$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json) Hash identifier: FhbJfEzfrdZcOrDRrbF3quNnwvh9Ib+rP1e5GgjvWxM= Subject key identifier: 5F:A0:35:DC:3E:58:8A:E1:BD:58:BD:42:0D:17:2C:19:D6:E9:95:EA Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft Manifest number: 0C69 Signing time: Wed 22 Oct 2025 02:33:17 +0000 Manifest this update: Wed 22 Oct 2025 02:33:17 +0000 Manifest next update: Wed 29 Oct 2025 02:33:17 +0000 Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: 7EI0YXEcjruElF3XEkBb6TPmOxQJnYnk4u8dE4FVEbA=) 2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: bH9ZC4QgjmS/I58+FDGDPuH33W9RsPxq1Xz3UvWrsE8=) 3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: MTAUWchwVeKxoXJgsd9CSOqi1gXkAXO05abtX//8zz0=) 4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: Bbke0XmmIxWIWeMRBoj+nBwWgM3xQtB71wXvSJ5bc/c=) 5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: onKAfoZCCQvGFRb8T+pywq7Otmi4UdU6B4vavVOep80=) 6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: IncpLcKA56KouK4nJfe3cMJBEi1TzpOjSfCTV1wFUog=) 7: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: +yIXmJbCdMTZC3e7y+K7ZSmGxQFt4WPyrNXjRz6xTWc=) 8: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs=) 9: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I=) 10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zZr/wa0m1rFLaToJf+3XeU5H/f8ci0Eq6bfOYc73d3k=) 11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg=) 12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: X9BJWqFkDoO3Z1AnX2rwWIVc/LG4OOcRfPspBGbkn40=) 13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: ddZXmXMp+inqC1tu9O/Re3vjJXmPn1T/+0+8I6WAPIc=) 14: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=) 15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=) 16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: bv2/9mHV5hvQUwYa7AUUUWrf3R41IAn85lkqotp1enw=) 17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: ojzmtYL5oSSSDRNMHS4oBfQHwOO76KE3+ooyFQgsmPI=) 18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: obVSxBoAnqffXMDTd+Z9+Lr3d6TSTuDzUuAxF1nefiI=) 19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: qWKBqzVZNaIWfle8O0qZvhFMlwqBUkUBmN22bjyzZlw=) 20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q=) 21: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: 7InJtR6Cn1ch7c1XpQQ6/w3PhjmqyqgTlZD0H0dlaLQ=) 22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: nX+JdTppyQxuLXZd5ew3GC3f/sbog2Yk6PdmM9yWumY=) 23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: 4i6VJPAbegLRPG1TiRgqleRdlv3u9kO2DBkdXwrkMys=) 24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: 6WaRYsNX6RMzPE3WdzfKlbLBu0LngwxXI10OdHloqKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 02:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Oct 22 02:33:17 2025 GMT Not After : Oct 29 02:33:17 2025 GMT Subject: CN=68f8426d-b03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:9e:59:b4:eb:6d:60:3c:dc:16:59:38:c1: 1f:9a:54:ac:07:10:fb:2b:c0:8d:c7:cf:15:27:70: ee:d1:87:bf:d0:54:f2:23:21:f4:49:23:8f:63:51: e2:bb:4e:56:13:8a:96:63:a8:16:a5:50:5e:23:c0: 28:37:7e:cf:f3:37:a5:c0:84:81:1f:80:ed:28:25: d6:5e:14:6e:05:f3:0c:44:f0:4b:d9:e0:f3:5f:11: 94:e5:65:2f:2f:f6:47:8d:d8:49:7c:3c:69:10:36: db:08:c1:c5:63:11:d1:ca:7b:2a:d2:b3:2d:e8:04: a7:58:84:13:40:9b:e4:bc:fb:58:99:ae:87:3c:be: e0:57:4e:97:78:5a:08:23:7e:c7:a6:c1:e7:f4:98: af:62:12:9d:a4:7f:03:c4:e7:74:06:04:91:e4:ee: cd:d7:be:84:d1:44:0f:60:29:27:0f:68:72:66:d7: 9b:1b:aa:da:ce:ad:ec:2b:34:a4:b7:05:e7:b1:dd: c1:df:98:96:48:59:db:90:dc:1f:1e:15:4b:14:2f: 35:0b:f1:f8:aa:c4:8b:65:ba:f2:b0:8a:e8:fd:1c: f1:6f:37:73:4b:a6:21:99:b3:9b:c2:5f:d5:e9:79: 7f:36:8f:1f:c4:56:7d:3f:5e:5f:90:c9:3e:41:ca: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A0:35:DC:3E:58:8A:E1:BD:58:BD:42:0D:17:2C:19:D6:E9:95:EA X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:cf:b3:88:2f:c0:5b:2f:9e:2e:ef:80:21:42:e5:34:67:16: ae:89:54:30:e3:27:11:90:cd:bd:31:85:1e:2b:25:9b:71:2b: e9:da:3a:04:26:c4:f2:9c:d6:5d:09:10:0a:8c:37:4c:03:ef: bd:99:c6:a0:a7:91:41:fd:1b:46:17:da:eb:04:cb:13:c1:ee: c5:eb:18:c2:0f:c1:cf:ca:b0:70:22:ec:5e:a5:62:1c:06:84: 4d:63:16:94:f6:86:af:ba:a8:d8:7c:6d:c9:ac:76:c4:46:f0: b8:23:24:ef:8d:80:2c:e0:92:b1:bb:01:c6:5a:6d:5d:ee:e2: 93:45:31:58:4f:c1:46:da:c7:94:07:30:4a:fc:cb:b7:a1:06: 06:11:f4:b0:25:f0:7d:6a:73:44:b7:c0:83:5d:d6:60:7a:80: 43:db:b3:67:a4:14:86:4f:8c:2a:49:ff:fe:73:ed:eb:62:60: 2d:9d:97:c1:a6:56:e7:ba:ab:03:b3:49:c8:7d:d2:21:3e:65: 8e:45:b3:ea:67:52:68:8d:47:1a:ad:6f:78:1c:ef:23:c9:f9: 89:b6:34:8c:d0:b5:05:35:db:c2:28:5f:3c:26:9c:84:7e:d3: 7c:29:42:61:a4:04:df:a5:31:cc:06:b6:0a:d0:61:b6:83:4d: ed:96:c5:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMDIyMDIzMzE3WhcNMjUxMDI5MDIzMzE3WjAYMRYwFAYD VQQDEw02OGY4NDI2ZC1iMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3GeWbTrbWA83BZZOMEfmlSsBxD7K8CNx88VJ3Du0Ye/0FTyIyH0SSOPY1Hi u05WE4qWY6gWpVBeI8AoN37P8zelwISBH4DtKCXWXhRuBfMMRPBL2eDzXxGU5WUv L/ZHjdhJfDxpEDbbCMHFYxHRynsq0rMt6ASnWIQTQJvkvPtYma6HPL7gV06XeFoI I37HpsHn9JivYhKdpH8DxOd0BgSR5O7N176E0UQPYCknD2hyZtebG6razq3sKzSk twXnsd3B35iWSFnbkNwfHhVLFC81C/H4qsSLZbrysIro/RzxbzdzS6YhmbObwl/V 6Xl/No8fxFZ9P15fkMk+Qcq2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+gNdw+ WIrhvVi9Qg0XLBnW6ZXqMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC9CRTg4NDZEMjM1RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4 bkhEX3libWJZTHZzMGRjN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBz7OIL8BbL54u74AhQuU0ZxauiVQw4ycRkM29MYUeKyWbcSvp2joE JsTynNZdCRAKjDdMA++9mcagp5FB/RtGF9rrBMsTwe7F6xjCD8HPyrBwIuxepWIc BoRNYxaU9oavuqjYfG3JrHbERvC4IyTvjYAs4JKxuwHGWm1d7uKTRTFYT8FG2seU BzBK/Mu3oQYGEfSwJfB9anNEt8CDXdZgeoBD27NnpBSGT4wqSf/+c+3rYmAtnZfB plbnuqsDs0nIfdIhPmWORbPqZ1JojUcarW94HO8jyfmJtjSM0LUFNdvCKF88JpyE ftN8KUJhpATfpTHMBrYK0GG2g03tlsV5 -----END CERTIFICATE-----Generated at Wed Oct 22 10:37:44 2025 by rpki-client