$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: 8sX5wxfUNcijJcXRWjFJfJD+f7PLxodTquXJkeO1GVM= Subject key identifier: 1F:FC:C5:3A:4E:11:60:A0:10:75:DD:FC:FA:D3:6C:30:45:19:C2:37 Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 09FE Signing time: Sat 18 Oct 2025 20:52:38 +0000 Manifest this update: Sat 18 Oct 2025 20:52:37 +0000 Manifest next update: Sat 25 Oct 2025 20:52:37 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: 7L2VIdh5sLu/WuLKJs8P1zOFwrGgL5Nvzp0LInxxTUk=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: Oct 18 20:52:37 2025 GMT Not After : Oct 25 20:52:37 2025 GMT Subject: CN=68f3fe16-0f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:d7:2b:dc:4b:bc:ad:d9:cd:f9:b6:28:b1: 22:a1:8d:9a:e2:58:b4:d3:02:3d:e4:d1:62:14:8a: 37:86:5f:3b:db:f3:ee:ce:a9:72:dd:62:5b:5e:ba: 03:97:43:aa:86:9e:01:d3:4a:3f:e6:d0:dd:2b:fa: ca:9f:4e:3f:9c:46:9e:2e:0a:30:98:f3:3a:99:05: f6:f5:93:c3:7b:79:b7:98:08:9a:f9:82:d2:28:d4: 28:aa:3b:e3:ab:3d:44:ee:95:93:21:e2:68:38:19: 62:d4:b6:f5:fa:a1:3e:cb:a9:9a:dd:b2:90:84:f7: e9:e3:c5:46:a9:40:f9:e3:c4:61:83:21:bc:f1:f5: c4:1e:a0:ae:0e:0f:3f:c5:cf:41:7d:b8:74:3d:22: 8e:5d:c5:e3:a9:db:ac:ec:e5:2c:0f:67:94:4f:8a: bb:bb:03:df:22:b4:16:62:11:71:81:5e:43:c9:9d: 94:f3:63:72:d2:4c:b6:d0:7b:55:db:c5:c9:d2:a5: c0:6d:de:21:15:42:47:fa:c9:ff:87:b8:a1:95:e8: 5f:e2:bb:40:04:82:e9:3d:98:33:75:f2:88:75:b3: b8:6a:0f:1a:bd:9b:fa:12:3b:ca:5f:55:8d:c7:88: fc:2a:9e:22:ce:ec:d6:8a:a7:34:54:ff:3a:d6:be: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FC:C5:3A:4E:11:60:A0:10:75:DD:FC:FA:D3:6C:30:45:19:C2:37 X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:8d:af:fd:11:be:bd:f3:40:e1:fa:54:3d:d8:99:da:b2: 99:26:7a:f7:e2:75:8b:de:46:66:8b:70:38:1e:57:7d:19:0b: b3:34:2f:c4:fb:a5:38:41:f7:4a:2a:9f:19:44:f1:8f:6b:69: 10:31:3c:49:e7:15:e7:ae:54:c3:9b:82:3e:56:a3:ac:44:9e: 0e:58:fc:e1:83:db:79:b1:84:3a:10:a9:f7:c3:d6:bc:cf:b6: 81:89:8a:2f:10:e3:48:45:99:ba:a1:1e:c6:d5:5e:51:26:c4: f8:49:2b:8b:e3:c8:fb:f0:c9:c7:c4:8f:fd:1b:42:16:34:cb: cf:39:05:a7:2f:ea:32:ca:48:f7:bf:2f:c1:dc:e8:9a:50:ff: b4:ca:8a:bb:05:66:fd:2d:81:06:44:4d:50:e0:d5:9f:52:b2: 81:d6:c9:c5:64:e9:0e:9e:3b:ef:a8:a3:b1:48:5a:c9:e6:1c: 0a:a7:5a:f1:8b:cf:c3:cc:69:18:b9:cb:90:9f:3c:ce:24:e0: 3f:82:fd:36:fb:dd:e1:7e:3a:39:70:cf:73:12:4b:8d:2b:7c: 18:f3:93:32:27:a9:35:72:d9:2a:14:0a:7b:28:29:eb:da:40: ac:23:2b:73:92:b6:ad:94:d9:97:15:7d:f2:da:d6:bb:72:b0: fc:58:c0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjUxMDE4MjA1MjM3WhcNMjUxMDI1MjA1MjM3WjAYMRYwFAYD VQQDEw02OGYzZmUxNi0wZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mbXK9xLvK3Zzfm2KLEioY2a4li00wI95NFiFIo3hl872/Puzqly3WJbXroD l0Oqhp4B00o/5tDdK/rKn04/nEaeLgowmPM6mQX29ZPDe3m3mAia+YLSKNQoqjvj qz1E7pWTIeJoOBli1Lb1+qE+y6ma3bKQhPfp48VGqUD548RhgyG88fXEHqCuDg8/ xc9Bfbh0PSKOXcXjqdus7OUsD2eUT4q7uwPfIrQWYhFxgV5DyZ2U82Ny0ky20HtV 28XJ0qXAbd4hFUJH+sn/h7ihlehf4rtABILpPZgzdfKIdbO4ag8avZv6EjvKX1WN x4j8Kp4izuzWiqc0VP861r6u8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/8xTpO EWCgEHXd/PrTbDBFGcI3MB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+Y2v/RG+vfNA4fpUPdiZ2rKZJnr34nWL3kZmi3A4Hld9GQuzNC/E +6U4QfdKKp8ZRPGPa2kQMTxJ5xXnrlTDm4I+VqOsRJ4OWPzhg9t5sYQ6EKn3w9a8 z7aBiYovEONIRZm6oR7G1V5RJsT4SSuL48j78MnHxI/9G0IWNMvPOQWnL+oyykj3 vy/B3OiaUP+0yoq7BWb9LYEGRE1Q4NWfUrKB1snFZOkOnjvvqKOxSFrJ5hwKp1rx i8/DzGkYucuQnzzOJOA/gv02+93hfjo5cM9zEkuNK3wY85MyJ6k1ctkqFAp7KCnr 2kCsIytzkratlNmXFX3y2ta7crD8WMAX -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:05 2025 by rpki-client