$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json) Hash identifier: iVWnzCLLbXsDM/ArctlRqsnoqiilk/dUIY8MkN3ZTqo= Subject key identifier: 5E:C7:D9:65:EC:60:23:93:52:ED:5D:6B:A7:25:FE:D3:3C:5E:74:8D Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 028B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft Manifest number: 0278 Signing time: Sat 01 Nov 2025 01:58:59 +0000 Manifest this update: Sat 01 Nov 2025 01:58:58 +0000 Manifest next update: Sat 08 Nov 2025 01:58:58 +0000 Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: zTQM3081lrRix/RBCGKhkhLWLulXyjj5N6mXgecIDng=) 2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=) 3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=) 4: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: rj4BSUozmBkphVBEoUkEwSqqxoFitssfBqyMGi95Tf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 651 (0x28b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Nov 1 01:58:58 2025 GMT Not After : Nov 8 01:58:58 2025 GMT Subject: CN=69056962-8522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4c:8b:bb:bc:70:ba:47:70:a6:86:46:c9:fe: 05:10:c9:ef:ea:41:32:a3:ac:9d:37:f5:33:ef:df: f0:b4:c6:c5:32:59:be:b6:77:24:15:12:d7:12:66: 92:19:ec:8d:bb:66:d3:d9:52:59:00:b5:31:e0:0a: ae:d9:81:32:1a:58:1b:a8:b2:4c:d6:c0:6d:38:34: 4d:9d:d5:09:24:5e:a3:a9:47:dc:fb:f8:f2:c2:86: 3e:a5:ed:6a:58:c5:2d:72:a3:52:b1:fd:ab:d7:f4: fd:2d:9a:74:c3:23:3d:e7:ac:eb:57:7e:84:7b:09: b9:19:6f:04:63:32:ed:5a:93:b0:a3:df:cb:b5:c2: a1:a1:39:c1:69:2e:a8:3c:ea:25:44:4f:24:60:41: 90:ad:9b:43:71:f1:3c:d8:57:83:30:48:68:9b:e7: 1b:64:4a:0c:29:37:20:6d:32:d4:79:53:26:9c:86: 8c:bf:b8:fe:6a:92:0e:21:7d:db:a9:d5:63:04:f0: 09:25:0b:f5:64:ef:0b:5c:f8:a9:6b:92:8e:a1:c6: 16:f5:e4:98:bf:6e:62:8d:ce:0a:72:22:2d:3e:a5: c1:bd:a5:eb:0e:de:53:49:40:ad:29:18:b9:df:52: 3d:0c:b5:dc:a4:54:3d:00:1c:05:48:53:ee:33:95: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C7:D9:65:EC:60:23:93:52:ED:5D:6B:A7:25:FE:D3:3C:5E:74:8D X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:0e:01:ad:79:dd:7e:c8:76:bc:fd:8a:a5:50:a3:ed:56:07: cf:6b:2b:32:8a:68:71:6d:a1:68:89:6e:e0:78:2c:1c:7b:2c: 60:8c:03:93:57:e7:37:03:6a:bc:0c:b0:0e:c6:5c:bb:38:4d: fd:aa:e0:c1:95:d0:ae:37:e0:cf:76:82:5f:79:33:7f:2f:7c: fe:56:ae:34:c6:ab:85:58:8b:68:6b:69:e7:f8:de:28:fb:49: 8a:d0:ec:6a:76:89:ae:8c:2f:a2:38:40:73:2a:a3:70:40:07: 4e:86:00:d4:03:76:33:9e:c9:6e:9b:f5:d0:38:5f:42:d8:51: 4f:d4:f3:c0:d3:8d:ca:0e:e9:22:d4:28:90:37:7e:d7:5c:2d: da:7a:d3:f7:99:56:f8:50:88:f7:21:01:18:6f:88:ee:d0:02: c6:0d:ce:b1:5c:fc:af:d5:a5:09:ea:61:64:0d:06:66:35:61: 43:b7:a9:7f:fc:41:b4:43:36:9d:57:3b:c4:40:23:b5:01:c7: 44:9d:c7:67:13:0d:c0:b9:ec:dc:37:b6:35:73:48:3e:e4:a1: 07:e8:10:9a:1c:3f:85:fc:85:47:cf:94:c7:dc:16:10:db:b4: eb:90:e4:e6:f2:29:53:cf:4c:0e:b7:ee:19:85:fe:c8:73:0f: 7f:e5:55:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUxMTAxMDE1ODU4WhcNMjUxMTA4MDE1ODU4WjAYMRYwFAYD VQQDEw02OTA1Njk2Mi04NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EyLu7xwukdwpoZGyf4FEMnv6kEyo6ydN/Uz79/wtMbFMlm+tnckFRLXEmaS GeyNu2bT2VJZALUx4Aqu2YEyGlgbqLJM1sBtODRNndUJJF6jqUfc+/jywoY+pe1q WMUtcqNSsf2r1/T9LZp0wyM956zrV36Eewm5GW8EYzLtWpOwo9/LtcKhoTnBaS6o POolRE8kYEGQrZtDcfE82FeDMEhom+cbZEoMKTcgbTLUeVMmnIaMv7j+apIOIX3b qdVjBPAJJQv1ZO8LXPipa5KOocYW9eSYv25ijc4KciItPqXBvaXrDt5TSUCtKRi5 31I9DLXcpFQ9ABwFSFPuM5W6PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7H2WXs YCOTUu1da6cl/tM8XnSNMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ENDc2RUQ3NjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5p UVVLNnFiV3ZvRk5JR2pjWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgDgGted1+yHa8/YqlUKPtVgfPaysyimhxbaFoiW7geCwceyxgjAOT V+c3A2q8DLAOxly7OE39quDBldCuN+DPdoJfeTN/L3z+Vq40xquFWItoa2nn+N4o +0mK0OxqdomujC+iOEBzKqNwQAdOhgDUA3Yznslum/XQOF9C2FFP1PPA043KDuki 1CiQN37XXC3aetP3mVb4UIj3IQEYb4ju0ALGDc6xXPyv1aUJ6mFkDQZmNWFDt6l/ /EG0QzadVzvEQCO1AcdEncdnEw3AuezcN7Y1c0g+5KEH6BCaHD+F/IVHz5TH3BYQ 27TrkOTm8ilTz0wOt+4Zhf7Icw9/5VXC -----END CERTIFICATE-----Generated at Sat Nov 1 23:10:06 2025 by rpki-client