$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: 2hW+Y3zlLdcYjV9FMWiW7xC5M9X1kO871u9JKuPgRFA= Subject key identifier: 1E:09:56:DC:D6:31:A8:21:FD:CD:80:A8:69:29:8C:A2:FE:19:F2:8E Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 0140 Signing time: Wed 05 Nov 2025 04:35:44 +0000 Manifest this update: Wed 05 Nov 2025 04:35:43 +0000 Manifest next update: Wed 12 Nov 2025 04:35:43 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: S/oFBMQkcvVdr6uyCSCtRjTQXeHK7dW2rk9aG/8ElOI=) 2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) 3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Nov 5 04:35:43 2025 GMT Not After : Nov 12 04:35:43 2025 GMT Subject: CN=690ad420-2875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:b5:d7:88:4e:d1:93:35:0d:e4:51:d0:30: f7:80:de:bb:54:43:e6:47:32:35:cd:70:d8:04:6b: a4:f2:02:dd:bb:bf:3a:12:48:31:6f:fa:02:40:b1: 2a:5d:70:f9:e6:19:41:01:0f:6b:a4:f3:e1:68:e2: 77:df:88:27:f0:10:08:26:96:cf:ed:60:f1:2d:cc: 43:08:4f:6a:62:a1:a2:38:26:55:c7:88:25:78:03: 50:43:48:f8:7c:ac:b5:ac:bf:01:6f:f8:95:0e:7d: cf:f8:24:e8:6c:22:40:fd:a2:2c:78:3e:aa:ed:6d: 83:d0:79:79:f7:f6:94:7b:d8:c7:b7:99:d2:d1:af: 55:c3:a6:c2:b5:4d:69:08:c4:39:71:1a:2f:fb:08: 95:9d:87:cc:bb:a3:b5:c9:62:f5:41:35:fb:b3:8a: 8e:fb:13:b6:64:5c:34:86:03:4c:2c:a1:ae:60:cb: 75:52:bc:64:87:b1:82:5a:71:0c:08:3b:c0:6d:b7: 8d:48:f2:5e:41:0b:e1:88:ca:83:4b:22:b4:fb:a3: 71:ad:eb:91:e1:20:35:44:92:66:52:21:61:74:b1: 87:f8:c7:32:d3:b9:06:9a:23:e2:ec:23:e1:6c:66: 9f:bc:9c:1f:9b:8a:f2:6b:1c:52:8e:46:91:e0:2e: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:56:DC:D6:31:A8:21:FD:CD:80:A8:69:29:8C:A2:FE:19:F2:8E X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:24:6c:3f:0d:ca:f9:cc:e5:84:99:97:b4:cc:c4:8d:29:e5: dd:76:df:aa:cd:86:96:6b:e1:11:b7:9e:9f:e9:a7:08:e8:38: cc:4d:e1:5e:90:27:1b:b3:36:20:80:d6:37:f5:14:b6:23:83: cf:7f:f9:e8:bf:49:45:ab:1f:33:3c:00:d4:b6:87:b7:e4:ab: cd:2f:73:39:0a:88:04:b7:75:4c:c7:03:1b:ac:5a:0c:ea:54: e9:e3:71:92:86:52:91:35:09:fc:db:51:d9:e4:ac:07:83:38: a7:1c:10:d3:b0:09:17:30:82:1d:e5:a2:34:99:99:d3:16:a4: 68:24:db:4e:15:ef:f7:63:8b:3d:39:59:bd:70:b2:3b:c3:8b: a7:80:a6:8e:22:23:8c:56:f2:91:32:0c:b3:b6:36:ed:a6:02: e5:62:20:e0:3b:17:28:4c:54:42:d2:03:55:70:14:e6:a6:b0: 32:c9:2e:fc:6a:74:a9:46:ae:9f:af:de:3e:08:22:6b:b2:c3: c0:de:60:16:bc:dd:5c:b5:7e:ee:92:8e:a4:c4:3d:fb:fc:69: 2a:30:d2:ea:84:a1:b2:0b:04:de:27:66:64:df:47:61:89:42: 6d:98:ca:fe:69:d5:7f:0b:0e:2b:ce:cc:20:d8:d3:cf:a9:a7: f3:bb:b2:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjUxMTA1MDQzNTQzWhcNMjUxMTEyMDQzNTQzWjAYMRYwFAYD VQQDEw02OTBhZDQyMC0yODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvq114hO0ZM1DeRR0DD3gN67VEPmRzI1zXDYBGuk8gLdu786Ekgxb/oCQLEq XXD55hlBAQ9rpPPhaOJ334gn8BAIJpbP7WDxLcxDCE9qYqGiOCZVx4gleANQQ0j4 fKy1rL8Bb/iVDn3P+CTobCJA/aIseD6q7W2D0Hl59/aUe9jHt5nS0a9Vw6bCtU1p CMQ5cRov+wiVnYfMu6O1yWL1QTX7s4qO+xO2ZFw0hgNMLKGuYMt1Urxkh7GCWnEM CDvAbbeNSPJeQQvhiMqDSyK0+6NxreuR4SA1RJJmUiFhdLGH+Mcy07kGmiPi7CPh bGafvJwfm4ryaxxSjkaR4C5eowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4JVtzW Magh/c2AqGkpjKL+GfKOMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+JGw/Dcr5zOWEmZe0zMSNKeXddt+qzYaWa+ERt56f6acI6DjMTeFe kCcbszYggNY39RS2I4PPf/nov0lFqx8zPADUtoe35KvNL3M5CogEt3VMxwMbrFoM 6lTp43GShlKRNQn821HZ5KwHgzinHBDTsAkXMIId5aI0mZnTFqRoJNtOFe/3Y4s9 OVm9cLI7w4ungKaOIiOMVvKRMgyztjbtpgLlYiDgOxcoTFRC0gNVcBTmprAyyS78 anSpRq6fr94+CCJrssPA3mAWvN1ctX7uko6kxD37/GkqMNLqhKGyCwTeJ2Zk30dh iUJtmMr+adV/Cw4rzswg2NPPqafzu7Le -----END CERTIFICATE-----Generated at Thu Nov 6 08:10:49 2025 by rpki-client