$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: 5hlGrP3DGPsFGCgUqibk+iUtdELxbx4jGf3ZTjdgBrg= Subject key identifier: A7:68:54:F6:D1:98:C5:6E:F6:BA:A0:87:94:60:5C:76:34:CE:66:B2 Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 048A Signing time: Sun 19 Oct 2025 01:53:50 +0000 Manifest this update: Sun 19 Oct 2025 01:53:49 +0000 Manifest next update: Sun 26 Oct 2025 01:53:49 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: t+Iw8yRnKJCbILivshboaann6FBqZLEKobxDiFoMDho=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: aXuFAPx3sTT3XGxZkToSNXJ/vwo2rNiJs7Ikunvy7v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Oct 19 01:53:49 2025 GMT Not After : Oct 26 01:53:49 2025 GMT Subject: CN=68f444ae-992b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:07:a5:59:cf:5f:71:91:b4:cb:4e:2f:eb:d8: 62:a2:55:9a:1b:dd:c3:d9:00:f6:c6:0d:be:33:83: f8:e2:84:e9:c5:d8:ea:09:2c:ed:ed:d7:f4:c0:54: a6:09:15:35:5c:14:96:05:01:fb:48:73:fd:db:42: 13:5c:55:e1:2d:db:e3:d7:22:ee:68:64:98:74:5b: 10:bc:f5:ed:f7:8a:c0:51:7c:b3:c8:07:32:8f:71: bc:d5:23:4f:ac:0c:d9:f1:02:4d:88:d4:73:12:03: 5e:4b:25:3b:10:c0:07:02:8c:c2:c5:02:3d:a5:e9: c1:f7:83:48:f4:94:af:fe:36:96:90:ec:bf:e6:93: 46:70:85:33:12:31:9e:cb:ed:ce:8f:9d:69:c7:0c: c3:e4:dc:ed:3d:8a:2a:18:95:80:7f:b4:7f:06:b1: 29:90:75:7c:35:cf:9d:6e:6a:9b:21:40:eb:b5:ae: 0e:64:65:3a:21:28:bb:95:84:00:39:7b:28:c3:5b: 16:ef:88:ab:66:5b:04:da:f3:04:70:13:3b:97:85: 93:d5:01:00:e6:03:6c:78:e6:af:cf:8e:8e:f8:a7: 4f:b7:39:6b:45:2c:49:21:35:1d:bc:f0:b6:47:40: 39:ee:c8:d4:ce:fe:f8:84:99:81:fe:0f:bb:67:a5: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:68:54:F6:D1:98:C5:6E:F6:BA:A0:87:94:60:5C:76:34:CE:66:B2 X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d8:d7:1d:f5:cc:f8:c6:5e:e0:74:bc:32:be:2b:16:0d:03: 61:06:b4:82:e4:1e:d7:7d:33:88:b7:be:a4:56:10:7a:02:77: 11:aa:9c:23:d1:ec:2f:4b:0c:63:9d:29:54:6e:bf:10:cc:b6: 32:68:2a:cc:97:68:38:60:7d:e8:de:e3:30:a9:c0:86:aa:98: 2a:ab:dc:c4:e4:36:60:b4:40:6d:07:bb:c4:16:c7:2a:40:c0: 8c:48:1f:fb:25:e1:f5:89:a5:3a:22:10:05:c8:57:f9:41:80: ea:a9:6a:c0:a0:05:17:d5:f0:82:a4:01:cb:75:89:f8:f5:43: fa:c4:2f:8d:bf:cd:86:41:0f:c5:d9:1a:1a:dd:41:dd:73:1b: 08:d8:fc:f9:af:e7:4b:48:e8:ff:9a:c9:eb:c0:28:0d:b1:8d: aa:f3:d3:0a:a1:b6:f3:09:e1:78:1c:72:03:b7:8f:8f:df:24: 38:a9:93:d3:4a:5b:e7:a3:c4:b9:c5:af:1b:ff:39:53:29:bd: ba:15:a7:1c:ab:73:c2:fc:eb:fc:b5:12:17:d8:ac:93:04:b0: fc:42:f2:ef:41:f4:30:1c:e6:a9:e3:05:12:f6:81:e3:ea:ce: 47:4e:a3:d6:27:fd:34:95:d7:10:4c:16:4e:77:85:50:e8:16: 1a:59:51:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjUxMDE5MDE1MzQ5WhcNMjUxMDI2MDE1MzQ5WjAYMRYwFAYD VQQDEw02OGY0NDRhZS05OTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gelWc9fcZG0y04v69hiolWaG93D2QD2xg2+M4P44oTpxdjqCSzt7df0wFSm CRU1XBSWBQH7SHP920ITXFXhLdvj1yLuaGSYdFsQvPXt94rAUXyzyAcyj3G81SNP rAzZ8QJNiNRzEgNeSyU7EMAHAozCxQI9penB94NI9JSv/jaWkOy/5pNGcIUzEjGe y+3Oj51pxwzD5NztPYoqGJWAf7R/BrEpkHV8Nc+dbmqbIUDrta4OZGU6ISi7lYQA OXsow1sW74irZlsE2vMEcBM7l4WT1QEA5gNseOavz46O+KdPtzlrRSxJITUdvPC2 R0A57sjUzv74hJmB/g+7Z6XIDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdoVPbR mMVu9rqgh5RgXHY0zmayMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv2Ncd9cz4xl7gdLwyvisWDQNhBrSC5B7XfTOIt76kVhB6AncRqpwj 0ewvSwxjnSlUbr8QzLYyaCrMl2g4YH3o3uMwqcCGqpgqq9zE5DZgtEBtB7vEFscq QMCMSB/7JeH1iaU6IhAFyFf5QYDqqWrAoAUX1fCCpAHLdYn49UP6xC+Nv82GQQ/F 2Roa3UHdcxsI2Pz5r+dLSOj/msnrwCgNsY2q89MKobbzCeF4HHIDt4+P3yQ4qZPT Slvno8S5xa8b/zlTKb26Faccq3PC/Ov8tRIX2KyTBLD8QvLvQfQwHOap4wUS9oHj 6s5HTqPWJ/00ldcQTBZOd4VQ6BYaWVGz -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:12 2025 by rpki-client