$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: Ef6hWeqKAWz3ZRIM0AUHdHGjrUNQtJi7fmcbdkDPzvY= Subject key identifier: 08:D2:44:BB:0D:07:C5:61:24:50:B4:89:2E:A2:D5:00:20:AA:94:C9 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 050D Signing time: Sun 02 Nov 2025 23:34:54 +0000 Manifest this update: Sun 02 Nov 2025 23:34:54 +0000 Manifest next update: Sun 09 Nov 2025 23:34:54 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: jnv4fCc6OZfQSponbjcZAEaO/gaOxUofsZZn8NPOcxQ=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Nov 2 23:34:54 2025 GMT Not After : Nov 9 23:34:54 2025 GMT Subject: CN=6907ea9e-f68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:06:e9:06:26:e0:b0:1d:7e:af:2b:78:e4: b7:54:b1:64:0c:d7:51:39:4a:ba:18:3a:c0:15:3d: cd:4f:41:e8:b7:76:a1:76:8a:66:2b:4e:29:fe:d5: 00:cf:fe:24:d7:9b:ee:22:d7:76:4e:b1:a4:f2:de: f1:ff:69:f1:73:ef:46:92:fb:f6:e4:ab:ef:e8:7d: d7:be:d4:8b:f1:1c:e1:1d:7d:df:25:db:70:01:76: e2:65:4d:f7:d3:2f:8c:b7:c2:5d:98:a0:0f:b1:24: ee:ae:f0:9e:7a:51:3e:ff:ae:7b:9b:22:49:ce:62: 6e:9b:5f:85:b0:b7:89:09:08:9a:d3:48:92:1b:86: fb:83:65:61:75:58:db:ed:0d:31:c4:cd:5b:00:7a: d9:8e:e2:27:74:c7:6f:07:90:12:c3:f5:93:96:b3: d8:06:0a:52:5e:49:04:a2:7d:f1:fb:96:2a:6e:88: f7:4a:f5:30:92:af:9a:ac:a1:78:ad:5d:b0:ed:63: d1:cb:ba:f2:57:c1:c5:25:9d:a3:8d:3a:a9:9d:75: 33:a3:ce:cd:72:23:65:03:94:01:a9:4c:0b:56:cf: 74:da:dd:b1:ce:99:13:63:73:89:51:0f:0b:5a:ab: 5d:6a:8b:9d:e1:c8:f2:3c:e1:b1:9d:2c:f2:0a:f6: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D2:44:BB:0D:07:C5:61:24:50:B4:89:2E:A2:D5:00:20:AA:94:C9 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:72:87:1f:18:85:96:36:04:f4:5d:eb:f2:e3:f5:32:1e:08: 94:1f:43:83:db:2b:5b:8b:0c:52:ae:6c:0c:91:e1:5b:d8:ee: 92:83:d9:ce:1a:35:8d:e6:f7:d5:de:e8:92:27:87:fa:6c:7a: 5d:9d:f5:1a:c0:0f:18:0a:9b:db:01:6d:43:81:71:0f:a1:b5: c7:cf:2b:f7:fd:d1:c8:1e:99:0e:c7:83:20:01:e0:19:1e:9f: 6d:40:a0:66:37:55:28:79:9b:93:e6:a8:cb:4e:89:7a:b4:f5: c1:da:cd:9f:d1:1d:3f:2a:10:3d:63:3e:0e:f1:ad:d1:d8:ff: 40:2d:9a:c1:a9:52:33:3c:ed:32:ac:1a:13:04:9c:e2:1e:a0: 7a:b9:e3:ee:3e:b5:b5:18:81:86:4c:2b:cd:3d:96:5e:bc:c3: ff:6b:47:b9:1e:a3:97:79:01:9d:a3:09:7a:34:c5:8a:eb:89: c0:05:5a:46:60:18:94:c1:fb:65:8b:f0:c6:5e:f7:52:71:4b: d3:76:0b:41:2a:9d:61:ae:42:50:9c:a8:da:da:a5:f7:00:b4: ca:3e:32:a2:ed:d9:73:c1:63:2e:74:cd:37:c8:f6:95:32:90: 09:99:e4:d1:35:d6:7e:9a:56:4e:21:fc:50:37:98:0e:ab:14: b9:56:5b:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUxMTAyMjMzNDU0WhcNMjUxMTA5MjMzNDU0WjAYMRYwFAYD VQQDEw02OTA3ZWE5ZS1mNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBMG6QYm4LAdfq8reOS3VLFkDNdROUq6GDrAFT3NT0Hot3ahdopmK04p/tUA z/4k15vuItd2TrGk8t7x/2nxc+9Gkvv25Kvv6H3XvtSL8RzhHX3fJdtwAXbiZU33 0y+Mt8JdmKAPsSTurvCeelE+/657myJJzmJum1+FsLeJCQia00iSG4b7g2VhdVjb 7Q0xxM1bAHrZjuIndMdvB5ASw/WTlrPYBgpSXkkEon3x+5Yqboj3SvUwkq+arKF4 rV2w7WPRy7ryV8HFJZ2jjTqpnXUzo87NciNlA5QBqUwLVs902t2xzpkTY3OJUQ8L Wqtdaoud4cjyPOGxnSzyCva3XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjSRLsN B8VhJFC0iS6i1QAgqpTJMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJcocfGIWWNgT0Xevy4/UyHgiUH0OD2ytbiwxSrmwMkeFb2O6Sg9nO GjWN5vfV3uiSJ4f6bHpdnfUawA8YCpvbAW1DgXEPobXHzyv3/dHIHpkOx4MgAeAZ Hp9tQKBmN1UoeZuT5qjLTol6tPXB2s2f0R0/KhA9Yz4O8a3R2P9ALZrBqVIzPO0y rBoTBJziHqB6uePuPrW1GIGGTCvNPZZevMP/a0e5HqOXeQGdowl6NMWK64nABVpG YBiUwftli/DGXvdScUvTdgtBKp1hrkJQnKja2qX3ALTKPjKi7dlzwWMudM03yPaV MpAJmeTRNdZ+mlZOIfxQN5gOqxS5Vltj -----END CERTIFICATE-----Generated at Tue Nov 4 08:16:05 2025 by rpki-client