$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: i3PXB9xJWHA2qT07h0e22sH+sfTl47/fPGEWMM6zg2I= Subject key identifier: 21:9A:48:1A:83:4D:D8:33:98:33:A9:23:E4:A0:6B:68:C6:E5:F3:DF Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0279 Signing time: Mon 03 Nov 2025 01:38:56 +0000 Manifest this update: Mon 03 Nov 2025 01:38:55 +0000 Manifest next update: Mon 10 Nov 2025 01:38:55 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: hd2IQWcwC6sqyAAg5jUFJqhARn3DJqm2C0vUcr7iUJ0=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=) 4: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: rj4BSUozmBkphVBEoUkEwSqqxoFitssfBqyMGi95Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Nov 3 01:38:55 2025 GMT Not After : Nov 10 01:38:55 2025 GMT Subject: CN=690807b0-1308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:ae:a1:f0:31:1a:f3:5b:3d:00:ba:18:4f: 76:bd:33:87:64:b9:f1:80:cb:83:3c:78:b6:ac:19: fd:fc:e9:3c:55:95:fb:a6:4f:4a:cd:8a:b0:53:27: 9d:2f:f6:b5:db:00:db:42:bb:84:a9:3e:2e:fc:e8: aa:d3:c7:dc:9a:36:3a:55:11:fd:ef:91:d5:99:c4: 23:91:2c:97:d4:1e:e0:b1:5e:c5:72:f7:05:38:37: e6:0f:86:61:cf:99:f7:dd:96:67:17:bf:87:0a:98: 58:ed:85:dc:3f:84:47:79:da:39:23:5e:16:8e:37: ab:ac:c6:9b:65:be:9d:c2:e7:03:77:e0:da:bc:88: 35:d7:6c:f5:0a:41:5a:0e:b2:4b:4b:06:07:ba:5c: c3:4d:31:e5:5c:63:8f:82:35:92:f1:ec:8a:cc:f1: c3:f3:ae:28:f4:b7:5f:88:12:31:33:57:a7:5f:4d: 4f:0a:4f:0f:46:20:a5:ee:d2:a0:1d:f7:8c:f8:d3: 54:80:5d:bc:5a:6d:ed:17:9c:75:c1:19:e4:e9:e8: 2b:93:7d:68:9c:9b:e1:30:8e:2b:e0:d7:c2:87:5d: 04:02:31:10:a6:9f:d9:dc:6f:76:f6:3b:ea:1d:38: d7:3a:a5:ee:f1:cd:80:78:86:04:26:69:e5:e5:d9: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:48:1A:83:4D:D8:33:98:33:A9:23:E4:A0:6B:68:C6:E5:F3:DF X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:23:f2:0c:b8:7c:40:fd:a0:26:c5:d2:a6:83:cc:c9:46: 10:9c:88:c6:75:fa:a6:22:fc:f8:68:4a:21:cf:9d:97:7f:1d: d1:13:46:77:30:54:50:3b:23:e2:e7:c4:de:c5:e9:25:d6:af: f4:77:ca:7e:de:5e:60:d9:3e:a5:53:7f:8d:8d:82:51:93:a7: 9a:d1:85:66:4f:f7:d5:66:61:fc:db:e5:5e:d6:48:14:2f:ce: 62:f1:d5:16:0e:8e:d6:98:7f:eb:08:80:4c:e9:e6:8d:bd:a1: 9f:a5:3e:21:cb:5b:9e:70:d0:3f:a3:47:4b:f8:5d:1b:1d:33: c1:1f:4d:2f:57:91:2f:07:83:06:fb:52:5e:b8:83:5f:3e:ac: f0:7b:bf:ac:a7:e4:c4:3b:51:e4:16:f0:19:0f:b7:35:a7:98: 84:9b:a0:b8:79:e7:8b:df:68:af:4c:46:a6:c9:45:ff:8b:d2: e6:da:a5:6f:cb:0a:5c:1b:83:7f:dc:2b:54:a2:a7:ba:99:d6: 7f:74:19:c1:92:a7:3b:89:8d:32:99:39:6d:a6:5c:05:97:c0: e7:da:b8:8b:d7:be:99:69:a4:69:44:f4:8b:c7:12:3a:b3:af: 57:74:6a:24:e4:c8:6f:58:7a:4b:7d:1d:f1:74:bf:23:eb:38: ab:d4:f5:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUxMTAzMDEzODU1WhcNMjUxMTEwMDEzODU1WjAYMRYwFAYD VQQDEw02OTA4MDdiMC0xMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNmuofAxGvNbPQC6GE92vTOHZLnxgMuDPHi2rBn9/Ok8VZX7pk9KzYqwUyed L/a12wDbQruEqT4u/Oiq08fcmjY6VRH975HVmcQjkSyX1B7gsV7FcvcFODfmD4Zh z5n33ZZnF7+HCphY7YXcP4RHedo5I14WjjerrMabZb6dwucDd+DavIg112z1CkFa DrJLSwYHulzDTTHlXGOPgjWS8eyKzPHD864o9LdfiBIxM1enX01PCk8PRiCl7tKg HfeM+NNUgF28Wm3tF5x1wRnk6egrk31onJvhMI4r4NfCh10EAjEQpp/Z3G929jvq HTjXOqXu8c2AeIYEJmnl5dkRMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGaSBqD TdgzmDOpI+Sga2jG5fPfMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqpyPyDLh8QP2gJsXSpoPMyUYQnIjGdfqmIvz4aEohz52Xfx3RE0Z3 MFRQOyPi58Texekl1q/0d8p+3l5g2T6lU3+NjYJRk6ea0YVmT/fVZmH82+Ve1kgU L85i8dUWDo7WmH/rCIBM6eaNvaGfpT4hy1uecNA/o0dL+F0bHTPBH00vV5EvB4MG +1JeuINfPqzwe7+sp+TEO1HkFvAZD7c1p5iEm6C4eeeL32ivTEamyUX/i9Lm2qVv ywpcG4N/3CtUoqe6mdZ/dBnBkqc7iY0ymTltplwFl8Dn2riL176ZaaRpRPSLxxI6 s69XdGok5MhvWHpLfR3xdL8j6zir1PW7 -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:24 2025 by rpki-client