$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: tg5zsqFMA20rJzt46e17cf0TfO6YhJksRIpJouYlc3A= Subject key identifier: B0:B2:82:A6:97:E7:CE:25:66:5E:02:9A:B8:EF:C9:14:5A:81:6F:ED Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E3E Signing time: Sat 18 Oct 2025 15:40:35 +0000 Manifest this update: Sat 18 Oct 2025 15:40:34 +0000 Manifest next update: Sat 25 Oct 2025 15:40:34 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: TamuDN8g2m0sX8HY2mTnl6kI6WYs43mREBTv3S0o67c=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11851 (0x2e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Oct 18 15:40:34 2025 GMT Not After : Oct 25 15:40:34 2025 GMT Subject: CN=68f3b4f3-8ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:27:0d:b0:04:22:46:6c:35:ff:ee:c5:0e: 86:99:37:c8:df:80:4c:43:a0:0e:19:d4:94:82:c3: 86:32:7f:5e:9a:b3:b0:56:d2:b4:f6:14:1a:04:02: f4:6d:d9:cb:61:cb:b4:7f:9b:f5:7b:26:7c:31:46: f8:f1:22:1c:99:7d:ac:f2:61:39:56:9c:dd:b5:ce: f0:55:49:d4:d5:2d:91:b9:14:a9:fd:2f:28:9d:44: d0:56:1c:6c:70:75:27:bc:60:26:bd:d6:07:c6:12: bc:f6:21:c5:2f:08:67:48:60:ee:28:c9:9a:68:f0: 8c:7e:f6:8b:7b:cd:73:d3:b6:09:34:9d:38:46:35: df:94:b0:a0:a2:ca:97:8c:8a:7c:b5:58:5c:cc:58: 14:c8:b7:21:c1:c9:15:93:a4:d6:e5:11:f8:13:fd: ac:14:2a:0a:53:9e:ff:1b:a9:7f:46:23:bc:de:38: ae:15:db:a9:60:eb:ce:9a:ab:69:4e:a0:9f:cb:4d: 26:b7:38:be:31:99:04:42:f4:b5:76:46:ff:4e:cd: 63:5f:19:d9:3f:87:bf:00:74:8f:52:e2:e6:a9:a2: a5:34:d2:a2:38:69:bb:03:fe:ba:41:d2:69:25:c4: 22:4f:43:40:b5:e6:b3:a0:f7:b2:0a:ca:64:1e:4e: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B2:82:A6:97:E7:CE:25:66:5E:02:9A:B8:EF:C9:14:5A:81:6F:ED X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b3:3b:94:f3:b9:d1:23:08:29:fa:16:43:b2:f4:ce:c8:2a: c7:42:47:51:e1:26:d1:ca:28:13:68:6a:b6:9a:97:8a:72:06: b9:28:72:4b:e7:52:d2:37:55:b6:c1:b2:77:9c:2e:1c:53:c0: 9d:38:6b:8f:56:1c:05:1c:b7:f6:ba:78:40:ef:67:35:d1:5e: f5:f0:1e:09:64:6a:04:d1:63:b2:2c:ee:af:61:bb:68:97:b9: c4:9d:01:84:63:95:fb:f1:14:90:b6:3d:c9:7f:8c:4d:e6:6e: d0:69:05:b2:60:6a:70:e8:16:92:3b:6d:50:af:13:77:1c:50: eb:82:c0:c1:4c:2e:b6:01:a2:0f:50:51:97:c5:70:18:96:6d: 3c:8e:d2:21:40:4f:ea:d2:ba:d0:71:f1:0a:cf:e3:b3:11:de: 5c:32:63:ff:54:56:ec:68:2b:ab:6c:f6:c8:a3:55:e4:c7:2d: af:0d:b8:29:8a:e5:49:f9:56:00:6b:7c:02:96:fe:76:73:c1: 8d:04:de:cc:57:76:a2:5e:e5:06:8e:ec:15:19:00:28:b0:81: 8f:17:b4:b9:ee:b9:e0:e0:77:39:71:99:0d:56:2e:77:bd:36: 71:80:80:77:76:58:59:3f:c9:62:f1:38:ab:2c:3a:9f:c3:13: dd:fe:1e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUxMDE4MTU0MDM0WhcNMjUxMDI1MTU0MDM0WjAYMRYwFAYD VQQDEw02OGYzYjRmMy04ZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhsnDbAEIkZsNf/uxQ6GmTfI34BMQ6AOGdSUgsOGMn9emrOwVtK09hQaBAL0 bdnLYcu0f5v1eyZ8MUb48SIcmX2s8mE5Vpzdtc7wVUnU1S2RuRSp/S8onUTQVhxs cHUnvGAmvdYHxhK89iHFLwhnSGDuKMmaaPCMfvaLe81z07YJNJ04RjXflLCgosqX jIp8tVhczFgUyLchwckVk6TW5RH4E/2sFCoKU57/G6l/RiO83jiuFdupYOvOmqtp TqCfy00mtzi+MZkEQvS1dkb/Ts1jXxnZP4e/AHSPUuLmqaKlNNKiOGm7A/66QdJp JcQiT0NAteazoPeyCspkHk459wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCygqaX 584lZl4CmrjvyRRagW/tMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClszuU87nRIwgp+hZDsvTOyCrHQkdR4SbRyigTaGq2mpeKcga5KHJL 51LSN1W2wbJ3nC4cU8CdOGuPVhwFHLf2unhA72c10V718B4JZGoE0WOyLO6vYbto l7nEnQGEY5X78RSQtj3Jf4xN5m7QaQWyYGpw6BaSO21QrxN3HFDrgsDBTC62AaIP UFGXxXAYlm08jtIhQE/q0rrQcfEKz+OzEd5cMmP/VFbsaCurbPbIo1Xkxy2vDbgp iuVJ+VYAa3wClv52c8GNBN7MV3aiXuUGjuwVGQAosIGPF7S57rng4Hc5cZkNVi53 vTZxgIB3dlhZP8li8TirLDqfwxPd/h4t -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:33 2025 by rpki-client