$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: CPWug7Qtb5JJePsv5QqKBL5HOuSWBQtKJ1tg8sR/tdw= Subject key identifier: A5:83:19:7D:2D:DA:C8:31:C6:EA:8A:A4:F5:65:ED:6A:05:D8:4B:B8 Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34DB Signing time: Sat 18 Oct 2025 14:41:42 +0000 Manifest this update: Sat 18 Oct 2025 14:41:41 +0000 Manifest next update: Sat 25 Oct 2025 14:41:41 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: h2C1civptkGM991SyjnCRyNjVR5EENBLQTPoWJXl1TM=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Oct 18 14:41:41 2025 GMT Not After : Oct 25 14:41:41 2025 GMT Subject: CN=68f3a725-fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:57:5e:d8:f0:f5:d6:0f:a8:e6:12:f8:89: df:25:32:87:6a:30:ba:d2:48:54:2d:0e:be:ff:5c: 78:7c:ab:23:1f:02:f5:bb:18:c4:4e:24:91:12:c5: d6:e3:8c:cb:30:33:43:68:9c:a9:2f:66:6f:e9:3a: 6f:9e:03:80:ea:2f:9f:25:0e:ae:2f:2a:5b:8d:6a: df:d1:a0:05:63:15:b8:31:a9:ba:db:c3:de:60:57: 9f:0a:77:43:6b:d1:da:5f:26:f9:8f:5d:21:22:32: dc:04:47:4c:ba:d6:50:82:50:33:da:1b:1b:3c:19: 53:55:c9:ca:f4:a8:c5:df:94:81:8e:80:89:a7:c1: 24:ce:82:93:8c:bf:bb:d2:2d:ce:28:ab:28:89:70: 5d:29:23:4e:3f:d6:a6:be:6d:cc:28:ea:a5:70:49: 97:70:be:79:89:db:f7:89:29:ef:3e:1f:44:f3:36: ba:0d:b5:82:db:74:e5:d6:e3:40:af:ff:35:82:85: 70:8d:5d:5c:c2:9a:18:26:fb:ed:07:1d:fe:de:b2: d7:a7:56:0b:58:94:ec:64:bb:2b:fc:5b:23:c0:a8: c7:53:64:7a:0b:c9:16:fd:d0:d2:bd:ae:28:49:72: c0:6f:95:cd:13:0f:b5:99:47:51:af:56:b4:33:06: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:83:19:7D:2D:DA:C8:31:C6:EA:8A:A4:F5:65:ED:6A:05:D8:4B:B8 X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8d:f9:88:d2:3d:59:d3:2f:1c:46:a6:26:ca:5b:b3:aa:36: 51:98:8a:3e:e2:92:58:bd:2e:02:5e:70:3f:16:28:fd:51:78: 14:0c:25:d0:10:43:4a:35:04:cd:df:4c:7c:3a:16:04:b2:76: a7:fb:7b:8b:12:31:d0:68:09:57:99:88:86:65:0e:cb:c2:8c: b3:30:74:11:6b:2b:b3:74:14:f4:95:18:f6:b9:e9:4c:1f:81: 22:a3:f1:1e:b5:b9:47:2d:e4:80:9e:e6:42:45:66:78:2c:f1: 5a:09:b6:68:97:11:63:79:50:51:5c:e6:22:e9:ee:33:a8:25: 6b:97:57:cd:58:91:b4:e0:d9:af:c4:4c:40:24:0d:56:55:6f: f8:68:ed:cc:13:a1:48:67:9f:a3:4c:10:0a:f7:af:49:78:29: ac:fd:d3:6f:41:0d:83:0e:e9:23:1a:dd:e0:d1:f9:e4:48:fe: 62:23:03:b8:bd:23:47:cd:f7:87:ff:2d:f2:c0:fb:93:61:55: bc:fc:72:ec:41:36:f8:5e:05:d9:b1:9f:66:83:26:19:2c:bf: fb:a3:ff:51:41:37:ec:01:81:2e:93:f8:8c:38:23:e4:d5:59: 64:27:04:1e:94:6d:46:47:80:37:8f:62:de:2b:42:89:3f:72: a4:66:3e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUxMDE4MTQ0MTQxWhcNMjUxMDI1MTQ0MTQxWjAYMRYwFAYD VQQDEw02OGYzYTcyNS1mYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1tXXtjw9dYPqOYS+InfJTKHajC60khULQ6+/1x4fKsjHwL1uxjETiSREsXW 44zLMDNDaJypL2Zv6TpvngOA6i+fJQ6uLypbjWrf0aAFYxW4Mam628PeYFefCndD a9HaXyb5j10hIjLcBEdMutZQglAz2hsbPBlTVcnK9KjF35SBjoCJp8EkzoKTjL+7 0i3OKKsoiXBdKSNOP9amvm3MKOqlcEmXcL55idv3iSnvPh9E8za6DbWC23Tl1uNA r/81goVwjV1cwpoYJvvtBx3+3rLXp1YLWJTsZLsr/FsjwKjHU2R6C8kW/dDSva4o SXLAb5XNEw+1mUdRr1a0MwbtSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWDGX0t 2sgxxuqKpPVl7WoF2Eu4MB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jfmI0j1Z0y8cRqYmyluzqjZRmIo+4pJYvS4CXnA/Fij9UXgUDCXQ EENKNQTN30x8OhYEsnan+3uLEjHQaAlXmYiGZQ7LwoyzMHQRayuzdBT0lRj2uelM H4Eio/EetblHLeSAnuZCRWZ4LPFaCbZolxFjeVBRXOYi6e4zqCVrl1fNWJG04Nmv xExAJA1WVW/4aO3ME6FIZ5+jTBAK969JeCms/dNvQQ2DDukjGt3g0fnkSP5iIwO4 vSNHzfeH/y3ywPuTYVW8/HLsQTb4XgXZsZ9mgyYZLL/7o/9RQTfsAYEuk/iMOCPk 1VlkJwQelG1GR4A3j2LeK0KJP3KkZj6C -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:32 2025 by rpki-client