$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: ADghUXBiuIhLyYuhoUdnDM0uuo7yDQswngzUWqj6Pt8= Subject key identifier: 9B:65:C5:B5:E3:8E:80:47:99:6D:27:A8:11:1B:BF:F1:C9:7F:0A:AA Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 06D1 Signing time: Sat 18 Oct 2025 23:28:58 +0000 Manifest this update: Sat 18 Oct 2025 23:28:58 +0000 Manifest next update: Sat 25 Oct 2025 23:28:57 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: 4X0OXToi5mn+rR59j1nFgSbfQQ08D9DIalZdi8VvEM0=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Oct 18 23:28:58 2025 GMT Not After : Oct 25 23:28:57 2025 GMT Subject: CN=68f422ba-6580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:ad:b0:ec:1b:43:51:73:a7:60:74:3a:f5: da:d8:08:20:da:2d:15:7d:85:8e:19:8d:d3:84:49: ac:a7:14:9f:4f:74:4b:de:92:fc:7b:05:81:69:e9: 83:e5:a5:08:b1:d9:84:47:4c:c4:9e:50:b2:09:1d: 69:18:e9:89:89:3f:40:55:95:c1:28:52:33:6d:58: 27:15:4e:a5:96:d5:e2:7b:6c:a7:a4:2b:9c:16:d7: 23:ca:27:a2:ac:43:a6:82:39:ef:35:4f:4b:e7:40: 5b:73:e4:c0:a9:8b:0a:f7:9a:00:b5:23:fc:40:45: 1a:53:da:73:c8:ce:7b:f1:f0:e2:6e:60:32:fe:88: a7:2f:e9:d6:86:3d:3b:95:b2:74:34:71:53:a0:86: c2:c3:f4:0b:81:43:d8:6f:11:f8:4b:fa:28:3d:f0: f7:80:9b:19:33:60:28:bf:25:78:3e:4b:65:8b:3d: e8:63:24:81:91:c5:11:46:5f:00:2e:50:cc:99:7c: 9f:c2:a5:b3:c3:a2:0d:5a:68:d8:f6:76:91:8d:f1: 50:ff:98:41:78:45:eb:bb:fb:07:bc:57:35:a7:66: 6e:3f:e8:6e:e4:74:44:cd:7b:1c:df:3e:2a:29:89: 36:ea:4d:15:67:f5:8c:f9:ea:50:d9:49:40:e2:ec: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:65:C5:B5:E3:8E:80:47:99:6D:27:A8:11:1B:BF:F1:C9:7F:0A:AA X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:a3:2f:f2:e3:a2:c7:a1:71:64:3f:ef:dd:b0:f4:85:44:61: 29:a9:c0:76:78:74:c0:43:7e:0b:fd:3d:a1:d1:7f:9a:45:19: 04:95:f6:53:5d:58:fe:be:85:bc:a4:72:e4:eb:5d:b4:79:21: f0:7a:0b:67:c0:d3:37:d3:9a:db:d9:c8:22:3a:f0:3e:41:47: 48:f8:88:bd:6c:d3:7b:4a:70:27:d8:1b:a7:a8:f7:2d:14:1d: 58:3a:d3:ca:91:d7:32:7a:86:fb:0e:95:f0:f3:7e:9d:16:4c: 88:fb:bf:b7:83:dc:4d:2c:7d:79:0d:0d:9f:93:11:a8:6e:6e: ee:f5:54:16:4f:0a:b3:e8:71:12:01:13:8d:da:e5:f7:31:29: 89:4d:ba:e6:17:2b:f1:b8:b9:ff:e4:cc:4b:ed:28:1f:07:bf: c8:88:3d:6c:ee:c8:8e:4c:de:77:43:0b:7b:eb:48:d4:08:27: c4:14:35:d0:fc:66:aa:98:36:2f:bf:89:21:8c:41:fa:ef:f2: 21:e0:9b:69:a6:e2:d4:25:e1:e6:01:49:10:83:38:30:11:64: 59:57:ad:b3:b5:88:ca:d9:94:66:95:d8:66:b4:10:29:3b:7c: e9:39:41:f9:c8:61:49:ca:b5:0b:5e:29:d3:72:95:da:0c:e1: 60:af:e5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUxMDE4MjMyODU4WhcNMjUxMDI1MjMyODU3WjAYMRYwFAYD VQQDEw02OGY0MjJiYS02NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/qtsOwbQ1Fzp2B0OvXa2Agg2i0VfYWOGY3ThEmspxSfT3RL3pL8ewWBaemD 5aUIsdmER0zEnlCyCR1pGOmJiT9AVZXBKFIzbVgnFU6lltXie2ynpCucFtcjyiei rEOmgjnvNU9L50Bbc+TAqYsK95oAtSP8QEUaU9pzyM578fDibmAy/oinL+nWhj07 lbJ0NHFToIbCw/QLgUPYbxH4S/ooPfD3gJsZM2AovyV4Pktliz3oYySBkcURRl8A LlDMmXyfwqWzw6INWmjY9naRjfFQ/5hBeEXru/sHvFc1p2ZuP+hu5HREzXsc3z4q KYk26k0VZ/WM+epQ2UlA4uytqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtlxbXj joBHmW0nqBEbv/HJfwqqMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQoy/y46LHoXFkP+/dsPSFRGEpqcB2eHTAQ34L/T2h0X+aRRkElfZT XVj+voW8pHLk6120eSHwegtnwNM305rb2cgiOvA+QUdI+Ii9bNN7SnAn2BunqPct FB1YOtPKkdcyeob7DpXw836dFkyI+7+3g9xNLH15DQ2fkxGobm7u9VQWTwqz6HES ARON2uX3MSmJTbrmFyvxuLn/5MxL7SgfB7/IiD1s7siOTN53Qwt760jUCCfEFDXQ /GaqmDYvv4khjEH67/Ih4JtppuLUJeHmAUkQgzgwEWRZV62ztYjK2ZRmldhmtBAp O3zpOUH5yGFJyrULXinTcpXaDOFgr+WB -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:36 2025 by rpki-client