$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: KE29lNygkQsprkbRQtC0Jy1JoIYFqpJUsEr6x3SAqyE= Subject key identifier: 4C:ED:5B:FC:BA:F2:9F:5B:6A:31:59:55:03:D6:13:CA:A1:75:9C:46 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0780 Signing time: Sat 18 Oct 2025 22:55:06 +0000 Manifest this update: Sat 18 Oct 2025 22:55:05 +0000 Manifest next update: Sat 25 Oct 2025 22:55:05 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: /zT4M0suDL2xe+hIqBXrmZ5zgvwGGx6+Y43tLiSOnew=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: xDFL83BDJofXsoqgs4IapCDppXS9oRsh4Talz2QouY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Oct 18 22:55:05 2025 GMT Not After : Oct 25 22:55:05 2025 GMT Subject: CN=68f41ac9-0e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:b6:fa:cf:00:6a:c1:7e:23:fb:5e:ab:f9: c0:72:e5:6c:c1:d6:a0:31:6b:45:e1:9d:d0:52:d7: ff:f7:e6:27:75:4d:b8:32:49:36:56:58:25:31:d5: e5:dd:05:bf:b2:df:fb:c4:e3:f6:2d:f0:e2:b5:fd: 35:e6:5c:20:25:bb:99:f3:f5:b6:72:38:38:57:03: 5f:82:24:09:4e:59:8d:23:06:df:84:07:11:98:f2: 75:c0:75:7a:ca:a8:ab:a0:26:c1:2e:89:34:00:fe: 33:75:4b:d1:20:86:c0:ea:32:8f:84:df:1f:45:5a: 31:9f:73:72:d2:7d:d0:16:93:4a:cb:73:c1:ae:b5: e1:f5:32:f8:02:cc:73:1d:6c:7f:65:18:89:60:15: 04:a3:7b:69:80:c9:1e:87:f8:ea:0e:8c:04:70:8a: e5:13:e8:81:ed:82:e7:12:f2:3e:5c:da:fd:b3:bf: 5d:c5:8f:e2:a4:28:df:ae:5e:e8:ef:0c:1c:09:a2: e2:ef:9d:3e:ab:9a:c5:5b:fb:26:d1:63:be:c9:3f: 8b:bf:13:57:e6:25:57:82:54:96:81:d5:bb:c3:67: 71:a9:18:65:c2:66:d7:50:84:4c:86:ff:e6:92:4d: 2c:54:a6:68:a3:de:7c:1f:83:ea:f9:b8:7e:2c:86: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:ED:5B:FC:BA:F2:9F:5B:6A:31:59:55:03:D6:13:CA:A1:75:9C:46 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:14:fa:fe:ba:a6:dc:27:2e:be:ac:89:6f:62:5d:2f:78: 3e:3e:ea:c3:00:6e:ef:88:38:7c:76:6e:ae:65:9e:d1:e7:3d: 6d:7d:62:22:57:dc:04:3e:09:c7:53:af:ef:51:72:a6:bf:9b: 26:11:1b:69:43:92:6e:84:79:ca:bb:fc:53:25:46:ee:4c:69: 4c:78:01:94:e8:df:e7:db:00:68:6b:2d:77:b9:fe:14:4c:cb: 37:f3:4d:6c:76:0d:15:eb:0c:92:f4:a6:bd:90:8f:1e:5a:ad: 3c:a9:9b:14:bd:22:ab:62:e6:cc:37:ce:96:0b:ad:e3:cd:6f: fd:d5:57:81:89:9d:da:10:44:26:0e:89:dc:12:58:00:78:a5: bb:88:18:62:03:14:70:39:40:b9:96:79:b6:44:aa:04:03:c8: 50:a3:d3:69:7c:34:0f:4a:d5:13:52:52:e4:05:39:1d:2d:d4: 66:9a:4d:37:69:55:8b:b0:75:35:b2:3a:95:6d:06:11:6e:b4: d7:9b:bc:b3:89:b4:b9:12:8e:2a:68:73:f7:1c:bc:99:7c:7f: 0f:b7:90:61:f3:50:31:42:f4:53:89:02:f6:cb:95:68:04:2c: 5e:61:68:fe:05:10:fc:e0:6a:04:66:66:06:cb:be:f4:ad:e7: 64:ef:cf:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjUxMDE4MjI1NTA1WhcNMjUxMDI1MjI1NTA1WjAYMRYwFAYD VQQDEw02OGY0MWFjOS0wZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxu2+s8AasF+I/teq/nAcuVswdagMWtF4Z3QUtf/9+YndU24Mkk2VlglMdXl 3QW/st/7xOP2LfDitf015lwgJbuZ8/W2cjg4VwNfgiQJTlmNIwbfhAcRmPJ1wHV6 yqiroCbBLok0AP4zdUvRIIbA6jKPhN8fRVoxn3Ny0n3QFpNKy3PBrrXh9TL4Asxz HWx/ZRiJYBUEo3tpgMkeh/jqDowEcIrlE+iB7YLnEvI+XNr9s79dxY/ipCjfrl7o 7wwcCaLi750+q5rFW/sm0WO+yT+LvxNX5iVXglSWgdW7w2dxqRhlwmbXUIRMhv/m kk0sVKZoo958H4Pq+bh+LIbL1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEztW/y6 8p9bajFZVQPWE8qhdZxGMB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmqRT6/rqm3CcuvqyJb2JdL3g+PurDAG7viDh8dm6uZZ7R5z1tfWIi V9wEPgnHU6/vUXKmv5smERtpQ5JuhHnKu/xTJUbuTGlMeAGU6N/n2wBoay13uf4U TMs3801sdg0V6wyS9Ka9kI8eWq08qZsUvSKrYubMN86WC63jzW/91VeBiZ3aEEQm DoncElgAeKW7iBhiAxRwOUC5lnm2RKoEA8hQo9NpfDQPStUTUlLkBTkdLdRmmk03 aVWLsHU1sjqVbQYRbrTXm7yzibS5Eo4qaHP3HLyZfH8Pt5Bh81AxQvRTiQL2y5Vo BCxeYWj+BRD84GoEZmYGy770redk78+q -----END CERTIFICATE-----Generated at Mon Oct 20 04:23:47 2025 by rpki-client