$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: W2ZLqKvFyA36oB+3ripuEoRDem8egBxr9JWyEmJQ3uE= Subject key identifier: 1D:F4:B8:E7:A5:7E:D9:69:53:F2:6C:EC:57:45:F4:5D:F4:CD:55:EB Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 08 Signing time: Sun 19 Oct 2025 11:38:33 +0000 Manifest this update: Sun 19 Oct 2025 11:38:32 +0000 Manifest next update: Sun 26 Oct 2025 11:38:32 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: Bq2B1oAMwLiKnb6ApbR2bi5iiV/TMUAwMEwuZgbewZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Oct 19 11:38:32 2025 GMT Not After : Oct 26 11:38:32 2025 GMT Subject: CN=68f4cdb9-c807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:41:6a:24:3d:f7:f7:48:56:76:a8:89:b9:2f: 9f:0c:20:22:d1:d7:14:df:39:cb:25:4e:06:f5:f9: 66:00:92:bc:65:9e:e3:20:0c:2d:9f:38:51:2d:23: 53:a1:aa:5a:c8:ea:f7:18:29:72:8e:6a:05:10:67: 0d:26:1e:1b:8f:c4:0a:8f:b1:1e:f5:79:0e:5a:08: a4:cf:e0:bd:e3:59:06:bb:63:b9:b7:7e:68:f3:1a: f7:42:9d:fa:04:b0:51:ea:fe:7b:6b:9d:2d:05:11: f1:22:63:a0:b8:91:5b:cb:12:d7:d6:d1:48:76:9e: b4:d6:fc:9a:04:4c:4c:9c:36:da:2c:a7:8a:ad:58: f0:7c:d0:74:59:f6:fd:27:af:69:8b:d9:f4:cc:66: 69:c3:c3:ab:38:02:38:20:8e:e1:f2:6c:9b:f3:ab: 06:9f:de:f0:9f:c4:f7:72:df:c6:3a:3b:0b:78:be: b9:ee:11:05:be:8a:1b:ae:e4:d9:08:45:79:1c:e7: 5d:96:d5:ea:c0:3e:7c:32:6f:b1:4a:36:a8:ac:8d: de:81:93:d9:78:25:95:21:0d:49:5c:44:fd:e3:1e: c4:3e:0e:ba:08:6e:68:e1:cf:27:0c:57:5f:7b:1e: a0:86:cd:b0:12:7d:5c:b3:61:1f:a4:15:8d:a7:df: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F4:B8:E7:A5:7E:D9:69:53:F2:6C:EC:57:45:F4:5D:F4:CD:55:EB X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e5:46:4d:ff:5d:f2:58:3f:be:d3:38:4f:0e:1e:ed:dd:57: 34:02:da:4c:bd:7d:a2:d1:06:5d:d9:d8:f2:09:78:6d:8e:11: f1:e1:c4:b8:75:88:e8:2c:b6:25:cd:04:ab:b6:3f:e0:b1:c4: 36:3a:09:84:8e:73:2c:82:b3:13:75:f5:c3:f3:fd:63:38:59: f4:00:9a:00:cf:de:6f:23:bc:35:14:c3:2b:89:06:9d:c8:c9: 8d:bc:87:8b:96:77:d8:5d:13:4b:e5:82:2c:fa:63:14:53:d1: 0b:a8:fa:e9:01:01:f5:a4:39:bd:e5:cb:33:38:a1:59:ca:a3: 78:32:84:79:57:4e:20:92:33:e3:cd:dd:f7:ad:db:0d:f9:c6: b9:b7:d3:ac:17:f2:a6:49:88:8d:41:0e:1f:c9:97:08:b1:4d: 00:0c:f5:61:2c:c5:2c:4e:51:08:e0:e6:cd:7f:04:97:b6:5f: 91:17:a5:3c:6b:48:77:e7:2f:60:66:53:4c:45:7c:72:cf:6e: c9:6a:a1:89:45:ee:7b:4a:18:31:56:82:03:3f:2f:3f:3a:85: b0:d4:8e:6d:40:30:47:50:78:5f:2b:c9:ce:2b:c0:07:32:02: 21:85:22:2b:ea:f1:43:20:8b:6e:2e:bd:39:22:23:56:12:05: 97:f2:80:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNTEwMTkxMTM4MzJaFw0yNTEwMjYxMTM4MzJaMBgxFjAUBgNV BAMTDTY4ZjRjZGI5LWM4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxQWokPff3SFZ2qIm5L58MICLR1xTfOcslTgb1+WYAkrxlnuMgDC2fOFEtI1Oh qlrI6vcYKXKOagUQZw0mHhuPxAqPsR71eQ5aCKTP4L3jWQa7Y7m3fmjzGvdCnfoE sFHq/ntrnS0FEfEiY6C4kVvLEtfW0Uh2nrTW/JoETEycNtosp4qtWPB80HRZ9v0n r2mL2fTMZmnDw6s4AjggjuHybJvzqwaf3vCfxPdy38Y6Owt4vrnuEQW+ihuu5NkI RXkc512W1erAPnwyb7FKNqisjd6Bk9l4JZUhDUlcRP3jHsQ+DroIbmjhzycMV197 HqCGzbASfVyzYR+kFY2n33LdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHfS456V+ 2WlT8mzsV0X0XfTNVeswHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMTlRk3/XfJYP77TOE8OHu3dVzQC2ky9faLRBl3Z2PIJeG2OEfHhxLh1 iOgstiXNBKu2P+CxxDY6CYSOcyyCsxN19cPz/WM4WfQAmgDP3m8jvDUUwyuJBp3I yY28h4uWd9hdE0vlgiz6YxRT0Quo+ukBAfWkOb3lyzM4oVnKo3gyhHlXTiCSM+PN 3fet2w35xrm306wX8qZJiI1BDh/JlwixTQAM9WEsxSxOUQjg5s1/BJe2X5EXpTxr SHfnL2BmU0xFfHLPbslqoYlF7ntKGDFWggM/Lz86hbDUjm1AMEdQeF8ryc4rwAcy AiGFIivq8UMgi24uvTkiI1YSBZfygH8= -----END CERTIFICATE-----Generated at Mon Oct 20 23:29:19 2025 by rpki-client