$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json) Hash identifier: oBp8tic1xJw5B+aTOgIgBXt3spmO3RRNctSmjy0pYUk= Subject key identifier: EF:94:C4:9C:E7:66:3B:CA:7E:B6:58:B3:4A:4D:16:41:0F:03:1F:E7 Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft Manifest number: 0816 Signing time: Sat 18 Oct 2025 22:05:14 +0000 Manifest this update: Sat 18 Oct 2025 22:05:13 +0000 Manifest next update: Sat 25 Oct 2025 22:05:13 +0000 Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: p1ZmrCMB/UBabyv957Ptfe2/6H4/L2zZEvLdBIl9bJ4=) 2: 6944587246B311F090CDB927C4F9AE02.roa (hash: N5DJ/lWFfI48sdx6BvFVpFHkaPP8kCCAOxZfmLMaFUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Validity Not Before: Oct 18 22:05:13 2025 GMT Not After : Oct 25 22:05:13 2025 GMT Subject: CN=68f40f19-765b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:43:0c:65:01:5c:12:9e:c1:41:f6:90:a3: a1:cd:b0:86:d6:e8:1a:bb:8a:35:58:e7:d1:5c:c0: b3:ff:3b:40:c8:c3:48:58:67:2f:82:1a:31:8d:09: 4f:65:83:33:a6:38:82:25:24:c2:f8:3f:bf:0e:91: 60:46:59:89:9e:29:5c:52:77:4a:4c:9c:38:85:6f: ce:98:51:b4:fb:bd:57:f6:e6:1c:22:67:db:eb:38: ed:96:bb:fa:ad:0a:1d:1b:54:3d:67:54:5f:1c:bb: 4d:b3:24:df:c5:e9:db:50:cc:27:03:f5:f5:9f:3c: 0c:17:fd:ac:2f:75:ef:ce:07:97:a5:82:31:4d:2e: 8d:52:33:d5:cb:45:7c:7c:e5:a6:e5:be:c8:89:7b: 79:24:f1:9f:2a:c7:96:04:e2:e2:3d:87:11:fc:08: 3f:84:9c:74:61:18:be:c2:68:61:21:a3:40:62:3d: 67:d2:e0:30:47:41:5f:f7:7c:8d:86:87:58:07:2c: a2:07:31:a7:e5:f3:fa:73:e5:17:dd:6c:3f:86:c3: fa:d2:e1:53:b4:b7:c9:23:8c:a0:29:46:b5:2e:04: 57:53:43:1c:70:41:e6:7e:2f:e4:78:ab:35:58:68: 43:8d:c3:52:85:53:5a:79:2d:02:a7:d6:a9:31:b3: 83:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:94:C4:9C:E7:66:3B:CA:7E:B6:58:B3:4A:4D:16:41:0F:03:1F:E7 X509v3 Authority Key Identifier: keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:56:b6:86:2d:97:82:f2:05:09:00:dc:1a:20:8c:e4:29: 23:a1:3e:5c:a9:33:be:1d:42:85:fe:21:67:84:ff:53:08:e1: 35:5d:a9:42:da:cd:ad:41:68:c4:d5:ab:28:a4:db:ab:94:30: d2:0f:54:ec:a8:dd:4a:03:5e:62:15:ae:d9:06:e4:19:60:fd: 4f:9d:8b:3f:13:bd:f0:52:09:b8:d4:88:06:b4:10:2c:28:a5: ac:61:89:98:19:cd:c0:d5:f7:cd:22:9b:a4:1e:2d:b5:51:cb: 0b:04:68:81:bc:95:60:b2:1a:f7:25:8d:a0:a9:15:2a:fb:4c: a4:a5:64:9b:bd:79:23:8b:25:8f:34:88:d0:ea:e3:6a:c9:dd: 21:e6:1c:e5:87:38:e5:b4:cc:2c:68:76:9a:14:bd:94:1c:80: 03:68:46:bd:7c:86:2e:58:a5:55:69:b2:29:18:ad:1f:e3:28: d5:f3:8c:c9:61:f6:ea:b3:c1:73:eb:c0:a6:45:c4:d7:c4:9d: e9:10:ae:eb:43:bf:d5:18:2b:7b:d0:7e:a0:a9:69:35:ce:d5: 16:d8:10:44:e3:5b:fa:63:6f:dd:a9:1f:33:b8:f8:45:3d:95: c2:a1:95:a7:1e:2c:6f:cb:3e:a2:67:e3:95:49:7a:fb:e6:c5: 9d:d0:a2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzRTQxMTAvBgNVBAUTKDQwMTRCQ0I0QUY5QjE4MTk2NEQ3QjdBNDBEMUJGOUQ2 Rjg5RTA4RkYwHhcNMjUxMDE4MjIwNTEzWhcNMjUxMDI1MjIwNTEzWjAYMRYwFAYD VQQDEw02OGY0MGYxOS03NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLtDDGUBXBKewUH2kKOhzbCG1ugau4o1WOfRXMCz/ztAyMNIWGcvghoxjQlP ZYMzpjiCJSTC+D+/DpFgRlmJnilcUndKTJw4hW/OmFG0+71X9uYcImfb6zjtlrv6 rQodG1Q9Z1RfHLtNsyTfxenbUMwnA/X1nzwMF/2sL3XvzgeXpYIxTS6NUjPVy0V8 fOWm5b7IiXt5JPGfKseWBOLiPYcR/Ag/hJx0YRi+wmhhIaNAYj1n0uAwR0Ff93yN hodYByyiBzGn5fP6c+UX3Ww/hsP60uFTtLfJI4ygKUa1LgRXU0MccEHmfi/keKs1 WGhDjcNShVNaeS0Cp9apMbODQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+UxJzn ZjvKfrZYs0pNFkEPAx/nMB8GA1UdIwQYMBaAFEAUvLSvmxgZZNe3pA0b+db4ngj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjNFNC8xOTBCMEQwNkYy NjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdCbGsxN2VrRFJ2NTF2aWVD UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCUzh0Sy1iR0JsazE3ZWtEUnY1MXZpZUNQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjNFNC8xOTBCMEQwNkYyNjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdC bGsxN2VrRFJ2NTF2aWVDUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWfVa2hi2XgvIFCQDcGiCM5CkjoT5cqTO+HUKF/iFnhP9TCOE1XalC 2s2tQWjE1asopNurlDDSD1TsqN1KA15iFa7ZBuQZYP1PnYs/E73wUgm41IgGtBAs KKWsYYmYGc3A1ffNIpukHi21UcsLBGiBvJVgshr3JY2gqRUq+0ykpWSbvXkjiyWP NIjQ6uNqyd0h5hzlhzjltMwsaHaaFL2UHIADaEa9fIYuWKVVabIpGK0f4yjV84zJ Yfbqs8Fz68CmRcTXxJ3pEK7rQ7/VGCt70H6gqWk1ztUW2BBE41v6Y2/dqR8zuPhF PZXCoZWnHixvyz6iZ+OVSXr75sWd0KKv -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:19 2025 by rpki-client