$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json) Hash identifier: TbqrE0OK2T5i62PdA/jqMWnifIE1fy8HPqniuZ44Qds= Subject key identifier: A3:4C:3A:93:CC:2E:39:41:03:4B:38:8D:EB:E0:A6:75:20:3D:6B:26 Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft Manifest number: 3D Signing time: Wed 05 Nov 2025 07:43:17 +0000 Manifest this update: Wed 05 Nov 2025 07:43:17 +0000 Manifest next update: Wed 12 Nov 2025 07:43:17 +0000 Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: J6Rjh8zD7DcPLSzgiKkoJkCCGdxwy4ZyulV8+Iagjzw=) 2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: DzXy8BEuESMOqIj1ZsPp4HtWDSpRtccWGiXvOFf8WyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Validity Not Before: Nov 5 07:43:17 2025 GMT Not After : Nov 12 07:43:17 2025 GMT Subject: CN=690b0015-c183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:8b:e3:0b:24:36:47:00:31:b5:ac:8a:36: fc:3a:b5:63:b8:5f:03:ec:1b:97:b5:60:07:8f:10: d2:18:99:74:8f:99:86:e2:ec:64:91:d6:b5:87:20: 98:f1:e8:53:16:de:f9:2e:00:e7:3e:dc:0f:32:94: 95:35:b5:09:5b:0d:f1:82:5e:aa:04:59:fc:e4:fb: 77:e6:05:54:b1:a4:04:42:50:23:e7:f4:bb:8e:3f: c9:42:0f:a3:39:b8:1e:97:6e:fb:97:6b:10:e9:fd: 1b:34:2d:29:34:92:d6:2a:6d:83:37:d5:a7:4e:13: 50:8e:2c:9c:0e:5f:2e:dc:97:01:4b:b6:41:a1:e6: 17:27:23:15:4f:8e:53:50:93:34:b6:a9:e7:6f:b2: 31:e4:3e:2e:93:cf:95:0a:cd:1f:4a:39:c7:c6:f6: 40:2d:50:30:7f:cd:53:8f:5b:02:b8:86:49:09:1e: d9:cc:a6:fd:04:ac:ae:64:ea:28:d4:b4:39:de:f3: 03:cd:8e:7b:d2:8f:d7:3b:4b:b7:69:1c:f1:5d:ee: 1e:66:27:42:b3:f2:8d:87:d1:3c:87:5c:68:e9:33: 86:76:07:1f:95:88:83:61:e7:70:7f:7b:60:1f:5d: 4d:73:41:65:16:67:66:d4:04:b6:73:55:1f:7a:24: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:3A:93:CC:2E:39:41:03:4B:38:8D:EB:E0:A6:75:20:3D:6B:26 X509v3 Authority Key Identifier: keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:43:59:ee:ac:f5:ed:68:16:4b:3c:31:38:0b:e5:5f:7c:e1: cd:1a:e7:bf:64:81:39:c4:e9:4f:a8:14:e2:06:5f:1f:36:40: cb:9a:e7:20:96:53:37:b0:69:2d:7b:b4:6d:f4:74:44:37:54: c8:ab:58:da:fb:5e:ac:d2:9f:04:e1:9d:cb:c2:7d:b5:08:cf: cd:7d:ab:b4:04:45:b4:f3:33:a9:4e:02:0a:01:4a:a1:65:16: bc:35:97:d3:8e:9c:2f:84:a0:e6:92:cb:d3:30:e7:c1:bd:8a: 68:14:16:b3:ce:50:7c:20:74:64:cc:93:f1:56:37:16:e7:d8: 3a:ce:59:6a:51:8b:f2:ae:96:81:f9:18:38:18:74:a8:bf:6d: b6:8f:7c:55:fd:6a:ce:80:93:93:4a:e3:a8:05:37:45:8f:73: 33:f0:e9:2b:b2:bd:9d:09:b9:b6:54:a7:59:66:1f:5c:ec:dc: ca:93:35:dc:5b:d8:0e:65:9e:53:3e:da:2b:0f:fc:b3:0d:d9: 5e:9c:bd:ff:11:d0:d9:a6:9f:84:16:23:27:2d:91:30:0b:af: a4:65:1c:ff:0d:94:0e:ef:2c:f9:7f:a0:7d:9e:fd:30:bf:22: 0d:41:30:84:ef:e9:6c:da:f0:24:f6:e4:a4:a4:61:e8:e0:49: e7:01:13:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2 NDIzNjJBMjAeFw0yNTExMDUwNzQzMTdaFw0yNTExMTIwNzQzMTdaMBgxFjAUBgNV BAMTDTY5MGIwMDE1LWMxODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxJ4vjCyQ2RwAxtayKNvw6tWO4XwPsG5e1YAePENIYmXSPmYbi7GSR1rWHIJjx 6FMW3vkuAOc+3A8ylJU1tQlbDfGCXqoEWfzk+3fmBVSxpARCUCPn9LuOP8lCD6M5 uB6XbvuXaxDp/Rs0LSk0ktYqbYM31adOE1COLJwOXy7clwFLtkGh5hcnIxVPjlNQ kzS2qedvsjHkPi6Tz5UKzR9KOcfG9kAtUDB/zVOPWwK4hkkJHtnMpv0ErK5k6ijU tDne8wPNjnvSj9c7S7dpHPFd7h5mJ0Kz8o2H0TyHXGjpM4Z2Bx+ViINh53B/e2Af XU1zQWUWZ2bUBLZzVR96JO49AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo0w6k8wu OUEDSziN6+CmdSA9ayYwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq Sk82T2dfcE92RUdRallxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOtDWe6s9e1oFks8MTgL5V984c0a579kgTnE6U+oFOIGXx82QMua5yCW UzewaS17tG30dEQ3VMirWNr7XqzSnwThncvCfbUIz819q7QERbTzM6lOAgoBSqFl Frw1l9OOnC+EoOaSy9Mw58G9imgUFrPOUHwgdGTMk/FWNxbn2DrOWWpRi/KuloH5 GDgYdKi/bbaPfFX9as6Ak5NK46gFN0WPczPw6SuyvZ0JubZUp1lmH1zs3MqTNdxb 2A5lnlM+2isP/LMN2V6cvf8R0Nmmn4QWIyctkTALr6RlHP8NlA7vLPl/oH2e/TC/ Ig1BMITv6Wza8CT25KSkYejgSecBE84= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:58 2025 by rpki-client