$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json) Hash identifier: KFvbLpVJJ7RGFfRqsn7cucPqTy+cFsiMl4pfnlOYkzU= Subject key identifier: A3:F4:12:DA:1D:45:E8:0C:26:89:94:5C:B2:63:3A:81:C7:47:C1:42 Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 11:07:41 +0000 Manifest this update: Sun 19 Oct 2025 11:07:41 +0000 Manifest next update: Sun 26 Oct 2025 11:07:41 +0000 Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: 9+1grTciX8CeRG07M6IuZ/MjIGJS9XMtE+JvfcNiQ3o=) 2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Validity Not Before: Oct 19 11:07:41 2025 GMT Not After : Oct 26 11:07:41 2025 GMT Subject: CN=68f4c67d-fad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:c6:4f:e2:1a:3e:58:fc:4d:8e:9f:d2:a0: da:74:39:97:c2:c7:31:7c:40:6a:87:53:b2:e3:fd: 85:4b:d7:b3:23:98:70:98:12:f7:ac:c9:8b:62:26: 73:1c:74:79:f9:44:ce:12:8b:89:b3:4b:ea:64:a6: 05:33:f9:d0:f6:7f:2e:31:09:7b:2b:8f:aa:26:3a: a6:79:79:37:50:97:3c:b9:ad:e8:f2:d7:ca:80:a8: c7:34:f2:c4:ed:36:a7:7c:cb:a6:7a:f4:0f:2d:0a: ae:5d:cc:96:78:5c:49:d9:56:fd:c3:e3:f0:08:39: 83:f3:9b:79:58:ac:2d:f9:f5:44:39:e7:68:ed:8a: e2:3e:f1:14:d9:a0:ae:57:23:4d:3d:49:1c:25:5e: b3:1b:2b:10:5a:92:9b:e1:dc:b5:ee:1a:8d:4b:9b: 7c:99:24:13:85:92:69:c3:18:75:fa:3e:4c:49:13: 80:aa:d9:74:26:33:a9:3f:73:68:23:7e:2a:72:61: 2e:0c:df:28:75:5b:6f:30:9d:e8:5c:5e:18:df:30: bb:af:07:a7:bf:f5:f7:05:7e:de:b0:89:d5:57:fe: e0:ab:3c:8c:27:19:ef:f9:b1:bd:03:bf:77:35:1d: 84:fc:ff:7e:99:72:1d:a9:67:6b:7b:16:f6:00:2e: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:12:DA:1D:45:E8:0C:26:89:94:5C:B2:63:3A:81:C7:47:C1:42 X509v3 Authority Key Identifier: keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:38:b3:fc:89:14:21:a7:42:6c:f1:44:53:2e:da:5a:19: 1d:3d:69:1a:c6:86:e3:0e:aa:36:bc:81:62:11:b0:b7:b7:7d: d9:8a:36:3f:d3:8b:90:76:61:4d:71:de:95:92:2d:0e:ad:5f: 01:05:2c:1e:32:35:60:9c:c4:0a:e6:4c:9e:a7:32:a4:6c:f0: ce:fb:1f:41:ac:21:d2:dd:8d:03:86:19:8b:ce:79:5b:84:c8: c5:99:94:6d:0d:8b:3e:72:87:a8:48:ec:20:19:4d:08:9f:aa: 3c:10:9f:c9:1f:2b:5a:9e:0b:8c:93:8c:1c:3a:14:2f:a9:95: 0c:16:69:c7:43:9a:ed:bc:f5:8a:5a:9c:46:90:a0:93:c6:e6: a4:1f:83:66:98:c9:c3:f0:bc:64:02:93:5e:6f:70:e0:86:37: 46:ca:64:2f:d8:54:41:22:4d:83:51:4e:52:4e:4d:28:81:43: 37:34:ef:ec:71:42:7c:42:36:39:07:f9:b4:e9:04:12:f2:aa: 9e:48:e8:06:b1:a6:3f:bd:eb:70:38:f2:8a:4a:b9:fb:6a:cb: 15:ff:e0:24:91:b8:49:85:5c:73:31:be:f9:b9:8d:d8:79:5e: 17:e2:7d:9f:37:4d:64:0a:5e:3b:c6:dd:d4:30:a1:b8:2a:be: 3d:9e:8b:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0 MUJEQTJFOTAeFw0yNTEwMTkxMTA3NDFaFw0yNTEwMjYxMTA3NDFaMBgxFjAUBgNV BAMTDTY4ZjRjNjdkLWZhZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8U8ZP4ho+WPxNjp/SoNp0OZfCxzF8QGqHU7Lj/YVL17MjmHCYEvesyYtiJnMc dHn5RM4Si4mzS+pkpgUz+dD2fy4xCXsrj6omOqZ5eTdQlzy5rejy18qAqMc08sTt Nqd8y6Z69A8tCq5dzJZ4XEnZVv3D4/AIOYPzm3lYrC359UQ552jtiuI+8RTZoK5X I009SRwlXrMbKxBakpvh3LXuGo1Lm3yZJBOFkmnDGHX6PkxJE4Cq2XQmM6k/c2gj fipyYS4M3yh1W28wnehcXhjfMLuvB6e/9fcFft6widVX/uCrPIwnGe/5sb0Dv3c1 HYT8/36Zch2pZ2t7FvYALu5ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo/QS2h1F 6AwmiZRcsmM6gcdHwUIwHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVlj SktKQXY5SVIyVjBHOW91ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAgOLP8iRQhp0Js8URTLtpaGR09aRrGhuMOqja8gWIRsLe3fdmKNj/T i5B2YU1x3pWSLQ6tXwEFLB4yNWCcxArmTJ6nMqRs8M77H0GsIdLdjQOGGYvOeVuE yMWZlG0Niz5yh6hI7CAZTQifqjwQn8kfK1qeC4yTjBw6FC+plQwWacdDmu289Ypa nEaQoJPG5qQfg2aYycPwvGQCk15vcOCGN0bKZC/YVEEiTYNRTlJOTSiBQzc07+xx QnxCNjkH+bTpBBLyqp5I6Aaxpj+963A48opKuftqyxX/4CSRuEmFXHMxvvm5jdh5 XhfifZ83TWQKXjvG3dQwobgqvj2ei64= -----END CERTIFICATE-----Generated at Tue Oct 21 05:55:08 2025 by rpki-client