$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: 4SnldOKMvrJDn/EJJZdMeeWPwuVmJYSEK0Jgh7eaKeg= Subject key identifier: 33:1A:AB:2B:3B:A8:65:72:0C:EF:75:8D:3D:70:89:29:57:B8:AE:83 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 0583 Signing time: Sun 02 Nov 2025 23:14:38 +0000 Manifest this update: Sun 02 Nov 2025 23:14:37 +0000 Manifest next update: Sun 09 Nov 2025 23:14:37 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: 5AD6iG2FTBtLpUC/bYzJHXSZ0xJ8j+zkqBHUxDYfPdg=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: /ckEG51NBhBYEZtZSbLBPmavN3UuTjHbEpYTSHsiIm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Nov 2 23:14:37 2025 GMT Not After : Nov 9 23:14:37 2025 GMT Subject: CN=6907e5dd-b7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:e0:e4:ce:6e:8e:45:9c:6c:d0:fb:82:22: 83:5b:bc:8f:d5:b8:a8:f0:37:99:3f:18:aa:e5:ca: a7:8f:ba:6d:54:91:a1:b9:73:f3:d0:61:f5:41:a9: bb:0a:48:b4:d8:b6:7e:c3:ad:f3:f0:8e:c9:d5:52: 65:fd:c2:04:c2:f5:db:ab:50:45:2c:d7:dd:82:b6: 3c:1e:fc:a6:6b:26:b7:3b:de:e3:ca:aa:df:45:b7: 12:56:bb:3d:b2:f3:1a:a9:34:71:e4:89:4e:a0:ec: 90:70:8b:72:a0:99:11:c0:7a:13:b3:db:23:6c:7e: 8e:b7:92:c3:b8:a4:64:b4:88:01:dc:2f:6e:16:30: f9:d9:5d:54:aa:0c:5c:04:b2:60:d7:a0:04:13:12: 8b:7f:1c:e6:59:a3:a9:1d:4b:89:af:e4:43:34:a7: d9:88:bd:11:61:04:3a:a7:e7:49:2a:63:0a:d6:33: ec:1c:81:22:90:fd:3b:2d:a1:a7:5c:e1:4e:15:8f: 5f:99:22:a7:31:48:3e:65:c8:d4:1d:6d:b0:e8:c5: a5:e8:bd:96:eb:98:9a:ed:9e:9b:e6:38:64:35:14: 5f:d7:10:ad:30:ae:f2:29:0f:f2:1d:9b:47:6d:42: 53:fe:ef:a2:c8:8d:4c:52:ec:32:c6:a5:59:77:7f: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1A:AB:2B:3B:A8:65:72:0C:EF:75:8D:3D:70:89:29:57:B8:AE:83 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a3:8d:5f:5a:0d:2c:79:23:2d:f5:3a:4e:82:31:c1:c6:fe: 1b:04:7c:29:f0:8a:49:4d:79:d9:25:47:a1:0d:e8:78:7f:08: 23:4b:74:01:32:0a:57:bd:a8:e4:c1:35:09:42:b1:a6:58:9e: b0:f6:2e:0a:18:62:45:b4:e7:18:9a:b3:1c:98:74:cb:df:d3: 62:d7:40:f6:5b:6d:43:79:48:98:d7:92:7b:d7:f6:9c:c5:7e: 19:e3:dd:08:5b:68:b0:33:54:26:b0:d3:a0:97:32:30:58:ed: ba:12:45:f0:ef:00:c8:85:b5:93:dd:c8:18:1c:7c:86:6e:40: 24:d2:22:e0:4d:31:27:ab:c3:30:79:01:26:44:b7:09:79:e1: 38:70:9f:6b:52:af:e6:00:ce:e4:74:f6:2a:b8:36:5c:35:4d: 10:47:1e:3a:87:9a:21:95:c6:0f:71:dc:73:4f:fd:ae:dd:ad: 77:4f:04:d1:73:94:ef:66:3d:d9:d1:3d:9e:d9:68:32:75:7e: 1e:9b:cc:b1:f4:78:4c:95:55:58:5d:fb:d6:f2:d1:39:97:69: 1d:e4:bc:e5:b1:c6:08:17:6b:cf:64:2b:15:69:9c:21:80:a6: b2:a4:c9:dd:31:d0:71:6d:aa:89:9b:80:58:c0:1f:06:0a:e1: c4:3b:38:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjUxMTAyMjMxNDM3WhcNMjUxMTA5MjMxNDM3WjAYMRYwFAYD VQQDEw02OTA3ZTVkZC1iN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwODg5M5ujkWcbND7giKDW7yP1bio8DeZPxiq5cqnj7ptVJGhuXPz0GH1Qam7 Cki02LZ+w63z8I7J1VJl/cIEwvXbq1BFLNfdgrY8Hvymaya3O97jyqrfRbcSVrs9 svMaqTRx5IlOoOyQcItyoJkRwHoTs9sjbH6Ot5LDuKRktIgB3C9uFjD52V1Uqgxc BLJg16AEExKLfxzmWaOpHUuJr+RDNKfZiL0RYQQ6p+dJKmMK1jPsHIEikP07LaGn XOFOFY9fmSKnMUg+ZcjUHW2w6MWl6L2W65ia7Z6b5jhkNRRf1xCtMK7yKQ/yHZtH bUJT/u+iyI1MUuwyxqVZd3/ICQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMaqys7 qGVyDO91jT1wiSlXuK6DMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXo41fWg0seSMt9TpOgjHBxv4bBHwp8IpJTXnZJUehDeh4fwgjS3QB MgpXvajkwTUJQrGmWJ6w9i4KGGJFtOcYmrMcmHTL39Ni10D2W21DeUiY15J71/ac xX4Z490IW2iwM1QmsNOglzIwWO26EkXw7wDIhbWT3cgYHHyGbkAk0iLgTTEnq8Mw eQEmRLcJeeE4cJ9rUq/mAM7kdPYquDZcNU0QRx46h5ohlcYPcdxzT/2u3a13TwTR c5TvZj3Z0T2e2WgydX4em8yx9HhMlVVYXfvW8tE5l2kd5LzlscYIF2vPZCsVaZwh gKaypMndMdBxbaqJm4BYwB8GCuHEOzhi -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:38 2025 by rpki-client