$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft File: qkHKgdI-9YhhkyqtErMWkNvPEAM.mft (raw, json) Hash identifier: UzxB7XnY91MrDrWj6qurdvYPzgCbCSmHreU4XzMaDyc= Subject key identifier: 52:68:06:21:70:18:6B:48:AB:EF:1C:CB:AD:15:4F:5F:47:04:A0:98 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft Manifest number: 0C8E Signing time: Sun 02 Nov 2025 18:19:38 +0000 Manifest this update: Sun 02 Nov 2025 18:19:38 +0000 Manifest next update: Sun 09 Nov 2025 18:19:38 +0000 Files and hashes: 1: qkHKgdI-9YhhkyqtErMWkNvPEAM.crl (hash: laO9UKi7mX1qOSgpw+6XuKXeKMaNBciKVO4vO4HAKCU=) 2: 220DBB66054011EA90A20C7EC4F9AE02.roa (hash: l5CGLlauMb+Ni/lNc+v9jsE4+D1HZp9e9rAFpWt3fHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Nov 2 18:19:38 2025 GMT Not After : Nov 9 18:19:38 2025 GMT Subject: CN=6907a0ba-802b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:de:36:27:a6:3d:9a:99:37:48:b7:6e:4b: 40:ee:ad:03:20:5d:79:57:51:cd:af:fc:a8:88:3f: a7:3b:b8:34:7a:12:bb:98:eb:ed:49:40:55:2b:99: 55:f0:d6:2b:48:c2:be:a4:1b:b7:b0:93:1a:ba:e6: 87:75:23:22:39:6c:e7:10:53:c5:eb:03:ca:45:78: 17:90:b1:c4:5e:34:a2:67:36:fd:af:c2:6f:20:44: 09:12:9d:b3:fe:3a:b9:bb:1d:8e:3d:12:2e:dc:e9: 94:7e:fa:98:15:a5:51:a9:f2:16:2a:55:79:24:8e: 5a:e0:4e:00:6f:72:13:27:1f:1e:45:43:4b:97:14: 9b:42:de:8e:14:a3:86:38:bd:5a:3b:3c:3d:f2:0a: f4:33:d3:7c:37:48:aa:4e:d9:a9:d4:5b:fc:1d:9f: c9:b1:cb:3a:e9:ea:36:a9:9e:ec:a6:ec:ad:f1:1d: 2a:69:11:07:c6:05:23:69:da:0e:d6:dd:06:a0:e6: 08:89:9b:ea:1e:c0:66:e9:96:bb:77:e4:c1:00:4f: 73:c7:43:c6:66:eb:e5:49:a4:19:f2:18:20:15:9d: 4c:8f:65:a4:99:8c:f7:14:84:b9:02:3a:0c:aa:b8: 1b:95:39:2a:0c:dc:6c:72:75:cc:43:2b:da:eb:01: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:68:06:21:70:18:6B:48:AB:EF:1C:CB:AD:15:4F:5F:47:04:A0:98 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cd:57:78:be:d9:51:c9:e4:b0:73:f6:49:44:52:74:47:28: 7a:89:56:1b:1e:77:16:f4:75:ca:ba:a7:c9:e1:1e:d8:17:cb: 84:2b:d1:a8:73:66:6e:18:1e:83:5e:29:f3:c9:92:63:9e:18: c2:1c:7a:b7:d3:45:8c:27:1c:0d:5d:da:ef:3e:36:59:73:4f: c0:f9:86:63:86:6f:a5:87:14:85:a2:37:29:cd:e7:b2:1f:11: 70:58:d8:f3:73:f2:97:37:21:f3:d6:af:64:1d:ad:5c:a4:46: 7a:b9:d7:df:d6:ba:8f:5a:18:71:31:96:b0:02:47:e0:4c:f9: 4f:1a:67:f5:85:a0:85:61:da:eb:11:c0:b8:27:f9:b5:3e:c4: 4b:5e:b2:fa:c2:40:56:e2:30:3c:05:fc:09:62:75:2b:2f:b2: 88:8f:17:35:ea:4a:4e:40:81:4e:8b:28:6f:d6:93:2b:04:77: 47:5f:9d:9b:44:20:23:1b:ca:c0:82:fc:af:e3:58:04:1a:12: 10:81:ea:b9:f7:04:98:61:fd:d8:03:78:58:9b:fe:70:d2:77: 65:ba:7b:ea:5f:39:7e:ea:c1:9a:17:18:35:97:7a:eb:88:d2: 8e:a4:ae:17:9b:d6:29:6f:ee:61:05:3b:78:26:c7:cf:98:f1: c4:f8:61:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjUxMTAyMTgxOTM4WhcNMjUxMTA5MTgxOTM4WjAYMRYwFAYD VQQDEw02OTA3YTBiYS04MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVzeNiemPZqZN0i3bktA7q0DIF15V1HNr/yoiD+nO7g0ehK7mOvtSUBVK5lV 8NYrSMK+pBu3sJMauuaHdSMiOWznEFPF6wPKRXgXkLHEXjSiZzb9r8JvIEQJEp2z /jq5ux2OPRIu3OmUfvqYFaVRqfIWKlV5JI5a4E4Ab3ITJx8eRUNLlxSbQt6OFKOG OL1aOzw98gr0M9N8N0iqTtmp1Fv8HZ/Jscs66eo2qZ7spuyt8R0qaREHxgUjadoO 1t0GoOYIiZvqHsBm6Za7d+TBAE9zx0PGZuvlSaQZ8hggFZ1Mj2WkmYz3FIS5AjoM qrgblTkqDNxscnXMQyva6wFJbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJoBiFw GGtIq+8cy60VT19HBKCYMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTc0NC8zOTdGNkNENDA1MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZ aGhreXF0RXJNV2tOdlBFQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOzVd4vtlRyeSwc/ZJRFJ0Ryh6iVYbHncW9HXKuqfJ4R7YF8uEK9Go c2ZuGB6DXinzyZJjnhjCHHq300WMJxwNXdrvPjZZc0/A+YZjhm+lhxSFojcpzeey HxFwWNjzc/KXNyHz1q9kHa1cpEZ6udff1rqPWhhxMZawAkfgTPlPGmf1haCFYdrr EcC4J/m1PsRLXrL6wkBW4jA8BfwJYnUrL7KIjxc16kpOQIFOiyhv1pMrBHdHX52b RCAjG8rAgvyv41gEGhIQgeq59wSYYf3YA3hYm/5w0ndlunvqXzl+6sGaFxg1l3rr iNKOpK4Xm9Ypb+5hBTt4JsfPmPHE+GHM -----END CERTIFICATE-----Generated at Tue Nov 4 12:09:27 2025 by rpki-client