$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft File: QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json) Hash identifier: Iow3B75CWdI2v6RPPYUKTICeyIjsUPg52oaQaF/b94g= Subject key identifier: E3:1C:4A:03:DE:CD:73:AB:3C:7B:1D:83:05:69:52:FB:B6:26:D1:08 Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 Certificate issuer: /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft Manifest number: 0C02 Signing time: Sat 18 Oct 2025 19:38:36 +0000 Manifest this update: Sat 18 Oct 2025 19:38:36 +0000 Manifest next update: Sat 25 Oct 2025 19:38:36 +0000 Files and hashes: 1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: xsQDOteCXqLGNSlxxPCRvTZtxDCjzHXILBYMaZKZO3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5 Validity Not Before: Oct 18 19:38:36 2025 GMT Not After : Oct 25 19:38:36 2025 GMT Subject: CN=68f3ecbc-9305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e4:49:9c:71:7e:a0:ff:bb:6b:e4:49:70:8a: bb:e5:12:71:f8:19:75:6b:af:4d:53:cd:d8:40:77: 0f:a4:46:65:80:e7:bc:3e:04:05:35:ef:96:13:3a: ef:8d:d8:8c:2f:ff:f9:24:b3:34:7a:b6:28:26:42: 97:58:71:49:65:df:d0:6d:a9:f6:d7:7a:5e:63:a0: 3c:6d:51:be:db:8d:dd:4a:f5:db:b4:cc:c8:6e:f6: 31:c9:3e:92:60:83:f3:bb:a6:99:f5:e5:8e:66:50: 1e:97:34:61:71:4c:a1:10:ba:3a:20:7d:c0:98:a6: 76:9c:95:94:6e:bc:41:4c:b8:ad:ba:94:b1:1a:72: d1:0f:ed:c1:10:22:0e:f5:30:fa:fa:84:2a:9b:d2: 6d:23:f4:0a:14:41:37:31:1e:10:4e:ac:9c:8b:d5: f0:00:5f:3c:5a:1b:3b:4c:59:8a:e8:15:32:9a:83: 54:e8:a6:4c:ba:41:1c:e2:c0:15:ca:96:95:da:70: 2b:79:3b:3d:ac:7b:3b:f4:9c:42:9d:65:b6:20:7f: 8e:a8:8e:1d:ef:f1:29:7a:98:ca:0a:4f:de:bc:ae: 3d:83:8c:84:c2:86:46:35:05:d9:d7:66:3b:a4:63: 4e:48:2d:d8:c1:71:c3:87:0e:e7:23:1a:c5:9a:cd: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1C:4A:03:DE:CD:73:AB:3C:7B:1D:83:05:69:52:FB:B6:26:D1:08 X509v3 Authority Key Identifier: keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c4:94:e0:ba:a2:56:23:c4:e0:74:dd:91:a0:b7:90:58:a7: 29:6b:8a:8f:2c:e4:6d:64:bf:5b:72:d7:80:fe:9b:21:35:93: 52:af:14:cf:ca:2c:2d:d9:f6:c2:3f:0d:f3:93:13:19:ee:1a: 4e:80:b9:1c:ec:cd:1a:f7:d6:e6:43:e4:69:55:25:a7:3f:b1: 78:2b:e5:dc:42:fe:b0:55:cc:3e:a5:b2:35:16:c2:6e:7d:f1: f0:3d:3f:3b:4a:c6:69:e8:00:16:45:9f:37:0b:2f:6c:47:bf: 6a:d1:67:be:65:b2:c2:29:84:90:70:86:57:ae:36:38:84:43: 27:61:40:75:79:3b:3c:df:96:04:94:1a:b7:f1:72:24:34:80: cf:6a:8b:3f:70:47:08:45:ed:b5:7e:5e:ac:c9:c9:d2:97:2b: d2:8b:10:e9:d3:86:71:fe:66:93:4a:06:d6:91:39:6c:fe:60: ff:52:6f:54:d7:c6:47:c4:a9:75:2e:98:a6:ad:05:64:62:10: 3d:29:eb:25:35:fd:89:12:c5:11:5e:88:cf:dc:83:18:f9:c6: 03:91:c3:0f:e2:2e:54:d0:e8:cb:aa:82:03:3e:e9:23:17:1a: bc:43:db:62:fd:e1:0a:05:01:1c:77:2a:8f:5e:00:ec:35:84: 23:1f:b2:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1 MjNBRkFGQzUwHhcNMjUxMDE4MTkzODM2WhcNMjUxMDI1MTkzODM2WjAYMRYwFAYD VQQDEw02OGYzZWNiYy05MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uRJnHF+oP+7a+RJcIq75RJx+Bl1a69NU83YQHcPpEZlgOe8PgQFNe+WEzrv jdiML//5JLM0erYoJkKXWHFJZd/Qban213peY6A8bVG+243dSvXbtMzIbvYxyT6S YIPzu6aZ9eWOZlAelzRhcUyhELo6IH3AmKZ2nJWUbrxBTLitupSxGnLRD+3BECIO 9TD6+oQqm9JtI/QKFEE3MR4QTqyci9XwAF88Whs7TFmK6BUymoNU6KZMukEc4sAV ypaV2nAreTs9rHs79JxCnWW2IH+OqI4d7/EpepjKCk/evK49g4yEwoZGNQXZ12Y7 pGNOSC3YwXHDhw7nIxrFms08YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMcSgPe zXOrPHsdgwVpUvu2JtEIMB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3 Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaxJTguqJWI8TgdN2RoLeQWKcpa4qPLORtZL9bcteA/pshNZNSrxTP yiwt2fbCPw3zkxMZ7hpOgLkc7M0a99bmQ+RpVSWnP7F4K+XcQv6wVcw+pbI1FsJu ffHwPT87SsZp6AAWRZ83Cy9sR79q0We+ZbLCKYSQcIZXrjY4hEMnYUB1eTs835YE lBq38XIkNIDPaos/cEcIRe21fl6sycnSlyvSixDp04Zx/maTSgbWkTls/mD/Um9U 18ZHxKl1LpimrQVkYhA9KeslNf2JEsURXojP3IMY+cYDkcMP4i5U0OjLqoIDPukj Fxq8Q9ti/eEKBQEcdyqPXgDsNYQjH7IA -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:18 2025 by rpki-client