$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: lbc1qJUtBdIqlCftUjBYPtpJkfBH1aXn1fB5CtLZE1Y= Subject key identifier: 45:75:9B:6C:6C:B3:DF:B8:56:40:0A:44:C6:10:F4:F0:13:62:15:A3 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0CA7 Signing time: Sat 18 Oct 2025 18:55:05 +0000 Manifest this update: Sat 18 Oct 2025 18:55:04 +0000 Manifest next update: Sat 25 Oct 2025 18:55:04 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: ucEYlXQLuGfzzBYMDsYPpueo/u515ObVEo9NdVfCM2g=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: t7Z6lzZf2rYamEN2YgdXmqrw8mN9RKxx+Hcob4AGplk=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: waZbL1P4NpHdHtHaU30SRx8sKqkEE7bIrM8wDlF6928=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Oct 18 18:55:04 2025 GMT Not After : Oct 25 18:55:04 2025 GMT Subject: CN=68f3e289-d7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:20:42:b1:40:07:46:9f:7e:b3:b2:52:ef: f1:d7:9b:68:67:fe:d8:c4:73:8d:17:fa:e0:fc:d2: 3b:ee:31:aa:0c:c4:c1:bf:5c:1e:44:0c:cf:56:2f: 98:ed:47:d2:b8:2a:0d:9a:8e:68:9e:ae:a8:5c:4c: b1:24:57:e3:4e:ba:a2:5a:7d:14:d8:78:3c:d8:97: c2:35:2a:60:ed:08:69:09:de:59:87:af:7f:8b:32: e6:95:d5:81:ed:31:f9:02:0b:8f:62:c1:fe:3c:f2: 75:54:71:48:46:db:04:81:3a:42:2b:47:8f:71:be: 17:82:99:cd:3b:f1:96:8f:cc:e8:4b:12:b5:91:30: fd:43:d8:31:48:8e:ed:8b:4e:fd:cb:7c:f9:69:1d: 5f:83:a1:b3:cd:e5:bc:8a:2d:de:27:44:43:e2:40: d7:78:f1:68:4b:71:9a:22:46:f8:da:dc:f7:63:3a: fe:e0:b1:39:14:c0:17:4e:be:9e:5d:d2:db:2d:04: 7b:63:36:81:33:4e:8b:ad:b8:87:d6:2d:8e:2f:4e: 37:e0:27:f1:fc:b7:61:ad:1c:c3:d7:4a:96:1b:ea: b1:bf:26:c1:dc:71:6d:11:be:79:ce:c9:2c:d7:46: d2:af:a8:9c:21:dd:f5:a3:e2:1e:f5:ab:46:fd:84: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:75:9B:6C:6C:B3:DF:B8:56:40:0A:44:C6:10:F4:F0:13:62:15:A3 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d6:3c:d7:9c:f8:38:26:3e:0f:31:12:6a:4e:f1:7e:d7:69: 01:a8:8d:0f:a3:b2:2f:c3:8a:3b:61:58:a2:e6:35:66:e0:4d: 42:62:19:6d:ec:25:89:98:f7:5f:a8:24:61:9f:f9:88:fd:9d: e7:62:c4:56:bc:36:0f:7f:cd:b0:5c:36:04:c5:80:6c:90:e7: 43:33:81:80:44:25:85:3c:ef:3b:e6:97:ad:fc:d1:67:05:be: 85:b9:c7:30:8e:3c:01:58:6a:87:6d:0f:f0:2d:ef:7d:71:b5: 18:25:45:fe:c2:79:58:10:2d:e9:4e:99:25:7a:05:0a:f1:24: b6:90:32:70:10:92:14:d1:be:57:33:06:07:81:74:e8:cb:05: ba:ce:c8:c7:a4:f3:fe:b1:4d:7d:f7:54:21:33:d1:f8:95:db: 6f:92:4c:2b:8a:19:39:15:55:f8:21:43:3c:d6:b4:8b:66:ed: 4d:43:20:37:fb:4d:b5:8e:0c:91:ee:95:a6:74:56:7f:9c:5a: 0f:b3:8f:f1:ea:fe:cb:22:a4:72:c6:a9:08:6f:7b:e7:7f:35: a9:00:d7:11:f7:e0:4f:61:31:e2:d2:b9:c2:21:3e:52:f9:0a: 3b:92:ea:5b:d5:96:03:28:bd:ee:b7:92:6a:6c:2c:de:c2:5b: b3:d6:4a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjUxMDE4MTg1NTA0WhcNMjUxMDI1MTg1NTA0WjAYMRYwFAYD VQQDEw02OGYzZTI4OS1kN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpkgQrFAB0affrOyUu/x15toZ/7YxHONF/rg/NI77jGqDMTBv1weRAzPVi+Y 7UfSuCoNmo5onq6oXEyxJFfjTrqiWn0U2Hg82JfCNSpg7QhpCd5Zh69/izLmldWB 7TH5AguPYsH+PPJ1VHFIRtsEgTpCK0ePcb4XgpnNO/GWj8zoSxK1kTD9Q9gxSI7t i079y3z5aR1fg6GzzeW8ii3eJ0RD4kDXePFoS3GaIkb42tz3Yzr+4LE5FMAXTr6e XdLbLQR7YzaBM06LrbiH1i2OL0434Cfx/LdhrRzD10qWG+qxvybB3HFtEb55zsks 10bSr6icId31o+Ie9atG/YTXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV1m2xs s9+4VkAKRMYQ9PATYhWjMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt1jzXnPg4Jj4PMRJqTvF+12kBqI0Po7Ivw4o7YVii5jVm4E1CYhlt 7CWJmPdfqCRhn/mI/Z3nYsRWvDYPf82wXDYExYBskOdDM4GARCWFPO875pet/NFn Bb6FuccwjjwBWGqHbQ/wLe99cbUYJUX+wnlYEC3pTpklegUK8SS2kDJwEJIU0b5X MwYHgXToywW6zsjHpPP+sU1991QhM9H4ldtvkkwrihk5FVX4IUM81rSLZu1NQyA3 +021jgyR7pWmdFZ/nFoPs4/x6v7LIqRyxqkIb3vnfzWpANcR9+BPYTHi0rnCIT5S +Qo7kupb1ZYDKL3ut5JqbCzewluz1koG -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:20 2025 by rpki-client