$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json) Hash identifier: V3rDOz//7yTLmzLfFJ8E3hXx22M+bGJhAgr6EF+qpsQ= Subject key identifier: C8:86:F8:29:32:C7:45:EE:9F:D4:58:27:65:81:26:9F:89:F6:AF:40 Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft Manifest number: 0282 Signing time: Wed 05 Nov 2025 01:43:43 +0000 Manifest this update: Wed 05 Nov 2025 01:43:42 +0000 Manifest next update: Wed 12 Nov 2025 01:43:42 +0000 Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: vk7uCxDLS8ZKVfM3FEWBzwG+DxAHa8tV2aq7jr7dTQw=) 2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: UjqlRAwfwNLo2LEBYwVtNQxCTDJqJ6taRgiSuyPlUdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE Validity Not Before: Nov 5 01:43:42 2025 GMT Not After : Nov 12 01:43:42 2025 GMT Subject: CN=690aabcf-bbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2d:d2:98:13:e6:95:8c:a4:ff:8b:21:e6:89: 19:47:d5:b4:f9:4c:d2:8d:72:96:6a:a3:45:b2:35: 72:1b:6c:2f:8b:42:d9:e9:a3:a9:5c:0b:81:87:fc: e4:50:34:dd:11:35:a0:6b:b0:90:2b:0c:a0:76:55: 8e:07:2b:41:07:ea:f6:6e:13:c2:5a:45:00:be:ac: 1b:d5:60:18:25:b9:d6:aa:2c:85:3a:82:e6:33:c6: 6f:06:aa:1f:be:2a:fc:8b:e9:c4:27:c6:7b:93:32: 62:bb:7b:b5:e2:db:59:df:b1:d0:f1:bb:86:1f:f8: fd:80:61:41:3d:fc:31:6c:9f:6a:4c:dd:0f:f8:fa: 5c:20:a5:35:72:99:1c:c9:4b:c2:21:a7:28:17:36: 7e:46:2a:dc:f9:06:82:e7:97:d2:14:50:15:52:3c: 5e:b5:47:61:c4:51:12:f8:01:b1:53:6c:24:2c:e8: a6:e3:7d:2e:d9:ba:d4:cb:61:aa:a9:41:83:31:a7: a7:d0:c5:b3:e4:13:bf:ec:9f:71:80:cb:c0:f2:11: 8e:19:8b:a4:8f:3e:d3:2e:a6:1a:6e:11:8b:e7:b3: 77:d2:35:58:90:39:da:b2:bd:3a:08:c4:7f:17:6e: 9f:f0:8a:e3:9e:db:01:26:22:b0:e5:cd:a6:82:1f: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:86:F8:29:32:C7:45:EE:9F:D4:58:27:65:81:26:9F:89:F6:AF:40 X509v3 Authority Key Identifier: keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:dd:28:f3:d9:7e:ee:0b:f0:02:c0:c2:54:55:c1:c7:50:30: 9c:bc:36:81:c2:be:2c:8d:91:06:bb:75:71:9e:fe:81:86:e2: c2:24:b8:2e:87:de:9c:28:67:e5:39:cd:02:ae:f6:ec:34:be: d1:2c:48:69:d4:66:ea:ae:eb:e1:06:1c:94:6b:13:d3:63:9e: 6f:20:78:a4:47:8d:ba:5a:38:89:ff:b3:59:58:76:06:22:c9: a2:84:4e:92:81:ad:25:47:76:6a:da:b7:8c:51:44:5a:28:fe: b7:a4:17:82:b1:2b:ca:09:95:c1:2e:0c:b7:1e:c6:a2:76:48: 98:55:d4:71:29:c5:c2:48:5b:80:d2:9e:3b:09:f9:31:c2:f8: 98:e7:35:c2:a5:56:55:46:04:eb:7e:68:a9:56:5e:ad:4b:0f: ce:ca:6a:db:f8:ea:7b:6b:e3:92:d6:f1:9f:09:03:67:3d:21: ab:60:d1:fd:b0:72:b6:5a:7d:22:12:19:43:e0:5d:ca:58:27: 14:82:04:6a:00:94:64:ba:83:5e:3f:93:6c:ec:83:74:12:6c: 1c:57:21:ea:4f:ef:b2:6f:52:44:63:ce:88:4b:fc:50:2a:97: 42:7e:d6:c5:10:21:40:76:67:4b:ac:10:1f:1e:9a:02:8e:f3: 59:3e:10:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz NjEyNzFCRkUwHhcNMjUxMTA1MDE0MzQyWhcNMjUxMTEyMDE0MzQyWjAYMRYwFAYD VQQDEw02OTBhYWJjZi1iYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3C3SmBPmlYyk/4sh5okZR9W0+UzSjXKWaqNFsjVyG2wvi0LZ6aOpXAuBh/zk UDTdETWga7CQKwygdlWOBytBB+r2bhPCWkUAvqwb1WAYJbnWqiyFOoLmM8ZvBqof vir8i+nEJ8Z7kzJiu3u14ttZ37HQ8buGH/j9gGFBPfwxbJ9qTN0P+PpcIKU1cpkc yUvCIacoFzZ+Rirc+QaC55fSFFAVUjxetUdhxFES+AGxU2wkLOim430u2brUy2Gq qUGDMaen0MWz5BO/7J9xgMvA8hGOGYukjz7TLqYabhGL57N30jVYkDnasr06CMR/ F26f8IrjntsBJiKw5c2mgh8RbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiG+Cky x0Xun9RYJ2WBJp+J9q9AMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4 RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj VllZR1k1azd6S2cyRW5HXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE3Sjz2X7uC/ACwMJUVcHHUDCcvDaBwr4sjZEGu3Vxnv6BhuLCJLgu h96cKGflOc0CrvbsNL7RLEhp1GbqruvhBhyUaxPTY55vIHikR426WjiJ/7NZWHYG IsmihE6Sga0lR3Zq2reMUURaKP63pBeCsSvKCZXBLgy3HsaidkiYVdRxKcXCSFuA 0p47CfkxwviY5zXCpVZVRgTrfmipVl6tSw/Oymrb+Op7a+OS1vGfCQNnPSGrYNH9 sHK2Wn0iEhlD4F3KWCcUggRqAJRkuoNeP5Ns7IN0EmwcVyHqT++yb1JEY86IS/xQ KpdCftbFECFAdmdLrBAfHpoCjvNZPhDT -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:20 2025 by rpki-client