$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: OQNgmVV9Pcuxd7LulVAlxhZL0NqIHDQZusShNryJ848= Subject key identifier: 84:34:2F:AC:7B:F0:63:E8:1F:6A:C9:DC:41:D7:20:E4:A8:10:00:35 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1E13 Signing time: Sun 02 Nov 2025 16:06:10 +0000 Manifest this update: Sun 02 Nov 2025 16:06:09 +0000 Manifest next update: Sun 09 Nov 2025 16:06:09 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: 0zOu+7/ndH6AWGthigqwExKO7ndcLw5b3nPwQ9ffbOQ=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7709 (0x1e1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Nov 2 16:06:09 2025 GMT Not After : Nov 9 16:06:09 2025 GMT Subject: CN=69078172-b63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:50:ff:72:af:f1:4c:e5:b3:aa:f6:e8:9f: 30:55:0c:d9:1c:e8:5e:b3:23:f6:f9:f8:0a:4f:46: d8:ac:04:8a:8f:83:b5:50:11:29:ab:19:c1:50:7c: f4:da:81:86:65:9d:f9:62:09:db:8b:7b:17:b0:53: 69:d8:ae:82:e8:ea:17:8c:44:78:ff:0c:e6:7f:c4: ff:d6:a8:5b:70:e0:88:1c:54:8a:25:e0:09:6d:33: e9:a0:e8:4e:4d:6c:19:2c:6a:cf:cd:e3:65:17:90: 9e:1c:82:c0:2b:2a:64:fe:19:36:51:27:e0:d2:5f: 34:51:ca:e2:50:88:b5:7f:52:6a:46:a5:04:45:e2: 97:cf:ac:0f:8c:59:88:b0:14:6e:d2:61:4a:6e:22: 4a:9b:fd:0e:90:8c:40:ea:cf:48:84:40:2d:7c:d9: c5:48:27:76:3b:9a:c8:81:10:1f:5b:e8:0a:4c:00: 0b:ea:27:6d:27:3f:e8:08:56:ce:d1:79:ee:93:57: 5d:13:e4:fd:2e:52:26:51:8f:74:0b:67:e7:1d:ff: 7e:9e:04:d9:1f:2f:b6:fa:ff:7b:c4:01:c0:9c:a6: 4e:e4:22:dc:64:49:ca:91:8c:24:78:a5:04:b8:6c: 46:fa:4c:ec:b7:7e:e9:68:28:5c:4f:b0:21:4d:3f: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:34:2F:AC:7B:F0:63:E8:1F:6A:C9:DC:41:D7:20:E4:A8:10:00:35 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:14:aa:87:80:1c:83:06:a1:8d:13:e5:6c:54:9d:c6:40:52: d8:bc:fb:5e:8c:b5:2d:5d:c3:98:d4:26:ac:5a:5d:68:65:c5: ec:23:f8:9d:d1:e6:82:78:ec:66:ee:a8:7e:37:03:87:3b:11: b4:c3:f7:1a:6f:d6:bb:c5:7d:f2:ad:ab:a5:78:1b:d6:2a:93: 14:6f:ec:93:74:d5:24:47:29:71:d2:70:be:c5:ec:4b:7c:9c: 90:d2:db:9d:b1:66:8c:47:d6:e2:88:68:55:27:4f:d4:83:b0: 70:b5:bf:7f:d7:64:e6:a0:36:62:11:be:3c:17:5a:0d:5e:9e: 26:6b:89:b8:e2:f1:31:29:5f:e3:ae:98:f9:73:b6:10:b3:7f: 26:54:ec:ca:f6:c9:aa:71:43:24:71:92:1f:a0:4e:ba:b1:41: 1b:2f:33:33:5c:eb:3a:79:6c:29:04:63:7f:40:67:f4:e8:bd: aa:1b:57:66:74:41:f5:a2:a0:c8:8f:fb:25:4d:ae:ee:08:41: 0e:3e:7d:6b:b1:93:90:d0:74:72:1c:ba:c0:4d:59:8a:cb:3c: db:b8:19:01:0c:d2:13:7a:f1:38:ea:c7:b9:7e:9d:d1:99:77: b0:4e:1c:fb:ea:f9:6f:34:48:04:4d:7c:c7:45:ee:e2:bc:29: cd:3d:42:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMTAyMTYwNjA5WhcNMjUxMTA5MTYwNjA5WjAYMRYwFAYD VQQDEw02OTA3ODE3Mi1iNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz85Q/3Kv8Uzls6r26J8wVQzZHOhesyP2+fgKT0bYrASKj4O1UBEpqxnBUHz0 2oGGZZ35Ygnbi3sXsFNp2K6C6OoXjER4/wzmf8T/1qhbcOCIHFSKJeAJbTPpoOhO TWwZLGrPzeNlF5CeHILAKypk/hk2USfg0l80UcriUIi1f1JqRqUEReKXz6wPjFmI sBRu0mFKbiJKm/0OkIxA6s9IhEAtfNnFSCd2O5rIgRAfW+gKTAAL6idtJz/oCFbO 0Xnuk1ddE+T9LlImUY90C2fnHf9+ngTZHy+2+v97xAHAnKZO5CLcZEnKkYwkeKUE uGxG+kzst37paChcT7AhTT+liwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ0L6x7 8GPoH2rJ3EHXIOSoEAA1MB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFFKqHgByDBqGNE+VsVJ3GQFLYvPtejLUtXcOY1CasWl1oZcXsI/id 0eaCeOxm7qh+NwOHOxG0w/cab9a7xX3yrauleBvWKpMUb+yTdNUkRylx0nC+xexL fJyQ0tudsWaMR9biiGhVJ0/Ug7Bwtb9/12TmoDZiEb48F1oNXp4ma4m44vExKV/j rpj5c7YQs38mVOzK9smqcUMkcZIfoE66sUEbLzMzXOs6eWwpBGN/QGf06L2qG1dm dEH1oqDIj/slTa7uCEEOPn1rsZOQ0HRyHLrATVmKyzzbuBkBDNITevE46se5fp3R mXewThz76vlvNEgETXzHRe7ivCnNPUIE -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:22 2025 by rpki-client