$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json) Hash identifier: 6uMWzfrTdTH6MoUkm6ect6bUKCfF/VjcmwThooeAPhg= Subject key identifier: 00:93:3A:C1:99:83:1E:18:DE:4C:7D:29:AE:45:4F:36:E7:86:00:38 Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft Manifest number: 34DA Signing time: Tue 04 Nov 2025 15:04:40 +0000 Manifest this update: Tue 04 Nov 2025 15:04:40 +0000 Manifest next update: Tue 11 Nov 2025 15:04:40 +0000 Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: Uevl+V3GypylWdvOfgc33v02CXABDH14Z+CILbL6mS8=) 2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Ijy1uWFshu2uXbMSDNdrdIor4pwld2OcIkcbdYGoQws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F Validity Not Before: Nov 4 15:04:40 2025 GMT Not After : Nov 11 15:04:40 2025 GMT Subject: CN=690a1608-2a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:e1:b3:e5:98:a7:e3:b7:4c:4c:ec:09:31: 2c:d8:52:53:e9:f0:4e:28:57:43:98:41:d6:73:84: df:1b:53:12:97:bf:4c:6a:19:08:55:a0:ed:aa:89: bb:d0:e5:64:e0:4d:47:8d:b3:a7:0e:d7:03:36:46: 86:49:9e:13:7a:d6:7d:7e:56:4f:e2:10:1e:ba:a9: a9:ab:d1:b1:5f:c0:8b:f3:5c:39:58:19:0f:54:e0: 54:be:58:fe:7d:af:18:a6:01:21:b4:4a:40:85:9c: f4:44:c9:81:69:d2:b8:fb:c2:d7:ea:6f:27:1f:e1: 37:19:05:43:74:19:c3:d5:a1:33:71:e5:b5:7a:a0: 7f:46:96:95:ec:eb:02:53:74:55:1a:a1:a2:1f:c2: 56:0d:8b:c9:84:fc:92:ca:33:bc:23:03:67:93:9a: 5e:38:6b:c8:fb:4f:82:e3:6e:0e:54:35:c3:57:0c: 1d:c7:30:e9:b6:94:97:b2:f7:57:1b:a8:56:8b:0b: 20:56:55:72:70:9a:93:de:4c:af:2d:51:59:e3:cb: 5a:0c:de:5e:74:46:72:73:99:3b:56:88:16:7e:7f: 6e:eb:27:3f:8e:6a:46:c9:f4:8a:4c:9a:3e:b6:38: 44:fa:8d:c4:e7:f8:80:de:15:5d:bf:5e:71:fa:d2: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:93:3A:C1:99:83:1E:18:DE:4C:7D:29:AE:45:4F:36:E7:86:00:38 X509v3 Authority Key Identifier: keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:b3:6e:69:84:50:46:5b:bb:8f:76:0b:b6:83:10:57:59:6e: e0:35:d2:b4:26:57:23:d5:34:8f:73:1c:ac:8a:2d:e5:3e:89: c9:89:87:40:ef:ae:69:9f:48:61:88:5f:f5:fb:f6:4b:a9:4e: 78:f9:7e:9e:8e:e8:5c:5c:9d:8a:d8:26:db:0d:61:9c:f0:6b: 36:2c:85:a9:af:fb:c3:a5:05:a5:e6:9a:69:7b:16:0b:ed:9c: b1:03:cd:c4:b6:cd:d0:c4:ac:71:9d:fd:8b:94:33:a1:d9:9d: 2e:ed:82:97:2b:4b:d0:94:58:cd:64:de:a1:6a:dd:cd:69:9f: da:ab:b8:d9:cc:53:16:00:14:61:f7:84:fa:5a:5c:92:6e:45: ec:d1:b4:a4:73:15:fa:2a:4f:d6:1c:a6:0b:34:cf:aa:60:85: e7:68:cf:fb:e6:9b:90:be:fa:9a:3f:58:4f:70:c4:ba:04:ed: 0a:b5:b2:fa:6a:11:2e:f2:88:22:85:e8:d1:55:52:ba:0d:82: c2:a5:f3:ba:68:55:28:b0:21:6d:48:e9:e9:e7:0e:ad:28:f4: 04:f5:be:9c:11:59:a5:7c:c6:3a:1e:2e:5d:73:6c:ab:53:09: 08:fc:9d:8d:e7:97:c2:90:5d:8a:22:5b:c6:d8:28:7f:62:c4: b2:6a:c7:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF M0VCOEE5OUYwHhcNMjUxMTA0MTUwNDQwWhcNMjUxMTExMTUwNDQwWjAYMRYwFAYD VQQDEw02OTBhMTYwOC0yYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VHhs+WYp+O3TEzsCTEs2FJT6fBOKFdDmEHWc4TfG1MSl79MahkIVaDtqom7 0OVk4E1HjbOnDtcDNkaGSZ4TetZ9flZP4hAeuqmpq9GxX8CL81w5WBkPVOBUvlj+ fa8YpgEhtEpAhZz0RMmBadK4+8LX6m8nH+E3GQVDdBnD1aEzceW1eqB/RpaV7OsC U3RVGqGiH8JWDYvJhPySyjO8IwNnk5peOGvI+0+C424OVDXDVwwdxzDptpSXsvdX G6hWiwsgVlVycJqT3kyvLVFZ48taDN5edEZyc5k7VogWfn9u6yc/jmpGyfSKTJo+ tjhE+o3E5/iA3hVdv15x+tJQIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACTOsGZ gx4Y3kx9Ka5FTzbnhgA4MB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043 QzU1VDg4VGhEV3JqNjRxWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAns25phFBGW7uPdgu2gxBXWW7gNdK0Jlcj1TSPcxysii3lPonJiYdA 765pn0hhiF/1+/ZLqU54+X6ejuhcXJ2K2CbbDWGc8Gs2LIWpr/vDpQWl5pppexYL 7ZyxA83Ets3QxKxxnf2LlDOh2Z0u7YKXK0vQlFjNZN6hat3NaZ/aq7jZzFMWABRh 94T6WlySbkXs0bSkcxX6Kk/WHKYLNM+qYIXnaM/75puQvvqaP1hPcMS6BO0KtbL6 ahEu8ogihejRVVK6DYLCpfO6aFUosCFtSOnp5w6tKPQE9b6cEVmlfMY6Hi5dc2yr UwkI/J2N55fCkF2KIlvG2Ch/YsSyasez -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:23 2025 by rpki-client