfC0pzodVt+HxgNq4hL+sg6lHKI fyvESwPLgrizCFVNxs/ExlEC0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIs/Uij fn4oAK4DYFxkb/E9vfIiMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLaxC1eT728AUuq6W+JbjGxeLfyOODUprzv6XUlvEsR5TWEgtM3ftF qIWmWFmwg/1uA20f3tml/JsXea8RNN30H2q9t6dA+MTQajD5aId4Bp+4+cswfyXk r/bZLpHWLNUW88/Jikb7hqMBABAhaMAp1fTFJ0DwcCnkDYB9B1yM/0kPckCdnA6+ 3+aOFt+yqIbLL7ECOdIp5zCEYTFeyA6vBMHfefyPkmZt2TPYltBmyNscA3IVruZT WsMST10dbve4eiyEKWkHcx35Chsq4UCtNUs4lGdGCtkC3YilEr+kiV5lNk+ILOru Lx3vVgbT0a+ETUTQnv/6Z74Ej2ff6PBs -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:23 2025 by rpki-client