$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft File: QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json) Hash identifier: p3j7l8D+tM8iBikTfeEAuJJd+CCY+QD1B0Fo1V/7ltg= Subject key identifier: E9:3D:99:90:1C:57:53:59:95:9D:4A:23:7D:97:57:1D:09:50:B6:B5 Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft Manifest number: 0856 Signing time: Mon 20 Oct 2025 21:35:46 +0000 Manifest this update: Mon 20 Oct 2025 21:35:46 +0000 Manifest next update: Mon 27 Oct 2025 21:35:46 +0000 Files and hashes: 1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: C9Ut4R2chTntWRhYolRdIbPCHXtI9Slio9fw8RkY/mY=) 2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: bG1CPCZHlQw0haejcYIgqU237lgngpKLBdJOI7duxPA=) 3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: rI+OmwliYI4AIuxYGKkkX7tZiKeGui6vIR2hfPTKsLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Oct 20 21:35:46 2025 GMT Not After : Oct 27 21:35:46 2025 GMT Subject: CN=68f6ab32-b82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:d5:bd:39:01:92:58:48:27:10:11:25:88: 06:3f:02:bc:89:a4:5f:22:8b:73:e0:f0:70:19:25: 4d:b1:94:10:46:53:19:66:bb:a7:de:7c:49:46:06: 96:ec:a0:88:bf:98:22:6c:cf:cd:39:09:d8:fc:b8: fb:d3:00:82:50:e9:5b:33:7e:21:b3:61:7e:57:c9: 2b:ba:6f:a1:65:c5:97:22:c4:3c:51:7f:3b:7b:71: e3:ef:26:6c:26:46:5a:9d:50:9c:c5:d5:73:aa:9b: ac:98:f2:06:73:4b:c1:33:75:b0:5e:b9:ac:41:c4: 1d:9e:4c:31:bf:d9:0d:c8:3e:0a:4e:ff:e8:68:5c: 64:9a:17:b5:00:cc:db:cb:0f:20:cb:5a:fc:b4:16: 87:04:22:de:1c:86:04:71:67:cb:00:0e:d3:43:aa: 58:d1:0e:01:38:05:ed:d3:31:ff:84:52:15:e2:1a: cf:f3:af:50:4f:7b:e1:3c:61:db:8d:98:5d:d6:e6: 1f:e9:d4:07:ea:17:e8:92:9a:a4:4a:08:64:cb:66: 3f:2a:bc:f2:83:3b:d4:eb:98:5d:01:b0:06:53:08: 6a:30:48:41:a3:f1:dd:70:96:eb:0d:42:f6:c6:bf: 75:66:42:11:7f:0a:22:5a:9a:b4:4a:9a:30:1a:41: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:99:90:1C:57:53:59:95:9D:4A:23:7D:97:57:1D:09:50:B6:B5 X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9c:72:63:bf:d1:49:88:d5:99:86:33:83:2d:76:bf:a1:fb: cc:db:86:87:f7:b7:27:8a:8b:29:0b:91:4e:f0:c8:95:b4:b0: 28:b4:6f:b2:82:f6:fc:c5:da:a4:32:94:33:c6:f3:28:cc:f1: 4d:50:70:a4:8a:43:2b:d3:78:a5:17:51:99:fc:e4:f0:8f:55: 62:bb:ec:46:1b:fa:d5:cf:56:a9:be:ee:53:09:82:14:f3:4c: e8:b7:7c:92:61:c0:82:ab:26:a0:1e:58:70:a1:88:0a:28:15: b1:07:29:3c:38:bc:e7:cd:e8:6c:82:44:4a:29:ff:9e:45:77: 34:e0:10:a7:ea:1c:86:82:bd:4b:91:27:e7:9f:61:d2:17:11: 30:74:f0:a7:87:d3:88:8b:c1:35:8f:32:22:37:36:b4:f0:60: 5f:7a:72:05:b0:24:c1:5e:ed:db:92:05:35:61:8c:c2:45:83: 0e:8d:02:dd:03:70:cc:06:c7:31:5a:ae:5d:3c:fb:b8:89:94: 15:d3:54:fe:a1:9f:40:44:e8:ce:da:bb:e4:82:cb:b3:a8:4d: a6:98:13:18:2d:a8:d0:47:bc:56:8f:eb:2a:1e:39:ee:cc:32: de:ac:21:bb:9f:a9:9a:7c:c0:e0:6f:8d:cd:9f:17:69:55:cf: 53:9c:88:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUxMDIwMjEzNTQ2WhcNMjUxMDI3MjEzNTQ2WjAYMRYwFAYD VQQDEw02OGY2YWIzMi1iODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVrVvTkBklhIJxARJYgGPwK8iaRfIotz4PBwGSVNsZQQRlMZZrun3nxJRgaW 7KCIv5gibM/NOQnY/Lj70wCCUOlbM34hs2F+V8krum+hZcWXIsQ8UX87e3Hj7yZs JkZanVCcxdVzqpusmPIGc0vBM3WwXrmsQcQdnkwxv9kNyD4KTv/oaFxkmhe1AMzb yw8gy1r8tBaHBCLeHIYEcWfLAA7TQ6pY0Q4BOAXt0zH/hFIV4hrP869QT3vhPGHb jZhd1uYf6dQH6hfokpqkSghky2Y/KrzygzvU65hdAbAGUwhqMEhBo/HdcJbrDUL2 xr91ZkIRfwoiWpq0SpowGkF0kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk9mZAc V1NZlZ1KI32XVx0JULa1MB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdnHJjv9FJiNWZhjODLXa/ofvM24aH97cniospC5FO8MiVtLAotG+y gvb8xdqkMpQzxvMozPFNUHCkikMr03ilF1GZ/OTwj1Viu+xGG/rVz1apvu5TCYIU 80zot3ySYcCCqyagHlhwoYgKKBWxByk8OLznzehsgkRKKf+eRXc04BCn6hyGgr1L kSfnn2HSFxEwdPCnh9OIi8E1jzIiNza08GBfenIFsCTBXu3bkgU1YYzCRYMOjQLd A3DMBscxWq5dPPu4iZQV01T+oZ9AROjO2rvkgsuzqE2mmBMYLajQR7xWj+sqHjnu zDLerCG7n6mafMDgb43NnxdpVc9TnIjW -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:11 2025 by rpki-client