$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json) Hash identifier: ea/oMDcQQcNJcMrPjWAJOH/XBAnBneJk+25BMD+gL/g= Subject key identifier: 07:7A:0D:37:FE:97:0D:57:3A:7C:D5:60:8A:DA:3C:F2:4F:27:BA:BC Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft Manifest number: 0506 Signing time: Sun 19 Oct 2025 01:23:54 +0000 Manifest this update: Sun 19 Oct 2025 01:23:53 +0000 Manifest next update: Sun 26 Oct 2025 01:23:53 +0000 Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: sFtEn1e5YjRO81O/HTJNOnPdGcKMXDmUnfvccFhuq+E=) 2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Oct 19 01:23:53 2025 GMT Not After : Oct 26 01:23:53 2025 GMT Subject: CN=68f43daa-0488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:23:44:0c:86:cf:f8:5b:ed:f6:b6:1c:61: 2e:43:46:27:b1:bf:ce:0c:75:b5:12:b4:6c:96:8b: d4:9c:9a:38:92:a9:e1:cc:a3:ca:0a:6f:bf:30:e4: 16:f3:04:0d:1e:31:21:8b:ff:7f:06:e2:c1:02:e6: 55:96:ed:82:99:59:4b:6f:fa:c3:a7:90:4e:c1:a2: fe:ce:58:8d:9d:af:f4:83:59:16:ac:3c:d4:e1:23: 0e:09:f2:80:0b:e5:03:c7:6a:74:6f:98:8f:03:5d: 48:df:fe:33:e1:26:d9:76:ab:7b:af:1d:be:28:af: 00:9e:b4:cd:61:66:66:80:53:c4:19:14:70:18:46: cf:20:5f:08:29:5c:21:0f:a8:ba:3e:ff:4b:f9:fd: f1:cd:f2:f7:29:a4:58:b8:f1:21:45:03:d0:98:49: fc:92:b6:e6:0f:34:d8:6e:e9:4a:7c:a2:cd:4e:c8: cb:a9:10:9b:cd:cd:7b:3c:83:be:2a:af:2a:75:8e: bc:01:a9:6c:d6:50:f9:db:f5:ea:28:7c:a7:52:08: 4e:dd:d3:28:43:6a:39:39:72:eb:71:06:95:e3:0a: 00:1f:35:eb:47:0a:ac:2e:c7:2f:6b:c9:0e:20:5d: 0b:a7:ef:ad:10:14:3f:82:2c:c2:8c:20:73:70:4c: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7A:0D:37:FE:97:0D:57:3A:7C:D5:60:8A:DA:3C:F2:4F:27:BA:BC X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d8:b0:79:a0:5d:00:47:b8:ac:46:f6:71:a7:7b:44:5e:4a: f9:9e:a2:be:8d:3f:0f:6e:6d:5f:9f:72:01:36:c9:09:bf:bc: 65:e2:02:20:8e:9d:1a:0e:37:50:2f:f0:93:85:56:7a:c2:8c: c7:4b:4d:fb:ec:ea:d9:77:46:e3:6b:3d:74:72:03:db:39:6b: db:9f:09:09:02:71:6b:99:5b:c0:b8:dd:42:3e:25:9d:23:7b: 26:e8:80:3a:ee:22:e7:ef:ac:71:61:16:91:ce:ef:2c:c5:e9: e0:6e:4c:9b:8d:c1:11:1c:15:54:0e:d0:48:3e:2c:22:a5:af: f8:15:81:6a:cb:6b:f1:bf:6d:17:c0:d3:44:e1:90:03:87:46: 63:9d:66:ee:3d:0f:e8:6e:b9:08:b2:61:5d:64:25:37:10:ef: e6:ea:7e:10:73:a9:a3:1b:c9:5d:c4:ea:ee:d8:8e:88:a8:b3: 03:b0:f7:fa:a5:63:2d:31:36:7c:ec:c4:4d:6e:3b:c4:fc:36: 05:88:7c:51:a8:92:97:cb:99:dc:fc:4d:66:2b:1f:8b:e5:30: e0:ce:25:e7:da:64:58:58:6d:2f:98:6d:57:43:72:e7:87:d0: cd:83:56:49:ca:0c:54:b3:d8:4f:10:bc:6f:cc:48:44:ec:ee: b7:bf:f6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUxMDE5MDEyMzUzWhcNMjUxMDI2MDEyMzUzWjAYMRYwFAYD VQQDEw02OGY0M2RhYS0wNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IEjRAyGz/hb7fa2HGEuQ0Ynsb/ODHW1ErRslovUnJo4kqnhzKPKCm+/MOQW 8wQNHjEhi/9/BuLBAuZVlu2CmVlLb/rDp5BOwaL+zliNna/0g1kWrDzU4SMOCfKA C+UDx2p0b5iPA11I3/4z4SbZdqt7rx2+KK8AnrTNYWZmgFPEGRRwGEbPIF8IKVwh D6i6Pv9L+f3xzfL3KaRYuPEhRQPQmEn8krbmDzTYbulKfKLNTsjLqRCbzc17PIO+ Kq8qdY68Aals1lD52/XqKHynUghO3dMoQ2o5OXLrcQaV4woAHzXrRwqsLscva8kO IF0Lp++tEBQ/gizCjCBzcEytDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAd6DTf+ lw1XOnzVYIraPPJPJ7q8MB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6 QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe2LB5oF0AR7isRvZxp3tEXkr5nqK+jT8Pbm1fn3IBNskJv7xl4gIg jp0aDjdQL/CThVZ6wozHS0377OrZd0bjaz10cgPbOWvbnwkJAnFrmVvAuN1CPiWd I3sm6IA67iLn76xxYRaRzu8sxengbkybjcERHBVUDtBIPiwipa/4FYFqy2vxv20X wNNE4ZADh0ZjnWbuPQ/obrkIsmFdZCU3EO/m6n4Qc6mjG8ldxOru2I6IqLMDsPf6 pWMtMTZ87MRNbjvE/DYFiHxRqJKXy5nc/E1mKx+L5TDgziXn2mRYWG0vmG1XQ3Ln h9DNg1ZJygxUs9hPELxvzEhE7O63v/Zu -----END CERTIFICATE-----Generated at Tue Oct 21 00:50:32 2025 by rpki-client