$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft File: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json) Hash identifier: jWv1rGtu10UKMpr0MhPxRZ7UP/HRtymO+38KJ9Vt8WM= Subject key identifier: D8:0F:8F:FC:74:C7:35:B5:5D:37:E6:64:B1:8C:4F:01:34:51:42:18 Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft Manifest number: 54 Signing time: Fri 07 Nov 2025 02:30:31 +0000 Manifest this update: Fri 07 Nov 2025 02:30:30 +0000 Manifest next update: Fri 14 Nov 2025 02:30:30 +0000 Files and hashes: 1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: OsLyFLYyno8qL1fmo3GPJiBOrXh6bSKznKv+2QVW8nU=) 2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: jPnHx/VwrEHzMcIk6hG/2vteGtB6XZZVA832ptEHOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 02:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F Validity Not Before: Nov 7 02:30:30 2025 GMT Not After : Nov 14 02:30:30 2025 GMT Subject: CN=690d59c6-e10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:e8:c7:64:7c:70:63:a1:71:44:86:2e:b8: 39:9a:0b:eb:b0:cb:5a:69:5d:67:6b:fc:e5:90:42: e4:ae:7e:8d:91:12:93:ed:1b:72:f1:1c:2d:b7:4d: da:d0:4c:e1:f0:19:84:7f:b7:8c:8e:a7:24:e2:0c: ff:b1:37:a5:62:38:dc:3f:26:e6:b3:69:f3:9f:0f: 2e:21:5e:34:6b:d7:b9:de:d2:88:43:40:e8:c4:2d: c2:3f:93:6e:e2:20:63:73:66:4c:52:af:3e:4b:c5: 21:54:ad:8b:fe:60:91:5e:57:18:7c:84:af:e3:93: 78:5c:46:45:9a:35:e3:71:67:a1:89:d0:bb:bf:61: f9:5c:2d:b7:49:b2:de:7a:28:4c:db:44:df:8f:74: 3b:fd:6e:c8:65:a2:c8:db:56:1c:eb:46:81:c2:01: d9:99:8b:f1:64:38:2f:c8:6e:e3:ed:6e:14:94:cb: bc:bf:18:54:71:aa:8b:81:c7:81:12:2c:8d:83:e4: 8a:07:96:96:a2:ed:c3:44:59:22:7c:3d:5d:1d:21: 00:b8:dc:92:a3:1a:29:72:c8:d2:c5:b6:a7:24:0c: e5:ce:73:8f:05:59:14:b7:69:d1:4b:56:62:7e:26: d7:5f:4c:5e:b5:08:68:b8:cc:70:94:3d:f4:61:be: 3c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0F:8F:FC:74:C7:35:B5:5D:37:E6:64:B1:8C:4F:01:34:51:42:18 X509v3 Authority Key Identifier: keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:48:bc:63:55:09:c2:09:fe:79:d4:58:81:76:41:f0:28:9c: 65:9f:81:1e:0a:e4:35:b9:a7:72:d4:b7:6a:e3:d7:a5:a8:0e: 70:10:f5:64:54:e7:53:81:59:89:95:51:a3:b1:a9:68:83:93: 31:89:23:5b:1d:7a:c6:c1:2c:ad:83:ba:71:cc:4f:8c:37:ed: b5:e2:59:32:61:88:0d:62:65:9a:30:90:33:0e:d1:dd:bb:c0: 99:56:7b:43:ae:31:0e:3b:17:01:26:fe:f9:94:8f:29:52:29: ef:5a:b3:ae:6d:65:3d:4f:8c:f1:bf:78:25:9e:44:15:51:19: 3e:16:74:e5:2b:61:64:53:fe:6f:f9:d6:b9:03:1d:ec:10:18: f4:38:52:ea:2b:51:54:b4:95:e3:8b:8f:d7:c8:13:ae:ea:1a: 48:63:f5:10:1c:c4:7b:75:7a:b8:fd:5e:99:68:45:07:a0:2d: 88:6b:b3:24:1a:05:25:95:2b:2e:3f:be:2f:81:6b:72:6b:a3: 3c:47:3a:5e:b8:0b:42:bf:37:7a:68:bd:89:b4:b6:76:f2:76: 4f:1f:4a:c4:4e:65:ed:34:84:31:2c:19:a0:4a:62:03:a8:c7: 1d:95:65:0c:8d:2b:0b:13:dc:e3:e2:84:04:54:d4:e4:7a:9b: 5b:f8:e3:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkE0RjExMC8GA1UEBRMoRTdGNDE5MjUxQTc5NjFERjI3NEQzOUI1MzRBMjJGM0VD REIzMTAyRjAeFw0yNTExMDcwMjMwMzBaFw0yNTExMTQwMjMwMzBaMBgxFjAUBgNV BAMTDTY5MGQ1OWM2LWUxMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdwujHZHxwY6FxRIYuuDmaC+uwy1ppXWdr/OWQQuSufo2REpPtG3LxHC23TdrQ TOHwGYR/t4yOpyTiDP+xN6ViONw/JuazafOfDy4hXjRr17ne0ohDQOjELcI/k27i IGNzZkxSrz5LxSFUrYv+YJFeVxh8hK/jk3hcRkWaNeNxZ6GJ0Lu/YflcLbdJst56 KEzbRN+PdDv9bshlosjbVhzrRoHCAdmZi/FkOC/IbuPtbhSUy7y/GFRxqouBx4ES LI2D5IoHlpai7cNEWSJ8PV0dIQC43JKjGilyyNLFtqckDOXOc48FWRS3adFLVmJ+ JtdfTF61CGi4zHCUPfRhvjx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2A+P/HTH NbVdN+ZksYxPATRRQhgwHwYDVR0jBBgwFoAU5/QZJRp5Yd8nTTm1NKIvPs2zEC8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTRGLzRGNDBCRTZDM0I3 NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVD OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNV9RWkpScDVZZDhuVFRtMU5LSXZQczJ6RUM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTRGLzRGNDBCRTZDM0I3NzExRjA5N0E4QkIyNEM0RjlBRTAyLzVfUVpKUnA1WWQ4 blRUbTFOS0l2UHMyekVDOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG9IvGNVCcIJ/nnUWIF2QfAonGWfgR4K5DW5p3LUt2rj16WoDnAQ9WRU 51OBWYmVUaOxqWiDkzGJI1sdesbBLK2DunHMT4w37bXiWTJhiA1iZZowkDMO0d27 wJlWe0OuMQ47FwEm/vmUjylSKe9as65tZT1PjPG/eCWeRBVRGT4WdOUrYWRT/m/5 1rkDHewQGPQ4UuorUVS0leOLj9fIE67qGkhj9RAcxHt1erj9XploRQegLYhrsyQa BSWVKy4/vi+Ba3JrozxHOl64C0K/N3povYm0tnbydk8fSsROZe00hDEsGaBKYgOo xx2VZQyNKwsT3OPihARU1OR6m1v441E= -----END CERTIFICATE-----Generated at Fri Nov 7 11:48:13 2025 by rpki-client