$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json) Hash identifier: 80GsU9DzOvmDvmxOCy/150BXgv3GLo+RAEokOhKDWCU= Subject key identifier: 85:F0:A4:D3:F1:EE:17:94:A1:F5:07:3C:BE:C3:E2:4D:A5:D8:FE:46 Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Certificate serial: 1A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft Manifest number: 1A3D Signing time: Tue 04 Nov 2025 16:27:11 +0000 Manifest this update: Tue 04 Nov 2025 16:27:11 +0000 Manifest next update: Tue 11 Nov 2025 16:27:11 +0000 Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: pu352HbhLcRL1qCiHva+Hn2lrXdfg7+QFjoH8Hv1mLk=) 2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6724 (0x1a44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC Validity Not Before: Nov 4 16:27:11 2025 GMT Not After : Nov 11 16:27:11 2025 GMT Subject: CN=690a295f-decc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:b0:03:8b:d3:fa:41:54:7b:9d:4c:26:01: 1b:97:83:f7:69:be:61:9a:84:6b:28:f9:09:54:e9: 3c:2c:1b:b5:54:26:0f:8c:a7:ff:b9:8c:30:8d:03: 62:32:52:ab:b9:86:3a:61:fb:97:b3:c7:d5:04:eb: de:11:d2:cd:65:f6:e0:ad:fa:30:7d:9e:21:33:51: 73:7d:4a:c7:12:f0:63:71:56:cb:e3:f3:de:c4:48: 4c:29:c8:32:78:e2:ab:6a:8d:47:61:4c:03:ee:89: d2:02:b0:34:fc:4e:d2:aa:b8:ae:11:4e:1b:08:c8: ca:26:12:cb:a1:94:13:6a:81:2c:9e:ab:25:27:6a: 4a:54:3c:11:80:e4:03:6e:98:80:54:6b:56:7e:8c: 82:ba:16:8d:ca:ff:24:04:1e:18:b9:77:d4:63:aa: 33:db:fb:02:2e:9b:93:24:18:17:69:16:12:e3:ec: 7a:46:0b:29:71:4d:01:35:8f:27:53:28:80:b4:45: ee:57:19:37:e0:bf:f0:e7:01:dd:a3:8a:81:d5:fc: 5e:7e:55:19:e7:4b:08:53:ea:d5:a9:36:37:7d:e7: 60:63:5c:fd:2f:8e:37:fa:46:80:b3:61:65:62:9e: ec:61:81:7b:a5:b4:b4:e9:1f:5e:fc:81:6b:29:cc: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:A4:D3:F1:EE:17:94:A1:F5:07:3C:BE:C3:E2:4D:A5:D8:FE:46 X509v3 Authority Key Identifier: keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:e8:e2:25:0a:fc:de:2a:81:88:ac:62:18:b2:b1:a7:50: cb:e0:01:55:c0:2e:4f:72:76:c6:93:e4:ea:e9:fe:5a:1b:22: 60:7c:27:1d:9b:3e:04:08:51:09:59:fe:7d:dd:51:57:e3:d9: d8:46:46:e3:62:35:84:9b:8c:14:29:d0:7b:68:5a:24:e8:6d: a4:df:f1:75:96:6e:19:1a:85:e9:96:01:bc:91:32:3e:ed:f9: 5b:f3:ff:64:4f:d4:d7:ac:f9:14:aa:69:3a:1c:01:78:14:e7: f1:1f:30:6a:5c:ab:ed:a0:1b:05:2e:b5:79:4a:7d:25:75:62: ac:73:21:49:99:25:fd:eb:01:5d:2b:3d:83:00:66:e3:3d:24: e3:d8:91:ce:64:0b:f5:e7:57:81:93:e4:14:74:af:9b:12:96: a1:4b:49:e2:83:01:ab:58:79:70:66:e6:07:53:58:aa:a2:ad: b5:0e:40:4e:48:ae:9d:11:d4:75:dd:48:d4:fd:62:6c:7a:82: c5:8e:fb:16:aa:c2:b7:33:f8:d1:a9:fc:b6:80:16:28:ba:e9: 26:1a:22:61:15:f3:b5:62:2b:47:cc:a5:fc:80:c7:dd:d9:e3: 52:03:ff:61:98:39:74:31:ce:23:07:ac:de:eb:8b:dd:84:dd: 63:3f:6b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCQTIxMTAvBgNVBAUTKEFBNjMyREM0MDJBNzAyRjc5QTlDMzY5M0U5Q0M0NkM1 OTgxRUU4RUMwHhcNMjUxMTA0MTYyNzExWhcNMjUxMTExMTYyNzExWjAYMRYwFAYD VQQDEw02OTBhMjk1Zi1kZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsewA4vT+kFUe51MJgEbl4P3ab5hmoRrKPkJVOk8LBu1VCYPjKf/uYwwjQNi MlKruYY6YfuXs8fVBOveEdLNZfbgrfowfZ4hM1FzfUrHEvBjcVbL4/PexEhMKcgy eOKrao1HYUwD7onSArA0/E7SqriuEU4bCMjKJhLLoZQTaoEsnqslJ2pKVDwRgOQD bpiAVGtWfoyCuhaNyv8kBB4YuXfUY6oz2/sCLpuTJBgXaRYS4+x6RgspcU0BNY8n UyiAtEXuVxk34L/w5wHdo4qB1fxeflUZ50sIU+rVqTY3fedgY1z9L443+kaAs2Fl Yp7sYYF7pbS06R9e/IFrKcxA8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXwpNPx 7heUofUHPL7D4k2l2P5GMB8GA1UdIwQYMBaAFKpjLcQCpwL3mpw2k+nMRsWYHujs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREJBMi9ENjk1NDQxMjU1 M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2ZWFuRGFUNmN4R3haZ2U2 T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FtTXR4QUtuQXZlYW5EYVQ2Y3hHeFpnZTZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REJBMi9ENjk1NDQxMjU1M0IxMUU3QUEwRURFMkFDNEY5QUUwMi9xbU10eEFLbkF2 ZWFuRGFUNmN4R3haZ2U2T3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMV+jiJQr83iqBiKxiGLKxp1DL4AFVwC5PcnbGk+Tq6f5aGyJgfCcd mz4ECFEJWf593VFX49nYRkbjYjWEm4wUKdB7aFok6G2k3/F1lm4ZGoXplgG8kTI+ 7flb8/9kT9TXrPkUqmk6HAF4FOfxHzBqXKvtoBsFLrV5Sn0ldWKscyFJmSX96wFd Kz2DAGbjPSTj2JHOZAv151eBk+QUdK+bEpahS0nigwGrWHlwZuYHU1iqoq21DkBO SK6dEdR13UjU/WJseoLFjvsWqsK3M/jRqfy2gBYouukmGiJhFfO1YitHzKX8gMfd 2eNSA/9hmDl0Mc4jB6ze64vdhN1jP2vX -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:27 2025 by rpki-client