$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: o2EROYkASvSCU7o6mewyXoUfuxOLSQHkNiwCPO2UfkU= Subject key identifier: 9C:85:52:95:98:70:B5:09:A9:D3:3A:C8:50:EE:C5:36:02:82:99:3E Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 52 Signing time: Mon 03 Nov 2025 07:13:52 +0000 Manifest this update: Mon 03 Nov 2025 07:13:51 +0000 Manifest next update: Mon 10 Nov 2025 07:13:51 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: YLeDhkJ92cyq3R1tDdZGSWII82ZL06fj/AWeb95/7to=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Nov 3 07:13:51 2025 GMT Not After : Nov 10 07:13:51 2025 GMT Subject: CN=69085630-dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:7a:5f:53:09:75:92:e5:31:6e:c2:58:73: 66:b8:f6:ff:b4:a1:0d:00:a2:5e:d6:76:3d:af:28: b1:0f:22:70:a1:49:a4:ce:f1:b0:79:75:03:56:66: 1b:78:00:2e:e3:1f:8c:f4:ad:aa:a9:3f:5a:29:e2: 24:6d:db:35:88:c9:44:d8:f8:ac:e6:4d:21:49:bc: c9:b0:a3:39:b8:32:aa:39:ce:3a:d9:a8:f1:11:0c: 4b:6d:57:39:6e:12:84:cd:40:49:a3:59:97:1f:ab: b3:0f:15:ca:39:6a:55:04:98:5d:5f:e0:d5:28:43: 67:33:4f:2e:95:09:7e:96:a8:ba:ee:21:29:f4:5a: 10:19:c8:7b:c8:a6:83:ed:29:6c:23:07:8f:53:76: bf:c9:9c:37:0a:28:64:c5:e8:47:b9:2c:14:1e:35: 7c:fc:eb:be:02:63:a9:48:da:a6:6a:b3:ed:83:85: 20:97:68:62:ac:53:c5:fc:24:ae:87:4f:1f:90:01: 26:c9:ce:dc:59:15:c6:4c:93:e1:a8:9b:a7:14:47: 38:e1:68:9f:60:3c:42:b7:e5:85:9d:0d:76:e1:3b: 4a:96:f9:37:49:04:2e:87:ce:12:00:24:ee:20:bc: dd:92:c9:8a:3a:d2:a5:fa:89:fe:37:19:cf:4d:b0: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:85:52:95:98:70:B5:09:A9:D3:3A:C8:50:EE:C5:36:02:82:99:3E X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bf:6d:18:e1:1d:f4:ea:5a:42:40:18:4a:da:15:5b:02:c3: 1f:cd:b3:4b:33:65:7e:13:42:11:5d:5c:85:b8:64:81:c9:ab: ea:77:65:96:57:59:f3:84:0f:b1:c7:5c:f5:11:f4:44:9e:df: 9e:aa:8c:62:96:c8:ce:6c:97:45:9f:06:5c:46:1c:0b:7b:a1: 79:e3:4c:a4:5a:11:50:22:e3:88:2b:7d:63:c6:f7:cc:58:4b: 18:b8:ae:e7:33:55:b6:56:60:46:9a:04:53:93:7a:de:a7:44: b2:12:76:68:af:53:2e:2d:5d:5d:53:cb:80:7b:fe:44:61:5e: 0f:c7:c8:ed:b3:fa:27:33:9d:89:f5:9e:49:99:70:4e:11:23: ea:f1:5f:30:3f:07:02:6b:b7:bf:65:7b:00:71:cc:d9:7e:d7: 70:a2:b5:5f:0d:65:78:ab:82:4b:e0:2f:ce:a6:42:30:b7:bb: ad:23:62:d6:b0:78:77:88:33:ae:0a:f3:f0:b5:1e:8b:90:b7: ae:34:f9:90:9a:bf:93:b1:b3:9d:26:36:30:7c:4f:f2:03:74: 5c:00:aa:25:9d:4c:43:ad:4a:42:a6:c1:c4:ce:7b:1c:8a:95: 32:49:2d:57:96:99:21:ba:49:47:60:6f:29:2e:8f:43:54:89: 62:55:c6:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTExMDMwNzEzNTFaFw0yNTExMTAwNzEzNTFaMBgxFjAUBgNV BAMTDTY5MDg1NjMwLWRmZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KHpfUwl1kuUxbsJYc2a49v+0oQ0Aol7Wdj2vKLEPInChSaTO8bB5dQNWZht4 AC7jH4z0raqpP1op4iRt2zWIyUTY+KzmTSFJvMmwozm4Mqo5zjrZqPERDEttVzlu EoTNQEmjWZcfq7MPFco5alUEmF1f4NUoQ2czTy6VCX6WqLruISn0WhAZyHvIpoPt KWwjB49Tdr/JnDcKKGTF6Ee5LBQeNXz8674CY6lI2qZqs+2DhSCXaGKsU8X8JK6H Tx+QASbJztxZFcZMk+Gom6cURzjhaJ9gPEK35YWdDXbhO0qW+TdJBC6HzhIAJO4g vN2SyYo60qX6if43Gc9NsNcVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnIVSlZhw tQmp0zrIUO7FNgKCmT4wHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFy/bRjhHfTqWkJAGEraFVsCwx/Ns0szZX4TQhFdXIW4ZIHJq+p3ZZZX WfOED7HHXPUR9ESe356qjGKWyM5sl0WfBlxGHAt7oXnjTKRaEVAi44grfWPG98xY Sxi4ruczVbZWYEaaBFOTet6nRLISdmivUy4tXV1Ty4B7/kRhXg/HyO2z+icznYn1 nkmZcE4RI+rxXzA/BwJrt79lewBxzNl+13CitV8NZXirgkvgL86mQjC3u60jYtaw eHeIM64K8/C1HouQt640+ZCav5Oxs50mNjB8T/IDdFwAqiWdTEOtSkKmwcTOexyK lTJJLVeWmSG6SUdgbykuj0NUiWJVxrw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:27 2025 by rpki-client