$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json) Hash identifier: umXsBjrkLvjzRCr1hQ/hVh7JoE6SOBZa3I7zzNwCoOs= Subject key identifier: 19:69:5A:76:B9:E2:1E:B7:E8:A6:24:F7:99:59:00:9D:66:13:54:4D Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Certificate serial: 3537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft Manifest number: 350D Signing time: Sun 02 Nov 2025 14:46:27 +0000 Manifest this update: Sun 02 Nov 2025 14:46:27 +0000 Manifest next update: Sun 09 Nov 2025 14:46:27 +0000 Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: mVHNbX5qsTKqcIkrcHAtjMenMYPwZGUntcfB0dPJq60=) 2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: IJhdmy/yaxT+3c7CLBVZdDHqC15tF8wOYJzJ42dHOw4=) 3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: UFfMQK9qG+kgnXEifyxdEDI+JtlIAmij3IDYg9SYyLU=) 4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: Jj1NVOgg11V9rBHXb/ngLI6yeEIfUQhi8bFPhl/4/hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13623 (0x3537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C Validity Not Before: Nov 2 14:46:27 2025 GMT Not After : Nov 9 14:46:27 2025 GMT Subject: CN=69076ec3-6ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:08:07:17:de:af:dc:6d:4e:48:04:12:a3: df:b1:c0:0d:4b:f0:5d:73:9e:e0:3a:a3:c1:bb:18: 22:39:17:fb:34:85:46:f2:cb:be:23:f2:a4:1c:2b: 72:0e:e7:ca:07:fe:1a:b4:5f:e7:7c:4a:0f:02:92: 52:8a:3e:c0:05:52:e1:d1:1e:80:8d:2b:f4:64:b5: a5:5e:16:3b:85:c9:42:c3:5d:48:9c:e4:a8:b4:a4: f3:40:f6:9d:c3:97:6e:7c:db:5c:33:5f:4c:13:ad: 92:ba:44:b0:3f:41:27:04:20:94:68:55:04:95:d5: ac:41:4b:cd:32:94:cd:5f:d4:bd:b4:e6:d8:cc:7e: d4:e7:7f:8e:68:e6:72:c0:df:84:42:b8:55:4e:d6: cf:2b:b9:cc:5c:21:7e:85:93:4a:7c:b6:30:7c:1b: 04:4d:42:46:bc:29:d6:a0:85:a1:f6:2d:4c:19:cd: 00:45:c1:3a:bf:48:7b:29:26:96:2f:a9:98:86:76: 27:e4:e2:30:31:16:5f:d5:3b:ee:67:35:fb:68:de: ab:59:b1:6c:6a:05:d9:75:13:1a:e0:cb:4c:70:a1: c6:61:7f:d2:e1:2e:80:36:c2:83:db:c8:39:1c:af: 93:ec:f5:6a:69:e4:2c:ff:cf:2e:3a:ea:05:1f:0e: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:69:5A:76:B9:E2:1E:B7:E8:A6:24:F7:99:59:00:9D:66:13:54:4D X509v3 Authority Key Identifier: keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3b:7b:1e:cc:a1:2a:cb:2a:26:d6:4c:06:f7:fa:aa:56:86: f1:76:3b:e5:00:87:67:60:f1:98:91:1e:70:7f:0d:44:8b:b6: 21:9e:c9:28:a8:1b:2c:03:09:91:17:e5:7f:d0:27:40:46:14: da:7f:c5:eb:f8:30:31:25:33:90:73:7f:e9:b7:de:69:be:ea: 47:ba:1c:27:d5:95:f1:01:00:3e:8e:05:a1:d4:a1:52:fe:86: ae:d3:e6:40:a3:82:8e:7c:c3:ab:3f:9e:d5:7f:45:10:0f:4f: e0:4f:65:bd:79:31:7b:19:13:d1:8e:31:e3:e7:5f:4a:f4:d8: 63:07:04:14:fe:c5:8c:a2:5e:74:dd:f5:01:e7:3a:11:bd:08: 75:9d:82:98:bc:35:4c:2b:07:1e:71:89:57:ed:35:6e:c6:26: c2:c8:0d:bb:dc:ea:1b:25:d9:dc:b0:53:52:c3:f5:63:a9:08: 21:40:33:d5:18:93:d2:33:7e:3f:3a:9c:50:8c:21:d5:91:5a: fb:9d:f3:ce:f4:0b:2f:f7:a3:f0:bb:f9:b3:97:41:bc:0e:aa: a5:58:4f:bc:d3:ac:e9:99:c3:d3:d3:b6:84:b4:14:46:fc:83: b1:27:61:6f:c7:5b:c0:8e:88:fd:54:1f:2e:65:42:27:4c:09: a7:fc:20:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF MjZDNTFBNkMwHhcNMjUxMTAyMTQ0NjI3WhcNMjUxMTA5MTQ0NjI3WjAYMRYwFAYD VQQDEw02OTA3NmVjMy02YWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpYIBxfer9xtTkgEEqPfscANS/Bdc57gOqPBuxgiORf7NIVG8su+I/KkHCty DufKB/4atF/nfEoPApJSij7ABVLh0R6AjSv0ZLWlXhY7hclCw11InOSotKTzQPad w5dufNtcM19ME62SukSwP0EnBCCUaFUEldWsQUvNMpTNX9S9tObYzH7U53+OaOZy wN+EQrhVTtbPK7nMXCF+hZNKfLYwfBsETUJGvCnWoIWh9i1MGc0ARcE6v0h7KSaW L6mYhnYn5OIwMRZf1TvuZzX7aN6rWbFsagXZdRMa4MtMcKHGYX/S4S6ANsKD28g5 HK+T7PVqaeQs/88uOuoFHw5IewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlpWna5 4h636KYk95lZAJ1mE1RNMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0FFOC84QjZBREUxNDFEOTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0 bFhNTUJVaU9mOFRpYkZHbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWO3sezKEqyyom1kwG9/qqVobxdjvlAIdnYPGYkR5wfw1Ei7Yhnsko qBssAwmRF+V/0CdARhTaf8Xr+DAxJTOQc3/pt95pvupHuhwn1ZXxAQA+jgWh1KFS /oau0+ZAo4KOfMOrP57Vf0UQD0/gT2W9eTF7GRPRjjHj519K9NhjBwQU/sWMol50 3fUB5zoRvQh1nYKYvDVMKwcecYlX7TVuxibCyA273OobJdncsFNSw/VjqQghQDPV GJPSM34/OpxQjCHVkVr7nfPO9Asv96Pwu/mzl0G8DqqlWE+806zpmcPT07aEtBRG /IOxJ2Fvx1vAjoj9VB8uZUInTAmn/CB0 -----END CERTIFICATE-----Generated at Tue Nov 4 14:02:44 2025 by rpki-client