$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: A2N71NCWYXfovr9oBADLBJbvpHqBETk9+ny5d41JzFA= Subject key identifier: 0E:C0:0B:36:F6:37:C2:97:32:41:FD:39:CB:88:CE:5A:A7:7D:35:29 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 0308 Signing time: Wed 05 Nov 2025 01:15:18 +0000 Manifest this update: Wed 05 Nov 2025 01:15:18 +0000 Manifest next update: Wed 12 Nov 2025 01:15:18 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: hSOvUvpiJwz1zFM3WiDC0UYbhCC0KNUeXwhNLsDHecI=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: wBj04byRChV0petmdr4Ke9cr8WzCiaxcwGuAnk1TvDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Nov 5 01:15:18 2025 GMT Not After : Nov 12 01:15:18 2025 GMT Subject: CN=690aa526-23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:69:8b:5b:21:d8:b0:be:92:dd:84:6f:d4:d4: df:ee:cd:3a:c9:77:af:91:7e:b8:0e:a0:ed:36:6c: b4:85:a4:ad:1f:b0:bd:30:54:b1:73:66:89:e5:e4: 6d:e9:ca:64:68:3c:a5:77:71:cc:d8:81:9c:4a:d0: a7:7f:f2:8e:a1:bb:d4:fe:1f:f6:7a:0b:b8:eb:e1: 57:61:a4:61:36:6d:37:b8:09:6c:1c:d7:fa:2b:d6: 47:77:f3:69:d3:e0:7b:98:c5:38:57:68:9f:44:85: 68:29:b8:89:09:cd:7e:f3:89:51:74:4a:6a:22:4d: bb:c1:f6:5e:2c:8d:69:dc:51:41:92:39:82:c5:42: e8:db:c4:b7:42:5e:59:45:21:3d:5b:1d:44:d6:a7: 53:84:b8:40:ef:db:6a:48:4d:90:6f:91:c7:33:6d: e9:7d:77:06:da:8f:30:71:b3:f7:e4:d7:7a:7f:6f: b5:d1:64:a2:e8:82:63:81:ff:84:43:9b:f8:8f:4e: 13:83:f2:57:d3:70:4c:51:7f:30:54:61:ed:b9:a3: e7:d4:ae:1e:64:a4:5c:de:4a:d9:fd:e4:da:72:3b: 3d:2d:51:fe:04:1d:28:0b:27:d5:89:9c:1a:2f:bc: d6:de:69:2d:5c:f3:42:f4:eb:b5:d6:7f:b6:0f:89: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C0:0B:36:F6:37:C2:97:32:41:FD:39:CB:88:CE:5A:A7:7D:35:29 X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a8:49:2c:18:78:dc:65:e3:d7:ac:5d:46:ca:f5:4e:1e:ca: 3a:97:23:70:55:82:b1:9b:19:bf:b0:8b:e4:1a:cf:13:17:3f: e9:65:82:27:50:ee:b9:3f:c7:6c:f2:a7:85:59:40:d2:1b:17: 25:49:7e:d4:37:e0:ef:e5:a9:0d:05:a0:de:65:c8:d3:73:b4: 69:29:b6:40:6f:16:f9:0c:e8:d7:ef:cf:bf:9a:03:06:f9:a7: 57:72:26:92:02:c9:8c:f0:31:0d:19:5e:90:4f:d5:14:7b:1f: 5b:4f:11:14:6c:a2:00:49:a4:66:ca:90:8e:3c:16:0e:68:26: 69:7f:0b:fe:a8:21:e6:fa:1b:a8:55:09:fe:5a:7e:ce:be:ba: d4:1a:c0:47:f9:75:7c:2d:af:bb:28:c4:89:50:33:cf:6b:7b: f1:15:9c:c8:11:4e:d2:44:da:09:ec:a1:99:02:8b:f8:f6:00: 59:d7:dd:dc:5c:7f:5c:d4:17:6d:24:f2:c6:62:f0:c0:b9:d5: e1:f7:41:d5:59:8e:c8:e9:8b:eb:c9:75:bb:30:c9:21:6f:fa: 80:33:16:94:40:19:20:7c:12:17:77:35:eb:59:45:fc:5d:2a: 60:c9:76:12:48:14:af:93:a5:26:65:0f:4e:b9:e6:7d:ba:83: 7b:5b:1e:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUxMTA1MDExNTE4WhcNMjUxMTEyMDExNTE4WjAYMRYwFAYD VQQDEw02OTBhYTUyNi0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52mLWyHYsL6S3YRv1NTf7s06yXevkX64DqDtNmy0haStH7C9MFSxc2aJ5eRt 6cpkaDyld3HM2IGcStCnf/KOobvU/h/2egu46+FXYaRhNm03uAlsHNf6K9ZHd/Np 0+B7mMU4V2ifRIVoKbiJCc1+84lRdEpqIk27wfZeLI1p3FFBkjmCxULo28S3Ql5Z RSE9Wx1E1qdThLhA79tqSE2Qb5HHM23pfXcG2o8wcbP35Nd6f2+10WSi6IJjgf+E Q5v4j04Tg/JX03BMUX8wVGHtuaPn1K4eZKRc3krZ/eTacjs9LVH+BB0oCyfViZwa L7zW3mktXPNC9Ou11n+2D4l+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7ACzb2 N8KXMkH9OcuIzlqnfTUpMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALqEksGHjcZePXrF1GyvVOHso6lyNwVYKxmxm/sIvkGs8TFz/pZYIn UO65P8ds8qeFWUDSGxclSX7UN+Dv5akNBaDeZcjTc7RpKbZAbxb5DOjX78+/mgMG +adXciaSAsmM8DENGV6QT9UUex9bTxEUbKIASaRmypCOPBYOaCZpfwv+qCHm+huo VQn+Wn7OvrrUGsBH+XV8La+7KMSJUDPPa3vxFZzIEU7SRNoJ7KGZAov49gBZ193c XH9c1BdtJPLGYvDAudXh90HVWY7I6YvryXW7MMkhb/qAMxaUQBkgfBIXdzXrWUX8 XSpgyXYSSBSvk6UmZQ9OueZ9uoN7Wx5H -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:10 2025 by rpki-client