$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft File: qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json) Hash identifier: Iywz1lu9k1zBXSCSeWC83ZUYJRZBBTwdz/w4lv12+B0= Subject key identifier: 4E:02:F2:B9:FB:81:3F:7B:E9:D1:07:00:5D:2C:BB:DF:34:31:46:D1 Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 Certificate issuer: /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft Manifest number: 017A Signing time: Sun 19 Oct 2025 06:53:15 +0000 Manifest this update: Sun 19 Oct 2025 06:53:14 +0000 Manifest next update: Sun 26 Oct 2025 06:53:14 +0000 Files and hashes: 1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: jx5FQTTf7Lu3J1MtaN6W45EiVzrNyJ5RsYZokClDLTY=) 2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=) 3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024 Validity Not Before: Oct 19 06:53:14 2025 GMT Not After : Oct 26 06:53:14 2025 GMT Subject: CN=68f48adb-cb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:0b:d6:6b:37:4a:32:1e:38:02:38:0c:8f: 0a:ed:71:cd:4f:47:23:d7:30:52:e7:4a:d7:eb:71: c3:9b:6c:41:07:43:f2:e1:f7:07:af:05:a0:18:cc: 01:d8:07:1d:74:77:f9:04:91:40:de:0f:73:53:9c: 05:d3:35:28:4a:a0:a4:c5:c7:f6:4f:4b:1b:37:1c: 2d:67:5f:19:55:d3:04:23:d5:a9:e3:ae:9c:20:24: 5f:d5:06:ae:3f:7f:cf:be:4b:a9:4a:97:12:61:16: a8:df:84:c3:f1:ac:37:ae:5e:d4:15:d5:44:61:da: ed:09:ec:46:21:ce:b0:70:71:2e:91:59:3b:72:48: d1:f7:a1:96:d0:41:78:7d:70:86:a2:2f:18:6b:9b: c7:91:5f:f7:ea:42:e0:da:1e:75:87:1a:e1:0f:4e: 0b:f9:6b:8a:fe:94:87:60:b0:0e:29:89:8b:58:93: 42:79:32:de:dd:23:fb:9d:b3:ff:e6:7c:5c:2a:65: 17:5b:36:df:d7:26:13:83:b0:31:07:cd:59:6b:58: d5:7d:af:70:5b:0c:3d:a7:06:b1:35:c8:e8:0c:47: 1e:3a:77:c3:65:a7:47:bd:4f:31:a9:f8:13:32:a5: 87:69:aa:b3:87:bf:9d:7d:01:0a:3f:0e:4c:dc:b9: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:02:F2:B9:FB:81:3F:7B:E9:D1:07:00:5D:2C:BB:DF:34:31:46:D1 X509v3 Authority Key Identifier: keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:cc:fc:04:91:58:9d:10:f3:bf:ca:92:51:9c:28:b2:5f:c5: 46:ea:0f:ab:98:38:11:c8:a9:8e:92:b8:4c:0a:f9:a9:26:f5: b3:82:98:ca:de:9f:fe:5c:87:15:ea:26:d9:58:58:38:80:f0: 57:40:49:a3:03:7f:bf:6a:02:af:36:a0:a3:41:de:df:c1:e5: ca:86:07:65:6d:0d:d0:6d:15:6b:c4:53:83:b7:53:26:7c:96: d3:01:96:96:17:51:5b:7d:d5:51:f2:ff:db:2c:bf:ce:33:b6: 48:61:a5:4d:ff:13:c6:1e:fe:d5:bb:45:f2:d7:6a:1a:2f:87: b2:d1:22:85:2f:c8:b5:72:cf:9e:2a:ac:ac:7e:67:15:15:85: 49:2e:15:e0:75:8c:92:90:9b:d8:58:e8:69:89:a4:93:cd:7b: 93:6a:ae:1b:03:e4:b3:a9:58:f7:c1:bd:bd:62:61:6d:0c:2e: 8e:4b:06:7c:ba:e9:45:d7:eb:4e:98:17:11:cb:66:a9:d6:78: 98:bf:5e:38:ab:90:cc:44:be:f9:81:17:38:db:e2:69:1b:92: b7:ff:4c:72:a2:69:3b:85:56:5c:1f:79:85:27:11:b3:9a:86: 21:ee:a5:85:10:64:bd:36:64:e0:78:87:1c:de:44:60:29:16: 33:b3:34:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MkQxMTAvBgNVBAUTKEE4MUQwRDYxRjdCNzMwRERCNzQyQ0M0OEFERDg4QTA0 RDQ2RkQwMjQwHhcNMjUxMDE5MDY1MzE0WhcNMjUxMDI2MDY1MzE0WjAYMRYwFAYD VQQDEw02OGY0OGFkYi1jYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtwL1ms3SjIeOAI4DI8K7XHNT0cj1zBS50rX63HDm2xBB0Py4fcHrwWgGMwB 2AcddHf5BJFA3g9zU5wF0zUoSqCkxcf2T0sbNxwtZ18ZVdMEI9Wp466cICRf1Qau P3/PvkupSpcSYRao34TD8aw3rl7UFdVEYdrtCexGIc6wcHEukVk7ckjR96GW0EF4 fXCGoi8Ya5vHkV/36kLg2h51hxrhD04L+WuK/pSHYLAOKYmLWJNCeTLe3SP7nbP/ 5nxcKmUXWzbf1yYTg7AxB81Za1jVfa9wWww9pwaxNcjoDEceOnfDZadHvU8xqfgT MqWHaaqzh7+dfQEKPw5M3LnJAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4C8rn7 gT976dEHAF0su980MUbRMB8GA1UdIwQYMBaAFKgdDWH3tzDdt0LMSK3YigTUb9Ak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkyRC9DQzY3RDI1MkE0 QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01OMjNRc3hJcmRpS0JOUnYw Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FCME5ZZmUzTU4yM1FzeElyZGlLQk5SdjBDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkyRC9DQzY3RDI1MkE0QkMxMUVFOUU1QTVENzJDNEY5QUUwMi9xQjBOWWZlM01O MjNRc3hJcmRpS0JOUnYwQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPzPwEkVidEPO/ypJRnCiyX8VG6g+rmDgRyKmOkrhMCvmpJvWzgpjK 3p/+XIcV6ibZWFg4gPBXQEmjA3+/agKvNqCjQd7fweXKhgdlbQ3QbRVrxFODt1Mm fJbTAZaWF1FbfdVR8v/bLL/OM7ZIYaVN/xPGHv7Vu0Xy12oaL4ey0SKFL8i1cs+e KqysfmcVFYVJLhXgdYySkJvYWOhpiaSTzXuTaq4bA+SzqVj3wb29YmFtDC6OSwZ8 uulF1+tOmBcRy2ap1niYv144q5DMRL75gRc42+JpG5K3/0xyomk7hVZcH3mFJxGz moYh7qWFEGS9NmTgeIcc3kRgKRYzszSY -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:08 2025 by rpki-client