$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: Sgx6ixsgVFSdKwgwcEW3rbrwCXgjUycUnmEHPkO8uXs= Subject key identifier: 0C:C5:35:D4:55:6F:C4:37:6A:35:E3:77:C0:0A:AF:54:94:9B:52:30 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0CC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0C9B Signing time: Tue 04 Nov 2025 18:38:30 +0000 Manifest this update: Tue 04 Nov 2025 18:38:30 +0000 Manifest next update: Tue 11 Nov 2025 18:38:30 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: b/MGKffKL3Uy4wWq1MBdV0gyy3feKis+o05CJ0hOaCg=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: F380vpOPofocBjRftATvo9zddeY6Bmha6wqzogd2g+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3267 (0xcc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Nov 4 18:38:30 2025 GMT Not After : Nov 11 18:38:30 2025 GMT Subject: CN=690a4826-0f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:de:65:66:bf:41:e6:b3:dd:a2:a4:c9:fc: b5:f4:56:e5:f8:66:8b:b8:16:4d:b2:e8:17:62:db: 90:47:d3:f2:52:72:8c:ae:1a:4b:48:40:ff:df:92: 8c:3a:a4:cc:aa:5c:c7:74:2b:3c:8d:1c:37:d8:4d: 76:7a:b9:f4:77:00:70:a0:bf:7a:ab:a2:67:8e:68: 7d:d0:48:e0:4b:2b:e0:35:6f:34:48:99:9a:92:9c: 28:cb:ba:23:eb:d0:67:5f:9c:fe:4b:2d:6e:ca:86: 6f:d7:8e:32:88:b2:34:b0:87:b7:d1:3f:cf:77:29: e5:f1:89:23:25:75:2d:29:0a:46:2c:75:78:ed:5f: 93:c3:29:e5:ea:12:e9:1e:9f:35:eb:e3:39:6d:f2: 37:88:2d:08:2e:61:9a:d8:b7:06:de:89:ff:b3:2b: d6:a4:c9:19:90:3a:eb:d5:da:cb:60:3a:38:2d:8a: 67:8c:1c:1c:63:c3:f6:0a:bc:71:8b:ad:41:08:f0: 5e:db:59:ff:d0:85:1d:1b:8f:39:e5:86:d6:75:f0: 47:bc:fa:74:ca:57:ed:a8:ad:62:ae:0d:cb:0a:c9: 2f:2e:11:f8:f5:7d:9d:e6:65:e3:ae:e0:60:ae:8b: d2:bc:a1:13:04:ca:53:ee:38:c6:81:08:89:27:f8: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C5:35:D4:55:6F:C4:37:6A:35:E3:77:C0:0A:AF:54:94:9B:52:30 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:6b:36:ff:9a:38:60:5c:6b:73:a6:93:1a:00:8e:41:96:9e: 28:8f:08:8b:33:e6:98:71:a3:3e:dd:c2:fb:cc:4d:ab:0c:2a: 8f:0e:8f:ca:cd:63:d3:96:28:cb:7a:62:5b:cf:82:2b:6f:3a: d6:58:e6:0b:e0:a2:18:c8:a1:02:b2:8e:db:b5:36:d1:49:3c: 08:99:b2:d1:e4:42:07:c4:f2:b4:e2:36:42:9b:2c:82:b7:f7: 8b:2b:0f:28:36:ca:27:5f:42:b4:81:85:32:6c:bb:c5:5f:64: 07:37:4c:e5:64:ed:fc:0b:b5:a9:54:94:89:f8:5f:5e:bf:27: b9:f4:18:0f:2e:79:12:06:d1:16:5f:c4:e4:1c:41:44:65:70: 1f:5b:a3:e2:bc:49:2c:dd:17:1c:20:6f:55:91:c8:62:7c:52: c8:19:39:12:fc:13:9a:54:66:ec:7a:8e:d6:c0:bb:93:d7:a7: 3d:35:3d:c3:75:dc:4b:bd:59:5f:22:b8:d0:8d:26:b4:6e:e3: e5:e3:ca:ce:28:e4:7a:05:9a:98:c5:f6:92:0f:b2:a4:94:48: 70:7b:a0:3b:07:2c:b8:94:d0:90:f7:1a:7f:f9:5e:09:ad:08: 7b:2e:72:2a:27:e9:59:bb:9f:27:7f:63:97:4c:7f:d2:ed:c7: 8b:4f:72:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjUxMTA0MTgzODMwWhcNMjUxMTExMTgzODMwWjAYMRYwFAYD VQQDEw02OTBhNDgyNi0wZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+/eZWa/Qeaz3aKkyfy19Fbl+GaLuBZNsugXYtuQR9PyUnKMrhpLSED/35KM OqTMqlzHdCs8jRw32E12ern0dwBwoL96q6Jnjmh90EjgSyvgNW80SJmakpwoy7oj 69BnX5z+Sy1uyoZv144yiLI0sIe30T/Pdynl8YkjJXUtKQpGLHV47V+Twynl6hLp Hp816+M5bfI3iC0ILmGa2LcG3on/syvWpMkZkDrr1drLYDo4LYpnjBwcY8P2Crxx i61BCPBe21n/0IUdG4855YbWdfBHvPp0ylftqK1irg3LCskvLhH49X2d5mXjruBg rovSvKETBMpT7jjGgQiJJ/jf7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzFNdRV b8Q3ajXjd8AKr1SUm1IwMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClazb/mjhgXGtzppMaAI5Blp4ojwiLM+aYcaM+3cL7zE2rDCqPDo/K zWPTlijLemJbz4IrbzrWWOYL4KIYyKECso7btTbRSTwImbLR5EIHxPK04jZCmyyC t/eLKw8oNsonX0K0gYUybLvFX2QHN0zlZO38C7WpVJSJ+F9evye59BgPLnkSBtEW X8TkHEFEZXAfW6PivEks3RccIG9VkchifFLIGTkS/BOaVGbseo7WwLuT16c9NT3D ddxLvVlfIrjQjSa0buPl48rOKOR6BZqYxfaSD7KklEhwe6A7Byy4lNCQ9xp/+V4J rQh7LnIqJ+lZu58nf2OXTH/S7ceLT3J8 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:44 2025 by rpki-client