$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json) Hash identifier: l4Q7NOK9QRs2Fha8dLDsED3uXtGq1PPEWtUBu0iUeQI= Subject key identifier: 80:6B:C7:E5:6B:5B:72:ED:97:DD:F3:FC:CF:7B:8F:A7:47:3B:62:AC Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft Manifest number: 033B Signing time: Sun 19 Oct 2025 03:07:06 +0000 Manifest this update: Sun 19 Oct 2025 03:07:05 +0000 Manifest next update: Sun 26 Oct 2025 03:07:05 +0000 Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: 1sMuuBG2bl/lVZBGIf7pDDUVMWhAo6Ltj96UpAru4Ts=) 2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99 Validity Not Before: Oct 19 03:07:05 2025 GMT Not After : Oct 26 03:07:05 2025 GMT Subject: CN=68f455da-e08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:8c:d7:66:45:ad:9d:fd:7b:62:47:1a:89: a7:a5:9b:2f:87:19:f6:e9:1a:25:a7:11:93:12:09: c9:78:74:3e:cc:e2:4d:19:83:8d:2a:04:d1:c3:1f: fb:75:50:30:df:fa:1b:c7:ef:a2:1a:1d:34:36:14: 13:92:ff:3e:70:8e:bc:6a:4c:28:6d:49:fa:3d:47: fb:b4:77:68:86:f7:96:5b:9d:45:d1:ba:06:77:a2: 13:17:0d:c8:d4:7a:f8:0d:85:af:df:49:73:16:32: 24:29:d8:f0:22:5d:6f:bd:b1:90:02:19:45:a0:3b: 11:27:0c:77:57:79:b3:33:56:2b:d2:a1:53:ee:84: fe:03:d9:c2:32:49:27:6d:1a:a9:35:02:dc:c7:9b: d3:28:14:62:aa:02:27:3c:5a:3a:98:f5:55:f4:56: 59:ef:77:04:0b:dd:c2:36:e3:91:b6:7d:9f:b4:7d: b6:ec:1a:73:99:e5:f2:60:0f:70:84:c5:5f:a8:84: 00:35:0d:9a:38:1a:2b:38:d3:f6:ce:8f:78:cd:7a: c3:89:cb:e7:0b:fc:c5:4b:60:69:a0:2e:7e:08:83: ae:03:a5:cd:01:7b:9e:1a:4e:88:a4:5e:e8:81:35: 6a:3d:d6:6c:36:83:97:44:f6:9c:07:be:37:20:ae: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6B:C7:E5:6B:5B:72:ED:97:DD:F3:FC:CF:7B:8F:A7:47:3B:62:AC X509v3 Authority Key Identifier: keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2e:53:c0:c9:f1:76:51:5f:0b:ca:fb:3f:f3:28:9c:56:6b: 7e:6d:f6:18:3a:89:ea:fa:0b:e6:95:0f:b8:4c:f5:dd:b1:30: 5b:b3:8b:5b:96:b4:50:d0:aa:2a:f6:9e:74:8f:c0:6f:51:b7: af:a7:84:bd:c9:ba:20:e7:42:6f:bc:70:90:af:d1:93:cb:f6: a1:ea:8c:5f:4f:40:b7:24:75:c4:32:fb:77:ee:5c:2d:f1:22: e5:04:2a:07:a0:20:b1:62:e9:12:9a:34:fa:2d:33:55:85:ae: 5b:36:0d:3d:fe:11:49:7d:56:31:5a:75:6c:93:9b:34:ad:46: d5:0c:65:77:96:40:7f:3a:d7:a4:73:fc:57:7f:ac:7a:0e:50: 0a:c2:8e:ae:e8:b0:98:eb:69:02:48:3d:82:14:5c:29:84:66: 94:83:d7:0c:d4:0f:a0:0a:8b:e6:5b:14:78:06:70:87:b5:33: 4c:5b:94:ed:51:88:7c:8b:90:10:bb:09:e0:52:3e:b4:30:80: f2:78:65:78:92:b7:ed:12:db:8d:bd:36:93:bb:e7:a4:fc:53: 31:bd:3b:82:f3:1e:69:ca:f0:38:b5:2e:c9:d5:30:e2:f0:8a: a1:05:49:2c:ef:25:af:ca:9d:76:c7:35:77:b0:82:f1:23:3d: 97:a3:a8:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy OENENDdEOTkwHhcNMjUxMDE5MDMwNzA1WhcNMjUxMDI2MDMwNzA1WjAYMRYwFAYD VQQDEw02OGY0NTVkYS1lMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVCM12ZFrZ39e2JHGomnpZsvhxn26RolpxGTEgnJeHQ+zOJNGYONKgTRwx/7 dVAw3/obx++iGh00NhQTkv8+cI68akwobUn6PUf7tHdohveWW51F0boGd6ITFw3I 1Hr4DYWv30lzFjIkKdjwIl1vvbGQAhlFoDsRJwx3V3mzM1Yr0qFT7oT+A9nCMkkn bRqpNQLcx5vTKBRiqgInPFo6mPVV9FZZ73cEC93CNuORtn2ftH227BpzmeXyYA9w hMVfqIQANQ2aOBorONP2zo94zXrDicvnC/zFS2BpoC5+CIOuA6XNAXueGk6IpF7o gTVqPdZsNoOXRPacB743IK6XXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBrx+Vr W3Ltl93z/M97j6dHO2KsMB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL WDhsU1FGUWtoQUFvelVmWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGLlPAyfF2UV8Lyvs/8yicVmt+bfYYOonq+gvmlQ+4TPXdsTBbs4tb lrRQ0Koq9p50j8BvUbevp4S9ybog50JvvHCQr9GTy/ah6oxfT0C3JHXEMvt37lwt 8SLlBCoHoCCxYukSmjT6LTNVha5bNg09/hFJfVYxWnVsk5s0rUbVDGV3lkB/Otek c/xXf6x6DlAKwo6u6LCY62kCSD2CFFwphGaUg9cM1A+gCovmWxR4BnCHtTNMW5Tt UYh8i5AQuwngUj60MIDyeGV4krftEtuNvTaTu+ek/FMxvTuC8x5pyvA4tS7J1TDi 8IqhBUks7yWvyp12xzV3sILxIz2Xo6i/ -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:32 2025 by rpki-client