$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json) Hash identifier: gbnAz0Yl6Dl3WlvuCJ7tlL90nyN6pQpiuWXKjHaFQrg= Subject key identifier: 50:B9:ED:D6:2F:CD:3F:CB:ED:AF:5B:8C:17:4C:55:D2:65:52:6E:68 Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Certificate serial: 0912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft Manifest number: 090A Signing time: Tue 04 Nov 2025 20:23:51 +0000 Manifest this update: Tue 04 Nov 2025 20:23:51 +0000 Manifest next update: Tue 11 Nov 2025 20:23:51 +0000 Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: dA2XnJisarLfvtFDaGXYiJeKc6Vv66xxWMCv7ocb9WA=) 2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD Validity Not Before: Nov 4 20:23:51 2025 GMT Not After : Nov 11 20:23:51 2025 GMT Subject: CN=690a60d7-2f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:46:7a:59:fa:59:29:9c:eb:53:18:3d:8d: f5:40:f1:a2:df:50:6e:10:1e:3e:50:e6:04:5d:fc: 83:d9:a0:bd:73:cd:ca:32:b0:ee:75:d2:79:9c:e4: ef:ec:54:be:ce:ac:77:1c:ec:ac:cd:f4:09:a3:b8: 80:8a:17:08:c0:3d:de:33:ae:a1:a2:82:3b:d3:ea: 2b:79:8e:14:ea:c7:53:f7:90:76:69:0b:e4:4d:61: 20:cd:22:7b:1e:3c:40:17:56:cd:f3:75:e6:6d:bb: 09:7d:17:2e:f2:3d:99:29:9c:11:3c:b6:63:85:c6: 37:ca:6f:16:8e:d9:3f:66:8a:7f:46:33:de:0c:e6: f5:a0:b5:6c:1e:02:5a:ef:9c:27:b0:61:87:5f:d1: 55:02:b1:b7:92:1d:87:bd:7b:1a:fb:a2:d3:d0:5a: 67:d6:38:66:2d:b8:2a:d1:fe:fd:c8:d1:e8:e4:e7: 83:3f:19:09:63:34:c5:a8:7a:1f:b6:5d:02:a1:32: d1:07:28:77:fc:e2:07:5b:ad:78:ad:c7:75:26:e0: f6:1d:9f:7f:b0:2f:30:37:02:f8:1d:c1:6f:e8:68: 1c:8e:95:e6:65:ce:d2:a8:10:8f:d0:d4:3c:f8:a2: 7d:51:11:fd:82:86:fb:41:42:8b:95:cd:61:9d:56: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:ED:D6:2F:CD:3F:CB:ED:AF:5B:8C:17:4C:55:D2:65:52:6E:68 X509v3 Authority Key Identifier: keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:27:e5:54:df:fd:4a:5a:4a:9e:08:52:bd:2d:3e:93:2e:76: 78:6d:3f:9e:3d:1d:04:8b:f6:c0:61:21:41:ee:a1:4b:18:c9: 62:5b:52:cc:b4:80:13:a9:1d:32:9a:e2:f7:9a:5f:d7:0d:4e: 71:4b:22:41:82:a0:0b:4b:9d:46:50:29:d6:85:4e:3e:c7:20: 4d:ce:6d:73:16:57:33:23:a2:bb:4b:cd:6a:83:6f:71:0f:d2: ea:04:12:7c:28:8a:06:a0:42:b7:07:17:a4:6b:e4:79:7b:a5: 64:15:c6:60:6a:e3:6e:0b:6a:89:07:e5:a3:69:b5:21:60:cb: 42:af:2f:9c:50:a6:92:1b:b4:54:8c:ae:1a:99:a0:63:b2:f6: 57:08:f3:05:fc:b7:2b:99:80:0e:d2:62:e3:0c:31:5b:eb:91: 6f:a7:16:59:39:93:70:b6:17:b7:0a:7b:1f:c3:b1:51:8c:ae: 67:c6:b7:e3:e3:27:b7:20:97:6c:1b:73:3b:82:0c:30:a4:75: 79:c7:ba:90:f2:9c:43:6f:4d:bc:f9:a0:94:36:95:09:9f:00: a0:4a:04:b7:bb:1a:93:27:7f:51:9b:d4:ed:07:83:39:3e:f2: 40:9f:af:70:74:19:f8:da:09:30:6d:95:23:96:98:24:56:51: b1:38:7f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZERjMxMTAvBgNVBAUTKEFCM0RCNjM1RDg1MzYwMUU0QkE1NTUwMDY3MTIwMUQ4 OTZGRUNEQUQwHhcNMjUxMTA0MjAyMzUxWhcNMjUxMTExMjAyMzUxWjAYMRYwFAYD VQQDEw02OTBhNjBkNy0yZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mpGeln6WSmc61MYPY31QPGi31BuEB4+UOYEXfyD2aC9c83KMrDuddJ5nOTv 7FS+zqx3HOyszfQJo7iAihcIwD3eM66hooI70+oreY4U6sdT95B2aQvkTWEgzSJ7 HjxAF1bN83XmbbsJfRcu8j2ZKZwRPLZjhcY3ym8Wjtk/Zop/RjPeDOb1oLVsHgJa 75wnsGGHX9FVArG3kh2HvXsa+6LT0Fpn1jhmLbgq0f79yNHo5OeDPxkJYzTFqHof tl0CoTLRByh3/OIHW614rcd1JuD2HZ9/sC8wNwL4HcFv6GgcjpXmZc7SqBCP0NQ8 +KJ9URH9gob7QUKLlc1hnVZjFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFC57dYv zT/L7a9bjBdMVdJlUm5oMB8GA1UdIwQYMBaAFKs9tjXYU2AeS6VVAGcSAdiW/s2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkRGMy9CM0E4NTJCMkI1 RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlCNUxwVlVBWnhJQjJKYi16 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6MjJOZGhUWUI1THBWVUFaeElCMkpiLXphMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkRGMy9CM0E4NTJCMkI1RDkxMUVBQTZCODg3NTRDNEY5QUUwMi9xejIyTmRoVFlC NUxwVlVBWnhJQjJKYi16YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmJ+VU3/1KWkqeCFK9LT6TLnZ4bT+ePR0Ei/bAYSFB7qFLGMliW1LM tIATqR0ymuL3ml/XDU5xSyJBgqALS51GUCnWhU4+xyBNzm1zFlczI6K7S81qg29x D9LqBBJ8KIoGoEK3Bxeka+R5e6VkFcZgauNuC2qJB+WjabUhYMtCry+cUKaSG7RU jK4amaBjsvZXCPMF/LcrmYAO0mLjDDFb65FvpxZZOZNwthe3Cnsfw7FRjK5nxrfj 4ye3IJdsG3M7ggwwpHV5x7qQ8pxDb028+aCUNpUJnwCgSgS3uxqTJ39Rm9TtB4M5 PvJAn69wdBn42gkwbZUjlpgkVlGxOH8g -----END CERTIFICATE-----Generated at Wed Nov 5 05:21:24 2025 by rpki-client