$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json) Hash identifier: mqUwqiNcEpNeByDape8T3sARaydD9CnTHT4LZeqdMPs= Subject key identifier: CD:1F:7C:FC:1E:33:B4:0C:F3:E0:AD:DB:96:FF:0B:86:79:A9:16:68 Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft Manifest number: 03C2 Signing time: Sun 19 Oct 2025 02:39:57 +0000 Manifest this update: Sun 19 Oct 2025 02:39:57 +0000 Manifest next update: Sun 26 Oct 2025 02:39:57 +0000 Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: e1tIaQQs2w7dHbzzpH6KpShWzSj2BAW4DiFc2lKwohk=) 2: EE8EAEDC377F11EE92674430C4F9AE02.roa (hash: XUINDcHIDNHHzShIR5UbuMY4rtr/62wcaswBNnwgnig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD Validity Not Before: Oct 19 02:39:57 2025 GMT Not After : Oct 26 02:39:57 2025 GMT Subject: CN=68f44f7d-d053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:36:6a:1a:9e:c6:c2:49:b4:71:eb:be:6a: bd:9e:48:4b:0b:30:44:a5:a0:4c:14:09:cd:a5:7a: 89:74:8e:72:ae:97:16:60:d9:3b:61:c0:a4:ab:fa: 2f:48:c7:28:c0:d7:a0:df:aa:0b:23:2e:a5:23:3a: 7e:74:c3:95:d7:d9:eb:c6:75:2a:ca:7b:4c:e0:7e: af:0f:c3:bb:87:20:05:23:7b:6c:55:1d:55:91:5d: 45:59:88:9e:52:b3:d3:43:9f:98:98:a0:c6:9a:85: 64:22:2e:db:7a:61:68:6c:76:ad:fe:f2:e1:80:a3: 0b:c0:26:30:16:30:14:af:70:f7:e9:80:e1:28:3a: 9c:65:f2:df:3f:08:5f:aa:b5:f4:d7:75:00:53:00: b1:76:23:1d:3d:ca:65:02:39:d4:c5:d4:50:23:6d: 7d:32:f2:e9:90:eb:5b:0f:b5:5b:90:d1:30:a4:ac: 8b:a4:90:57:a5:e7:2f:08:78:a6:73:8a:89:87:32: dc:65:2f:6f:d8:7a:5d:3e:a3:a0:f3:26:6e:08:94: 58:f2:d5:1e:80:e3:6e:a5:54:3b:34:99:7a:67:96: 4f:84:81:b1:a5:8d:ff:c0:91:34:88:d9:38:e6:2e: 3f:8d:e8:3d:ab:e2:02:fe:e6:b5:66:49:a3:77:fa: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1F:7C:FC:1E:33:B4:0C:F3:E0:AD:DB:96:FF:0B:86:79:A9:16:68 X509v3 Authority Key Identifier: keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:7b:57:f7:06:b1:b4:c4:12:ea:46:4a:d4:06:a2:19:40:3f: 95:e9:49:e7:23:a6:d4:05:3f:c5:78:48:08:74:b0:77:cd:ae: 10:1a:86:0b:4c:18:2e:36:b9:a5:df:62:9c:92:6b:ed:6a:d9: b0:6c:db:13:af:bd:a0:11:5a:c8:17:64:47:af:8a:f8:31:ff: c0:a3:83:43:53:ba:65:90:ba:28:06:f5:76:8d:f2:3a:9d:ee: 57:e6:66:52:ba:29:41:1d:d7:e8:a8:84:2f:c4:6e:06:24:a0: 2d:67:b0:20:3a:2c:73:f7:f2:12:4c:20:66:ea:68:fb:25:f7: 29:52:43:0d:2e:5d:b4:81:34:a5:1e:a6:12:2e:32:ad:03:1c: 90:87:05:d5:52:b8:0c:0d:b7:4d:9b:86:bb:9b:8a:3e:be:8f: a2:b4:18:ff:8b:c3:47:b5:8e:f4:b5:7e:e3:40:90:81:5c:10: 4f:d9:c4:ca:60:e2:41:5b:f4:9c:41:8e:dd:49:3e:77:d1:61: 5d:e4:98:04:38:3d:ad:e9:76:f1:d9:9d:f0:ef:5b:b8:5d:72: c0:07:24:b4:53:fa:5b:cf:d2:71:92:6f:d4:b2:c9:bc:92:f5: 59:de:a1:76:15:70:85:71:d7:23:40:1c:56:90:d5:0f:ab:be: ff:30:a9:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE QUY1RDA1Q0QwHhcNMjUxMDE5MDIzOTU3WhcNMjUxMDI2MDIzOTU3WjAYMRYwFAYD VQQDEw02OGY0NGY3ZC1kMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgA2ahqexsJJtHHrvmq9nkhLCzBEpaBMFAnNpXqJdI5yrpcWYNk7YcCkq/ov SMcowNeg36oLIy6lIzp+dMOV19nrxnUqyntM4H6vD8O7hyAFI3tsVR1VkV1FWYie UrPTQ5+YmKDGmoVkIi7bemFobHat/vLhgKMLwCYwFjAUr3D36YDhKDqcZfLfPwhf qrX013UAUwCxdiMdPcplAjnUxdRQI219MvLpkOtbD7VbkNEwpKyLpJBXpecvCHim c4qJhzLcZS9v2HpdPqOg8yZuCJRY8tUegONupVQ7NJl6Z5ZPhIGxpY3/wJE0iNk4 5i4/jeg9q+IC/ua1Zkmjd/pFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0ffPwe M7QM8+Ct25b/C4Z5qRZoMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3 Qk8yQkk4YU9YQXphOWRCYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBe1f3BrG0xBLqRkrUBqIZQD+V6UnnI6bUBT/FeEgIdLB3za4QGoYL TBguNrml32KckmvtatmwbNsTr72gEVrIF2RHr4r4Mf/Ao4NDU7plkLooBvV2jfI6 ne5X5mZSuilBHdfoqIQvxG4GJKAtZ7AgOixz9/ISTCBm6mj7JfcpUkMNLl20gTSl HqYSLjKtAxyQhwXVUrgMDbdNm4a7m4o+vo+itBj/i8NHtY70tX7jQJCBXBBP2cTK YOJBW/ScQY7dST530WFd5JgEOD2t6Xbx2Z3w71u4XXLAByS0U/pbz9Jxkm/Ussm8 kvVZ3qF2FXCFcdcjQBxWkNUPq77/MKlQ -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:26 2025 by rpki-client