$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft File: QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json) Hash identifier: rd3ygNz1K8zDnNQdFHsMBHLPdVLnrQ1ABCegqpP9yQ8= Subject key identifier: F0:F4:CE:F2:46:41:97:B4:35:F7:A6:CB:DF:98:09:A7:3E:2E:24:17 Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 Certificate issuer: /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft Manifest number: 0179 Signing time: Sun 19 Oct 2025 06:21:44 +0000 Manifest this update: Sun 19 Oct 2025 06:21:43 +0000 Manifest next update: Sun 26 Oct 2025 06:21:43 +0000 Files and hashes: 1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: T4kl14gYesKSmoUQR80nJ47C2KsTPaE64w7GS/T/Eck=) 2: 294325DC699711EEB317603DC4F9AE02.roa (hash: Hsp12OEUAxLgfWPa2BFXRQnGaC8ZbmcTs8T1lK+V734=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053 Validity Not Before: Oct 19 06:21:43 2025 GMT Not After : Oct 26 06:21:43 2025 GMT Subject: CN=68f48377-4347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:51:31:61:6a:44:b9:89:b9:3f:4c:13:16: ee:b8:79:6d:0f:e8:50:c7:94:7d:a3:c8:55:7c:d5: 59:08:7c:a1:f4:a9:bb:26:d4:89:4b:84:ff:f2:eb: 9a:f1:87:ec:36:e1:d9:42:5f:4d:00:6e:2b:43:b6: 9c:b6:33:97:67:21:30:87:2c:a3:b2:1a:e9:19:ff: 9b:88:e1:83:2e:2c:2f:b5:b5:45:e4:62:0f:15:04: ec:17:87:5c:3e:b3:cc:3d:fc:49:37:dd:4f:2c:dd: 2f:40:f1:b9:60:02:7c:c3:84:b3:90:e5:40:54:02: 3c:35:06:88:4c:05:38:d3:c6:83:0d:51:da:42:72: 9f:df:50:c0:5a:57:9c:67:a2:4f:72:16:cc:f2:f7: 14:96:d5:7b:16:4d:16:e1:08:f1:4e:40:23:b6:13: 86:99:48:bc:2d:91:f6:ae:65:90:df:07:f1:d8:e1: 07:d7:d0:92:1e:fd:c2:3b:c2:7f:07:ac:46:8d:2b: 59:91:6d:20:ae:bd:79:ea:d2:6c:8d:04:e2:30:ee: 38:f4:b8:38:f1:bf:f7:1d:46:cc:70:86:b6:70:01: d2:0a:5e:54:f2:87:2c:2f:af:22:23:95:72:56:81: 74:2c:e1:fd:3c:dd:c9:9f:c0:08:24:4c:ad:90:75: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F4:CE:F2:46:41:97:B4:35:F7:A6:CB:DF:98:09:A7:3E:2E:24:17 X509v3 Authority Key Identifier: keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:69:6d:e7:8a:dd:4d:5a:f3:82:3d:e1:4a:39:5b:c9:62:41: 7e:60:b5:9e:2a:20:de:a4:36:21:bb:c7:3b:00:d7:8f:89:39: 3a:c3:c2:b8:1d:d8:63:e0:d1:50:38:58:82:1a:ec:21:9e:46: da:57:e7:a7:53:3e:0c:c1:2f:21:3c:22:ec:64:d2:f0:4b:b5: bc:e0:9f:08:d5:4d:4d:1b:8f:5f:0c:b3:2b:17:34:c7:b8:13: b9:bd:32:78:9c:77:de:88:d0:fb:39:6a:4e:85:de:5e:29:77: 0b:f7:44:28:c7:18:c4:a6:70:92:57:6e:92:e4:ce:22:11:fa: 59:1f:8a:f9:0c:50:c1:b1:3e:44:07:61:14:ca:6f:17:6c:74: 5f:c1:dc:a2:f8:7f:fe:a1:a1:91:be:a5:58:58:cc:1f:04:14: 69:b0:b6:63:e6:fa:44:63:e3:b2:a2:8f:80:55:f6:c9:84:41: 13:54:a3:5a:4e:32:6f:68:72:10:b5:cf:27:d4:f0:54:58:3e: 29:91:e8:af:f8:fd:e8:a5:04:7e:46:7e:32:33:0b:c8:17:a9: 58:58:b1:9f:a9:3d:73:6c:a6:e7:2c:dc:a0:84:86:4b:37:e7: 2f:3f:a4:18:c9:02:49:74:46:3a:95:2c:35:19:f2:99:21:11: 47:21:72:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1QTQxMTAvBgNVBAUTKDQxQTBDMjQ0MzU5RjAyMzVDOUE2MEIxRjcxOUE1RkQ1 Njc5NjYwNTMwHhcNMjUxMDE5MDYyMTQzWhcNMjUxMDI2MDYyMTQzWjAYMRYwFAYD VQQDEw02OGY0ODM3Ny00MzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qBRMWFqRLmJuT9MExbuuHltD+hQx5R9o8hVfNVZCHyh9Km7JtSJS4T/8uua 8YfsNuHZQl9NAG4rQ7actjOXZyEwhyyjshrpGf+biOGDLiwvtbVF5GIPFQTsF4dc PrPMPfxJN91PLN0vQPG5YAJ8w4SzkOVAVAI8NQaITAU408aDDVHaQnKf31DAWlec Z6JPchbM8vcUltV7Fk0W4QjxTkAjthOGmUi8LZH2rmWQ3wfx2OEH19CSHv3CO8J/ B6xGjStZkW0grr156tJsjQTiMO449Lg48b/3HUbMcIa2cAHSCl5U8ocsL68iI5Vy VoF0LOH9PN3Jn8AIJEytkHWkBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPD0zvJG QZe0Nfemy9+YCac+LiQXMB8GA1UdIwQYMBaAFEGgwkQ1nwI1yaYLH3GaX9VnlmBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzVBNC9EQkMxRkQxMDY5 OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFqWEpwZ3NmY1pwZjFXZVdZ Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhRENSRFdmQWpYSnBnc2ZjWnBmMVdlV1lGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzVBNC9EQkMxRkQxMDY5OTYxMUVFQjRFNzdCM0NDNEY5QUUwMi9RYURDUkRXZkFq WEpwZ3NmY1pwZjFXZVdZRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9aW3nit1NWvOCPeFKOVvJYkF+YLWeKiDepDYhu8c7ANePiTk6w8K4 Hdhj4NFQOFiCGuwhnkbaV+enUz4MwS8hPCLsZNLwS7W84J8I1U1NG49fDLMrFzTH uBO5vTJ4nHfeiND7OWpOhd5eKXcL90QoxxjEpnCSV26S5M4iEfpZH4r5DFDBsT5E B2EUym8XbHRfwdyi+H/+oaGRvqVYWMwfBBRpsLZj5vpEY+Oyoo+AVfbJhEETVKNa TjJvaHIQtc8n1PBUWD4pkeiv+P3opQR+Rn4yMwvIF6lYWLGfqT1zbKbnLNyghIZL N+cvP6QYyQJJdEY6lSw1GfKZIRFHIXLS -----END CERTIFICATE-----Generated at Mon Oct 20 23:09:46 2025 by rpki-client