$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: kKLT0Q9qPCHB+ucMgKfJLa5LoKxqFzpLAugEvBLNK48= Subject key identifier: 74:8F:1F:C2:EE:FE:04:D6:77:BB:96:A0:80:20:19:CE:FD:70:FB:12 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: B0 Signing time: Mon 03 Nov 2025 06:05:41 +0000 Manifest this update: Mon 03 Nov 2025 06:05:40 +0000 Manifest next update: Mon 10 Nov 2025 06:05:40 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: 7J8KhBT8upSAyzbGCjKdSS42Vb7FTIWrhOAby6/R754=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Nov 3 06:05:40 2025 GMT Not After : Nov 10 06:05:40 2025 GMT Subject: CN=69084634-de76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:b3:a8:8c:86:fd:11:51:e1:4f:4a:f1:06: 84:71:26:bf:9e:4c:5b:a1:e3:f8:5a:a7:d1:2e:93: 40:8d:f6:d5:96:62:e9:a5:51:77:3e:82:90:08:03: 61:e5:75:ec:a9:47:3f:ad:85:42:6c:26:08:22:ef: 68:fc:15:80:7b:23:f4:b7:e7:75:5e:25:70:54:b2: d1:9f:55:16:f1:47:7e:5e:7e:a6:aa:b7:d8:7f:b0: 9e:fb:10:14:68:08:4f:0f:ad:0e:7c:29:f5:da:4b: 8f:5b:1a:84:c0:44:f5:14:f1:84:e6:58:31:12:dc: bc:29:a7:f9:34:68:d9:30:1b:b1:12:f6:42:74:1c: 61:27:36:b3:b7:12:b3:4f:26:1d:0a:b1:7d:2c:42: e1:da:3b:b9:20:0f:ff:de:9f:de:c8:c2:cd:5f:c4: ba:6b:4c:9b:69:6c:8b:f5:cd:20:fc:57:b8:d6:7e: 64:07:68:28:3a:d0:f6:23:ad:3a:71:df:ce:93:c0: 7f:a5:be:b1:6c:e3:48:a7:7a:f2:a9:be:58:e8:a0: 34:d9:1e:58:29:05:55:bc:e7:5c:be:78:33:b7:f5: dd:ce:5e:50:f4:f5:7c:2e:e9:3b:b5:6e:6c:6f:f5: c0:a0:9e:09:20:6d:7d:74:54:d7:a8:5d:bd:ca:30: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8F:1F:C2:EE:FE:04:D6:77:BB:96:A0:80:20:19:CE:FD:70:FB:12 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:9f:e3:53:b6:1b:9b:c3:4f:e0:f7:0b:f6:9b:29:a8:c1:31: 52:5d:fb:5a:6b:33:28:fb:71:6c:e9:b5:0b:66:a0:25:56:fd: a8:a8:d8:c7:17:10:a8:39:a5:43:a8:55:ea:7e:b5:a8:21:71: 97:1d:c1:11:6c:ee:fc:6f:71:f9:03:fd:92:8f:83:90:6f:a9: b9:6b:fc:76:54:70:bb:9b:40:a9:eb:b3:1d:25:32:a7:40:7d: e0:8a:ed:26:fb:8b:42:04:a1:9f:d4:bc:a9:2e:58:41:95:48: cd:3f:37:1c:64:73:17:e3:42:95:98:c1:73:17:c4:25:24:7d: d8:2e:f9:5d:71:1c:61:af:4a:f4:00:cd:0b:f2:ad:ce:0c:31: 5e:a9:79:1c:10:ab:2b:4a:44:f5:c4:9b:7b:e8:b6:de:4b:a5: 1f:8b:47:3c:0c:c2:52:e8:4b:47:bf:b7:33:56:08:0b:93:60: c1:e6:10:a8:1a:71:11:72:26:15:f5:be:42:99:04:a1:ea:d5: cd:71:ec:7f:c0:b0:e4:7f:be:75:2d:39:ab:9a:cb:0c:6f:f9: 64:5b:41:74:4b:9f:5c:12:b7:bd:7b:55:0b:84:74:3f:00:39: 9a:c1:c8:d1:1f:7a:cc:01:3e:4f:2a:7c:bb:8f:3a:1d:06:0b: 1b:fb:a2:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjUxMTAzMDYwNTQwWhcNMjUxMTEwMDYwNTQwWjAYMRYwFAYD VQQDEw02OTA4NDYzNC1kZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z+zqIyG/RFR4U9K8QaEcSa/nkxboeP4WqfRLpNAjfbVlmLppVF3PoKQCANh 5XXsqUc/rYVCbCYIIu9o/BWAeyP0t+d1XiVwVLLRn1UW8Ud+Xn6mqrfYf7Ce+xAU aAhPD60OfCn12kuPWxqEwET1FPGE5lgxEty8Kaf5NGjZMBuxEvZCdBxhJzaztxKz TyYdCrF9LELh2ju5IA//3p/eyMLNX8S6a0ybaWyL9c0g/Fe41n5kB2goOtD2I606 cd/Ok8B/pb6xbONIp3ryqb5Y6KA02R5YKQVVvOdcvngzt/Xdzl5Q9PV8Luk7tW5s b/XAoJ4JIG19dFTXqF29yjA8OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSPH8Lu /gTWd7uWoIAgGc79cPsSMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgn+NTthubw0/g9wv2mymowTFSXftaazMo+3Fs6bULZqAlVv2oqNjH FxCoOaVDqFXqfrWoIXGXHcERbO78b3H5A/2Sj4OQb6m5a/x2VHC7m0Cp67MdJTKn QH3giu0m+4tCBKGf1LypLlhBlUjNPzccZHMX40KVmMFzF8QlJH3YLvldcRxhr0r0 AM0L8q3ODDFeqXkcEKsrSkT1xJt76LbeS6Ufi0c8DMJS6EtHv7czVggLk2DB5hCo GnERciYV9b5CmQSh6tXNcex/wLDkf751LTmrmssMb/lkW0F0S59cEre9e1ULhHQ/ ADmawcjRH3rMAT5PKny7jzodBgsb+6Jo -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:17 2025 by rpki-client