$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json) Hash identifier: TiQU4lqi6/j9FLamK9uYRGK/5Y1gjBWIgDw73fowT3s= Subject key identifier: B8:8C:B2:87:CC:36:33:50:8D:2A:01:A7:98:5A:84:18:BF:4B:F7:D6 Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft Manifest number: 0598 Signing time: Tue 04 Nov 2025 23:15:34 +0000 Manifest this update: Tue 04 Nov 2025 23:15:34 +0000 Manifest next update: Tue 11 Nov 2025 23:15:34 +0000 Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: U37JmfEJKjCAFo44SKcKndAi0Tmf30WDU6HsC5+Eoi4=) 2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: 0C374rc1/yzntVHlBO2RHsCgAiQUBU23dQBcBVfekCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71 Validity Not Before: Nov 4 23:15:34 2025 GMT Not After : Nov 11 23:15:34 2025 GMT Subject: CN=690a8916-5e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:d8:5f:0f:b0:f5:4d:f3:ff:e4:50:61:09: 67:9a:04:25:8f:c0:83:15:36:2b:cc:a4:e2:e6:83: e1:b9:86:18:68:38:06:d7:37:51:35:9b:19:ae:49: ee:ec:2d:cd:ff:2f:f6:43:30:99:97:6d:75:e5:bb: 9f:e5:91:ec:e6:9a:11:1a:ee:da:b7:71:bf:14:5a: 2d:f7:44:9b:a1:89:b9:ae:01:81:1b:18:e0:4a:7b: f9:eb:2a:e4:37:05:8d:e9:04:74:a6:49:2d:aa:17: 54:7e:08:13:9f:bb:ee:fe:61:8c:d5:5a:79:71:61: f2:1c:27:e3:56:32:f6:01:f4:1c:46:f0:e2:5c:64: bf:69:ed:40:f3:24:99:d0:6f:c0:c2:8f:2a:bc:76: 36:21:f0:40:11:9c:88:30:95:f8:ff:74:a2:a6:b8: 6d:c7:92:be:c0:98:b3:f5:1c:a0:3a:26:90:70:33: d5:4c:95:57:8e:3e:42:8f:75:e0:f3:7a:43:00:a2: c1:4a:a9:6c:2d:0c:95:ea:d5:31:e0:49:34:37:83: 7a:44:02:fe:84:05:87:cf:0f:8c:82:70:be:eb:51: cc:99:75:1e:3b:35:75:95:1c:0c:d8:f0:28:3b:c4: 31:7f:ea:96:23:ab:f3:ee:1f:db:0c:1b:9e:75:fd: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8C:B2:87:CC:36:33:50:8D:2A:01:A7:98:5A:84:18:BF:4B:F7:D6 X509v3 Authority Key Identifier: keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:0d:bb:01:3e:13:ae:8b:e4:07:1f:fa:55:0a:1c:b7:00: ae:35:ed:3f:0e:c4:01:4f:4d:04:2a:60:e9:f3:07:58:e2:ed: 77:7b:10:be:d1:78:58:d8:69:3e:85:7b:52:42:c1:b5:32:ea: 1e:4b:df:ff:27:4a:4e:d9:99:e1:96:f0:f5:54:cf:68:57:af: b8:bd:e8:d6:1a:b2:89:3b:bb:10:16:5e:d2:0b:f0:a0:04:5e: 54:78:52:be:a8:c3:52:79:eb:99:ab:8d:1c:5a:8a:cc:b6:61: 6a:ce:9e:f6:ac:b7:e7:7c:cb:1b:68:09:55:39:46:40:9f:04: 7c:9c:55:3b:34:b3:37:dd:b5:f8:c9:33:3b:4d:80:ee:dd:aa: c2:53:b3:12:fd:71:6e:8f:9b:04:90:cb:91:1b:7f:97:bb:14: 13:70:5d:4f:52:29:43:c5:66:1a:f5:51:fd:44:b2:0e:98:7b: 20:ef:00:90:40:37:f0:52:74:89:11:8b:11:8b:00:36:6e:99: fa:a0:de:e3:f5:f1:48:94:a2:c2:d6:27:5c:1d:03:1d:f6:f6: 4b:56:39:43:33:fb:61:6f:ff:ee:57:84:e8:3e:ed:3c:eb:16: e6:d5:e7:fe:07:74:fe:d8:68:55:f8:2f:d5:92:1b:84:69:d7: 15:d8:dd:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB QTI4NEJENzEwHhcNMjUxMTA0MjMxNTM0WhcNMjUxMTExMjMxNTM0WjAYMRYwFAYD VQQDEw02OTBhODkxNi01ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOjYXw+w9U3z/+RQYQlnmgQlj8CDFTYrzKTi5oPhuYYYaDgG1zdRNZsZrknu 7C3N/y/2QzCZl2115buf5ZHs5poRGu7at3G/FFot90SboYm5rgGBGxjgSnv56yrk NwWN6QR0pkktqhdUfggTn7vu/mGM1Vp5cWHyHCfjVjL2AfQcRvDiXGS/ae1A8ySZ 0G/Awo8qvHY2IfBAEZyIMJX4/3Siprhtx5K+wJiz9RygOiaQcDPVTJVXjj5Cj3Xg 83pDAKLBSqlsLQyV6tUx4Ek0N4N6RAL+hAWHzw+MgnC+61HMmXUeOzV1lRwM2PAo O8Qxf+qWI6vz7h/bDBuedf3x7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiMsofM NjNQjSoBp5hahBi/S/fWMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI SV9Oc2VzSUllRlNxS0V2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyzg27AT4TrovkBx/6VQoctwCuNe0/DsQBT00EKmDp8wdY4u13exC+ 0XhY2Gk+hXtSQsG1MuoeS9//J0pO2ZnhlvD1VM9oV6+4vejWGrKJO7sQFl7SC/Cg BF5UeFK+qMNSeeuZq40cWorMtmFqzp72rLfnfMsbaAlVOUZAnwR8nFU7NLM33bX4 yTM7TYDu3arCU7MS/XFuj5sEkMuRG3+XuxQTcF1PUilDxWYa9VH9RLIOmHsg7wCQ QDfwUnSJEYsRiwA2bpn6oN7j9fFIlKLC1idcHQMd9vZLVjlDM/thb//uV4ToPu08 6xbm1ef+B3T+2GhV+C/VkhuEadcV2N13 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:41 2025 by rpki-client