$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json) Hash identifier: vHzORQ2uholRK1P9/0OvRgHglo1DMEnwR4NoThj6fcM= Subject key identifier: 4C:B4:5E:01:E4:7C:20:FD:56:FC:48:A7:53:16:78:5D:E3:64:D3:59 Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft Manifest number: 01A7 Signing time: Wed 05 Nov 2025 03:22:50 +0000 Manifest this update: Wed 05 Nov 2025 03:22:50 +0000 Manifest next update: Wed 12 Nov 2025 03:22:50 +0000 Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: MUc8Ul5hcWmUqrQD1MoAOWS04OlUwdNtkVeMpHaP33k=) 2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Nov 5 03:22:50 2025 GMT Not After : Nov 12 03:22:50 2025 GMT Subject: CN=690ac30a-2a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:b2:a4:8a:87:9b:f5:f7:ad:42:86:ca:f7: aa:ac:cb:97:90:e1:b8:c7:97:b5:48:97:17:af:fb: d4:63:24:49:ee:b1:a3:aa:93:52:37:84:3f:01:88: 8a:e7:6c:ed:2b:d3:96:82:d3:b4:a7:6d:61:6f:98: 2c:de:1f:7d:84:4e:5c:8f:7b:ac:2f:72:12:0e:c1: 57:94:7e:72:ee:41:b6:9b:8f:a1:e4:6f:79:50:a1: 65:76:27:91:ee:87:7a:4b:69:b7:1f:78:67:07:de: 77:88:ee:fc:e2:5b:45:d9:d0:27:c5:a1:33:bd:97: e9:c1:88:49:f8:dc:28:a4:0f:41:cd:eb:e3:e9:c8: 42:00:7d:0b:d4:ca:c2:cf:8d:de:ad:67:42:00:3a: 69:4e:ed:b8:18:c1:46:ce:80:cc:e4:65:78:42:d5: e7:62:a7:4c:9b:9d:54:6a:1f:a4:9e:42:70:00:97: ff:dc:c9:fd:1b:40:bb:2f:f2:b7:71:81:74:40:e5: b0:bb:11:54:13:7a:68:5f:c0:36:cf:ed:54:68:54: 98:ea:f9:2f:ec:6d:87:6b:a7:d2:6b:be:03:e7:3e: 45:ab:f9:fd:d9:75:8b:4c:c9:8c:5e:e8:30:9b:32: 95:e2:6a:ac:e9:a6:41:19:e9:84:56:c9:fc:2e:c7: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B4:5E:01:E4:7C:20:FD:56:FC:48:A7:53:16:78:5D:E3:64:D3:59 X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:54:10:95:df:61:37:28:7e:5e:9e:66:58:c6:40:93:dd:ca: f3:42:a8:59:25:39:20:12:f5:31:c2:47:47:cf:9b:9f:6d:2b: 45:a6:e9:dd:f3:ee:c8:82:5e:d0:53:e3:86:ad:d6:cb:5a:e7: 21:09:31:25:53:2c:b8:4f:76:b4:ee:e4:1f:ac:b5:e1:d7:92: ed:c5:e5:02:c7:c1:d9:c3:e8:a5:e2:83:6d:a6:7d:0f:56:ba: 6b:d8:6f:51:b4:a0:2c:e4:72:02:38:fc:bd:38:ab:cc:5c:0f: d7:cb:13:1f:71:c8:41:d7:48:1c:66:f3:28:bb:a5:ae:0e:fb: e4:d0:96:d2:b2:29:8a:f6:af:6b:4f:09:ab:0d:a1:d2:69:0b: c1:79:e9:d3:b6:a8:d3:f8:30:61:88:7e:1f:cb:2c:fd:6a:eb: 7e:02:2e:44:f8:27:6f:46:5a:4e:c4:6f:ae:b3:12:21:4a:d6: 66:d6:19:3e:e8:16:f5:80:de:ac:ec:00:88:b8:a9:ab:ee:7b: e1:ea:4d:da:10:e8:e4:98:fe:ff:a8:3e:b4:b7:38:fd:27:f4: b2:78:c4:62:37:c3:91:27:4a:3a:a4:32:57:c0:37:64:0d:23: 6d:a7:18:08:40:ca:49:10:17:15:e4:04:44:8a:89:f2:46:68: 20:93:92:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUxMTA1MDMyMjUwWhcNMjUxMTEyMDMyMjUwWjAYMRYwFAYD VQQDEw02OTBhYzMwYS0yYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw62ypIqHm/X3rUKGyveqrMuXkOG4x5e1SJcXr/vUYyRJ7rGjqpNSN4Q/AYiK 52ztK9OWgtO0p21hb5gs3h99hE5cj3usL3ISDsFXlH5y7kG2m4+h5G95UKFldieR 7od6S2m3H3hnB953iO784ltF2dAnxaEzvZfpwYhJ+NwopA9Bzevj6chCAH0L1MrC z43erWdCADppTu24GMFGzoDM5GV4QtXnYqdMm51Uah+knkJwAJf/3Mn9G0C7L/K3 cYF0QOWwuxFUE3poX8A2z+1UaFSY6vkv7G2Ha6fSa74D5z5Fq/n92XWLTMmMXugw mzKV4mqs6aZBGemEVsn8Lse+UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy0XgHk fCD9VvxIp1MWeF3jZNNZMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzVBCV32E3KH5enmZYxkCT3crzQqhZJTkgEvUxwkdHz5ufbStFpund 8+7Igl7QU+OGrdbLWuchCTElUyy4T3a07uQfrLXh15LtxeUCx8HZw+il4oNtpn0P Vrpr2G9RtKAs5HICOPy9OKvMXA/XyxMfcchB10gcZvMou6WuDvvk0JbSsimK9q9r TwmrDaHSaQvBeenTtqjT+DBhiH4fyyz9aut+Ai5E+CdvRlpOxG+usxIhStZm1hk+ 6Bb1gN6s7ACIuKmr7nvh6k3aEOjkmP7/qD60tzj9J/SyeMRiN8ORJ0o6pDJXwDdk DSNtpxgIQMpJEBcV5AREionyRmggk5Jj -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:49 2025 by rpki-client