$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json) Hash identifier: w8yLDaRAtZk20dvfH3vZ8/uthihyRj8OgX4WOq3c0G8= Subject key identifier: 4A:BA:FA:69:AC:34:8F:35:5E:09:8B:83:F1:D3:42:12:D6:82:46:13 Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft Manifest number: 01AB Signing time: Wed 29 Oct 2025 02:56:29 +0000 Manifest this update: Wed 29 Oct 2025 02:56:29 +0000 Manifest next update: Wed 05 Nov 2025 02:56:29 +0000 Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: JN4Gaj1DOLnR+Yp5Wr0IbF8ms6ZdID7ishTLgcZhYkg=) 2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU=) 3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 02:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: Oct 29 02:56:29 2025 GMT Not After : Nov 5 02:56:29 2025 GMT Subject: CN=6901825d-450a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:53:61:2c:fb:1c:cd:aa:be:af:2d:10:22: c4:f8:87:76:46:25:49:98:6a:db:af:8e:6c:91:d2: 66:3c:73:a7:e5:3c:e1:83:83:42:17:e9:31:86:fb: 24:ea:a8:c5:a8:02:8d:82:f5:52:43:f9:56:09:b7: 39:a3:05:25:21:63:ab:1c:4d:52:1d:67:5c:b5:9b: 4b:af:7d:47:93:1b:3d:df:03:e1:f0:23:ac:3a:98: 88:b3:e4:7e:ec:2d:3a:04:21:79:66:3c:33:e6:ce: b2:aa:78:bd:a8:ab:46:8b:23:b8:22:8e:3f:87:d7: 6a:46:e8:c5:aa:67:56:87:e8:26:c1:b3:cf:07:5a: 40:a8:39:68:8b:3c:cf:d5:73:dc:6b:56:9f:4f:48: 43:9a:53:8a:fd:07:19:64:74:90:98:3d:ef:9a:ad: 41:3c:1f:35:18:85:f3:e1:bf:0c:24:ce:8b:a3:12: 6d:e9:d3:c9:60:41:c4:c8:75:6d:02:1a:9b:99:f2: 9b:69:d1:36:9f:d1:e8:88:e2:b4:e0:5e:74:e5:02: 64:bc:37:9b:be:2a:45:2e:28:eb:28:76:72:59:27: a8:b0:16:cc:30:32:a4:9b:db:76:5a:33:e0:76:60: 17:24:79:92:6a:25:97:0b:99:ed:4a:08:23:3b:8f: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BA:FA:69:AC:34:8F:35:5E:09:8B:83:F1:D3:42:12:D6:82:46:13 X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:ad:03:3c:0f:bd:cb:9b:88:a9:6d:9b:69:c6:b1:02:11: 0d:d5:49:97:e1:26:30:f4:4a:0a:f9:6a:2b:1f:ba:14:17:15: e5:da:ee:cb:0d:06:17:69:95:6d:a4:c1:0c:08:e0:e3:7d:ee: fd:2c:70:89:89:ab:89:36:a3:6d:ef:e4:84:13:3f:d7:7e:0e: 60:15:96:e6:39:3a:ca:0f:65:19:1e:fa:19:9d:b7:08:8a:1a: 26:c4:a9:18:1a:a2:ee:ec:f7:0c:e1:74:f0:4b:7b:a8:27:8d: 11:94:cd:81:2e:fb:49:2e:3e:7c:16:1b:43:66:93:b8:4e:f7: 0f:b2:2d:69:fe:8e:a5:25:c2:74:1c:bb:ae:91:62:0f:8a:58: fe:9c:da:bc:8d:f4:0c:05:97:0c:36:6d:c8:77:69:89:cf:8a: fd:fe:37:46:81:80:54:28:e0:92:6c:f9:a7:27:2e:5a:19:92: cd:1f:63:c0:80:ef:9c:76:be:ca:d9:fa:9e:0e:7e:9c:12:19: b6:a7:b5:cb:dd:dd:5a:f2:f3:c6:0f:72:f1:f8:64:37:1f:3b: c0:70:9f:a4:79:eb:1d:0c:15:5c:be:77:17:9e:04:57:6e:b6: 2a:b2:51:3b:ca:e8:3e:8d:a1:de:52:e6:94:ec:e6:ca:b7:fb: 24:ba:54:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx NzkwQjdENDEwHhcNMjUxMDI5MDI1NjI5WhcNMjUxMTA1MDI1NjI5WjAYMRYwFAYD VQQDEw02OTAxODI1ZC00NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta9TYSz7HM2qvq8tECLE+Id2RiVJmGrbr45skdJmPHOn5Tzhg4NCF+kxhvsk 6qjFqAKNgvVSQ/lWCbc5owUlIWOrHE1SHWdctZtLr31Hkxs93wPh8COsOpiIs+R+ 7C06BCF5Zjwz5s6yqni9qKtGiyO4Io4/h9dqRujFqmdWh+gmwbPPB1pAqDloizzP 1XPca1afT0hDmlOK/QcZZHSQmD3vmq1BPB81GIXz4b8MJM6LoxJt6dPJYEHEyHVt AhqbmfKbadE2n9HoiOK04F505QJkvDebvipFLijrKHZyWSeosBbMMDKkm9t2WjPg dmAXJHmSaiWXC5ntSggjO497vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq6+mms NI81XgmLg/HTQhLWgkYTMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2 MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPba0DPA+9y5uIqW2bacaxAhEN1UmX4SYw9EoK+WorH7oUFxXl2u7L DQYXaZVtpMEMCODjfe79LHCJiauJNqNt7+SEEz/Xfg5gFZbmOTrKD2UZHvoZnbcI ihomxKkYGqLu7PcM4XTwS3uoJ40RlM2BLvtJLj58FhtDZpO4TvcPsi1p/o6lJcJ0 HLuukWIPilj+nNq8jfQMBZcMNm3Id2mJz4r9/jdGgYBUKOCSbPmnJy5aGZLNH2PA gO+cdr7K2fqeDn6cEhm2p7XL3d1a8vPGD3Lx+GQ3HzvAcJ+keesdDBVcvncXngRX brYqslE7yug+jaHeUuaU7ObKt/skulS4 -----END CERTIFICATE-----Generated at Wed Oct 29 11:05:36 2025 by rpki-client