$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json) Hash identifier: oPdARWdrqGqMF8p4YyVUkj50vXOFld55mYxR5A2/KrQ= Subject key identifier: 83:9C:4D:5E:AD:99:50:39:10:A7:5A:21:DC:47:46:A3:14:AD:C4:EF Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft Manifest number: 03DB Signing time: Mon 03 Nov 2025 00:33:37 +0000 Manifest this update: Mon 03 Nov 2025 00:33:36 +0000 Manifest next update: Mon 10 Nov 2025 00:33:36 +0000 Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: 7UCeREtf+kKbx4DkMru9xeK9wiI6qWP5C5eKlVM8TMc=) 2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE Validity Not Before: Nov 3 00:33:36 2025 GMT Not After : Nov 10 00:33:36 2025 GMT Subject: CN=6907f860-d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:6b:58:c4:3d:4a:9b:2e:45:5e:0d:49:0b: 4b:39:e7:22:9d:09:e9:16:47:a5:52:0d:16:cf:07: df:df:e1:81:32:7a:e6:78:da:dd:68:3a:34:ef:59: 5c:13:2e:ca:8d:ed:a0:e7:0d:1a:fd:00:db:b5:90: 67:f1:fc:c3:5c:ce:44:31:4e:75:4e:1c:94:a1:e0: c0:86:ac:d7:ee:91:37:57:42:a3:b8:36:8e:b8:f6: d6:08:29:29:e2:e3:07:90:df:96:1f:ec:50:e7:b1: 61:2d:e1:91:45:8a:7c:d1:41:c7:81:e4:f2:aa:e7: f0:65:d2:98:3d:ee:54:e1:3d:56:00:4b:f1:6e:fd: 77:e9:31:23:3e:f8:96:af:5d:31:7a:12:7d:20:a3: 97:da:ed:a9:ba:f0:ba:9d:60:87:fc:67:62:87:09: 33:a7:6f:a1:9b:94:f3:b0:69:a7:24:42:6c:68:ba: 95:f6:b6:7a:9c:44:15:47:10:25:9b:65:1f:22:f3: 44:86:3d:1b:21:e3:f1:2b:86:c2:c5:0c:43:6f:07: 33:6c:c5:1c:3b:0c:0b:f4:4f:2b:7f:6b:48:23:c7: ad:40:97:b1:54:38:6a:c7:2b:dc:05:f3:f6:53:24: 12:67:92:b7:77:b5:ef:56:2e:58:d1:2f:68:6f:b2: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:4D:5E:AD:99:50:39:10:A7:5A:21:DC:47:46:A3:14:AD:C4:EF X509v3 Authority Key Identifier: keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:38:d7:f9:90:67:0f:3c:76:e3:11:17:d1:e2:e3:de:22:6f: a0:89:4e:25:fc:78:0a:4e:c8:20:3d:55:e6:59:81:79:13:c1: 6f:21:4b:ee:ed:f9:b4:f2:f7:df:d8:46:e3:7b:ab:bb:c5:d9: b9:b6:77:de:3a:41:dd:9b:c0:93:03:7b:82:82:86:f6:47:d4: 1d:7b:19:a9:d1:7a:e3:27:20:95:53:93:44:3a:e8:48:ab:f2: 95:2c:c1:07:f4:6f:8d:2d:59:83:95:9b:a8:3b:67:d9:e4:da: 70:1d:be:14:be:a9:38:8b:bd:03:8f:6e:11:07:19:34:8f:0e: 1c:d3:f3:6c:67:25:7f:ee:9d:97:c0:c4:f4:4d:78:b7:3c:7a: f1:02:d6:f1:27:03:c8:8c:5f:68:e4:46:c9:74:57:d9:0f:56: 44:d6:be:75:5f:85:3d:1d:30:e3:77:d3:88:02:a4:32:0a:d2: 54:c3:62:e1:05:0e:84:7b:aa:fb:3d:cd:26:19:18:8e:67:5b: 90:06:6f:35:cf:6a:60:91:ed:18:76:8b:e3:15:b9:ca:af:62: f5:c9:70:25:01:16:27:41:ad:fd:64:6a:70:cb:99:14:95:f7: b3:b8:07:d2:7b:8c:0b:28:60:f6:db:2c:5c:bf:b7:75:d2:bb: 48:3f:eb:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz Q0MxOUM3RkUwHhcNMjUxMTAzMDAzMzM2WhcNMjUxMTEwMDAzMzM2WjAYMRYwFAYD VQQDEw02OTA3Zjg2MC1kODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt31rWMQ9SpsuRV4NSQtLOecinQnpFkelUg0Wzwff3+GBMnrmeNrdaDo071lc Ey7Kje2g5w0a/QDbtZBn8fzDXM5EMU51ThyUoeDAhqzX7pE3V0KjuDaOuPbWCCkp 4uMHkN+WH+xQ57FhLeGRRYp80UHHgeTyqufwZdKYPe5U4T1WAEvxbv136TEjPviW r10xehJ9IKOX2u2puvC6nWCH/Gdihwkzp2+hm5TzsGmnJEJsaLqV9rZ6nEQVRxAl m2UfIvNEhj0bIePxK4bCxQxDbwczbMUcOwwL9E8rf2tII8etQJexVDhqxyvcBfP2 UyQSZ5K3d7XvVi5Y0S9ob7Le+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOcTV6t mVA5EKdaIdxHRqMUrcTvMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4 XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvONf5kGcPPHbjERfR4uPeIm+giU4l/HgKTsggPVXmWYF5E8FvIUvu 7fm08vff2Ebje6u7xdm5tnfeOkHdm8CTA3uCgob2R9Qdexmp0XrjJyCVU5NEOuhI q/KVLMEH9G+NLVmDlZuoO2fZ5NpwHb4Uvqk4i70Dj24RBxk0jw4c0/NsZyV/7p2X wMT0TXi3PHrxAtbxJwPIjF9o5EbJdFfZD1ZE1r51X4U9HTDjd9OIAqQyCtJUw2Lh BQ6Ee6r7Pc0mGRiOZ1uQBm81z2pgke0YdovjFbnKr2L1yXAlARYnQa39ZGpwy5kU lfezuAfSe4wLKGD22yxcv7d10rtIP+sc -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:17 2025 by rpki-client