$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json) Hash identifier: LgNjUfnbYkp56193Yzcgdq8FWQ1ZQV2TDk6Iyi6iUqA= Subject key identifier: BF:AD:A0:B7:01:2F:48:36:00:2B:FE:36:0B:46:55:BF:2F:B4:EC:BF Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 3544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft Manifest number: 3505 Signing time: Tue 04 Nov 2025 14:26:28 +0000 Manifest this update: Tue 04 Nov 2025 14:26:28 +0000 Manifest next update: Tue 11 Nov 2025 14:26:28 +0000 Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: fPP1kXARrk+gLO0JY++IawvInfUYhVE7d6e8u8EbvAI=) 2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=) 3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=) 4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=) 5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13636 (0x3544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Nov 4 14:26:28 2025 GMT Not After : Nov 11 14:26:28 2025 GMT Subject: CN=690a0d14-1401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:34:4c:c4:9b:9d:ce:41:bd:cd:78:2f:25: 17:f0:50:71:74:cb:b9:af:ac:ba:ee:97:28:50:19: 88:9e:b7:d5:8e:ca:b2:14:c2:50:4c:7b:93:c3:a4: 94:c6:1b:ec:c6:4a:8c:33:4b:69:75:fc:db:6b:79: d3:74:55:b9:2d:5e:45:d1:c4:bf:b1:5d:e5:5a:a5: e8:21:a2:dc:bd:b7:4b:b3:51:24:41:36:38:cc:da: 09:d8:d2:00:e1:ca:8c:bf:ab:cf:ab:14:4e:48:51: 15:2c:a1:79:ef:21:18:fa:d7:33:36:9f:12:04:06: 37:24:e2:48:c9:68:e4:28:ac:8f:10:63:57:e7:cd: 4c:9c:9d:45:11:b5:8c:f3:ba:81:08:71:e6:41:77: 1c:5b:b8:44:08:5f:dd:55:06:81:d6:db:24:7b:24: 7c:3c:13:2c:85:b6:92:f8:3b:d7:0b:b5:e3:0f:da: 9a:ce:62:1e:26:e1:8b:55:f9:ba:2c:6d:df:16:41: c3:e9:75:56:00:25:b1:c0:54:28:12:cc:5c:71:4e: fd:20:60:19:a5:27:dc:a3:04:1e:28:6b:f0:17:3e: e5:d0:9b:37:02:29:c5:b3:15:11:e3:23:c2:c1:d4: 62:42:84:9f:0e:2f:25:0d:ff:87:8e:e2:13:4b:73: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:A0:B7:01:2F:48:36:00:2B:FE:36:0B:46:55:BF:2F:B4:EC:BF X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:da:ed:37:f8:f3:0a:40:4d:85:e5:b1:bf:04:ad:95:8d: 9a:2b:f0:38:2f:d9:a9:e7:6a:fd:a3:36:3f:8c:07:c6:3a:66: 4c:b0:2a:f6:74:a1:9f:e1:1a:4a:1a:c5:8a:39:7e:33:b1:d8: bb:9b:eb:33:21:cf:92:5e:47:b5:91:0a:4d:b6:ca:9f:a0:00: 6a:a9:b4:c4:7c:b3:68:5d:2a:f2:de:66:75:9d:7f:25:c1:3a: e7:92:83:7e:60:2d:a2:92:b6:90:ba:a7:01:03:e8:ec:75:cf: c4:e6:57:d7:e7:15:60:4d:cf:3a:63:06:5d:f8:c4:39:52:9d: 1c:4f:e6:68:12:b1:b6:11:72:f9:31:48:40:8b:65:d5:3b:cc: ec:03:31:77:b4:2a:ef:b7:0e:74:3d:32:dd:83:d8:5d:d6:f7: 2f:aa:02:f9:bd:3e:60:a5:76:0e:30:bd:11:04:d8:4a:37:5f: a9:cc:13:df:96:48:f4:19:80:eb:50:64:53:20:37:e0:00:04: 12:f9:a5:e0:c4:4e:88:e0:29:da:97:0c:5a:71:ce:dc:b0:fc: 31:71:4e:ef:cf:dc:18:8c:ec:ed:2e:dc:8e:85:51:95:d5:35: b9:44:14:a8:24:a7:c4:1d:94:78:bf:f8:c6:8f:bd:fe:13:59: b9:21:60:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjUxMTA0MTQyNjI4WhcNMjUxMTExMTQyNjI4WjAYMRYwFAYD VQQDEw02OTBhMGQxNC0xNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVs0TMSbnc5Bvc14LyUX8FBxdMu5r6y67pcoUBmInrfVjsqyFMJQTHuTw6SU xhvsxkqMM0tpdfzba3nTdFW5LV5F0cS/sV3lWqXoIaLcvbdLs1EkQTY4zNoJ2NIA 4cqMv6vPqxROSFEVLKF57yEY+tczNp8SBAY3JOJIyWjkKKyPEGNX581MnJ1FEbWM 87qBCHHmQXccW7hECF/dVQaB1tskeyR8PBMshbaS+DvXC7XjD9qazmIeJuGLVfm6 LG3fFkHD6XVWACWxwFQoEsxccU79IGAZpSfcowQeKGvwFz7l0Js3AinFsxUR4yPC wdRiQoSfDi8lDf+HjuITS3M6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+toLcB L0g2ACv+NgtGVb8vtOy/MB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzM2My9GRjhCNEI2QzFEODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNt OVp3YTBWQ2ZDeUNmcFVPTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg/9rtN/jzCkBNheWxvwStlY2aK/A4L9mp52r9ozY/jAfGOmZMsCr2 dKGf4RpKGsWKOX4zsdi7m+szIc+SXke1kQpNtsqfoABqqbTEfLNoXSry3mZ1nX8l wTrnkoN+YC2ikraQuqcBA+jsdc/E5lfX5xVgTc86YwZd+MQ5Up0cT+ZoErG2EXL5 MUhAi2XVO8zsAzF3tCrvtw50PTLdg9hd1vcvqgL5vT5gpXYOML0RBNhKN1+pzBPf lkj0GYDrUGRTIDfgAAQS+aXgxE6I4Cnalwxacc7csPwxcU7vz9wYjOztLtyOhVGV 1TW5RBSoJKfEHZR4v/jGj73+E1m5IWDD -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:18 2025 by rpki-client