$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft File: QOlsrrGdQeDa1lL0Na0I566Anvk.mft (raw, json) Hash identifier: ZgomiGhuyjRwzylHBoAtq+iJx/Ksy7AfgQUxOFlLVmg= Subject key identifier: 99:95:E9:0E:7E:68:93:CA:4E:FA:29:10:96:0C:30:61:AC:A2:2A:35 Authority key identifier: 40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 Certificate issuer: /CN=A91BD000/serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft Manifest number: 0C6B Signing time: Sun 02 Nov 2025 18:31:37 +0000 Manifest this update: Sun 02 Nov 2025 18:31:36 +0000 Manifest next update: Sun 09 Nov 2025 18:31:36 +0000 Files and hashes: 1: QOlsrrGdQeDa1lL0Na0I566Anvk.crl (hash: Cj9NFGAdc7ZE2ozoY+7Hh4aAw9o8n+O8IDLsMnE4o7Q=) 2: A55C1282ACA311EFBA427354C4F9AE02.roa (hash: xR90gNQMnqZeX9/Y9edNzOkrUxu48WORxv+O+Po63Y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD000, serialNumber=40E96CAEB19D41E0DAD652F435AD08E7AE809EF9 Validity Not Before: Nov 2 18:31:36 2025 GMT Not After : Nov 9 18:31:36 2025 GMT Subject: CN=6907a388-b537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:58:5c:a2:ee:35:6a:68:7d:84:74:13:be: 3f:95:87:e8:09:dd:63:32:70:f2:e5:f7:92:b4:cd: 8c:25:bb:31:83:d4:cb:d5:20:59:70:ed:d2:be:3f: b6:a2:12:3d:6e:66:61:5f:d9:9e:7d:d8:90:5f:67: 7a:81:d2:dc:7c:6f:2e:58:3a:87:10:00:24:c8:04: 0b:7a:df:0d:63:79:d1:41:fc:f1:42:66:3e:b8:73: 8d:f0:7d:c0:07:18:03:0e:dc:a7:3d:d5:a3:3f:8c: 8e:4a:72:07:4b:10:94:69:16:46:52:a4:c1:23:64: 00:da:57:d1:c0:fe:4b:e7:9f:ab:31:13:8d:8d:11: 57:5c:6b:07:04:3d:20:06:4a:b6:31:91:b4:47:18: 9b:cd:b0:e0:b0:d6:39:e0:50:ee:b6:1a:dd:43:c2: 88:63:03:9a:f1:99:42:fe:54:bf:1e:a1:03:92:ff: 90:f0:81:f8:cd:92:ba:87:f0:92:02:87:00:d8:3c: ac:fb:54:90:d9:29:1e:e5:03:71:af:4b:13:5c:fb: c4:5f:fd:1f:63:92:e3:8a:ed:ec:f3:98:9f:b6:ff: 10:39:4d:ed:60:51:fd:d1:4d:79:4a:1e:19:f0:e5: 02:98:ac:b9:9d:64:50:86:b3:c6:5a:0a:05:22:1b: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:E9:0E:7E:68:93:CA:4E:FA:29:10:96:0C:30:61:AC:A2:2A:35 X509v3 Authority Key Identifier: keyid:40:E9:6C:AE:B1:9D:41:E0:DA:D6:52:F4:35:AD:08:E7:AE:80:9E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlsrrGdQeDa1lL0Na0I566Anvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD000/E6602ED20DB411EABA5C1D7FC4F9AE02/QOlsrrGdQeDa1lL0Na0I566Anvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0c:8f:e8:82:61:a6:b0:1c:17:6e:94:69:21:d2:8f:a7:8e: 43:b4:84:6b:17:d8:93:c5:df:de:cd:a5:cd:25:8e:f0:80:27: 86:93:09:0c:10:0f:b4:ae:a0:c8:38:b6:cb:3f:45:0d:86:eb: 3e:fe:c9:8b:5e:45:9b:71:9d:80:a5:c7:99:6f:0e:57:b6:a6: c8:b7:7f:aa:b6:f5:e3:28:b2:73:9d:f9:a3:5e:4f:ff:b7:6b: e2:85:30:f2:2d:05:ff:eb:d4:73:9a:74:4d:18:4e:83:fc:90: 04:74:e9:ef:c6:09:8c:8d:a2:74:ac:b1:0b:66:ae:a3:f4:08: a6:76:3e:09:2c:e7:c6:9b:ee:80:fb:93:b7:e5:40:c4:04:af: 8b:5a:ee:5a:4d:8a:e9:d6:f7:b4:26:77:00:45:62:3c:65:df: 1a:d5:64:48:46:1d:5f:75:df:5b:6b:a4:e4:bb:6f:ad:7d:b3: 9e:84:cb:3d:b3:5a:42:82:32:65:b6:2c:45:e7:80:9b:19:93: 09:c0:47:9a:fc:68:ec:ee:89:6c:02:4d:9c:6f:31:43:76:a6: 7e:ce:6d:91:97:11:49:cd:36:13:92:ee:ab:33:ca:dd:44:3a: 8f:92:f6:aa:a7:64:8f:76:6a:4f:14:0b:15:d4:c8:dc:f1:ba: 06:b4:f9:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwMDAxMTAvBgNVBAUTKDQwRTk2Q0FFQjE5RDQxRTBEQUQ2NTJGNDM1QUQwOEU3 QUU4MDlFRjkwHhcNMjUxMTAyMTgzMTM2WhcNMjUxMTA5MTgzMTM2WjAYMRYwFAYD VQQDEw02OTA3YTM4OC1iNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxidYXKLuNWpofYR0E74/lYfoCd1jMnDy5feStM2MJbsxg9TL1SBZcO3Svj+2 ohI9bmZhX9mefdiQX2d6gdLcfG8uWDqHEAAkyAQLet8NY3nRQfzxQmY+uHON8H3A BxgDDtynPdWjP4yOSnIHSxCUaRZGUqTBI2QA2lfRwP5L55+rMRONjRFXXGsHBD0g Bkq2MZG0RxibzbDgsNY54FDuthrdQ8KIYwOa8ZlC/lS/HqEDkv+Q8IH4zZK6h/CS AocA2Dys+1SQ2Ske5QNxr0sTXPvEX/0fY5Ljiu3s85iftv8QOU3tYFH90U15Sh4Z 8OUCmKy5nWRQhrPGWgoFIhslKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmV6Q5+ aJPKTvopEJYMMGGsoio1MB8GA1UdIwQYMBaAFEDpbK6xnUHg2tZS9DWtCOeugJ75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDAwMC9FNjYwMkVEMjBE QjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFlRGExbEwwTmEwSTU2NkFu dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbHNyckdkUWVEYTFsTDBOYTBJNTY2QW52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDAwMC9FNjYwMkVEMjBEQjQxMUVBQkE1QzFEN0ZDNEY5QUUwMi9RT2xzcnJHZFFl RGExbEwwTmEwSTU2NkFudmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgDI/ogmGmsBwXbpRpIdKPp45DtIRrF9iTxd/ezaXNJY7wgCeGkwkM EA+0rqDIOLbLP0UNhus+/smLXkWbcZ2ApceZbw5XtqbIt3+qtvXjKLJznfmjXk// t2vihTDyLQX/69RzmnRNGE6D/JAEdOnvxgmMjaJ0rLELZq6j9Aimdj4JLOfGm+6A +5O35UDEBK+LWu5aTYrp1ve0JncARWI8Zd8a1WRIRh1fdd9ba6Tku2+tfbOehMs9 s1pCgjJltixF54CbGZMJwEea/Gjs7olsAk2cbzFDdqZ+zm2RlxFJzTYTku6rM8rd RDqPkvaqp2SPdmpPFAsV1Mjc8boGtPl8 -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:42 2025 by rpki-client