$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: wBNCn5jIW7jf/MSjvEAk9IOGqeMexRwv8RIfx9IJMEI= Subject key identifier: 28:C8:FD:5B:3A:30:C7:94:33:93:5E:59:F5:E8:04:32:96:E1:74:A1 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 8A Signing time: Wed 05 Nov 2025 06:46:28 +0000 Manifest this update: Wed 05 Nov 2025 06:46:27 +0000 Manifest next update: Wed 12 Nov 2025 06:46:27 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: w3ZPStlpLN7oQOu1JKPHZTUKS8McElzlP33if/YG+AI=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Nov 5 06:46:27 2025 GMT Not After : Nov 12 06:46:27 2025 GMT Subject: CN=690af2c3-3ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:c9:0d:9e:5e:b5:4e:20:a4:66:ec:f7:25: 3b:46:f5:ef:cd:01:22:61:d7:6e:25:17:1c:9f:89: 18:3b:1d:75:dd:56:cd:9d:83:19:35:35:08:36:87: 1d:7b:fe:77:92:7a:46:f7:88:6e:3f:8f:d1:61:0b: fa:80:45:5b:8e:c2:a4:6a:05:26:58:3b:09:87:a1: 63:a6:2c:06:eb:69:8b:3b:cc:80:18:ee:60:42:9e: 50:b4:d7:60:b4:ab:7c:f5:ae:5a:7b:96:7b:9b:69: 6d:50:a1:3e:dd:49:ac:19:84:01:1d:7a:e8:82:7c: bf:96:50:ec:85:4c:78:26:70:a6:fd:6f:f3:25:db: f8:e0:39:b2:e9:12:e3:1d:13:0a:da:af:e1:06:a9: 05:97:1e:27:69:bd:5d:17:27:c6:b2:f3:0e:95:a8: a2:de:dc:08:e7:a9:d3:70:d8:f2:c2:e2:f6:fc:31: 04:89:32:53:90:2c:d8:35:8c:fa:88:6a:52:ba:b4: 6a:7a:d6:cd:0f:82:97:5c:fa:8a:24:cc:d9:e8:af: 69:74:3e:d4:82:2a:a7:0f:a1:26:f6:09:7b:89:d0: 60:c2:7d:6b:34:fe:a6:4a:3d:34:42:ab:2d:9c:65: 4e:07:1a:7e:7c:fc:6e:93:17:00:db:8a:52:4e:19: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C8:FD:5B:3A:30:C7:94:33:93:5E:59:F5:E8:04:32:96:E1:74:A1 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:13:62:d3:bd:c8:71:f5:8d:a1:91:18:92:9c:8f:69:de:f3: a0:36:d6:52:cb:b9:f1:75:03:f0:4d:05:c6:88:ca:50:9d:5a: c2:6c:01:fd:df:d7:ad:6d:eb:43:31:dd:84:b7:74:28:3c:e1: 96:e0:14:47:b9:f3:a1:e2:45:33:1b:9e:52:e0:2f:54:80:a9: f2:37:32:b8:f1:d9:35:b8:5e:fd:6b:b1:b8:76:33:d2:5c:33: 9e:61:45:d6:d3:c8:0f:5f:7d:1f:91:dc:d9:a5:d3:48:df:ec: 5e:ca:35:d6:34:20:4f:bd:89:7f:75:3e:2e:63:d2:ff:c9:59: d1:27:28:95:2a:b2:00:0f:a2:e7:03:eb:59:60:31:02:10:5c: d2:6a:4a:11:db:cc:50:84:81:3a:d2:b6:02:56:dc:6e:70:f8: 3e:15:24:2d:6a:d6:0b:d9:a4:20:ef:75:d0:13:65:8b:14:02: b9:37:71:f7:20:67:77:eb:79:6c:9d:68:3d:48:92:c0:02:2a: d2:cb:cf:2e:ca:8e:a0:91:52:02:a4:85:19:0a:6a:24:1b:6f: 46:46:8d:ea:04:e9:af:5e:4d:90:76:49:b3:68:91:03:30:b5: aa:0d:7d:6d:0f:c9:2d:12:45:16:36:7d:62:e3:4d:25:12:10: 6a:1b:97:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKDA5MDY3ODgyQ0RDMDIwMzQ5MTYxRTA5M0JGMzQ3MzFC M0Y4MjJCRDcwHhcNMjUxMTA1MDY0NjI3WhcNMjUxMTEyMDY0NjI3WjAYMRYwFAYD VQQDEw02OTBhZjJjMy0zY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUfJDZ5etU4gpGbs9yU7RvXvzQEiYdduJRccn4kYOx113VbNnYMZNTUINocd e/53knpG94huP4/RYQv6gEVbjsKkagUmWDsJh6FjpiwG62mLO8yAGO5gQp5QtNdg tKt89a5ae5Z7m2ltUKE+3UmsGYQBHXrogny/llDshUx4JnCm/W/zJdv44Dmy6RLj HRMK2q/hBqkFlx4nab1dFyfGsvMOlaii3twI56nTcNjywuL2/DEEiTJTkCzYNYz6 iGpSurRqetbND4KXXPqKJMzZ6K9pdD7UgiqnD6Em9gl7idBgwn1rNP6mSj00Qqst nGVOBxp+fPxukxcA24pSThkklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjI/Vs6 MMeUM5NeWfXoBDKW4XShMB8GA1UdIwQYMBaAFAkGeILNwCA0kWHgk780cxs/givX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GM0QyMkMyQ0U3 NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlEU1JZZUNUdnpSekd6LUNL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GM0QyMkMyQ0U3NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlE U1JZZUNUdnpSekd6LUNLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAME2LTvchx9Y2hkRiSnI9p3vOgNtZSy7nxdQPwTQXGiMpQnVrCbAH9 39etbetDMd2Et3QoPOGW4BRHufOh4kUzG55S4C9UgKnyNzK48dk1uF79a7G4djPS XDOeYUXW08gPX30fkdzZpdNI3+xeyjXWNCBPvYl/dT4uY9L/yVnRJyiVKrIAD6Ln A+tZYDECEFzSakoR28xQhIE60rYCVtxucPg+FSQtatYL2aQg73XQE2WLFAK5N3H3 IGd363lsnWg9SJLAAirSy88uyo6gkVICpIUZCmokG29GRo3qBOmvXk2QdkmzaJED MLWqDX1tD8ktEkUWNn1i400lEhBqG5dd -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:36 2025 by rpki-client