$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: LYDBCyb2wDSO1SkFmHsNV7sA7k70MEhINMZFoY8eIM0= Subject key identifier: 72:8E:9D:FD:47:E2:9D:4A:A9:E5:74:D2:F7:C9:34:71:D2:3F:AA:02 Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 0890 Signing time: Sat 18 Oct 2025 21:43:37 +0000 Manifest this update: Sat 18 Oct 2025 21:43:36 +0000 Manifest next update: Sat 25 Oct 2025 21:43:36 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: nFp6NJ985iA7Ar8XAqsESJe9sjz2qyKiLiPQiSHKDNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Oct 18 21:43:36 2025 GMT Not After : Oct 25 21:43:36 2025 GMT Subject: CN=68f40a09-4a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:52:f1:97:f5:77:87:40:cd:35:65:ec:68: 6d:3e:fb:58:4f:af:c2:0e:62:f9:e8:45:a6:27:a2: 6a:b5:42:b3:d2:76:46:a4:0a:2a:01:26:72:c5:79: 60:ea:2b:56:9d:af:8f:38:31:1f:66:1c:39:ba:79: ee:70:5a:ba:11:a3:16:23:4b:cd:03:5f:13:09:a0: 8b:f0:cf:f6:51:ce:70:b1:c1:1d:98:d2:d6:8e:61: 2d:fc:1b:2b:e8:ce:c2:f1:62:d0:72:95:ee:55:1c: e5:d5:bf:72:bf:d6:28:cd:58:fe:fc:b6:30:4f:85: ec:44:a8:c4:01:59:76:0a:23:03:ce:18:93:02:f8: b9:0a:11:8b:15:43:a9:cf:87:bb:fb:bd:c6:4d:b9: e3:a8:55:81:17:84:4e:03:4e:c7:e8:a3:1d:44:79: 13:85:da:ad:b1:6d:1c:37:40:f1:57:da:8f:5c:a2: 8d:a0:ba:d0:f4:f2:0a:a6:74:54:8f:25:fe:7d:92: 4d:8f:36:1b:5d:10:02:33:bc:aa:95:1f:49:50:7f: ac:8e:e4:15:2a:73:fd:32:cd:76:d2:3f:9d:65:86: a9:22:46:0d:3f:19:97:7f:ca:c1:89:75:1c:f8:0d: 2f:e6:bf:dd:2b:b8:45:16:6c:75:2d:d2:05:81:06: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:9D:FD:47:E2:9D:4A:A9:E5:74:D2:F7:C9:34:71:D2:3F:AA:02 X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:70:73:7d:b2:28:9a:e5:36:76:15:fc:2e:41:3a:3b:be:ec: d0:68:f2:e7:85:f8:de:71:52:17:b9:65:c4:7c:29:4e:e3:a1: 07:55:4d:3b:2b:8f:47:73:f2:ab:b5:dc:87:94:e4:9d:3f:f5: b7:57:1d:b2:63:b3:b4:2b:e9:12:97:36:bd:25:5c:1d:d1:11: 1a:b3:71:64:5b:72:2b:d1:b8:90:38:7b:e0:98:32:bb:5d:d4: c0:1a:f6:fb:5e:d0:65:df:8e:1a:3a:a1:82:db:3f:07:13:3a: 6d:66:b0:fa:ee:3e:72:34:e7:a2:67:3d:5b:0b:5f:c3:6c:92: 0e:d1:19:e3:d7:3e:52:e9:bb:98:74:01:6d:b4:ae:15:b1:16: 11:4d:b6:4e:38:03:b4:fd:27:29:53:7a:88:ec:29:60:f8:27: 1e:52:14:66:1f:82:10:b8:1e:be:33:da:57:32:30:c0:88:44: 44:84:95:a5:b2:15:e9:eb:fa:6b:0f:5c:c5:a0:20:9a:51:11: 53:54:dc:5a:9d:db:f9:70:08:a1:60:e3:eb:02:5a:83:28:75: f1:6c:86:c6:c4:a9:c0:12:f0:21:39:02:a2:71:86:ba:32:0a: e6:f8:19:63:77:9a:95:55:56:e5:1a:10:14:6d:13:5a:c2:9e: ce:24:1d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUxMDE4MjE0MzM2WhcNMjUxMDI1MjE0MzM2WjAYMRYwFAYD VQQDEw02OGY0MGEwOS00YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZlS8Zf1d4dAzTVl7GhtPvtYT6/CDmL56EWmJ6JqtUKz0nZGpAoqASZyxXlg 6itWna+PODEfZhw5unnucFq6EaMWI0vNA18TCaCL8M/2Uc5wscEdmNLWjmEt/Bsr 6M7C8WLQcpXuVRzl1b9yv9YozVj+/LYwT4XsRKjEAVl2CiMDzhiTAvi5ChGLFUOp z4e7+73GTbnjqFWBF4ROA07H6KMdRHkThdqtsW0cN0DxV9qPXKKNoLrQ9PIKpnRU jyX+fZJNjzYbXRACM7yqlR9JUH+sjuQVKnP9Ms120j+dZYapIkYNPxmXf8rBiXUc +A0v5r/dK7hFFmx1LdIFgQYQgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKOnf1H 4p1KqeV00vfJNHHSP6oCMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKcHN9siia5TZ2FfwuQTo7vuzQaPLnhfjecVIXuWXEfClO46EHVU07 K49Hc/KrtdyHlOSdP/W3Vx2yY7O0K+kSlza9JVwd0REas3FkW3Ir0biQOHvgmDK7 XdTAGvb7XtBl344aOqGC2z8HEzptZrD67j5yNOeiZz1bC1/DbJIO0Rnj1z5S6buY dAFttK4VsRYRTbZOOAO0/ScpU3qI7Clg+CceUhRmH4IQuB6+M9pXMjDAiEREhJWl shXp6/prD1zFoCCaURFTVNxandv5cAihYOPrAlqDKHXxbIbGxKnAEvAhOQKicYa6 Mgrm+Bljd5qVVVblGhAUbRNawp7OJB0S -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:36 2025 by rpki-client