$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: 10h3w5phJGnhEFTYmppBs61HWnuEawv5E3jsS0+W5Zg= Subject key identifier: D9:F8:A1:87:BE:91:50:46:76:5E:3B:F5:10:B7:CA:71:43:AF:64:8E Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1E14 Signing time: Tue 04 Nov 2025 16:11:33 +0000 Manifest this update: Tue 04 Nov 2025 16:11:32 +0000 Manifest next update: Tue 11 Nov 2025 16:11:32 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: V1S8Xx9176tumWnEgrwKEt771xk+82iXJnMRFMgAGWs=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7710 (0x1e1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Nov 4 16:11:32 2025 GMT Not After : Nov 11 16:11:32 2025 GMT Subject: CN=690a25b4-ea3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:46:f4:b1:38:31:44:0d:e5:93:b6:99:09: 96:cd:0f:58:20:8b:99:6a:ab:ba:f2:0e:9c:cf:4a: d7:ec:c8:22:a2:6f:d3:e5:36:cb:6c:06:f9:ba:8e: d1:06:79:56:8f:e6:e4:af:c0:1b:ce:c9:d1:75:b2: e9:c0:d5:5c:02:75:11:65:3c:77:35:98:fb:85:c5: da:20:ea:25:d6:59:5c:7f:ab:d4:6f:38:65:71:76: ff:c0:62:fc:f3:95:b5:b7:09:3c:60:56:7c:0a:40: b1:2b:fa:76:a9:01:86:23:fb:83:d5:4a:da:a9:39: 7c:ab:26:d8:25:f3:d8:53:41:37:04:e1:40:d0:81: b5:18:3c:31:87:59:f6:9b:61:ff:99:48:84:8c:fd: 6d:41:dc:b3:bd:8c:26:4f:57:a0:12:e1:09:a0:48: 4d:b1:dd:4d:fb:e3:91:3e:69:77:f5:8b:c2:a3:ff: e7:d2:cb:98:9e:25:c9:bb:9d:e2:e9:09:31:c4:96: b5:1c:a8:6b:35:fc:a7:76:2d:63:08:86:ef:c4:86: df:69:72:bc:f7:8f:d3:46:3a:63:38:30:78:22:32: 88:d6:02:b8:e3:a6:58:db:af:cf:38:2b:d9:79:ae: 9a:84:ff:66:b6:c0:f4:ae:33:fb:67:4a:e6:db:8f: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:A1:87:BE:91:50:46:76:5E:3B:F5:10:B7:CA:71:43:AF:64:8E X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:44:bd:b4:a8:cb:be:0f:9c:e5:45:6a:3d:4d:f1:b5:07:c8: 5f:35:0b:76:d1:c6:2d:25:b9:28:3a:13:39:69:0a:30:a9:54: 15:a1:7a:59:b8:28:32:bc:97:88:54:41:2c:99:2d:74:90:62: 02:9c:22:23:76:a5:9f:2e:82:7c:09:b5:3c:a2:ba:2f:90:4b: a5:bb:ad:5c:08:c2:e3:28:f4:71:ec:04:e5:ab:4f:37:8a:a3: 52:42:3d:c9:d7:64:e8:af:20:c4:e9:5b:46:7a:3f:3a:62:7f: eb:9d:75:d6:7c:d1:18:9c:a8:9e:4b:29:48:d8:34:b6:98:75: 28:a3:52:a9:ba:02:52:72:f2:7a:bf:27:66:a0:ba:b2:c7:03: ed:40:a6:9f:ca:22:c9:c6:8a:6c:23:05:00:af:74:ee:0d:e8: ae:84:01:f6:5b:4b:70:5a:5b:b7:c4:01:a9:ba:3f:15:82:e4: 69:23:6d:9c:56:6c:cd:66:46:3e:01:a2:37:64:1a:e0:f3:94: fa:14:15:95:27:b4:63:2f:f0:09:1d:98:00:db:dc:a6:c1:38: db:e7:bb:8e:af:e5:46:68:a6:a0:57:36:99:49:c6:ef:45:c5: 24:c6:0e:14:96:7c:17:6a:c6:b5:ad:0f:11:d8:21:13:55:8c: 7c:fb:cf:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMTA0MTYxMTMyWhcNMjUxMTExMTYxMTMyWjAYMRYwFAYD VQQDEw02OTBhMjViNC1lYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27BG9LE4MUQN5ZO2mQmWzQ9YIIuZaqu68g6cz0rX7Mgiom/T5TbLbAb5uo7R BnlWj+bkr8AbzsnRdbLpwNVcAnURZTx3NZj7hcXaIOol1llcf6vUbzhlcXb/wGL8 85W1twk8YFZ8CkCxK/p2qQGGI/uD1UraqTl8qybYJfPYU0E3BOFA0IG1GDwxh1n2 m2H/mUiEjP1tQdyzvYwmT1egEuEJoEhNsd1N++ORPml39YvCo//n0suYniXJu53i 6QkxxJa1HKhrNfyndi1jCIbvxIbfaXK894/TRjpjODB4IjKI1gK446ZY26/POCvZ ea6ahP9mtsD0rjP7Z0rm24+1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn4oYe+ kVBGdl479RC3ynFDr2SOMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClRL20qMu+D5zlRWo9TfG1B8hfNQt20cYtJbkoOhM5aQowqVQVoXpZ uCgyvJeIVEEsmS10kGICnCIjdqWfLoJ8CbU8orovkEulu61cCMLjKPRx7ATlq083 iqNSQj3J12ToryDE6VtGej86Yn/rnXXWfNEYnKieSylI2DS2mHUoo1KpugJScvJ6 vydmoLqyxwPtQKafyiLJxopsIwUAr3TuDeiuhAH2W0twWlu3xAGpuj8VguRpI22c VmzNZkY+AaI3ZBrg85T6FBWVJ7RjL/AJHZgA29ymwTjb57uOr+VGaKagVzaZScbv RcUkxg4UlnwXasa1rQ8R2CETVYx8+8+4 -----END CERTIFICATE-----Generated at Wed Nov 5 01:04:27 2025 by rpki-client