$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json) Hash identifier: M13tpCEgyGXPR2+n0BTd96rP5o0DoaUupkQFvjZ80JI= Subject key identifier: 30:FA:6A:FC:87:DB:0A:CD:7D:0C:CD:DD:AD:64:40:2D:2E:82:2E:2A Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft Manifest number: 012B Signing time: Wed 05 Nov 2025 04:50:37 +0000 Manifest this update: Wed 05 Nov 2025 04:50:37 +0000 Manifest next update: Wed 12 Nov 2025 04:50:37 +0000 Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: V3p8RTOw4I/a1VQE/q9ltSzvBLyAbzA+LwYBAgZ+3T0=) 2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: sah200aOwYvH7hldekVzzUV/LvL4ckSI60/32eio3go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3 Validity Not Before: Nov 5 04:50:37 2025 GMT Not After : Nov 12 04:50:37 2025 GMT Subject: CN=690ad79d-e5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:be:2d:a5:e3:f3:77:fe:02:6a:69:12:09:47: 98:98:22:21:ee:13:ad:c1:2c:ae:13:9c:92:21:b3: d4:81:1b:c2:02:7f:02:9a:6b:f0:9e:c0:af:4a:c9: 54:30:e2:38:9c:da:dd:f0:57:d7:57:a2:3a:60:b9: 5d:9c:20:1f:7c:1d:7a:8a:cf:d5:e0:c3:17:ed:de: 6a:0c:9b:fc:93:2b:43:63:2f:9f:e3:07:f2:91:13: 1c:96:2e:25:91:fa:f6:3e:07:83:c2:88:53:8c:0f: d0:75:c2:a6:f3:c0:f5:70:99:d6:75:29:eb:03:28: 7b:60:48:bd:cc:0d:eb:5d:1b:64:23:5e:7c:33:12: 2a:7d:8f:d5:7d:07:ba:e1:fa:01:c3:d6:2b:2d:c4: 01:b8:ec:ac:71:22:4c:ce:13:5f:eb:71:ad:d3:44: a6:32:2f:f0:5f:c8:5e:6f:24:aa:c9:70:5c:6f:b1: bf:4d:41:8b:d5:21:b6:18:ce:25:aa:53:c6:31:f4: 8d:71:32:a9:61:52:4f:22:3b:ca:09:bb:6b:12:05: c8:b8:a8:a0:fd:b9:d7:e6:f5:43:31:e1:1d:4e:ee: 14:b7:7b:67:0e:fd:06:3a:43:21:d3:7e:2f:2b:33: 21:84:01:82:02:f7:03:7f:d6:e9:b7:89:ed:ff:86: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FA:6A:FC:87:DB:0A:CD:7D:0C:CD:DD:AD:64:40:2D:2E:82:2E:2A X509v3 Authority Key Identifier: keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:4f:4c:f4:34:c8:9d:44:42:e0:5e:95:27:94:b2:a2:3a: cc:19:c7:a6:d5:5f:ef:fa:d2:51:96:ae:ea:31:ba:51:fa:13: c9:5f:00:78:55:30:5d:34:b1:2b:cd:62:a5:e2:52:38:91:79: 17:02:d5:37:1e:98:13:2c:fd:b4:14:2c:43:74:cb:1f:cd:42: 56:3e:18:26:d4:15:3d:11:aa:fa:63:54:49:4f:c0:a8:be:e5: 3d:29:60:bb:99:d2:00:e8:a3:bd:be:54:69:32:4d:b4:86:25: 25:03:ef:ee:00:00:e5:80:d4:09:90:cd:13:8b:4e:9e:e1:bd: 89:f4:58:74:b9:b5:88:22:6e:bc:4c:00:ee:bc:ee:46:28:b2: 1c:e1:4d:e1:44:53:64:cb:ca:13:4d:1f:6c:24:0f:05:d5:c7: dd:67:be:a9:bd:bc:be:de:69:a6:0b:47:bd:d2:82:b1:40:88: 9b:fd:63:e1:10:15:89:ff:ea:6a:8c:42:e4:d9:01:6b:ce:22: 87:f7:39:85:59:29:15:05:56:8d:31:fc:f8:13:7b:57:9a:d1: ad:1b:e1:6f:88:74:de:73:6a:c6:cb:4c:fd:78:22:32:55:24: da:31:b7:3b:ce:8b:ce:cc:18:70:44:f6:b4:c6:1a:af:e8:30: aa:31:e3:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx QTMzRTIzRTMwHhcNMjUxMTA1MDQ1MDM3WhcNMjUxMTEyMDQ1MDM3WjAYMRYwFAYD VQQDEw02OTBhZDc5ZC1lNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA774tpePzd/4CamkSCUeYmCIh7hOtwSyuE5ySIbPUgRvCAn8CmmvwnsCvSslU MOI4nNrd8FfXV6I6YLldnCAffB16is/V4MMX7d5qDJv8kytDYy+f4wfykRMcli4l kfr2PgeDwohTjA/QdcKm88D1cJnWdSnrAyh7YEi9zA3rXRtkI158MxIqfY/VfQe6 4foBw9YrLcQBuOyscSJMzhNf63Gt00SmMi/wX8hebySqyXBcb7G/TUGL1SG2GM4l qlPGMfSNcTKpYVJPIjvKCbtrEgXIuKig/bnX5vVDMeEdTu4Ut3tnDv0GOkMh034v KzMhhAGCAvcDf9bpt4nt/4aVgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD6avyH 2wrNfQzN3a1kQC0ugi4qMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4 OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs709M9DTInURC4F6VJ5SyojrMGcem1V/v+tJRlq7qMbpR+hPJXwB4 VTBdNLErzWKl4lI4kXkXAtU3HpgTLP20FCxDdMsfzUJWPhgm1BU9Ear6Y1RJT8Co vuU9KWC7mdIA6KO9vlRpMk20hiUlA+/uAADlgNQJkM0Ti06e4b2J9Fh0ubWIIm68 TADuvO5GKLIc4U3hRFNky8oTTR9sJA8F1cfdZ76pvby+3mmmC0e90oKxQIib/WPh EBWJ/+pqjELk2QFrziKH9zmFWSkVBVaNMfz4E3tXmtGtG+FviHTec2rGy0z9eCIy VSTaMbc7zovOzBhwRPa0xhqv6DCqMeNv -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:51 2025 by rpki-client