$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: pLBfn/ni1Lu/EQhQNxHuUOt9XbSMNoVTEQNRbtXqVV8= Subject key identifier: 6C:35:0E:C4:31:98:57:E5:A7:D8:1B:43:14:63:0C:27:DA:4E:7D:1A Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 040B Signing time: Mon 03 Nov 2025 00:22:20 +0000 Manifest this update: Mon 03 Nov 2025 00:22:20 +0000 Manifest next update: Mon 10 Nov 2025 00:22:20 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: PR74QQw17PZHhTiVAJSyWvO94Zwj9oU/cLKil5Z+dPQ=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Nov 3 00:22:20 2025 GMT Not After : Nov 10 00:22:20 2025 GMT Subject: CN=6907f5bc-b398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:84:1c:64:f4:16:b9:c8:f8:1b:36:a8:4f: 6a:8b:b5:74:d4:5f:a9:bb:f2:bf:47:8b:bb:22:31: 21:c4:b6:65:f0:90:3d:a8:36:f9:1b:7d:94:95:14: 06:6d:2b:83:80:ae:dd:c1:ab:31:ad:32:48:91:cf: 12:08:2b:c4:cb:52:d7:dd:64:54:6e:0a:f8:b3:a0: 37:23:d7:d2:63:3b:48:c0:30:68:35:7e:fb:22:fb: ae:ab:2e:b8:98:a8:52:46:3a:db:bb:b4:88:08:15: a4:ca:76:18:17:a7:19:83:e4:40:39:b8:2b:30:37: 6a:19:17:05:6a:cf:fc:a2:6f:d2:72:f7:1e:35:52: 42:d4:54:ae:5e:2c:08:e0:45:71:55:a2:e0:f3:b6: 6e:de:21:35:e2:98:1b:43:12:39:4d:2e:10:a7:d1: 2c:71:16:e1:e4:c1:e1:37:70:ee:a6:9b:85:60:1b: 9a:5f:d2:58:43:d3:b5:1a:15:84:ef:9d:40:0c:99: 3f:c0:82:af:9f:ab:3a:19:3f:6d:16:77:0c:dc:a9: 9c:2c:ef:a1:bc:d7:02:37:6f:64:6e:3e:86:ec:e4: a6:b8:ed:25:32:c7:69:af:08:12:ab:31:41:9f:39: 46:3d:63:45:0c:53:81:b0:96:eb:86:bf:29:fa:9c: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:35:0E:C4:31:98:57:E5:A7:D8:1B:43:14:63:0C:27:DA:4E:7D:1A X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:72:35:c3:1a:49:e7:d7:01:5d:f7:44:c7:5f:57:35:f9:7f: fd:3a:11:97:d5:41:ee:5b:7d:0e:e6:74:bd:91:8a:0a:21:f0: 6d:d8:52:4d:82:9c:e5:35:67:5f:6a:17:aa:a2:02:fd:21:4d: 9e:3f:b9:93:a0:c4:5d:04:24:99:25:bc:e4:1a:bf:e9:69:28: 54:c6:23:cc:c5:a8:b9:7c:a9:7c:d6:7e:25:2e:72:30:e1:42: 28:25:bf:dc:f4:7d:ef:03:b3:8a:98:95:fd:7a:c2:b0:13:46: e2:52:e7:87:b6:f2:cb:1b:c6:d5:6c:46:61:38:05:00:8b:b5: 05:6e:ce:b9:57:fe:e9:01:4d:8e:9a:a9:b2:28:7c:10:db:31: ab:05:33:ef:cb:c5:e6:bb:d9:70:92:82:44:8c:22:b1:23:fb: e6:65:79:63:20:ea:8d:db:3d:38:6a:8d:48:9c:97:01:5c:9a: 87:e5:b6:f6:f8:2c:bd:1b:14:f2:32:48:4f:52:de:b6:23:90: c0:a0:d3:b9:b8:5a:9a:99:91:df:4a:28:a7:ec:ce:5f:69:8c: 2c:86:c7:09:3f:bb:00:7c:64:ee:4f:32:e6:74:79:e2:8d:5c: 9e:4f:70:6f:c3:b5:36:22:8e:7a:ec:d2:ae:1e:e5:f0:e9:40: 90:19:eb:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUxMTAzMDAyMjIwWhcNMjUxMTEwMDAyMjIwWjAYMRYwFAYD VQQDEw02OTA3ZjViYy1iMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeiEHGT0FrnI+Bs2qE9qi7V01F+pu/K/R4u7IjEhxLZl8JA9qDb5G32UlRQG bSuDgK7dwasxrTJIkc8SCCvEy1LX3WRUbgr4s6A3I9fSYztIwDBoNX77Ivuuqy64 mKhSRjrbu7SICBWkynYYF6cZg+RAObgrMDdqGRcFas/8om/ScvceNVJC1FSuXiwI 4EVxVaLg87Zu3iE14pgbQxI5TS4Qp9EscRbh5MHhN3DuppuFYBuaX9JYQ9O1GhWE 751ADJk/wIKvn6s6GT9tFncM3KmcLO+hvNcCN29kbj6G7OSmuO0lMsdprwgSqzFB nzlGPWNFDFOBsJbrhr8p+pyOZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw1DsQx mFflp9gbQxRjDCfaTn0aMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYcjXDGknn1wFd90THX1c1+X/9OhGX1UHuW30O5nS9kYoKIfBt2FJN gpzlNWdfaheqogL9IU2eP7mToMRdBCSZJbzkGr/paShUxiPMxai5fKl81n4lLnIw 4UIoJb/c9H3vA7OKmJX9esKwE0biUueHtvLLG8bVbEZhOAUAi7UFbs65V/7pAU2O mqmyKHwQ2zGrBTPvy8Xmu9lwkoJEjCKxI/vmZXljIOqN2z04ao1InJcBXJqH5bb2 +Cy9GxTyMkhPUt62I5DAoNO5uFqamZHfSiin7M5faYwshscJP7sAfGTuTzLmdHni jVyeT3Bvw7U2Io567NKuHuXw6UCQGeuP -----END CERTIFICATE-----Generated at Tue Nov 4 15:55:51 2025 by rpki-client