$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft File: qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json) Hash identifier: aBMJpRI83Lx9SZRp00E3ITXIxQ3NBowHcUb5UXUqstY= Subject key identifier: F2:05:FF:23:9D:FE:F6:5E:57:31:E1:DC:4F:19:A9:6B:FF:F1:35:93 Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD Certificate issuer: /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft Manifest number: 34D6 Signing time: Tue 04 Nov 2025 15:18:42 +0000 Manifest this update: Tue 04 Nov 2025 15:18:41 +0000 Manifest next update: Tue 11 Nov 2025 15:18:41 +0000 Files and hashes: 1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: 7GI1VQDiHl3w024XfxlUy+V54kr3ncqX54gcHoNXIQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD Validity Not Before: Nov 4 15:18:41 2025 GMT Not After : Nov 11 15:18:41 2025 GMT Subject: CN=690a1951-47b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9c:1c:36:bf:43:1e:c9:e5:f3:c6:8a:b1:6d: f2:00:53:a9:45:83:59:b8:84:65:fa:b8:09:82:29: ef:0b:db:9a:40:0a:c7:42:b8:0b:21:a8:99:e2:90: 43:62:3e:e3:5f:4a:3d:28:3b:f8:c2:34:bf:95:96: c7:f3:14:ee:fa:20:c4:d7:5c:88:70:1b:44:2e:0a: d9:97:07:cd:50:ca:53:56:dd:98:82:b1:6b:fa:ba: 95:28:78:6e:ee:f4:04:fb:ba:c7:27:83:3f:9a:2f: 06:04:fe:35:cf:c0:e4:25:30:bb:1d:b7:c6:7f:bf: c8:87:5a:67:31:38:fb:77:c6:a9:24:c7:b9:87:24: 45:00:e2:ad:6d:04:2c:42:7f:41:6e:2c:f5:ae:91: da:32:8f:eb:8c:75:ff:42:70:15:78:18:16:db:ff: 42:70:98:57:a4:98:48:ae:37:89:2b:43:c0:c4:4c: 89:91:d7:ac:d7:f6:ed:4c:48:e8:6a:d1:90:55:58: d8:1f:b2:ba:ab:fe:e1:45:74:ae:ae:f1:5a:3d:aa: 1f:3e:4f:5b:7c:96:fb:61:d1:44:30:77:d3:3a:e3: eb:8c:e6:51:99:f2:25:25:56:9a:b6:32:fc:a4:42: d0:9c:94:da:76:2c:0c:ea:6b:4d:42:ca:6a:41:0c: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:05:FF:23:9D:FE:F6:5E:57:31:E1:DC:4F:19:A9:6B:FF:F1:35:93 X509v3 Authority Key Identifier: keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c3:ec:5b:64:39:b4:f1:2e:7d:56:8b:c7:60:45:7c:99:dd: 51:76:7c:9b:f8:6e:94:af:77:02:9b:dc:a7:cb:0e:cf:4d:f9: b6:c4:db:b8:7c:0f:51:74:57:49:7b:99:6b:0c:e2:47:39:27: e1:a7:5a:9f:72:4b:68:11:b4:bd:d2:f0:ce:e6:b4:e1:8e:d7: ec:ac:d3:73:c2:1f:a2:e1:5c:13:98:18:a1:7f:ce:55:c2:ab: 0d:be:5f:e3:45:6a:35:17:d9:da:cb:a6:0a:64:4b:fa:e1:ae: bd:f1:1c:d9:49:67:81:c7:0a:be:ac:c9:7a:43:2f:00:49:de: 45:8b:c3:c5:44:7d:a2:ff:e4:49:4a:bf:33:d7:c4:42:31:d2: 50:61:bf:40:93:c4:e8:aa:0a:ed:dc:42:2e:de:3d:b9:9e:fa: cd:7e:b8:20:76:e9:df:db:c5:4b:1d:1e:ad:37:00:b9:9b:02: 97:ba:f6:f6:3b:b3:15:bf:a8:f4:80:82:b8:10:1a:20:fb:58: fd:ec:8f:5d:82:30:62:7d:ca:31:b9:5a:eb:76:8f:0e:fb:83: e2:13:e0:dc:6d:f6:5c:85:de:11:c5:b8:d9:bd:0a:29:e3:cf: ca:aa:88:d9:6c:31:40:78:09:a9:14:41:4f:76:af:30:95:3d: b8:02:ae:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FDQ0ExMTAvBgNVBAUTKEE5OUY2Njk4NjkyNzIwMTE1NDk2Q0I0NTk3MDJDNDNB REM0OEQ2QUQwHhcNMjUxMTA0MTUxODQxWhcNMjUxMTExMTUxODQxWjAYMRYwFAYD VQQDEw02OTBhMTk1MS00N2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JwcNr9DHsnl88aKsW3yAFOpRYNZuIRl+rgJginvC9uaQArHQrgLIaiZ4pBD Yj7jX0o9KDv4wjS/lZbH8xTu+iDE11yIcBtELgrZlwfNUMpTVt2YgrFr+rqVKHhu 7vQE+7rHJ4M/mi8GBP41z8DkJTC7HbfGf7/Ih1pnMTj7d8apJMe5hyRFAOKtbQQs Qn9Bbiz1rpHaMo/rjHX/QnAVeBgW2/9CcJhXpJhIrjeJK0PAxEyJkdes1/btTEjo atGQVVjYH7K6q/7hRXSurvFaPaofPk9bfJb7YdFEMHfTOuPrjOZRmfIlJVaatjL8 pELQnJTadiwM6mtNQspqQQwKSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIF/yOd /vZeVzHh3E8ZqWv/8TWTMB8GA1UdIwQYMBaAFKmfZphpJyARVJbLRZcCxDrcSNat MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUNDQS82MDg2RDc4MjFE QTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklCRlVsc3RGbHdMRU90eEkx cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FaOW1tR2tuSUJGVWxzdEZsd0xFT3R4STFxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUNDQS82MDg2RDc4MjFEQTkxMUUyQkIxQjRFQTQwOEIwMkNEMi9xWjltbUdrbklC RlVsc3RGbHdMRU90eEkxcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPw+xbZDm08S59VovHYEV8md1Rdnyb+G6Ur3cCm9ynyw7PTfm2xNu4 fA9RdFdJe5lrDOJHOSfhp1qfcktoEbS90vDO5rThjtfsrNNzwh+i4VwTmBihf85V wqsNvl/jRWo1F9nay6YKZEv64a698RzZSWeBxwq+rMl6Qy8ASd5Fi8PFRH2i/+RJ Sr8z18RCMdJQYb9Ak8Toqgrt3EIu3j25nvrNfrggdunf28VLHR6tNwC5mwKXuvb2 O7MVv6j0gIK4EBog+1j97I9dgjBifcoxuVrrdo8O+4PiE+DcbfZchd4RxbjZvQop 48/KqojZbDFAeAmpFEFPdq8wlT24Aq61 -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:11 2025 by rpki-client