$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: xWFZmVMFKWyBk4tKbA/Ma2v4KB/POzHiaDJFsrIkf+Q= Subject key identifier: 24:C2:CD:97:8B:BC:9B:70:5A:87:E8:5C:22:39:AF:D7:D4:25:0F:D3 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0A98 Signing time: Sat 18 Oct 2025 20:30:36 +0000 Manifest this update: Sat 18 Oct 2025 20:30:36 +0000 Manifest next update: Sat 25 Oct 2025 20:30:36 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: sycbBA+8E6oClJ+0WtxhZKqUljJeKbP8hH7uXn+99Sc=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Oct 18 20:30:36 2025 GMT Not After : Oct 25 20:30:36 2025 GMT Subject: CN=68f3f8ec-6b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8d:ec:63:68:7a:21:46:4e:37:53:3f:ee:5c: ee:dd:38:2b:65:99:af:30:5c:b5:2a:ec:41:41:14: fa:f7:e4:59:f9:a1:11:81:08:3b:40:ae:a4:a5:af: 85:f3:f2:66:cf:30:cd:8f:a9:13:9f:5f:6b:6a:f0: dd:f8:d1:44:99:02:9c:27:ad:b0:d6:5d:00:ba:ba: 87:5b:a0:f8:ba:e9:bc:04:99:ed:bd:c6:74:bd:65: 0c:78:8c:10:58:57:09:36:dd:fe:96:da:55:de:a9: d9:fc:43:7b:56:e7:ea:f7:aa:e1:ac:1a:8c:53:d8: eb:c8:66:fe:e9:92:6e:42:8c:6b:61:31:f6:52:36: 0b:4f:aa:38:50:3e:db:12:45:c2:23:4d:76:10:a4: a4:2c:5f:77:61:36:a3:18:2b:e4:43:31:83:18:5f: 23:52:d8:9a:8d:fa:16:24:39:b0:a3:76:ee:7a:cd: ee:93:53:0d:34:be:d6:09:e2:6c:78:c7:b3:9f:64: 27:dd:fa:1a:78:2d:96:37:00:51:5e:4b:c8:5a:ea: 08:50:d3:e9:b0:e0:a3:92:5e:52:5e:77:88:86:ea: 80:6d:c0:6a:e0:5f:51:49:44:a6:db:0c:71:96:37: 17:f4:8a:66:fe:b3:f8:dd:ad:21:ad:98:42:bc:05: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C2:CD:97:8B:BC:9B:70:5A:87:E8:5C:22:39:AF:D7:D4:25:0F:D3 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5f:92:65:88:58:b0:92:4c:7a:93:a3:ef:75:3f:af:33:5f: ad:b3:fc:a1:98:92:45:95:88:94:22:f8:b3:b3:3c:3b:14:5d: c2:37:68:ad:bd:e6:21:fd:53:2a:f3:56:b1:bf:f9:00:cc:ea: 22:37:b4:65:d1:41:e6:b0:5e:74:5a:79:bb:c5:56:1b:21:39: cc:5e:80:74:1d:dd:ae:13:32:9d:63:f0:71:0e:57:a4:3a:0c: db:81:ed:50:c5:9b:e5:d1:77:19:00:d0:91:0a:31:7b:47:06: 2a:70:b1:ff:5a:b0:c4:4c:da:e9:a8:2f:c1:3f:96:01:49:b4: d9:4e:df:26:a5:0c:2a:aa:b3:be:83:c2:63:5e:81:99:da:5d: e2:af:da:cf:e8:18:7b:b3:77:9c:43:47:40:51:09:5c:bb:81: c5:ea:b2:8e:d7:e8:cb:c1:75:e0:19:a3:ed:a8:d3:39:5c:ad: 98:59:64:28:33:cf:1e:f1:1a:4d:49:10:b7:0e:1f:bd:1b:43: e2:10:97:89:dd:18:ed:77:da:39:35:c3:48:dc:d9:60:2a:f2: a1:0a:66:e7:6a:df:b2:9f:f6:72:db:f8:dd:57:2e:20:ab:88: 00:60:c5:a1:8b:8e:38:e2:8e:11:35:e4:af:5d:ad:7e:bb:9d: 85:fc:62:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUxMDE4MjAzMDM2WhcNMjUxMDI1MjAzMDM2WjAYMRYwFAYD VQQDEw02OGYzZjhlYy02Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7I3sY2h6IUZON1M/7lzu3TgrZZmvMFy1KuxBQRT69+RZ+aERgQg7QK6kpa+F 8/JmzzDNj6kTn19ravDd+NFEmQKcJ62w1l0AurqHW6D4uum8BJntvcZ0vWUMeIwQ WFcJNt3+ltpV3qnZ/EN7Vufq96rhrBqMU9jryGb+6ZJuQoxrYTH2UjYLT6o4UD7b EkXCI012EKSkLF93YTajGCvkQzGDGF8jUtiajfoWJDmwo3bues3uk1MNNL7WCeJs eMezn2Qn3foaeC2WNwBRXkvIWuoIUNPpsOCjkl5SXneIhuqAbcBq4F9RSUSm2wxx ljcX9Ipm/rP43a0hrZhCvAWlHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTCzZeL vJtwWofoXCI5r9fUJQ/TMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALX5JliFiwkkx6k6PvdT+vM1+ts/yhmJJFlYiUIvizszw7FF3CN2it veYh/VMq81axv/kAzOoiN7Rl0UHmsF50Wnm7xVYbITnMXoB0Hd2uEzKdY/BxDlek Ogzbge1QxZvl0XcZANCRCjF7RwYqcLH/WrDETNrpqC/BP5YBSbTZTt8mpQwqqrO+ g8JjXoGZ2l3ir9rP6Bh7s3ecQ0dAUQlcu4HF6rKO1+jLwXXgGaPtqNM5XK2YWWQo M88e8RpNSRC3Dh+9G0PiEJeJ3Rjtd9o5NcNI3NlgKvKhCmbnat+yn/Zy2/jdVy4g q4gAYMWhi4444o4RNeSvXa1+u52F/GKI -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:58 2025 by rpki-client