$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json) Hash identifier: epuijTt8rEC6DwZ8RPEVgpDKb4WITBQx5/9HTPxTMks= Subject key identifier: 6C:75:C3:CB:39:2E:54:96:B9:16:3E:88:DB:52:58:1E:F7:7D:EC:69 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 040F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft Manifest number: 0407 Signing time: Mon 27 Oct 2025 01:34:59 +0000 Manifest this update: Mon 27 Oct 2025 01:34:58 +0000 Manifest next update: Mon 03 Nov 2025 01:34:58 +0000 Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: QlbqyxkDs0vmhgedudqUDK9Bo3MwVc7sajS+f0gkMXw=) 2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=) 3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 01:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1039 (0x40f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Oct 27 01:34:58 2025 GMT Not After : Nov 3 01:34:58 2025 GMT Subject: CN=68fecc43-2ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:56:38:a6:44:58:b2:d9:66:aa:f3:5b:3e: 59:30:f1:5b:02:6f:b9:24:bc:3c:95:e6:76:2e:96: 96:76:a9:d5:49:fe:b1:9f:69:93:2f:65:47:a5:d9: 8b:dc:f5:28:9b:a5:08:e2:a3:c7:d3:27:b3:15:a2: 79:88:f8:04:79:c7:74:56:be:4c:f0:8e:0a:a5:b2: a4:5b:fe:c5:c3:21:a8:f8:b2:c9:2c:fe:e7:05:af: 31:44:aa:12:2f:45:81:a0:b3:94:b8:07:d1:fe:da: 21:7f:98:3a:7e:71:4c:1b:7e:4f:4f:2c:49:1c:8b: d4:32:8d:cf:df:bc:5f:b5:75:64:03:ce:b0:5e:f3: 98:3f:55:82:23:b1:54:b2:97:24:a4:8c:b6:7e:f5: 77:96:ba:28:ab:a2:b1:5f:d4:35:d7:3c:20:46:04: f3:05:b7:e3:5e:18:bd:1d:21:bf:63:3d:39:03:48: 5e:ad:6b:19:e4:2a:9d:0c:3b:18:a1:6e:a3:a7:a4: 40:ca:18:ef:cd:04:aa:e6:7c:25:0b:44:85:4b:54: 41:c4:9f:58:79:8d:4e:7d:0a:29:f1:f4:5f:e0:b3: 9e:cf:ac:ca:cf:c5:36:62:e4:bf:50:a3:1a:5b:a5: ad:d8:86:e6:34:47:18:96:3e:b6:d4:47:0f:09:b5: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:75:C3:CB:39:2E:54:96:B9:16:3E:88:DB:52:58:1E:F7:7D:EC:69 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:d0:10:69:60:28:da:d2:e6:aa:83:86:f8:f7:ab:8d:fd: 33:32:d6:27:e6:78:1a:4a:d9:ca:74:64:9e:8c:95:6e:ad:04: c0:9f:b1:12:c5:90:0b:c3:a1:37:7a:46:09:98:6b:db:04:cb: 16:11:cb:f5:64:18:e4:18:8c:62:f5:ce:86:96:c0:d4:20:74: 49:14:5c:b8:b2:10:a6:2f:27:61:1a:f7:f7:f4:d0:9c:c3:a8: 4d:8b:95:30:5a:ad:b4:a0:40:5c:ab:da:7f:08:2c:d8:40:3a: 07:3d:23:b1:fa:ef:4a:ec:70:62:ab:3c:9d:69:08:fc:3a:12: 8e:36:87:94:83:de:0d:cc:9c:28:89:43:f6:f9:54:58:1f:a6: d2:aa:17:0b:0d:eb:a2:5b:ad:8b:26:fc:4f:b0:5e:2f:c9:ca: be:d8:d0:67:4b:0a:87:d8:ef:da:03:7f:4a:45:81:fe:b2:cd: d1:44:b7:2a:01:38:7d:51:a4:77:dd:bc:2f:5b:72:cd:dd:a3: bb:e0:b6:e7:0c:1e:c2:6e:e6:eb:29:16:4a:1f:e9:2a:41:5d: 0f:a8:9d:90:71:9a:5b:45:78:aa:23:b1:28:f2:59:4a:3b:02: ab:f6:57:c3:65:1c:3e:0e:0f:c7:63:36:54:43:20:77:08:c4: e4:46:f3:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUxMDI3MDEzNDU4WhcNMjUxMTAzMDEzNDU4WjAYMRYwFAYD VQQDEw02OGZlY2M0My0yY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SdWOKZEWLLZZqrzWz5ZMPFbAm+5JLw8leZ2LpaWdqnVSf6xn2mTL2VHpdmL 3PUom6UI4qPH0yezFaJ5iPgEecd0Vr5M8I4KpbKkW/7FwyGo+LLJLP7nBa8xRKoS L0WBoLOUuAfR/tohf5g6fnFMG35PTyxJHIvUMo3P37xftXVkA86wXvOYP1WCI7FU spckpIy2fvV3lrooq6KxX9Q11zwgRgTzBbfjXhi9HSG/Yz05A0herWsZ5CqdDDsY oW6jp6RAyhjvzQSq5nwlC0SFS1RBxJ9YeY1OfQop8fRf4LOez6zKz8U2YuS/UKMa W6Wt2IbmNEcYlj621EcPCbXOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx1w8s5 LlSWuRY+iNtSWB73fexpMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTZEQi9BODY0RDBFQThFM0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVa UXN0YU9WWi13Mms3NGx4cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7qtAQaWAo2tLmqoOG+Perjf0zMtYn5ngaStnKdGSejJVurQTAn7ES xZALw6E3ekYJmGvbBMsWEcv1ZBjkGIxi9c6GlsDUIHRJFFy4shCmLydhGvf39NCc w6hNi5UwWq20oEBcq9p/CCzYQDoHPSOx+u9K7HBiqzydaQj8OhKONoeUg94NzJwo iUP2+VRYH6bSqhcLDeuiW62LJvxPsF4vycq+2NBnSwqH2O/aA39KRYH+ss3RRLcq ATh9UaR33bwvW3LN3aO74LbnDB7CbubrKRZKH+kqQV0PqJ2QcZpbRXiqI7Eo8llK OwKr9lfDZRw+Dg/HYzZUQyB3CMTkRvMU -----END CERTIFICATE-----Generated at Tue Oct 28 18:44:53 2025 by rpki-client