$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: MtnzehM62LFR8vtHSSjwg2+nMZ6x5pIgFN7v1GhDmZg= Subject key identifier: 8B:8D:CA:EA:68:8A:83:76:92:2F:00:E9:28:FD:4B:C7:F3:DE:0A:61 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 89 Signing time: Mon 03 Nov 2025 06:35:10 +0000 Manifest this update: Mon 03 Nov 2025 06:35:09 +0000 Manifest next update: Mon 10 Nov 2025 06:35:09 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: Fbu/7/Knj0qfw1jUtkY1SETmOttGg9/ACYhytTdGrZI=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Nov 3 06:35:09 2025 GMT Not After : Nov 10 06:35:09 2025 GMT Subject: CN=69084d1d-1f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:5e:23:b5:d0:73:ce:34:d0:40:81:53:9e: ce:9d:1e:20:90:56:86:6b:ff:bb:9a:53:9c:79:ff: 5f:4e:e0:b4:45:f6:94:cd:53:b0:1c:d3:cd:15:f6: a8:7b:32:c1:d3:a1:48:95:77:71:1c:4d:5c:30:f4: bf:47:0e:21:9a:05:d9:14:35:b1:a1:1c:1d:24:20: d4:18:de:99:31:57:bd:70:6b:bd:9d:ee:36:8d:ec: 77:f2:09:4a:ae:3a:2e:b0:3f:f7:02:56:3c:20:51: 32:dd:68:6b:94:61:8d:ba:fa:ca:95:14:ab:ed:01: 58:8d:e1:14:9e:67:4c:06:fa:21:a7:8f:49:2b:f9: a8:e9:0f:e8:4e:cb:93:8d:81:f0:b4:5d:c9:1e:75: 00:94:22:e2:05:67:2c:12:3f:df:12:54:db:24:fe: 30:18:c1:eb:d1:76:ed:86:b0:68:34:e8:50:fa:a0: 7e:d3:d5:34:a4:ae:97:6a:2b:e4:89:70:0f:50:99: 1c:f9:33:dc:02:a2:b5:3a:83:65:42:b8:d1:de:b4: 4e:77:bb:fa:c5:7f:3e:a1:d4:b5:a5:3d:0c:91:f4: b6:fa:24:bd:c6:f6:24:7b:0f:47:fe:9b:38:08:40: 7b:36:a5:9f:2f:9c:14:d3:5f:21:06:d3:02:f3:ca: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:CA:EA:68:8A:83:76:92:2F:00:E9:28:FD:4B:C7:F3:DE:0A:61 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:af:dd:4a:28:91:23:19:09:2e:6a:e2:ad:b9:98:2f:2f:37: 40:25:19:a6:e7:c9:dc:7f:78:63:11:ed:19:c4:f1:86:f5:04: d2:cf:a6:ef:52:60:be:a7:5f:ad:ae:3c:ca:3f:9c:da:64:fe: b7:bf:2b:2d:cc:1e:30:9b:1b:73:8d:96:fa:7a:d3:38:31:55: 86:7d:df:70:09:fd:d5:e8:36:8e:0c:94:2f:c0:2e:69:fb:f9: 0c:9e:46:d9:c9:5e:3e:70:aa:70:0b:a1:4b:e5:a9:cd:d4:e8: 09:6c:db:a8:b1:2e:c8:f6:5a:5a:3e:bb:72:b0:c0:5c:05:c0: 58:94:66:57:8d:32:ab:70:ad:17:6b:f4:7e:1c:ca:df:bb:ee: ba:9b:0a:c3:04:82:98:d2:d7:a0:ac:41:49:fe:c7:71:96:ca: ab:16:8d:f8:ad:42:41:b2:fe:93:a1:d8:63:49:4e:88:13:ec: 1f:60:f3:4d:fd:e5:b5:48:bd:1a:1d:40:81:30:57:3a:5b:0d: 9e:0a:be:92:35:90:33:da:98:16:00:a0:96:58:3a:14:d3:b7: 9f:8d:e5:88:66:8e:97:7f:92:6d:2e:84:56:05:34:6f:b3:8e: 23:f9:f8:4b:da:3e:97:e2:51:8e:bd:b3:e2:6e:30:94:7b:22: 07:6a:98:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKDA5MDY3ODgyQ0RDMDIwMzQ5MTYxRTA5M0JGMzQ3MzFC M0Y4MjJCRDcwHhcNMjUxMTAzMDYzNTA5WhcNMjUxMTEwMDYzNTA5WjAYMRYwFAYD VQQDEw02OTA4NGQxZC0xZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mJeI7XQc8400ECBU57OnR4gkFaGa/+7mlOcef9fTuC0RfaUzVOwHNPNFfao ezLB06FIlXdxHE1cMPS/Rw4hmgXZFDWxoRwdJCDUGN6ZMVe9cGu9ne42jex38glK rjousD/3AlY8IFEy3WhrlGGNuvrKlRSr7QFYjeEUnmdMBvohp49JK/mo6Q/oTsuT jYHwtF3JHnUAlCLiBWcsEj/fElTbJP4wGMHr0XbthrBoNOhQ+qB+09U0pK6Xaivk iXAPUJkc+TPcAqK1OoNlQrjR3rROd7v6xX8+odS1pT0MkfS2+iS9xvYkew9H/ps4 CEB7NqWfL5wU018hBtMC88pBxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuNyupo ioN2ki8A6Sj9S8fz3gphMB8GA1UdIwQYMBaAFAkGeILNwCA0kWHgk780cxs/givX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GM0QyMkMyQ0U3 NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlEU1JZZUNUdnpSekd6LUNL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GM0QyMkMyQ0U3NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlE U1JZZUNUdnpSekd6LUNLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBor91KKJEjGQkuauKtuZgvLzdAJRmm58ncf3hjEe0ZxPGG9QTSz6bv UmC+p1+trjzKP5zaZP63vystzB4wmxtzjZb6etM4MVWGfd9wCf3V6DaODJQvwC5p +/kMnkbZyV4+cKpwC6FL5anN1OgJbNuosS7I9lpaPrtysMBcBcBYlGZXjTKrcK0X a/R+HMrfu+66mwrDBIKY0tegrEFJ/sdxlsqrFo34rUJBsv6TodhjSU6IE+wfYPNN /eW1SL0aHUCBMFc6Ww2eCr6SNZAz2pgWAKCWWDoU07efjeWIZo6Xf5JtLoRWBTRv s44j+fhL2j6X4lGOvbPibjCUeyIHapjt -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:13 2025 by rpki-client