$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft File: QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json) Hash identifier: HFKvAao96VtSKlfNY3+Xgl0rxr1+9BQP2iEGxiQc0Ng= Subject key identifier: 86:4F:EB:3F:7D:75:B5:C8:B3:5A:F1:75:B9:3A:07:EF:C3:B4:20:CA Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA Certificate issuer: /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft Manifest number: E9 Signing time: Wed 05 Nov 2025 05:30:48 +0000 Manifest this update: Wed 05 Nov 2025 05:30:48 +0000 Manifest next update: Wed 12 Nov 2025 05:30:47 +0000 Files and hashes: 1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: 9qwvchWnw/nRBIoto6tzLWtBMQ4XehPL9tBc+1lG0mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA Validity Not Before: Nov 5 05:30:48 2025 GMT Not After : Nov 12 05:30:47 2025 GMT Subject: CN=690ae108-b2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:a8:a4:60:51:29:7b:c0:b5:d8:38:6d:93: f8:69:96:65:e7:95:30:25:46:83:53:13:57:6c:eb: 5e:b1:ad:74:62:e6:a9:80:bd:4d:6f:34:99:7c:77: 5a:b7:ed:4c:5e:44:a5:fc:e1:0c:5d:f2:4e:e8:7b: af:a0:f1:d9:4e:f0:66:55:0d:91:e3:d4:ab:aa:03: 2f:83:50:21:9f:bb:a9:e4:61:1b:83:de:c2:1f:79: a0:67:dc:f7:f6:54:7a:31:b9:d5:88:2d:cd:73:21: a2:1a:e9:10:e6:09:20:3c:03:05:73:0c:e0:b7:a2: 4d:6b:84:61:49:e5:30:65:4a:1f:d8:d5:76:11:bc: 68:eb:28:61:b8:7b:4e:ba:f7:70:be:cc:eb:97:b9: 38:a3:b7:d0:fc:68:cb:d9:81:39:26:6d:f0:29:50: 00:2f:9c:a1:da:01:da:ed:20:54:57:05:dc:ad:fd: ab:c3:8f:32:ce:bf:03:b1:16:32:c7:b9:f3:26:63: 5b:49:72:6c:9b:b4:20:84:8b:7c:8d:36:eb:1a:d9: 0d:a2:4b:3f:6a:ee:a1:ad:46:f4:98:ed:68:b8:2f: 7e:b6:2b:95:d0:50:d0:89:4e:80:f9:c9:95:43:e9: c1:e4:2f:02:98:72:6f:48:77:4b:80:2b:f6:d3:42: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4F:EB:3F:7D:75:B5:C8:B3:5A:F1:75:B9:3A:07:EF:C3:B4:20:CA X509v3 Authority Key Identifier: keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:06:ba:a6:1a:d0:9a:c8:f3:63:fb:bf:42:9e:9a:a5:ee:ee: 82:f8:91:ed:bb:ce:22:e6:de:f5:65:8c:2f:9d:2b:ca:d4:97: af:0e:cd:f6:24:95:66:8e:1c:04:69:54:78:0c:2d:ba:b9:ec: 5b:5d:e0:86:17:ed:00:76:ba:84:86:60:a6:c0:e8:25:1e:5e: 47:58:cc:78:27:21:ed:53:14:87:57:ad:10:e2:3b:de:43:10: 6a:17:78:15:ef:c4:3e:2f:f1:3c:06:4b:a4:b2:6e:6f:b7:1e: c1:6a:08:2d:58:9b:8b:6f:8d:78:a9:1d:17:c5:7d:e1:cb:86: e6:75:ca:f4:db:49:7c:30:a8:f3:33:69:b2:1d:7a:24:3d:8b: 0b:d1:16:70:a9:c7:5e:88:be:a9:dc:03:27:ab:c6:26:0c:34: 00:26:8c:fd:33:9c:94:dc:27:16:f1:e3:6b:e2:85:f5:61:d0: 28:e4:b1:60:77:af:04:33:ee:38:4b:ab:f7:e4:7d:53:b3:85: d1:af:45:3b:3d:ce:15:17:fa:ad:74:89:76:ee:ad:eb:ac:fb: 0c:76:0f:c7:51:08:68:33:dd:12:d6:1b:8f:63:a2:53:ab:44: 1e:4f:b5:0c:0d:aa:96:a8:90:1b:3b:f9:83:3c:28:bf:32:fa: da:38:f5:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKDQwMUMxQTM2MzRGOTg3Q0U5RjlFNUNFRjU0MDlEQzFC RDBGRjJCQUEwHhcNMjUxMTA1MDUzMDQ4WhcNMjUxMTEyMDUzMDQ3WjAYMRYwFAYD VQQDEw02OTBhZTEwOC1iMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5uopGBRKXvAtdg4bZP4aZZl55UwJUaDUxNXbOtesa10YuapgL1NbzSZfHda t+1MXkSl/OEMXfJO6HuvoPHZTvBmVQ2R49SrqgMvg1Ahn7up5GEbg97CH3mgZ9z3 9lR6MbnViC3NcyGiGukQ5gkgPAMFcwzgt6JNa4RhSeUwZUof2NV2Ebxo6yhhuHtO uvdwvszrl7k4o7fQ/GjL2YE5Jm3wKVAAL5yh2gHa7SBUVwXcrf2rw48yzr8DsRYy x7nzJmNbSXJsm7QghIt8jTbrGtkNoks/au6hrUb0mO1ouC9+tiuV0FDQiU6A+cmV Q+nB5C8CmHJvSHdLgCv200J4RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZP6z99 dbXIs1rxdbk6B+/DtCDKMB8GA1UdIwQYMBaAFEAcGjY0+YfOn55c71QJ3BvQ/yuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny83NkYyNjdGQTU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4NmZubHp2VkFuY0c5RF9L Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCd2FOalQ1aDg2Zm5senZWQW5jRzlEX0s2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny83NkYyNjdGQTU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9RQndhTmpUNWg4 NmZubHp2VkFuY0c5RF9LNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQBrqmGtCayPNj+79Cnpql7u6C+JHtu84i5t71ZYwvnSvK1JevDs32 JJVmjhwEaVR4DC26uexbXeCGF+0AdrqEhmCmwOglHl5HWMx4JyHtUxSHV60Q4jve QxBqF3gV78Q+L/E8Bkuksm5vtx7BaggtWJuLb414qR0XxX3hy4bmdcr020l8MKjz M2myHXokPYsL0RZwqcdeiL6p3AMnq8YmDDQAJoz9M5yU3CcW8eNr4oX1YdAo5LFg d68EM+44S6v35H1Ts4XRr0U7Pc4VF/qtdIl27q3rrPsMdg/HUQhoM90S1huPY6JT q0QeT7UMDaqWqJAbO/mDPCi/MvraOPXP -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:44 2025 by rpki-client