$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: w83ROOfc1WanYTLZeFKVmgMKPG5AN84rcL8qw97e1uo= Subject key identifier: 45:58:01:5B:5D:06:3C:94:65:77:5D:14:05:65:A7:91:85:91:57:23 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0C0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0C0B Signing time: Tue 04 Nov 2025 18:54:37 +0000 Manifest this update: Tue 04 Nov 2025 18:54:37 +0000 Manifest next update: Tue 11 Nov 2025 18:54:37 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: QgNxKZQa2y5P4TyDY7glIPNowolN2vKnCLY3+SyRJ4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: Nov 4 18:54:37 2025 GMT Not After : Nov 11 18:54:37 2025 GMT Subject: CN=690a4bed-0889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:73:13:bb:99:0b:63:ef:94:6d:7d:11:e7:6d: 60:9d:0b:2a:15:bc:2f:df:8b:40:38:fe:de:28:d5: df:81:44:77:26:25:8d:98:31:7c:21:69:16:d5:17: 57:bf:b0:4d:5f:13:3f:6a:1e:24:db:20:21:5c:b0: 36:ef:8f:f1:1b:66:cc:4b:45:b0:99:eb:a7:b8:20: c4:65:90:e4:48:69:32:1b:1b:51:af:f3:e2:af:33: 2c:f6:ae:3c:3f:46:b4:63:97:7c:20:a3:a7:7f:27: 59:77:eb:95:46:16:9b:bd:0e:26:bd:3d:7a:49:09: 69:63:4f:5f:6d:ba:bc:0b:6c:43:42:f9:4b:ad:10: b9:52:14:f3:63:29:5d:a8:09:4f:65:5c:51:d3:bf: 31:67:a4:6e:67:32:4b:59:b5:aa:f9:c3:d0:aa:0f: d4:d3:6a:e7:60:7c:7c:42:a9:27:c0:d8:4c:73:9b: b3:e2:79:6a:ed:cd:9e:c5:8f:77:2b:6e:1c:4d:45: a0:70:a2:f3:6d:cf:2b:7f:4e:73:43:d7:d1:4b:35: 13:77:53:a1:d1:7a:4d:c6:64:0d:9b:c4:f4:36:59: d9:0b:18:b8:8c:5f:cf:49:06:6e:ea:f0:d0:2e:05: 4a:af:40:f7:9b:76:08:c4:e4:66:6c:f6:2a:cd:1f: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:58:01:5B:5D:06:3C:94:65:77:5D:14:05:65:A7:91:85:91:57:23 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:3a:ce:d9:bb:58:ff:c7:f3:df:eb:f8:29:f3:0d:06:fb:f7: d2:b4:b3:6e:d5:a6:08:56:46:56:b0:cc:ce:57:16:63:56:f6: f8:49:40:b9:6b:a0:a2:8b:88:2f:58:5a:10:0c:38:f9:eb:61: fa:fd:97:dd:be:71:66:8c:eb:e1:79:9e:a6:04:cd:33:a3:af: b0:6c:3f:aa:3f:fc:83:33:cd:8f:20:3d:c2:32:e7:1a:09:01: dc:85:4f:7b:24:5d:14:b7:46:5c:9f:0e:be:81:2c:a7:87:a7: 47:d5:36:d6:d2:53:2e:c6:a0:0e:1d:2b:d7:09:f5:1d:b9:4e: f2:08:01:d0:76:ec:5f:2a:89:2e:e5:ca:74:bc:65:fb:31:21: 05:df:cf:54:ed:d8:2f:eb:4b:7b:2b:2d:86:47:45:5d:92:d6: 32:27:d6:a4:40:32:f5:f7:87:e3:d1:a0:9e:dc:5e:1b:de:5b: 8f:2e:f4:35:ca:31:6d:8f:10:14:4a:bc:1f:3b:99:bb:b6:1d: 4d:63:b5:b9:c8:2a:ee:6f:1c:3f:d3:b1:3c:cd:02:12:d9:3b: 40:e4:db:f1:ff:09:71:df:f5:1e:fb:f3:13:06:f5:85:fd:63: c7:32:20:c3:07:8d:e5:07:26:fc:d1:c7:ea:5b:fb:e8:b3:05: 94:10:4b:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUxMTA0MTg1NDM3WhcNMjUxMTExMTg1NDM3WjAYMRYwFAYD VQQDEw02OTBhNGJlZC0wODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XMTu5kLY++UbX0R521gnQsqFbwv34tAOP7eKNXfgUR3JiWNmDF8IWkW1RdX v7BNXxM/ah4k2yAhXLA274/xG2bMS0WwmeunuCDEZZDkSGkyGxtRr/PirzMs9q48 P0a0Y5d8IKOnfydZd+uVRhabvQ4mvT16SQlpY09fbbq8C2xDQvlLrRC5UhTzYyld qAlPZVxR078xZ6RuZzJLWbWq+cPQqg/U02rnYHx8QqknwNhMc5uz4nlq7c2exY93 K24cTUWgcKLzbc8rf05zQ9fRSzUTd1Oh0XpNxmQNm8T0NlnZCxi4jF/PSQZu6vDQ LgVKr0D3m3YIxORmbPYqzR+LhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVYAVtd BjyUZXddFAVlp5GFkVcjMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUOs7Zu1j/x/Pf6/gp8w0G+/fStLNu1aYIVkZWsMzOVxZjVvb4SUC5 a6Cii4gvWFoQDDj562H6/ZfdvnFmjOvheZ6mBM0zo6+wbD+qP/yDM82PID3CMuca CQHchU97JF0Ut0Zcnw6+gSynh6dH1TbW0lMuxqAOHSvXCfUduU7yCAHQduxfKoku 5cp0vGX7MSEF389U7dgv60t7Ky2GR0VdktYyJ9akQDL194fj0aCe3F4b3luPLvQ1 yjFtjxAUSrwfO5m7th1NY7W5yCrubxw/07E8zQIS2TtA5Nvx/wlx3/Ue+/MTBvWF /WPHMiDDB43lByb80cfqW/voswWUEEvO -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:55 2025 by rpki-client