$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft File: Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json) Hash identifier: IscOGd+NefNFAtZHRknP30CuGMfpFjMX5hZq2w4g+ys= Subject key identifier: F1:91:59:70:98:F0:11:EC:83:40:B8:B1:F7:85:30:09:0D:29:14:2D Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft Manifest number: 0307 Signing time: Mon 03 Nov 2025 01:07:38 +0000 Manifest this update: Mon 03 Nov 2025 01:07:37 +0000 Manifest next update: Mon 10 Nov 2025 01:07:37 +0000 Files and hashes: 1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: aJueZg+PsA3kb4N+TKqetVPEMfKqxb+V47dzdjH9I8w=) 2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: wBj04byRChV0petmdr4Ke9cr8WzCiaxcwGuAnk1TvDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Nov 3 01:07:37 2025 GMT Not After : Nov 10 01:07:37 2025 GMT Subject: CN=69080059-5c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:09:ce:28:9c:04:a1:5d:82:f3:5f:1a:53: 3c:b3:a2:9b:e5:14:de:95:38:cf:53:80:49:9d:ea: 90:73:78:9a:86:9c:42:97:5e:96:24:a5:fb:51:e4: 19:57:9c:13:d4:5a:65:fc:5e:6d:0a:c4:af:eb:aa: e4:6c:72:41:a5:37:23:08:e5:ee:cc:74:30:d3:5f: cf:77:6e:88:9c:32:aa:37:fa:d4:c6:f1:e3:29:ed: a0:54:62:92:8d:4e:9f:25:c7:b9:fb:39:a7:2d:0e: 33:38:74:2c:24:d5:d8:d3:ea:fd:fe:24:5a:09:74: 51:5c:97:db:5f:f3:69:46:ac:1d:a5:a1:49:17:29: 92:93:4c:af:ac:b4:fd:1a:a1:20:e7:e1:a9:02:66: fb:b8:8a:57:6b:36:b8:fb:8c:f5:60:07:11:c0:5f: e3:f2:b9:68:d6:e0:0f:30:a2:b0:72:d9:1d:a9:6d: 31:6c:c1:c0:11:ca:6e:ae:35:5b:93:59:96:32:10: d5:44:5a:17:c0:57:6e:58:f3:96:b7:b2:09:42:2c: 79:fb:46:a8:56:a1:45:f1:33:60:0e:6e:92:b8:d5: ad:d3:0d:c3:e4:16:c8:f9:43:f7:2a:c0:75:b2:52: df:3d:9c:70:e9:6c:f4:1f:60:8a:3e:22:d6:9d:23: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:59:70:98:F0:11:EC:83:40:B8:B1:F7:85:30:09:0D:29:14:2D X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:b9:f5:46:a6:57:7e:dd:e8:d0:66:6c:d9:86:f4:20:93:f9: f3:36:bf:3d:4b:b4:d4:f5:3a:bc:49:be:65:a7:7a:6b:81:6b: f6:a5:a4:4c:97:cd:2a:c2:60:ff:60:94:c5:c0:44:93:11:14: 24:66:a9:c0:3e:ff:19:47:df:00:16:f9:d5:44:35:e5:d2:3e: 45:cc:65:e6:c9:5b:5d:6f:16:f5:8c:58:7e:38:f4:c3:ae:72: c9:39:0d:02:e7:45:4b:9e:21:d3:c2:97:0d:06:87:ad:d3:0f: bb:84:14:6a:c6:ac:47:b5:ef:2e:a8:08:a7:df:10:79:65:3d: 23:b1:6c:39:6f:d0:ae:7b:6c:eb:06:69:c9:a5:39:73:ba:55: 3b:8b:1c:37:0c:4c:06:7c:93:05:90:41:ea:8e:52:29:56:fa: 04:4c:2d:fd:6e:b9:90:bf:79:fd:eb:02:d2:36:ce:a2:0c:a6: 2d:2f:d5:45:cd:76:07:15:54:58:b0:34:4b:27:9c:b1:df:9d: 3f:1f:cd:60:87:7f:30:f5:cd:33:90:e2:82:1f:88:0f:a7:85: a1:bd:ad:19:41:e9:a6:b7:af:2c:82:ba:2f:7d:aa:fc:7f:b8: 9f:87:ec:82:b9:b0:c6:f8:82:9c:64:84:72:e8:94:29:f9:9b: 81:59:95:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUxMTAzMDEwNzM3WhcNMjUxMTEwMDEwNzM3WjAYMRYwFAYD VQQDEw02OTA4MDA1OS01YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWkJziicBKFdgvNfGlM8s6Kb5RTelTjPU4BJneqQc3iahpxCl16WJKX7UeQZ V5wT1Fpl/F5tCsSv66rkbHJBpTcjCOXuzHQw01/Pd26InDKqN/rUxvHjKe2gVGKS jU6fJce5+zmnLQ4zOHQsJNXY0+r9/iRaCXRRXJfbX/NpRqwdpaFJFymSk0yvrLT9 GqEg5+GpAmb7uIpXaza4+4z1YAcRwF/j8rlo1uAPMKKwctkdqW0xbMHAEcpurjVb k1mWMhDVRFoXwFduWPOWt7IJQix5+0aoVqFF8TNgDm6SuNWt0w3D5BbI+UP3KsB1 slLfPZxw6Wz0H2CKPiLWnSMzBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGRWXCY 8BHsg0C4sfeFMAkNKRQtMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD NlllSFBZYW5ST0tHSHlwUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmufVGpld+3ejQZmzZhvQgk/nzNr89S7TU9Tq8Sb5lp3prgWv2paRM l80qwmD/YJTFwESTERQkZqnAPv8ZR98AFvnVRDXl0j5FzGXmyVtdbxb1jFh+OPTD rnLJOQ0C50VLniHTwpcNBoet0w+7hBRqxqxHte8uqAin3xB5ZT0jsWw5b9Cue2zr BmnJpTlzulU7ixw3DEwGfJMFkEHqjlIpVvoETC39brmQv3n96wLSNs6iDKYtL9VF zXYHFVRYsDRLJ5yx350/H81gh38w9c0zkOKCH4gPp4Whva0ZQemmt68sgrovfar8 f7ifh+yCubDG+IKcZIRy6JQp+ZuBWZWH -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:07 2025 by rpki-client