$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json) Hash identifier: ZEXH0rPgl9CcCI8c40p9gNClv3v0pbiRrUtKpDudfi4= Subject key identifier: 1D:63:A3:4E:46:28:E7:F5:6B:28:2F:23:39:55:B8:DF:3E:3E:9E:38 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft Manifest number: B7 Signing time: Wed 05 Nov 2025 06:25:41 +0000 Manifest this update: Wed 05 Nov 2025 06:25:40 +0000 Manifest next update: Wed 12 Nov 2025 06:25:40 +0000 Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: 7K/gJAXZwzvr7kmKWI0D0lbub1/PkLI/4uIs2xZaeeU=) 2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: Nht97ur+ekDVMahSKVw1nXYEmKhTRBnAIrSGC7Jrda0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Nov 5 06:25:40 2025 GMT Not After : Nov 12 06:25:40 2025 GMT Subject: CN=690aede4-ca0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:40:02:53:ae:0f:f1:b5:51:41:31:16:22: 75:64:1b:4c:13:ee:3b:8a:53:50:75:95:eb:4b:aa: f2:9a:dd:1f:0d:b8:41:3e:0b:10:4e:2c:ce:0e:26: e2:60:2c:c3:35:c9:5b:93:2b:95:f6:91:44:c2:96: 75:80:53:ee:07:7a:37:e4:54:48:23:50:34:ca:74: 51:ed:db:bf:57:c1:62:f6:4f:16:8c:59:f4:2e:26: 1d:f3:5b:f2:df:83:ef:8a:43:34:54:4d:5e:a6:b6: 4e:f8:45:82:d3:d9:75:37:39:9a:e0:09:d9:f9:c8: db:7c:e5:e3:08:26:8d:9d:73:96:68:8a:b8:7b:74: 5a:ae:14:fe:b9:14:b2:73:22:ac:0e:44:c8:6c:b5: fa:90:9f:26:53:27:61:98:91:4b:ea:ff:27:27:c8: 72:9c:68:af:96:32:a5:31:a0:2c:0c:52:de:a6:b4: a5:55:53:dc:da:78:d4:1c:58:53:e3:d3:db:21:07: fc:62:0a:68:75:98:61:ab:af:a8:04:a9:96:01:d4: 0c:e0:ad:d2:5d:62:8d:af:8b:ac:4f:88:36:e6:df: a8:b8:2c:2d:9d:a3:e9:5b:3c:7c:a2:3a:a2:32:a2: b3:2c:ee:15:1f:3a:51:a6:0e:27:59:65:78:96:72: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:63:A3:4E:46:28:E7:F5:6B:28:2F:23:39:55:B8:DF:3E:3E:9E:38 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:85:9d:c5:82:5d:d1:21:c4:e2:65:cc:4a:ce:e9:3d:89:7e: 4e:27:90:be:ba:3b:e4:4e:a5:97:ca:d1:b7:c9:c7:51:9f:4e: 2b:1c:c1:01:a0:f9:32:4f:6d:46:bd:da:0d:bd:19:40:90:76: a8:79:38:05:b5:94:02:76:90:06:30:7d:eb:48:6f:fc:66:92: 74:21:6e:07:3a:79:7d:40:fa:45:7f:1f:58:5a:2e:c0:9c:33: 8e:38:93:33:9c:d9:06:8c:f9:06:67:c6:57:2e:c6:45:79:ac: 6d:0e:2f:26:36:9a:7b:e4:d9:e9:97:5e:5b:57:d4:b9:df:59: dd:4b:32:52:4e:cb:65:88:cb:87:10:e4:f7:e7:bf:7a:b4:c9: 40:86:bf:b3:a7:ed:d5:d7:c7:89:07:be:19:ed:14:4c:1e:61: 04:30:f2:24:12:1d:37:b2:97:84:0f:3a:d1:4b:9c:98:6e:bf: 86:08:96:71:01:7c:e0:bf:3e:c7:04:58:2e:aa:e4:80:05:74: 75:1c:19:0b:9c:57:80:cb:bf:6c:ca:37:5b:47:ae:53:d4:e6: 4c:7a:e8:1b:bb:13:2c:45:a4:50:50:90:36:0a:f8:56:e8:6b: a7:58:4e:d3:3d:90:38:64:4f:29:37:cc:ee:9e:a4:0c:25:86: d5:4e:d9:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4REIxMTAvBgNVBAUTKDQwNjE4NjNEREY0M0U3QjNCMTg5RTNDOUMzMjE3QkMx MkJCMzVGMjEwHhcNMjUxMTA1MDYyNTQwWhcNMjUxMTEyMDYyNTQwWjAYMRYwFAYD VQQDEw02OTBhZWRlNC1jYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UtAAlOuD/G1UUExFiJ1ZBtME+47ilNQdZXrS6rymt0fDbhBPgsQTizODibi YCzDNclbkyuV9pFEwpZ1gFPuB3o35FRII1A0ynRR7du/V8Fi9k8WjFn0LiYd81vy 34PvikM0VE1eprZO+EWC09l1Nzma4AnZ+cjbfOXjCCaNnXOWaIq4e3RarhT+uRSy cyKsDkTIbLX6kJ8mUydhmJFL6v8nJ8hynGivljKlMaAsDFLeprSlVVPc2njUHFhT 49PbIQf8YgpodZhhq6+oBKmWAdQM4K3SXWKNr4usT4g25t+ouCwtnaPpWzx8ojqi MqKzLO4VHzpRpg4nWWV4lnLjYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1jo05G KOf1aygvIzlVuN8+Pp44MB8GA1UdIwQYMBaAFEBhhj3fQ+ezsYnjycMhe8Ers18h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RThEQi9CNDhFMjVGNEI3 NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3T3hpZVBKd3lGN3dTdXpY eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RThEQi9CNDhFMjVGNEI3NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3 T3hpZVBKd3lGN3dTdXpYeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXhZ3Fgl3RIcTiZcxKzuk9iX5OJ5C+ujvkTqWXytG3ycdRn04rHMEB oPkyT21GvdoNvRlAkHaoeTgFtZQCdpAGMH3rSG/8ZpJ0IW4HOnl9QPpFfx9YWi7A nDOOOJMznNkGjPkGZ8ZXLsZFeaxtDi8mNpp75Nnpl15bV9S531ndSzJSTstliMuH EOT35796tMlAhr+zp+3V18eJB74Z7RRMHmEEMPIkEh03speEDzrRS5yYbr+GCJZx AXzgvz7HBFguquSABXR1HBkLnFeAy79syjdbR65T1OZMeugbuxMsRaRQUJA2CvhW 6GunWE7TPZA4ZE8pN8zunqQMJYbVTtlw -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:18 2025 by rpki-client