$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: C7XCQJmjpv6PCu8nwNI46RCyQgFWvt1SkuVvEx6MxoE= Subject key identifier: 06:3A:61:0D:0E:40:A1:86:E3:5C:D8:F8:42:9C:D1:50:C3:E0:8D:DD Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 01FC Signing time: Sun 19 Oct 2025 04:44:57 +0000 Manifest this update: Sun 19 Oct 2025 04:44:57 +0000 Manifest next update: Sun 26 Oct 2025 04:44:57 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: +Bk0cHR+L0yw79DZWrDa8Yb3mqCcfcXdZPzeg4Fph8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Oct 19 04:44:57 2025 GMT Not After : Oct 26 04:44:57 2025 GMT Subject: CN=68f46cc9-a9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:2f:43:a2:b9:ff:c7:6d:0c:e4:f7:80:9e: 69:1f:0a:3a:66:5d:81:b5:5e:19:32:d6:47:3a:2d: 16:06:5c:1e:cf:9f:64:9a:38:0f:4b:d8:ef:e0:7b: ab:5a:e0:7b:c9:1e:53:54:36:0c:4f:9c:ed:59:2a: 3b:5f:67:d4:db:33:22:86:d8:4f:f4:66:34:c4:d8: 9f:e5:ae:58:de:dc:48:5b:49:c6:ad:1b:86:f4:71: 23:53:74:c3:43:e9:60:db:21:ea:76:d8:fc:f6:81: 2c:a7:b6:27:f4:8c:6d:f4:32:06:6e:80:ad:fe:7a: 43:bb:50:34:4b:71:6c:de:d5:28:6c:b0:11:4b:5a: 8b:66:f6:d0:0b:10:0f:27:fe:c8:81:ed:f6:c3:a3: 69:36:91:0a:ef:1f:18:30:f4:41:de:8b:d7:8e:c7: 61:a5:b9:df:3c:66:f1:92:e3:26:02:32:a4:1d:9c: bf:2b:b2:8a:7e:ef:10:02:78:1e:1b:f4:96:73:0d: 8b:6b:70:8c:ae:8b:ba:a3:9d:85:65:c9:d6:f0:42: 0a:54:85:37:a7:7b:70:75:61:bc:8d:c2:c5:f2:2b: 04:c6:eb:57:cf:b9:62:85:d9:75:61:9d:cc:b6:8c: e2:7c:c9:d4:8c:4c:17:f9:3f:46:8e:8f:f8:26:4d: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:61:0D:0E:40:A1:86:E3:5C:D8:F8:42:9C:D1:50:C3:E0:8D:DD X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b2:f8:62:6e:06:ac:79:c4:e6:8a:03:eb:20:93:ef:52:d9: 49:29:ac:b9:8d:f8:4b:2d:c8:49:1d:92:b1:6e:92:f5:14:56: 31:89:d6:83:1c:58:07:82:74:5b:d7:41:73:4c:f2:76:c1:16: f0:f3:a7:9a:4f:c0:40:06:06:54:8c:f8:bf:ae:bd:df:8e:2b: 18:01:32:d6:64:2a:91:8b:82:da:b6:57:46:29:58:c9:11:5c: a5:15:9a:58:84:dc:85:e1:aa:a0:8f:e4:f1:40:4a:be:95:4e: 28:c9:e3:c2:fe:c9:90:98:62:2a:7d:8b:9d:d3:10:90:04:9b: 67:10:49:f4:ba:77:de:d7:58:17:3b:8a:ac:b6:df:6a:e8:dc: ef:3a:eb:53:a9:21:a8:bb:2b:71:65:43:23:e3:57:b3:30:7d: 8e:0c:88:7b:41:f9:ab:cf:c8:61:29:31:5e:33:cc:4e:90:07: b6:b8:0d:1b:67:a7:1a:2a:3a:9e:b5:4a:77:7e:16:30:19:90: ba:ce:9a:b8:92:d3:f9:df:6e:28:7b:1e:e3:74:78:63:ba:bf: 4a:85:53:16:4b:00:21:5b:12:8c:74:b5:c7:9e:7e:a2:17:a0: 5e:13:44:df:45:f4:85:a3:90:40:a5:79:2f:3c:f3:2d:af:7d: bf:6b:b0:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUxMDE5MDQ0NDU3WhcNMjUxMDI2MDQ0NDU3WjAYMRYwFAYD VQQDEw02OGY0NmNjOS1hOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTcvQ6K5/8dtDOT3gJ5pHwo6Zl2BtV4ZMtZHOi0WBlwez59kmjgPS9jv4Hur WuB7yR5TVDYMT5ztWSo7X2fU2zMihthP9GY0xNif5a5Y3txIW0nGrRuG9HEjU3TD Q+lg2yHqdtj89oEsp7Yn9Ixt9DIGboCt/npDu1A0S3Fs3tUobLARS1qLZvbQCxAP J/7Ige32w6NpNpEK7x8YMPRB3ovXjsdhpbnfPGbxkuMmAjKkHZy/K7KKfu8QAnge G/SWcw2La3CMrou6o52FZcnW8EIKVIU3p3twdWG8jcLF8isExutXz7lihdl1YZ3M tozifMnUjEwX+T9Gjo/4Jk236QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAY6YQ0O QKGG41zY+EKc0VDD4I3dMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTsvhibgasecTmigPrIJPvUtlJKay5jfhLLchJHZKxbpL1FFYxidaD HFgHgnRb10FzTPJ2wRbw86eaT8BABgZUjPi/rr3fjisYATLWZCqRi4LatldGKVjJ EVylFZpYhNyF4aqgj+TxQEq+lU4oyePC/smQmGIqfYud0xCQBJtnEEn0unfe11gX O4qstt9q6NzvOutTqSGouytxZUMj41ezMH2ODIh7Qfmrz8hhKTFeM8xOkAe2uA0b Z6caKjqetUp3fhYwGZC6zpq4ktP5324oex7jdHhjur9KhVMWSwAhWxKMdLXHnn6i F6BeE0TfRfSFo5BApXkvPPMtr32/a7D6 -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:27 2025 by rpki-client