$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json) Hash identifier: e5wQpVDCzE4u6Qc9KdgjAYUsbkXT7phlVem8sdfP0Wk= Subject key identifier: 66:FE:1B:51:21:64:37:34:0F:69:3D:C0:59:CE:ED:5F:D0:4B:20:7A Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft Manifest number: 081D Signing time: Sun 02 Nov 2025 20:49:33 +0000 Manifest this update: Sun 02 Nov 2025 20:49:33 +0000 Manifest next update: Sun 09 Nov 2025 20:49:33 +0000 Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: +en70O9Vt8884g8uNNXR6yXh3sS8XiMFJGXgoZyu7UU=) 2: 6944587246B311F090CDB927C4F9AE02.roa (hash: N5DJ/lWFfI48sdx6BvFVpFHkaPP8kCCAOxZfmLMaFUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Validity Not Before: Nov 2 20:49:33 2025 GMT Not After : Nov 9 20:49:33 2025 GMT Subject: CN=6907c3dd-d2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:70:dc:80:d2:c3:84:84:1a:4b:45:e6:59: d6:f9:e2:49:07:eb:93:d6:ee:f1:3a:bc:e1:be:a9: 12:6a:9e:75:5f:47:1b:9d:cf:15:59:3b:95:8b:bd: f8:d0:17:2d:18:75:93:4e:ed:9e:ce:61:8c:82:e2: 68:18:73:df:2f:01:c6:e4:2a:57:67:26:1d:3d:81: 4a:6a:29:51:3f:a6:78:61:b3:26:44:4d:c5:8a:2e: e5:13:8d:86:6d:38:30:06:cd:fc:06:69:fe:e2:95: 62:85:90:95:44:d3:a9:95:45:4f:ce:40:f4:76:34: 90:82:c3:60:53:fe:3b:39:89:73:e8:da:4e:51:3f: 3b:d0:14:46:88:16:33:83:7c:e7:4a:09:9f:a2:10: ec:c3:28:7d:e5:b3:a7:dc:99:2a:27:07:e5:ed:61: 70:5e:cc:03:49:85:f0:f4:ba:26:c5:1e:84:87:b9: 29:57:49:3e:91:0b:9b:d6:63:89:f1:d2:8e:d5:66: d7:b9:18:5e:7c:a2:e1:03:98:6b:b6:3d:3a:bc:de: 95:60:ee:56:f0:5d:c0:14:56:1a:e6:a8:ba:59:03: af:6b:81:2c:b9:9e:70:2b:88:cf:b1:a4:f2:62:26: 60:72:10:ac:50:de:77:d1:e9:b0:e7:dc:c2:a9:99: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:1B:51:21:64:37:34:0F:69:3D:C0:59:CE:ED:5F:D0:4B:20:7A X509v3 Authority Key Identifier: keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4f:30:79:17:8e:ca:46:6e:7c:e2:d3:43:1d:d4:c8:6c:d5: 1e:29:73:44:cc:74:0a:ff:ce:28:6c:69:37:dc:20:ba:e3:2e: 81:a2:ea:51:1b:5d:54:23:ce:cf:38:37:a3:bb:78:e8:b9:56: 63:16:47:76:3a:6b:e7:9b:59:75:b6:f2:58:a9:34:bd:54:4d: 88:58:fb:7d:12:e5:a4:ed:d6:f3:43:3a:33:71:19:08:62:6f: 68:75:08:39:88:b8:1a:c2:b4:74:b3:9c:e2:5e:8e:84:a5:68: 1c:bd:3d:55:76:c3:0c:d3:f5:e6:73:cc:5e:21:55:f6:75:7d: ff:a4:c7:28:3c:82:2c:ad:47:df:0a:69:f1:1b:d8:be:5e:20: 2a:c1:56:7b:c5:fa:cd:c2:c9:5d:e1:54:0c:fe:46:a9:5e:c1: c8:3e:7f:43:88:2c:d4:4d:fb:51:35:6f:57:3b:1d:7c:fb:dd: 1b:a2:87:82:06:ff:49:79:13:4b:2a:e1:9a:9e:90:c3:1b:c3: 1e:9e:d9:b4:80:f3:eb:70:3e:02:28:21:a0:55:87:0b:47:3d: c8:2c:e7:54:d7:72:e0:55:ef:7d:9b:cc:67:3d:a3:f3:4e:a0: 1a:c9:51:15:1d:7c:6c:50:94:ca:2c:4c:75:41:a1:cf:08:de: 20:7e:ea:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzRTQxMTAvBgNVBAUTKDQwMTRCQ0I0QUY5QjE4MTk2NEQ3QjdBNDBEMUJGOUQ2 Rjg5RTA4RkYwHhcNMjUxMTAyMjA0OTMzWhcNMjUxMTA5MjA0OTMzWjAYMRYwFAYD VQQDEw02OTA3YzNkZC1kMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn1w3IDSw4SEGktF5lnW+eJJB+uT1u7xOrzhvqkSap51X0cbnc8VWTuVi734 0BctGHWTTu2ezmGMguJoGHPfLwHG5CpXZyYdPYFKailRP6Z4YbMmRE3Fii7lE42G bTgwBs38Bmn+4pVihZCVRNOplUVPzkD0djSQgsNgU/47OYlz6NpOUT870BRGiBYz g3znSgmfohDswyh95bOn3JkqJwfl7WFwXswDSYXw9LomxR6Eh7kpV0k+kQub1mOJ 8dKO1WbXuRhefKLhA5hrtj06vN6VYO5W8F3AFFYa5qi6WQOva4EsuZ5wK4jPsaTy YiZgchCsUN530emw59zCqZnuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb+G1Eh ZDc0D2k9wFnO7V/QSyB6MB8GA1UdIwQYMBaAFEAUvLSvmxgZZNe3pA0b+db4ngj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjNFNC8xOTBCMEQwNkYy NjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdCbGsxN2VrRFJ2NTF2aWVD UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCUzh0Sy1iR0JsazE3ZWtEUnY1MXZpZUNQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjNFNC8xOTBCMEQwNkYyNjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdC bGsxN2VrRFJ2NTF2aWVDUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7TzB5F47KRm584tNDHdTIbNUeKXNEzHQK/84obGk33CC64y6BoupR G11UI87PODeju3jouVZjFkd2Omvnm1l1tvJYqTS9VE2IWPt9EuWk7dbzQzozcRkI Ym9odQg5iLgawrR0s5ziXo6EpWgcvT1VdsMM0/Xmc8xeIVX2dX3/pMcoPIIsrUff CmnxG9i+XiAqwVZ7xfrNwsld4VQM/kapXsHIPn9DiCzUTftRNW9XOx18+90booeC Bv9JeRNLKuGanpDDG8Mentm0gPPrcD4CKCGgVYcLRz3ILOdU13LgVe99m8xnPaPz TqAayVEVHXxsUJTKLEx1QaHPCN4gfurv -----END CERTIFICATE-----Generated at Mon Nov 3 16:00:51 2025 by rpki-client