$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json) Hash identifier: RZHfFrB7NqtLei+Gp0EhD3UEcBrj8AqnAIZY3UTedFM= Subject key identifier: 56:80:8B:84:E5:A4:71:E6:B7:20:B0:D4:A9:0D:1A:40:C9:03:47:BC Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft Manifest number: 091E Signing time: Tue 04 Nov 2025 20:20:11 +0000 Manifest this update: Tue 04 Nov 2025 20:20:11 +0000 Manifest next update: Tue 11 Nov 2025 20:20:11 +0000 Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: aJqGRaVdU9OqbwtzQHbk814wvBZ0UD3NrYwv8x1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77 Validity Not Before: Nov 4 20:20:11 2025 GMT Not After : Nov 11 20:20:11 2025 GMT Subject: CN=690a5ffb-2e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:e6:80:ac:01:31:e6:08:9e:d5:01:69:06: a0:24:4d:50:36:ca:d4:d7:3d:89:45:0e:c4:a2:1e: 42:d6:bc:07:22:4b:06:bd:d2:1f:d5:e1:2e:77:8f: 09:df:a2:8b:d7:8f:23:d5:1b:79:94:01:09:8e:5e: 40:96:1a:c7:41:75:bd:2e:1f:a3:8a:84:f1:57:4d: 11:a5:59:78:eb:41:46:fc:b5:7b:13:6b:f1:98:cb: 32:44:ac:54:b7:97:76:a3:a9:d8:d8:16:e0:84:26: 19:17:53:7f:a0:a9:67:46:dd:db:3f:26:9f:37:05: cf:45:4b:d4:3c:d2:e5:6b:3e:80:39:7d:55:06:65: c4:25:6d:b6:e7:39:b2:d8:15:e2:72:5c:3d:93:0f: db:e3:85:c6:ec:18:bf:e2:2c:6b:55:24:66:09:14: 26:68:95:d5:12:d2:d0:b1:91:54:27:cb:ec:2e:1f: be:b9:e2:a8:c6:b6:09:6f:81:fe:a8:6e:32:13:1f: 60:78:32:d8:33:8b:08:8d:90:e5:ef:32:18:dc:1d: b1:9a:a2:29:e3:a2:90:ce:8b:f9:cd:fb:38:0c:3c: cf:65:f8:55:c1:dd:38:be:c3:8e:d5:b8:60:7c:8a: 5a:71:35:e4:72:00:65:0d:43:9d:be:c7:e4:97:0c: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:80:8B:84:E5:A4:71:E6:B7:20:B0:D4:A9:0D:1A:40:C9:03:47:BC X509v3 Authority Key Identifier: keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1d:22:0a:45:90:a2:e2:0b:19:15:d3:21:6c:dc:3b:68:4d: 3e:28:cb:ea:d7:02:01:06:7b:05:22:b1:b0:fe:30:ca:4c:e6: 51:1f:f7:5b:b8:0d:5b:60:da:2f:ed:9d:ca:f8:8a:4b:66:d5: 43:f5:a0:c3:36:68:38:82:21:46:97:27:96:bb:29:00:08:90: e2:df:e5:65:10:b1:46:a5:83:8e:0e:f1:f3:8c:36:f3:23:53: d2:d5:51:7a:02:24:15:06:00:7b:d9:8b:4b:1d:7e:95:c4:47: 77:83:d9:33:af:87:40:53:88:a3:b8:bd:b0:c6:17:cc:a4:49: 37:aa:46:49:bf:c0:de:8d:96:32:55:70:2a:ad:0b:c8:7a:ed: c7:85:05:24:93:97:98:f7:81:35:7a:67:e7:16:81:79:82:55: 32:94:d9:7b:06:3f:1f:34:de:82:27:b3:12:29:de:dd:9e:51: c3:a2:62:31:bf:bc:9c:80:47:ba:9a:53:d2:26:47:e2:1d:de: 0b:e3:00:2f:8d:49:d0:f5:7c:31:4d:93:74:a7:09:73:4b:d8: 3c:cc:bb:5f:d7:d1:39:54:c1:fd:0b:6c:36:ea:27:00:8c:c7: 77:61:03:97:e1:73:43:38:19:c8:ee:ac:bc:48:65:fb:70:30: b0:da:5e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCODkxMTAvBgNVBAUTKDQyOTA5ODAyNTdDNjc3MEIzNjBBRTk1NjJEQTU4OTND NjBEQURBNzcwHhcNMjUxMTA0MjAyMDExWhcNMjUxMTExMjAyMDExWjAYMRYwFAYD VQQDEw02OTBhNWZmYi0yZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvffmgKwBMeYIntUBaQagJE1QNsrU1z2JRQ7Eoh5C1rwHIksGvdIf1eEud48J 36KL148j1Rt5lAEJjl5AlhrHQXW9Lh+jioTxV00RpVl460FG/LV7E2vxmMsyRKxU t5d2o6nY2BbghCYZF1N/oKlnRt3bPyafNwXPRUvUPNLlaz6AOX1VBmXEJW225zmy 2BXiclw9kw/b44XG7Bi/4ixrVSRmCRQmaJXVEtLQsZFUJ8vsLh++ueKoxrYJb4H+ qG4yEx9geDLYM4sIjZDl7zIY3B2xmqIp46KQzov5zfs4DDzPZfhVwd04vsOO1bhg fIpacTXkcgBlDUOdvsfklwwo2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaAi4Tl pHHmtyCw1KkNGkDJA0e8MB8GA1UdIwQYMBaAFEKQmAJXxncLNgrpVi2liTxg2tp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4OS9EODM1NkJBQ0Iw NzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3czJDdWxXTGFXSlBHRGEy bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwQ1lBbGZHZHdzMkN1bFdMYVdKUEdEYTJuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4OS9EODM1NkJBQ0IwNzQxMUVBODdCNjBGNzNDNEY5QUUwMi9RcENZQWxmR2R3 czJDdWxXTGFXSlBHRGEybmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwHSIKRZCi4gsZFdMhbNw7aE0+KMvq1wIBBnsFIrGw/jDKTOZRH/db uA1bYNov7Z3K+IpLZtVD9aDDNmg4giFGlyeWuykACJDi3+VlELFGpYOODvHzjDbz I1PS1VF6AiQVBgB72YtLHX6VxEd3g9kzr4dAU4ijuL2wxhfMpEk3qkZJv8DejZYy VXAqrQvIeu3HhQUkk5eY94E1emfnFoF5glUylNl7Bj8fNN6CJ7MSKd7dnlHDomIx v7ycgEe6mlPSJkfiHd4L4wAvjUnQ9XwxTZN0pwlzS9g8zLtf19E5VMH9C2w26icA jMd3YQOX4XNDOBnI7qy8SGX7cDCw2l7I -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:48 2025 by rpki-client