$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json) Hash identifier: PyOY10WvOhAQzMcv+1m8BhbFFT7EJTNDf12iaakEVWw= Subject key identifier: 78:B8:59:84:35:0F:1D:AC:12:70:D6:AF:F8:6A:48:82:65:FE:18:42 Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 09:35:24 +0000 Manifest this update: Sun 19 Oct 2025 09:35:23 +0000 Manifest next update: Sun 26 Oct 2025 09:35:23 +0000 Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: XtgJoPzmGrJUJ+F8AU8W7NYqzANwZ1O5/Yct1fXab6A=) 2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: pAj7NdDmToipkIAovmtOfynK/RP/8C5/+xzCsvCxUC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Validity Not Before: Oct 19 09:35:23 2025 GMT Not After : Oct 26 09:35:23 2025 GMT Subject: CN=68f4b0db-3778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:ec:40:ee:36:27:ea:e4:60:33:f6:20:55: 9b:c3:48:be:af:6f:77:43:52:66:84:59:5f:01:d2: 10:4c:79:52:a1:77:33:f9:77:58:eb:8f:d5:f0:e3: df:3f:0b:d5:a5:51:1f:44:73:96:1a:5c:de:55:03: 26:40:8f:40:0b:a9:01:83:ba:98:26:84:1d:5c:2d: b0:37:ff:6a:5c:20:0a:fb:7a:35:b8:6e:f2:27:1a: 16:94:07:1a:73:80:ef:80:77:1e:f8:82:87:83:db: b6:67:17:70:f4:0e:11:ef:e2:5f:ae:b1:1c:18:b4: 03:fa:55:06:ca:13:05:37:e4:78:12:cb:41:a7:7f: 00:c7:8d:36:4b:47:b2:a6:2a:9a:7c:ea:47:ad:b1: d8:1a:95:6f:4a:6b:14:97:2c:a8:0a:8a:4a:d1:32: 48:66:28:1f:0d:2f:20:11:89:93:fb:a1:97:27:25: 96:68:6c:63:28:c9:d5:65:cd:3b:2c:88:c7:46:44: d5:fe:35:1d:fb:27:e1:63:94:cd:71:d1:24:d1:c3: b1:f6:a4:9d:cf:20:03:08:9a:9c:1d:46:0c:8f:ec: d3:76:51:d4:59:26:85:03:26:4d:e3:55:7a:77:a3: ae:f4:64:92:27:78:00:52:f7:f1:51:c4:9e:0c:67: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B8:59:84:35:0F:1D:AC:12:70:D6:AF:F8:6A:48:82:65:FE:18:42 X509v3 Authority Key Identifier: keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:92:11:47:d5:9c:75:92:bb:f0:b3:44:a0:a0:ef:98:8f: cd:08:99:db:0b:96:d8:62:8f:dc:ec:bb:16:50:a0:fe:b2:b8: 29:1a:a2:64:f5:d3:5f:3c:da:cd:57:69:02:b5:53:df:09:40: a4:a0:d5:d8:0b:20:d6:84:42:c9:cb:8e:c5:b3:36:74:81:8e: d4:7e:64:74:2b:b3:4e:29:0f:f3:4e:af:10:b0:84:4a:44:9a: 8f:21:42:f7:c7:41:0f:ce:5a:7a:77:b3:8f:da:9f:bd:79:06: 8d:a5:19:fc:f4:28:9f:6d:cf:64:f4:15:ba:0b:3f:83:94:08: 63:73:1a:14:8d:e1:9d:d7:27:1e:62:70:0c:c4:c4:45:4a:38: 59:cc:34:d0:74:f1:7a:eb:8a:ed:f2:51:4e:af:9c:de:f8:9d: c9:b5:54:c2:84:d3:7b:9f:a9:01:1c:b1:ab:33:83:39:1f:10: bf:0c:47:72:3e:c3:2b:be:88:65:e9:b8:84:b1:3c:19:ca:e6: b1:5f:d6:3f:04:06:6d:e3:6b:34:54:ec:7e:c7:0f:58:d6:72: c8:13:06:81:3d:52:4a:9a:24:eb:41:88:4f:c1:e5:63:02:83: eb:e4:cb:99:1c:5d:94:ce:36:46:bc:cc:41:9d:c2:d5:72:fa: 4b:77:b3:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKEFBMEI3ODJEQjk5MzJFMjJGRERFRjBDM0Y3NTU5NkVF MDk0NUUxMkQwHhcNMjUxMDE5MDkzNTIzWhcNMjUxMDI2MDkzNTIzWjAYMRYwFAYD VQQDEw02OGY0YjBkYi0zNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGTsQO42J+rkYDP2IFWbw0i+r293Q1JmhFlfAdIQTHlSoXcz+XdY64/V8OPf PwvVpVEfRHOWGlzeVQMmQI9AC6kBg7qYJoQdXC2wN/9qXCAK+3o1uG7yJxoWlAca c4DvgHce+IKHg9u2Zxdw9A4R7+JfrrEcGLQD+lUGyhMFN+R4EstBp38Ax402S0ey piqafOpHrbHYGpVvSmsUlyyoCopK0TJIZigfDS8gEYmT+6GXJyWWaGxjKMnVZc07 LIjHRkTV/jUd+yfhY5TNcdEk0cOx9qSdzyADCJqcHUYMj+zTdlHUWSaFAyZN41V6 d6Ou9GSSJ3gAUvfxUcSeDGfXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi4WYQ1 Dx2sEnDWr/hqSIJl/hhCMB8GA1UdIwQYMBaAFKoLeC25ky4i/d7ww/dVlu4JReEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS8wNzc5N0ZFNEMw REMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExpTDkzdkREOTFXVzdnbEY0 UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS8wNzc5N0ZFNEMwREMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExp TDkzdkREOTFXVzdnbEY0UzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtvJIRR9WcdZK78LNEoKDvmI/NCJnbC5bYYo/c7LsWUKD+srgpGqJk 9dNfPNrNV2kCtVPfCUCkoNXYCyDWhELJy47FszZ0gY7UfmR0K7NOKQ/zTq8QsIRK RJqPIUL3x0EPzlp6d7OP2p+9eQaNpRn89Cifbc9k9BW6Cz+DlAhjcxoUjeGd1yce YnAMxMRFSjhZzDTQdPF664rt8lFOr5ze+J3JtVTChNN7n6kBHLGrM4M5HxC/DEdy PsMrvohl6biEsTwZyuaxX9Y/BAZt42s0VOx+xw9Y1nLIEwaBPVJKmiTrQYhPweVj AoPr5MuZHF2UzjZGvMxBncLVcvpLd7Ns -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:24 2025 by rpki-client