$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: SUiJ1YGkF31b9/BUNL+E/4uAURLXcnvwVYMSSApvBow= Subject key identifier: 74:A1:1C:5C:F5:45:20:12:5B:F7:1E:FD:47:D1:89:D2:D3:BB:BD:8C Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0B0C Signing time: Sat 18 Oct 2025 20:19:10 +0000 Manifest this update: Sat 18 Oct 2025 20:19:09 +0000 Manifest next update: Sat 25 Oct 2025 20:19:09 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: 4W/KfFioD68Ui9BnmaTbKaoOaeb9RWckhUsQTdyKQ94=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Oct 18 20:19:09 2025 GMT Not After : Oct 25 20:19:09 2025 GMT Subject: CN=68f3f63d-a2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:3a:af:83:38:a3:94:05:1e:6e:d8:2c:7d: fb:84:69:b3:99:f7:fe:da:30:ac:f0:92:6c:80:c4: 7d:4e:fc:8e:6b:03:b9:0a:78:c4:56:69:8d:23:06: 65:6d:f3:a5:3e:96:32:80:af:6b:79:df:c7:c5:c7: 34:20:94:44:44:ad:a4:79:93:5d:0a:80:3e:9e:40: 72:3a:5a:79:f0:7e:23:fb:a2:9a:aa:9e:dc:d9:cd: 4b:bf:fc:27:bb:a5:f6:0f:2f:c9:12:d5:a4:66:eb: 17:88:7d:eb:dd:d3:32:64:18:48:24:83:6c:ee:5b: 7e:d5:cb:67:2a:88:92:ff:d6:b7:8d:31:8d:54:72: a9:9c:b7:85:48:42:64:7c:75:7f:56:52:58:40:d3: 91:54:d1:da:90:89:f4:cf:68:0c:37:cc:eb:4e:5d: 92:5b:5c:96:46:3b:a0:38:5e:15:73:aa:c0:64:ba: c7:6b:ed:48:b4:69:38:b3:b0:1b:a5:c5:3c:c7:b6: 41:78:3f:69:22:d7:70:71:fd:9d:da:1c:8a:8b:91: f3:75:89:3c:f6:7f:5a:7b:9a:1b:4f:cd:a5:16:30: 64:6d:7b:66:c0:11:ff:e3:8c:6e:16:c4:30:b9:46: 4e:a4:ba:3c:0a:64:b4:22:a3:c9:31:aa:5f:27:79: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:1C:5C:F5:45:20:12:5B:F7:1E:FD:47:D1:89:D2:D3:BB:BD:8C X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7e:36:e3:64:03:0e:5a:ce:41:5e:b4:fa:ac:f1:0e:f6:d4: e9:b8:d1:fe:29:1e:1a:4d:36:cc:7d:93:1f:6e:29:4b:6d:2b: fe:21:0d:37:7a:f7:02:09:55:4c:2d:e4:cc:a0:38:7e:d1:61: 90:8e:15:0e:2b:2f:19:7e:7b:92:71:a0:4d:4d:f3:0e:72:60: bf:c6:21:8f:b0:be:d5:67:32:5f:b1:fc:2b:1d:a3:6e:5d:d1: 3f:50:17:a9:7f:87:ef:5c:c9:1f:a6:b4:51:dc:ec:49:59:63: 91:97:1d:a5:34:97:68:07:69:72:8c:d4:2a:98:b2:d9:60:a1: 36:3f:d5:cd:d2:93:89:6d:0d:76:03:fb:52:45:36:ac:44:4f: 3d:c4:43:67:0f:41:c0:7f:32:3c:b6:0f:88:6b:10:8a:94:4c: bc:51:3a:8c:ae:90:b2:df:41:d0:b8:f3:94:6c:1e:ae:6c:9d: 67:ed:2e:38:dc:c1:c3:c1:4b:27:f8:6e:a1:88:9d:0e:4a:06: 95:ac:d8:b0:81:f8:d4:58:e3:b3:80:fc:f7:06:c5:cd:f8:63: 7c:3f:d5:1c:88:c8:29:57:31:80:9e:93:9f:06:f4:0a:e8:1c: 94:a2:37:e2:35:59:ed:d1:68:44:52:5a:08:3c:50:56:51:a0: 05:03:bf:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUxMDE4MjAxOTA5WhcNMjUxMDI1MjAxOTA5WjAYMRYwFAYD VQQDEw02OGYzZjYzZC1hMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pY6r4M4o5QFHm7YLH37hGmzmff+2jCs8JJsgMR9TvyOawO5CnjEVmmNIwZl bfOlPpYygK9red/Hxcc0IJRERK2keZNdCoA+nkByOlp58H4j+6Kaqp7c2c1Lv/wn u6X2Dy/JEtWkZusXiH3r3dMyZBhIJINs7lt+1ctnKoiS/9a3jTGNVHKpnLeFSEJk fHV/VlJYQNORVNHakIn0z2gMN8zrTl2SW1yWRjugOF4Vc6rAZLrHa+1ItGk4s7Ab pcU8x7ZBeD9pItdwcf2d2hyKi5HzdYk89n9ae5obT82lFjBkbXtmwBH/44xuFsQw uUZOpLo8CmS0IqPJMapfJ3k43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHShHFz1 RSASW/ce/UfRidLTu72MMB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfjbjZAMOWs5BXrT6rPEO9tTpuNH+KR4aTTbMfZMfbilLbSv+IQ03 evcCCVVMLeTMoDh+0WGQjhUOKy8ZfnuScaBNTfMOcmC/xiGPsL7VZzJfsfwrHaNu XdE/UBepf4fvXMkfprRR3OxJWWORlx2lNJdoB2lyjNQqmLLZYKE2P9XN0pOJbQ12 A/tSRTasRE89xENnD0HAfzI8tg+IaxCKlEy8UTqMrpCy30HQuPOUbB6ubJ1n7S44 3MHDwUsn+G6hiJ0OSgaVrNiwgfjUWOOzgPz3BsXN+GN8P9UciMgpVzGAnpOfBvQK 6ByUojfiNVnt0WhEUloIPFBWUaAFA79W -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:52 2025 by rpki-client