$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: gVsv8E+zldkq+WCr+I68y/9HnhZgLkkCU1aSRNBegWI= Subject key identifier: 03:C0:4E:72:91:1D:5E:70:04:27:D2:DF:05:91:1B:A0:8F:15:D4:9B Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 07:56:59 +0000 Manifest this update: Mon 03 Nov 2025 07:56:58 +0000 Manifest next update: Mon 10 Nov 2025 07:56:58 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: Uj5Q+9A0tOnf1QBufmPJLwVO2pzh1I7eCT60lYPDnk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Nov 3 07:56:58 2025 GMT Not After : Nov 10 07:56:58 2025 GMT Subject: CN=6908604a-2e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:22:2c:92:d6:9e:cf:f7:84:3a:75:12:4b: 1f:b9:28:5f:47:61:00:a9:62:d3:a7:89:ed:17:15: 7b:8e:1e:3f:bd:df:c5:c3:ed:83:c8:72:03:b3:29: 14:a3:07:0a:fd:57:65:4a:8d:a0:0e:a4:74:27:b7: a8:8b:aa:29:f4:63:47:fd:7d:7d:f6:e1:a9:4b:8f: b1:04:8b:f3:e9:7a:0a:d2:9e:9d:84:a3:22:34:df: 1a:a4:f6:70:33:68:a9:90:30:6a:e5:26:e5:aa:9c: c6:e7:29:e4:11:ed:d2:7e:7a:8b:5a:f0:cc:60:01: 82:d2:dd:47:84:03:94:70:8d:c4:79:c2:d7:09:28: 09:3a:5e:af:0a:cb:9b:64:63:f9:ff:a3:14:2d:0b: 89:21:41:b0:83:21:42:fc:d4:17:ae:e6:a8:61:01: 0f:4f:75:e5:3d:ac:64:4b:52:31:90:84:aa:ed:90: e1:50:d1:a0:de:56:93:86:90:0b:17:15:16:51:84: ae:7e:9b:93:57:9c:87:07:87:92:2f:8d:1e:eb:15: f3:4c:f4:9b:22:81:ab:ea:ca:ee:fb:98:40:f0:76: ed:41:b5:a7:6c:02:0e:8c:77:c4:f5:3e:bd:f3:dd: 77:ba:f5:05:f7:0e:0f:8b:f3:cf:15:8f:f7:4f:f5: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C0:4E:72:91:1D:5E:70:04:27:D2:DF:05:91:1B:A0:8F:15:D4:9B X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:87:6f:01:c9:68:f5:f0:fc:cd:33:5f:67:3b:2c:2f:c1:9b: 43:60:a7:73:f0:71:f7:a7:83:28:19:c3:5a:7e:ba:75:ff:3d: d7:54:37:c5:41:67:78:17:cc:e4:fc:bf:03:f2:15:d5:bb:fe: c9:32:8e:33:54:d7:b7:cb:9b:47:81:f0:50:52:92:e2:36:74: ef:8f:0d:d6:74:76:b9:0b:78:4a:83:7d:6a:05:2e:53:aa:03: 47:9e:32:c8:1c:e7:b3:bb:5d:1f:5e:39:48:b1:97:90:bc:95: a9:1c:b2:61:2f:77:1e:de:d6:da:85:2b:54:04:0a:eb:9b:9c: ba:cf:b3:5f:f3:c8:64:de:c1:89:f9:97:be:9a:49:51:7b:75: fa:ac:d6:03:e3:b8:99:1f:79:b2:91:72:52:e6:58:b1:e2:a5: 20:ac:3a:55:b4:6b:f3:70:fd:7b:a3:7d:1e:9b:74:fe:8d:8e: f6:0b:a0:da:d6:85:f8:21:9a:76:13:b2:5a:05:7c:f1:b3:7b: 80:91:00:4f:4b:c5:76:73:4b:0f:8b:6b:16:c1:81:63:e8:56: 0b:f8:67:b7:18:8d:46:19:8d:ca:d7:e7:5a:66:83:53:04:03: 9e:c8:65:63:37:f4:47:6f:71:a4:cb:f6:83:53:dc:b2:a6:d5: 43:88:bd:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNTExMDMwNzU2NThaFw0yNTExMTAwNzU2NThaMBgxFjAUBgNV BAMTDTY5MDg2MDRhLTJlOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsaCIsktaez/eEOnUSSx+5KF9HYQCpYtOnie0XFXuOHj+938XD7YPIcgOzKRSj Bwr9V2VKjaAOpHQnt6iLqin0Y0f9fX324alLj7EEi/PpegrSnp2EoyI03xqk9nAz aKmQMGrlJuWqnMbnKeQR7dJ+eota8MxgAYLS3UeEA5RwjcR5wtcJKAk6Xq8Ky5tk Y/n/oxQtC4khQbCDIUL81Beu5qhhAQ9PdeU9rGRLUjGQhKrtkOFQ0aDeVpOGkAsX FRZRhK5+m5NXnIcHh5IvjR7rFfNM9Jsigavqyu77mEDwdu1BtadsAg6Md8T1Pr3z 3Xe69QX3Dg+L888Vj/dP9Z7ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA8BOcpEd XnAEJ9LfBZEboI8V1JswHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALiHbwHJaPXw/M0zX2c7LC/Bm0Ngp3PwcfengygZw1p+unX/PddUN8VB Z3gXzOT8vwPyFdW7/skyjjNU17fLm0eB8FBSkuI2dO+PDdZ0drkLeEqDfWoFLlOq A0eeMsgc57O7XR9eOUixl5C8lakcsmEvdx7e1tqFK1QECuubnLrPs1/zyGTewYn5 l76aSVF7dfqs1gPjuJkfebKRclLmWLHipSCsOlW0a/Nw/XujfR6bdP6NjvYLoNrW hfghmnYTsloFfPGze4CRAE9LxXZzSw+LaxbBgWPoVgv4Z7cYjUYZjcrX51pmg1ME A57IZWM39EdvcaTL9oNT3LKm1UOIvTk= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:42 2025 by rpki-client