$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft File: qg08vlkeG_ZBGL9vA2QSX6abipA.mft (raw, json) Hash identifier: Ul0hnsYcA9LCvFhTxId73bIHz146txR6rrnyd6JUNVU= Subject key identifier: 53:A4:52:25:61:AF:76:55:62:75:F8:85:79:4B:86:BD:11:D3:74:6F Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Certificate serial: 06DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft Manifest number: 06D1 Signing time: Tue 04 Nov 2025 22:08:05 +0000 Manifest this update: Tue 04 Nov 2025 22:08:04 +0000 Manifest next update: Tue 11 Nov 2025 22:08:04 +0000 Files and hashes: 1: qg08vlkeG_ZBGL9vA2QSX6abipA.crl (hash: fQmll7s/pKeb3Z1eXfeElcDW3MlugoxzPDqrZYPAOK4=) 2: EE188D209F2B11EDBB1C587AC4F9AE02.roa (hash: xunDUR+vk1rAB3LOb72QA9qMR5Y4O+s76u7aM9CtIVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6E35, serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90 Validity Not Before: Nov 4 22:08:04 2025 GMT Not After : Nov 11 22:08:04 2025 GMT Subject: CN=690a7945-07eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:04:cc:fe:a5:cc:63:e3:14:cc:79:4a:6b: a7:72:e8:79:ba:1b:e6:70:af:c6:fb:d1:0b:ca:c3: c9:d6:ad:90:20:98:db:b9:fe:6c:bb:cf:50:f9:5c: b3:f3:b8:10:44:74:94:00:79:c9:53:1e:20:7b:5d: 06:9a:ec:60:74:62:bd:14:c9:12:49:e5:c3:f5:e0: ba:a9:f3:de:e1:72:7d:f1:6e:fa:29:7f:7d:83:1f: 8c:ae:a1:6c:7f:21:2d:3f:ee:2b:b9:11:96:95:98: aa:fa:5e:7c:61:9a:c2:50:dc:5f:29:78:80:a4:f0: 1b:e9:fa:21:30:07:83:6e:77:3b:b9:89:47:54:78: 08:99:f1:1d:38:2d:6b:21:9b:4a:5d:15:06:9f:ea: 71:4b:d9:9b:ed:23:72:7c:eb:0a:ef:13:1e:10:99: 6d:05:97:40:39:03:ba:d1:3a:65:a3:fd:29:36:67: 5d:30:16:29:83:10:68:78:4e:5d:d7:40:c0:d8:a9: dd:71:9a:80:d8:b2:1d:0d:bf:19:16:ec:75:47:29: 4c:95:31:e0:a0:80:b5:8f:38:f6:74:db:fd:2b:32: ee:5e:96:77:7d:0e:d8:0f:81:b2:9d:94:bd:fc:a6: 31:79:43:a4:1e:2b:66:b8:4f:81:2d:20:5f:9f:59: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A4:52:25:61:AF:76:55:62:75:F8:85:79:4B:86:BD:11:D3:74:6F X509v3 Authority Key Identifier: keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:3e:e7:b4:c0:7e:82:ce:fc:54:c4:8f:cf:7c:df:e3:80: b4:a9:84:52:b3:ce:32:04:de:3b:41:0e:ef:ec:4c:a7:8e:0c: 15:00:ed:0b:be:e0:26:20:c0:14:73:f2:8d:31:36:82:54:1a: d3:d5:b6:ea:9b:0a:0a:39:43:bf:49:43:96:fc:18:d5:59:cb: 32:d1:58:7c:8b:74:c7:83:c7:93:71:f7:f0:56:fa:37:d4:9b: 71:58:f6:bf:5e:79:84:75:b1:44:6a:5d:ee:93:78:5a:32:4d: fe:36:6e:b5:1f:c1:1f:bf:dd:9b:2f:0b:96:9f:ab:f5:27:d6: 2c:70:6c:b8:ab:9b:90:b4:3f:1e:40:88:92:73:0d:72:f7:c4: 29:17:15:a3:0e:10:4c:89:fb:72:42:28:9b:03:36:eb:85:6f: b2:9b:1e:1c:ae:8d:ec:6c:27:cb:b2:00:5a:06:8e:56:b0:b3: dc:17:b2:f8:13:e7:47:5e:9e:79:e6:52:73:88:64:77:2e:b0: 49:ef:cd:46:ab:31:69:36:65:ba:08:a9:72:2d:a4:12:65:02: f9:c8:d1:28:04:1d:9b:91:b4:81:e1:f1:3c:0a:26:d2:d0:93: c0:e6:9f:db:27:fe:72:66:13:85:11:1e:0d:00:b9:dc:43:c8: 76:eb:3f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG QTY5QjhBOTAwHhcNMjUxMTA0MjIwODA0WhcNMjUxMTExMjIwODA0WjAYMRYwFAYD VQQDEw02OTBhNzk0NS0wN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvgEzP6lzGPjFMx5Smuncuh5uhvmcK/G+9ELysPJ1q2QIJjbuf5su89Q+Vyz 87gQRHSUAHnJUx4ge10GmuxgdGK9FMkSSeXD9eC6qfPe4XJ98W76KX99gx+MrqFs fyEtP+4ruRGWlZiq+l58YZrCUNxfKXiApPAb6fohMAeDbnc7uYlHVHgImfEdOC1r IZtKXRUGn+pxS9mb7SNyfOsK7xMeEJltBZdAOQO60Tplo/0pNmddMBYpgxBoeE5d 10DA2KndcZqA2LIdDb8ZFux1RylMlTHgoIC1jzj2dNv9KzLuXpZ3fQ7YD4GynZS9 /KYxeUOkHitmuE+BLSBfn1kEyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOkUiVh r3ZVYnX4hXlLhr0R03RvMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2 RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkUzNS83MjlDQjIzMDc2RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdf WkJHTDl2QTJRU1g2YWJpcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWz7ntMB+gs78VMSPz3zf44C0qYRSs84yBN47QQ7v7EynjgwVAO0L vuAmIMAUc/KNMTaCVBrT1bbqmwoKOUO/SUOW/BjVWcsy0Vh8i3THg8eTcffwVvo3 1JtxWPa/XnmEdbFEal3uk3haMk3+Nm61H8Efv92bLwuWn6v1J9YscGy4q5uQtD8e QIiScw1y98QpFxWjDhBMiftyQiibAzbrhW+ymx4cro3sbCfLsgBaBo5WsLPcF7L4 E+dHXp555lJziGR3LrBJ781GqzFpNmW6CKlyLaQSZQL5yNEoBB2bkbSB4fE8CibS 0JPA5p/bJ/5yZhOFER4NALncQ8h26z+6 -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:59 2025 by rpki-client