$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: VLGInlrw80BvpibB584Pc2q4dIs4VFc+M18tCAKzIho= Subject key identifier: 5A:41:36:4F:FA:11:4C:9C:A6:C8:12:94:01:5E:74:1F:AA:D7:B4:19 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 1892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 1886 Signing time: Tue 04 Nov 2025 16:35:10 +0000 Manifest this update: Tue 04 Nov 2025 16:35:10 +0000 Manifest next update: Tue 11 Nov 2025 16:35:10 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: CENCrrGPwLMs6neQcDV0jlCt23YOylfSeSdYwDh56lY=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6290 (0x1892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Nov 4 16:35:10 2025 GMT Not After : Nov 11 16:35:10 2025 GMT Subject: CN=690a2b3e-97b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:b9:9f:f5:aa:d6:27:ee:34:4b:6f:bc:df: 3b:df:d9:a7:1a:8b:c2:2c:64:cf:26:c3:ff:87:e8: 69:2a:54:3a:b8:b7:73:6f:1d:dd:e6:bd:9d:c2:38: 54:db:d5:25:72:99:94:f4:99:f2:32:39:9f:fc:53: 50:d0:29:70:c7:5c:f9:a9:f1:79:eb:63:9a:9e:9e: 65:d1:87:56:ba:ef:01:ba:69:f9:17:73:2a:a3:b5: ae:ce:6a:5d:a8:46:37:dd:46:fa:ec:34:f7:89:2f: d8:bd:47:31:6c:fb:27:8b:82:78:ae:41:26:e2:f4: 7e:56:32:ef:55:46:ea:3a:16:20:8d:51:21:21:35: 76:e9:c2:bc:e2:19:ce:f3:64:dd:74:f4:84:9d:e5: 44:8f:b8:f3:f3:7b:f1:29:a4:d4:30:4e:80:a1:27: 43:7a:2c:1c:a4:17:00:f9:f5:92:8d:11:f8:83:52: 98:aa:d1:36:ae:dd:5f:71:a9:e5:bd:1d:a1:f2:69: 21:df:5d:b3:2c:ac:ec:e4:fd:8d:33:96:71:20:18: 37:5a:62:8b:fc:2a:10:23:44:ab:59:7d:ff:d6:dd: 6d:cb:98:e0:e7:06:0f:01:4c:5a:30:f5:63:92:aa: 54:e4:85:91:36:ef:af:6a:26:64:58:42:24:9c:d0: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:36:4F:FA:11:4C:9C:A6:C8:12:94:01:5E:74:1F:AA:D7:B4:19 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:cc:be:54:cc:12:33:69:73:ed:86:6b:fb:1d:f0:2c:32: 56:48:7c:4e:2d:9f:91:ac:b2:fd:0f:87:91:c7:c7:25:52:8a: 74:f6:de:05:30:40:58:91:91:97:e7:7d:18:68:7d:be:27:3c: e9:24:83:a4:a2:a3:19:70:0d:92:7d:d0:9e:1e:66:03:9d:68: d6:7f:cb:64:7c:d6:d5:09:f2:7f:31:e8:c4:c6:a1:74:fd:34: c6:d1:d7:4b:90:29:d9:4b:fe:71:96:49:a2:fd:a8:3d:8e:7c: 3d:e4:85:dd:7d:9a:c8:91:de:5b:70:80:5b:cd:99:ff:1d:1e: 16:5a:2c:1f:7e:c3:89:d2:0f:58:75:b5:8d:96:1a:b6:3f:8d: 98:74:ed:5f:86:c9:50:50:5f:e1:00:59:55:46:d5:cd:eb:1c: 63:f0:03:e5:c6:d6:95:17:a0:b4:de:cf:2a:ab:00:74:a8:83: 74:7d:ce:ff:08:73:d7:27:f7:78:fb:c9:a2:05:12:f9:51:48: 42:93:77:11:76:14:a0:be:f4:82:70:c3:b1:06:53:c5:b6:4f: 0b:05:f3:dd:e7:c0:f1:01:b5:e8:e1:b8:fd:25:72:01:bc:b3: 0a:96:8e:4f:4a:f2:3d:e1:72:ce:75:24:cf:82:4f:26:57:c4: cd:22:4f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUxMTA0MTYzNTEwWhcNMjUxMTExMTYzNTEwWjAYMRYwFAYD VQQDEw02OTBhMmIzZS05N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xG5n/Wq1ifuNEtvvN8739mnGovCLGTPJsP/h+hpKlQ6uLdzbx3d5r2dwjhU 29UlcpmU9JnyMjmf/FNQ0Clwx1z5qfF562Oanp5l0YdWuu8Bumn5F3Mqo7Wuzmpd qEY33Ub67DT3iS/YvUcxbPsni4J4rkEm4vR+VjLvVUbqOhYgjVEhITV26cK84hnO 82TddPSEneVEj7jz83vxKaTUME6AoSdDeiwcpBcA+fWSjRH4g1KYqtE2rt1fcanl vR2h8mkh312zLKzs5P2NM5ZxIBg3WmKL/CoQI0SrWX3/1t1ty5jg5wYPAUxaMPVj kqpU5IWRNu+vaiZkWEIknNDx+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpBNk/6 EUycpsgSlAFedB+q17QZMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkMMy+VMwSM2lz7YZr+x3wLDJWSHxOLZ+RrLL9D4eRx8clUop09t4F MEBYkZGX530YaH2+JzzpJIOkoqMZcA2SfdCeHmYDnWjWf8tkfNbVCfJ/MejExqF0 /TTG0ddLkCnZS/5xlkmi/ag9jnw95IXdfZrIkd5bcIBbzZn/HR4WWiwffsOJ0g9Y dbWNlhq2P42YdO1fhslQUF/hAFlVRtXN6xxj8APlxtaVF6C03s8qqwB0qIN0fc7/ CHPXJ/d4+8miBRL5UUhCk3cRdhSgvvSCcMOxBlPFtk8LBfPd58DxAbXo4bj9JXIB vLMKlo5PSvI94XLOdSTPgk8mV8TNIk95 -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:47 2025 by rpki-client