$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: +opwSscdEB8YWNNhrWUyDEIcdsbnENfTWijBaUazDuQ= Subject key identifier: 0B:79:22:8C:03:53:45:37:70:C5:EF:55:FB:D3:9B:14:AD:9E:2D:C4 Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: BE Signing time: Sun 19 Oct 2025 09:01:13 +0000 Manifest this update: Sun 19 Oct 2025 09:01:12 +0000 Manifest next update: Sun 26 Oct 2025 09:01:12 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: CjUiP/jVUKveXvKt+pkaFq3zo8SAQNHJ9D7/9wUGYWY=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Oct 19 09:01:12 2025 GMT Not After : Oct 26 09:01:12 2025 GMT Subject: CN=68f4a8d8-ef75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:2f:cc:7c:30:10:07:68:e1:30:d0:ba:74: 5d:3a:03:a9:9d:44:bc:04:56:6f:25:33:17:e4:5b: f5:e1:33:47:ad:0b:89:30:55:b5:a0:08:f0:f7:a3: 4e:33:e2:07:dd:21:5f:9b:5e:0f:66:a4:3c:23:99: 14:82:8a:3f:aa:30:7c:2f:cd:da:71:9c:01:75:59: b2:db:ea:c3:f1:77:4a:21:eb:c4:77:b6:bd:b4:bb: 3b:23:a0:64:54:b2:10:97:27:3e:ff:0c:59:0e:b5: f4:80:05:49:64:e4:ca:87:04:93:1d:57:fe:11:2f: b1:95:11:43:b6:f5:72:0a:22:9a:91:dc:66:d3:35: 5f:43:43:2b:4b:ff:df:1b:78:df:b8:d1:42:86:5f: 62:17:bf:65:53:74:b1:06:64:1f:94:70:e7:fd:fa: b3:50:e3:9e:d1:68:2e:9e:56:2c:a8:2f:47:9f:e5: 64:66:48:9b:88:e7:6a:c7:62:64:ba:39:3f:e4:e0: 82:f9:44:cb:77:f0:ef:cc:bd:4a:58:99:e1:0e:91: 6f:21:b5:9d:4f:fa:eb:3a:02:a0:7e:63:31:ab:66: fa:2e:68:ac:77:93:53:54:40:65:c5:02:1f:c5:77: ab:1c:a2:24:01:b0:7f:48:dd:ff:70:b6:09:b9:07: 96:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:79:22:8C:03:53:45:37:70:C5:EF:55:FB:D3:9B:14:AD:9E:2D:C4 X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:89:2e:e9:77:e8:16:58:5a:ed:bc:d0:21:ba:4c:f3:0c:b0: 79:70:46:f0:65:66:fe:40:78:c5:32:e2:8c:f7:62:6c:56:7d: 58:93:c1:9d:cc:2a:ad:0d:f8:b4:82:b3:ea:79:b0:22:c5:97: 71:d8:48:0b:13:b2:a4:cf:f7:87:9f:58:82:76:2c:63:ae:29: ac:d8:ef:e5:f2:52:96:6a:62:7b:73:81:ac:1f:15:88:d1:60: 2c:55:33:e9:d1:d6:f2:6e:ba:57:4b:f9:d0:45:cc:e9:3c:4e: fc:be:14:70:b4:d3:38:54:5c:80:1e:95:0b:e3:2e:ee:2f:5b: a9:50:a4:b4:dc:50:29:d2:93:89:c1:1c:c3:cc:f9:01:87:86: 75:50:96:49:28:47:de:43:78:54:1b:e7:36:0c:29:1c:e0:2d: a8:97:0e:cd:9f:43:b7:78:67:5f:65:78:92:19:f5:07:96:46: d6:7d:45:c3:a6:e1:da:60:1a:38:81:b8:6c:7b:3e:f0:98:e8: ca:d2:50:e0:e7:bd:f3:e0:51:a0:ac:e7:7a:c3:40:68:62:d0: 8e:31:0f:09:d3:24:d4:dd:91:8c:8a:e6:f9:8d:38:8c:10:60: 0f:18:ea:d8:f4:c9:e4:07:18:69:f5:ed:78:b8:93:4e:87:65: 53:5d:88:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDQwRERFRUYwMThFQURDREU0RDFCRjc4RDE1NDg1MUY4 RDhCQzI2QTUwHhcNMjUxMDE5MDkwMTEyWhcNMjUxMDI2MDkwMTEyWjAYMRYwFAYD VQQDEw02OGY0YThkOC1lZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT4vzHwwEAdo4TDQunRdOgOpnUS8BFZvJTMX5Fv14TNHrQuJMFW1oAjw96NO M+IH3SFfm14PZqQ8I5kUgoo/qjB8L83acZwBdVmy2+rD8XdKIevEd7a9tLs7I6Bk VLIQlyc+/wxZDrX0gAVJZOTKhwSTHVf+ES+xlRFDtvVyCiKakdxm0zVfQ0MrS//f G3jfuNFChl9iF79lU3SxBmQflHDn/fqzUOOe0WgunlYsqC9Hn+VkZkibiOdqx2Jk ujk/5OCC+UTLd/DvzL1KWJnhDpFvIbWdT/rrOgKgfmMxq2b6Lmisd5NTVEBlxQIf xXerHKIkAbB/SN3/cLYJuQeWpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAt5IowD U0U3cMXvVfvTmxStni3EMB8GA1UdIwQYMBaAFEDd7vAY6tzeTRv3jRVIUfjYvCal MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GMEI2NkNGODhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNONU5HX2VORlVoUi1OaThK cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GMEI2NkNGODhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9RTjN1OEJqcTNO NU5HX2VORlVoUi1OaThKcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgiS7pd+gWWFrtvNAhukzzDLB5cEbwZWb+QHjFMuKM92JsVn1Yk8Gd zCqtDfi0grPqebAixZdx2EgLE7Kkz/eHn1iCdixjrims2O/l8lKWamJ7c4GsHxWI 0WAsVTPp0dbybrpXS/nQRczpPE78vhRwtNM4VFyAHpUL4y7uL1upUKS03FAp0pOJ wRzDzPkBh4Z1UJZJKEfeQ3hUG+c2DCkc4C2olw7Nn0O3eGdfZXiSGfUHlkbWfUXD puHaYBo4gbhsez7wmOjK0lDg573z4FGgrOd6w0BoYtCOMQ8J0yTU3ZGMiub5jTiM EGAPGOrY9MnkBxhp9e14uJNOh2VTXYhZ -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:53 2025 by rpki-client