$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: M5G2S7AW3W2amd4lq9fXMPKeptUUi9IlydJNk8fZ8WY= Subject key identifier: E4:80:EA:8B:54:71:23:C2:07:22:F6:AD:C1:C5:56:EC:89:F3:85:D4 Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: CE Signing time: Sun 19 Oct 2025 08:49:53 +0000 Manifest this update: Sun 19 Oct 2025 08:49:53 +0000 Manifest next update: Sun 26 Oct 2025 08:49:53 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: bx9TTsq3vq1g9S+Sp/rquSXILdPaqK6vlWpp2Rx1wkg=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: Rjd53QdMueDJga8fsZ46U1pxir9CvtJnZAWgLguQIlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Oct 19 08:49:53 2025 GMT Not After : Oct 26 08:49:53 2025 GMT Subject: CN=68f4a631-acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:9e:99:10:25:3d:14:fa:6b:c1:d6:dc:68: 22:bb:fb:e7:f1:20:a2:e6:58:9e:3a:e8:87:68:90: 4f:14:0c:e4:a6:4d:35:de:6c:68:1e:d5:7a:e3:d6: c1:19:a8:d2:c3:6a:b8:31:6c:11:b3:9b:72:c0:e0: 40:75:ba:49:63:4e:e6:ad:76:95:c0:d8:8e:9a:ea: c3:e3:a3:38:0a:45:2e:c8:ae:51:24:8a:1f:d9:d7: a7:4d:6d:1a:8e:d7:14:0f:32:97:d6:a8:a8:40:b4: 81:eb:01:ee:0e:a9:50:f6:4b:30:b7:4d:2c:3c:ec: e7:95:48:10:2f:e4:c9:11:a6:f7:de:b2:59:9c:3f: 92:99:af:1d:61:c7:0b:40:30:46:de:a9:3d:2d:91: 50:72:e8:7e:5e:1a:27:c1:ac:bd:d7:65:3d:fb:c8: 00:34:f5:9e:ca:f4:eb:b2:23:5a:1a:1f:e4:d2:b2: c6:e5:ed:82:7d:ba:af:1b:47:2c:61:f7:c5:24:cb: 72:d9:49:93:e3:46:6b:2c:e0:37:69:1c:2f:26:2d: fa:86:58:6c:9d:09:18:ed:bb:96:4f:7d:12:56:19: 86:ea:85:1f:a7:a7:29:75:21:12:ad:97:8f:2a:67: 16:1a:d3:8c:e6:67:c7:2b:51:35:e2:f1:df:7d:ea: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:EA:8B:54:71:23:C2:07:22:F6:AD:C1:C5:56:EC:89:F3:85:D4 X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:08:84:7d:c0:09:7b:53:86:a3:c3:47:e3:e9:2c:40:54:d8: 40:b5:71:62:d0:3e:0e:e2:57:11:39:35:4b:5a:e9:ec:f7:53: 47:8a:cb:46:53:9c:41:08:9b:44:5e:76:41:b9:03:3f:fc:72: 36:a9:b6:7c:9b:6a:f5:c0:a0:f5:4d:1f:a3:53:7c:b6:1c:0e: 1b:71:13:a0:bc:f9:86:72:97:bc:a2:c8:5e:63:6f:38:41:3c: e2:89:3c:04:0a:86:9d:f9:51:bb:93:6f:3a:63:61:b4:a7:94: ae:68:85:a8:4a:68:0c:4d:04:dd:fa:54:ce:4d:7f:1f:d7:76: 6f:2f:fe:1a:ba:79:40:88:03:2f:d0:08:cc:1d:91:b0:fa:9c: fb:da:62:21:c8:e0:34:b2:5d:a0:e5:b5:5c:81:db:c0:4b:d5: 4d:7e:75:b6:1d:56:78:48:42:60:2c:e7:db:41:f6:79:ae:72: b3:a0:eb:20:5f:79:b2:45:25:23:a4:66:34:b2:30:64:a0:cd: 98:ce:7c:85:2a:56:29:97:54:b5:42:96:f8:87:06:ec:b2:cd: c5:a6:a8:40:6d:62:d3:6b:dd:dd:58:5f:1f:ec:a7:a0:9e:0c: b5:1a:29:59:d4:64:95:0a:f5:ae:a2:d7:82:48:1a:56:43:7c: aa:cc:f1:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUxMDE5MDg0OTUzWhcNMjUxMDI2MDg0OTUzWjAYMRYwFAYD VQQDEw02OGY0YTYzMS1hY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGGemRAlPRT6a8HW3Ggiu/vn8SCi5lieOuiHaJBPFAzkpk013mxoHtV649bB GajSw2q4MWwRs5tywOBAdbpJY07mrXaVwNiOmurD46M4CkUuyK5RJIof2denTW0a jtcUDzKX1qioQLSB6wHuDqlQ9kswt00sPOznlUgQL+TJEab33rJZnD+Sma8dYccL QDBG3qk9LZFQcuh+Xhonway912U9+8gANPWeyvTrsiNaGh/k0rLG5e2CfbqvG0cs YffFJMty2UmT40ZrLOA3aRwvJi36hlhsnQkY7buWT30SVhmG6oUfp6cpdSESrZeP KmcWGtOM5mfHK1E14vHffeowvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSA6otU cSPCByL2rcHFVuyJ84XUMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6CIR9wAl7U4ajw0fj6SxAVNhAtXFi0D4O4lcROTVLWuns91NHistG U5xBCJtEXnZBuQM//HI2qbZ8m2r1wKD1TR+jU3y2HA4bcROgvPmGcpe8osheY284 QTziiTwECoad+VG7k286Y2G0p5SuaIWoSmgMTQTd+lTOTX8f13ZvL/4aunlAiAMv 0AjMHZGw+pz72mIhyOA0sl2g5bVcgdvAS9VNfnW2HVZ4SEJgLOfbQfZ5rnKzoOsg X3myRSUjpGY0sjBkoM2YznyFKlYpl1S1Qpb4hwbsss3FpqhAbWLTa93dWF8f7Keg ngy1GilZ1GSVCvWuoteCSBpWQ3yqzPF7 -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:27 2025 by rpki-client