$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft File: qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json) Hash identifier: AU/QKhNS9scAjS+ZcxjW/7btQcI0gpae8DNMVKp1Tvg= Subject key identifier: BB:C4:0D:97:08:63:D7:DC:36:C2:23:85:AD:19:79:6F:3C:3D:4A:AF Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 Certificate issuer: /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft Manifest number: 63 Signing time: Wed 05 Nov 2025 07:14:13 +0000 Manifest this update: Wed 05 Nov 2025 07:14:13 +0000 Manifest next update: Wed 12 Nov 2025 07:14:13 +0000 Files and hashes: 1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: +D9iIrx6mtcN+PO8z8t/hrPT4Dvy8/J3XxjygX5hiZ8=) 2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914 Validity Not Before: Nov 5 07:14:13 2025 GMT Not After : Nov 12 07:14:13 2025 GMT Subject: CN=690af945-3756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ff:f0:30:a6:3c:bc:b0:30:03:d6:27:34:29: b4:b8:02:0d:e0:62:d6:ab:9e:7a:1a:07:45:73:e8: 7f:55:d3:10:c1:a7:b7:e8:bb:3a:6a:fe:d6:9c:7a: 5f:fc:3e:b7:31:f0:33:e0:13:d3:0d:1f:c4:fe:79: b9:a3:a0:0b:85:db:13:ff:3b:d9:53:22:5a:3d:6b: fb:45:e5:23:77:51:a7:0b:a5:e2:d8:c9:a6:65:ec: 58:52:84:3d:48:1c:b9:e8:13:b5:e5:ca:1d:38:88: ad:a2:68:d9:7e:65:1d:2f:ab:f5:aa:f7:33:3b:89: cc:3d:64:64:5b:94:a2:74:d9:81:7f:2a:c5:c2:b1: 1b:ea:55:e9:6e:b9:6c:1e:ee:00:af:b9:88:1d:b1: af:ea:c8:ea:6c:a1:64:ca:d6:96:37:cc:01:57:77: 59:de:19:e8:70:b8:1b:0a:28:76:a9:7e:ec:9b:73: 9e:e6:b2:f5:40:b2:b6:f9:3d:52:41:df:d4:b6:d3: 08:4c:a2:fe:72:fa:d3:60:c0:8d:cd:a9:bf:c5:16: 1c:30:8d:2c:da:62:51:ba:39:c7:32:e1:91:ba:02: 7e:ea:78:0d:ef:4c:c8:c6:20:ca:7d:a0:90:90:82: 9d:c2:88:a6:bc:13:78:91:67:75:5d:94:cc:2a:c0: 51:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:0D:97:08:63:D7:DC:36:C2:23:85:AD:19:79:6F:3C:3D:4A:AF X509v3 Authority Key Identifier: keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:dd:33:f4:d9:b9:87:cb:2b:44:6f:e9:bf:34:43:51:d0:58: fe:9d:3a:f2:98:7d:76:dc:1f:25:d3:7e:65:2e:cc:7c:e0:35: 94:8e:da:8e:b1:59:fc:13:a3:6a:ca:32:da:d7:f2:16:d4:c8: ca:6e:79:22:d3:07:e7:38:58:27:73:91:95:c5:ae:59:3d:d2: c7:6d:37:57:77:e3:70:73:23:bf:ad:1d:80:2e:8a:e2:60:6f: 7f:1e:a6:83:c0:34:6f:9e:8b:79:f4:3a:7c:aa:84:8c:81:b3: d8:57:cd:ec:47:bb:07:26:4a:e7:f6:49:3b:45:ae:91:fd:90: e6:a1:27:ff:2f:0b:bd:16:cf:d4:6f:fd:1f:0e:00:8f:5d:5b: 7c:a4:75:5f:52:26:06:c4:05:61:8d:2c:05:95:8f:c5:db:a7: 97:b2:7d:5c:9f:0a:33:c5:c1:8a:43:0d:b2:1c:a4:de:f7:b5: 22:39:c3:68:bf:29:d9:c2:53:7c:fa:98:64:a9:00:29:f9:dc: fe:e0:38:49:9d:9c:2b:69:3f:35:21:a2:46:f4:79:f0:85:b3: f7:25:aa:2b:24:d2:e7:a8:c4:3e:6d:5b:a5:f9:01:a6:bb:3e: c1:c5:ff:99:5f:20:13:7b:90:f1:b7:51:d2:87:0e:47:0b:76: af:2f:d7:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjBCQjExMC8GA1UEBRMoQTlCQkVEMkQ3M0I4RDRCRTAxMTYzNzNENTc0ODNBMEIw MTk4RTkxNDAeFw0yNTExMDUwNzE0MTNaFw0yNTExMTIwNzE0MTNaMBgxFjAUBgNV BAMTDTY5MGFmOTQ1LTM3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCT//Awpjy8sDAD1ic0KbS4Ag3gYtarnnoaB0Vz6H9V0xDBp7fouzpq/tacel/8 Prcx8DPgE9MNH8T+ebmjoAuF2xP/O9lTIlo9a/tF5SN3UacLpeLYyaZl7FhShD1I HLnoE7Xlyh04iK2iaNl+ZR0vq/Wq9zM7icw9ZGRblKJ02YF/KsXCsRvqVeluuWwe 7gCvuYgdsa/qyOpsoWTK1pY3zAFXd1neGehwuBsKKHapfuybc57msvVAsrb5PVJB 39S20whMov5y+tNgwI3Nqb/FFhwwjSzaYlG6Occy4ZG6An7qeA3vTMjGIMp9oJCQ gp3CiKa8E3iRZ3VdlMwqwFGnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu8QNlwhj 19w2wiOFrRl5bzw9Sq8wHwYDVR0jBBgwFoAUqbvtLXO41L4BFjc9V0g6CwGY6RQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MEJCLzQxQ0Q1RDY2MjA5 RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0QkZqYzlWMGc2Q3dHWTZS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJ2dExYTzQxTDRCRmpjOVYwZzZDd0dZNlJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MEJCLzQxQ0Q1RDY2MjA5RDExRjA4MjNENDg0N0M0RjlBRTAyL3FidnRMWE80MUw0 QkZqYzlWMGc2Q3dHWTZSUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXdM/TZuYfLK0Rv6b80Q1HQWP6dOvKYfXbcHyXTfmUuzHzgNZSO2o6x WfwTo2rKMtrX8hbUyMpueSLTB+c4WCdzkZXFrlk90sdtN1d343BzI7+tHYAuiuJg b38epoPANG+ei3n0OnyqhIyBs9hXzexHuwcmSuf2STtFrpH9kOahJ/8vC70Wz9Rv /R8OAI9dW3ykdV9SJgbEBWGNLAWVj8Xbp5eyfVyfCjPFwYpDDbIcpN73tSI5w2i/ KdnCU3z6mGSpACn53P7gOEmdnCtpPzUhokb0efCFs/clqisk0ueoxD5tW6X5Aaa7 PsHF/5lfIBN7kPG3UdKHDkcLdq8v114= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:15 2025 by rpki-client