$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft File: QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json) Hash identifier: kWF51S7IgwZNXGOyjcfhnuAaDKMw7k+pfvssf5MQo1g= Subject key identifier: 38:7E:53:AE:F3:0C:B4:50:FB:D6:3B:B9:82:30:EE:A3:EF:D2:1F:FA Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 Certificate issuer: /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Certificate serial: 2667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft Manifest number: 1A86 Signing time: Wed 22 Oct 2025 18:01:58 +0000 Manifest this update: Wed 22 Oct 2025 18:01:57 +0000 Manifest next update: Wed 29 Oct 2025 18:01:57 +0000 Files and hashes: 1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: M+g3FzCvReUTeochBkH8oF9jpd3gAuCwxCxWWZ7V/Gs=) 2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: jROfgwuidzLC7AWCncg9tK5p5d6kMRx0vRFp0MoP+qM=) 3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: SicvG0o1j0juozOpQdU8S9XPJYPD28r6BEH0ZZTMtCk=) 4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: t77TBLDyfQlYv1eUozdedtWkdGosmio8lx2OnfPqKn8=) 5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: sU4VNKoTZRC7rOgdrdAJ5l9zMf5qWmX/UOum5j9Op04=) 6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: kOwwKmaSB/pWq+rkgCsR0x3XY0Ne0hYk+1IKNpUUA88=) 7: B53FD334575411ECAA094876C4F9AE02.roa (hash: OatUXNH0fiEtO2+f1JbCOSZAp/tTotYDXstcjWZ2J2s=) 8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: XPXw9+MhOn0NRVGrugIJU94WGGzOQijXcxAqrFhTo84=) 9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: QPwmUi6Jbr6XpgG54LpHBRL5GHoE85qF3kMh45EU4DQ=) 10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: yAxgtWHScyaAo/qxWzcthUIvpu0Cn87KgHaSUfVCrIw=) 11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: G2D8FdL9HWaJ530qHLe4NXg0uwb3o4sRDKVT7tvGUhw=) 12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: 5SjvOm2kSOv31BBmDpmyPr0NIqcd7j1K10ShJA+7SSg=) 13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: MSzaop+NtM6eR5vhQ8IzHf7QK9SqJHOEvf0dM16xPxo=) 14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: 74IUgWh0EIbll6zM2oD6KnRo4IUzeZO6atmhM6ptuY8=) 15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: NeAes0ETd9mQEhgNnwzsPARoogq3sg8oM9diG1oYLcg=) 16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: +jREgbuLYhz8eMMx2O9Ksp1ti5wG9/pudLfwvmM6Cnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9831 (0x2667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0 Validity Not Before: Oct 22 18:01:57 2025 GMT Not After : Oct 29 18:01:57 2025 GMT Subject: CN=68f91c15-5fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:77:77:0f:c8:29:36:65:ff:fa:51:82:44: c1:3a:0d:8a:13:86:df:01:8d:ed:48:3c:16:57:6c: a5:bd:ce:4b:d1:2b:22:cf:e5:e5:01:ce:4f:a1:a4: f4:20:e1:d3:4f:22:25:46:68:a5:bc:47:8d:92:7e: 43:00:9e:54:f5:70:88:20:54:7a:0c:ef:4e:00:5e: 63:06:2e:7d:df:b6:21:2c:39:45:6c:5d:bb:50:3e: f6:d1:78:3a:66:da:bb:db:f1:b9:c2:50:17:6b:f8: 89:ec:1d:ce:23:49:52:66:55:4d:1b:df:dc:02:af: e0:e9:c6:35:88:a5:05:4e:d1:c6:da:48:7d:37:7d: a1:80:6d:d4:2b:07:df:b7:7a:f2:58:55:62:60:9a: 1e:64:77:23:a2:e0:fd:2d:46:8f:2b:e8:a7:39:59: 94:4b:11:ed:8a:45:d2:f8:66:0b:4e:d1:d5:0a:9e: 95:28:d2:d4:0e:94:88:eb:02:b1:af:15:12:37:3b: d8:30:a5:0a:75:c4:39:17:11:71:a9:4f:f3:e3:ee: 61:a9:4c:9e:d8:c1:ff:00:24:03:e3:f0:50:0d:71: 01:5f:3b:b1:99:05:5d:ef:14:e9:46:50:36:34:05: 86:c5:c9:2b:80:07:79:0d:51:a1:ab:2e:f8:54:d1: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7E:53:AE:F3:0C:B4:50:FB:D6:3B:B9:82:30:EE:A3:EF:D2:1F:FA X509v3 Authority Key Identifier: keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:27:be:2f:75:eb:01:e8:bc:b4:24:b3:03:52:8d:9c:cd:11: f7:7e:28:d7:8d:e5:1e:86:72:3b:b7:9f:e4:98:86:83:d8:c7: 45:7f:24:c1:34:7f:b6:1e:b4:40:57:2f:b7:e9:d1:75:92:0b: 82:f6:5f:b6:84:bb:6c:96:9c:04:3c:5b:86:74:ed:b4:44:49: 1c:da:46:eb:e2:55:a3:f7:da:94:d4:cd:33:38:76:f5:36:59: f9:77:03:16:4a:db:92:11:4b:6e:0c:96:11:1e:90:5a:35:22: 26:a8:7f:c2:a4:ed:16:78:9f:fd:cd:27:88:bb:1c:bd:0e:0f: 98:03:28:69:8e:9e:8d:70:05:a2:f0:60:aa:43:e2:3d:c2:00: 93:32:3d:cc:82:75:01:ea:e9:84:8d:01:c4:68:6c:70:90:af: 5e:35:95:24:0d:4d:c1:be:6b:96:9c:ef:ca:15:c7:4f:66:14: 50:02:b5:bc:9e:84:a3:2c:74:58:8b:c6:db:17:ef:39:d1:4f: 42:c2:35:31:a6:35:3d:66:ce:34:7c:64:99:5c:31:8b:27:dc: 3b:3a:ee:c1:a3:dd:0a:a3:a3:ca:bc:66:6d:7c:b6:67:cb:0e: ce:99:67:8e:1e:ea:af:2a:7a:22:a7:8c:ba:dd:b8:5a:1e:65: 50:c3:e8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw RDNEOEE2RDAwHhcNMjUxMDIyMTgwMTU3WhcNMjUxMDI5MTgwMTU3WjAYMRYwFAYD VQQDEw02OGY5MWMxNS01ZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyt3dw/IKTZl//pRgkTBOg2KE4bfAY3tSDwWV2ylvc5L0Ssiz+XlAc5PoaT0 IOHTTyIlRmilvEeNkn5DAJ5U9XCIIFR6DO9OAF5jBi5937YhLDlFbF27UD720Xg6 Ztq72/G5wlAXa/iJ7B3OI0lSZlVNG9/cAq/g6cY1iKUFTtHG2kh9N32hgG3UKwff t3ryWFViYJoeZHcjouD9LUaPK+inOVmUSxHtikXS+GYLTtHVCp6VKNLUDpSI6wKx rxUSNzvYMKUKdcQ5FxFxqU/z4+5hqUye2MH/ACQD4/BQDXEBXzuxmQVd7xTpRlA2 NAWGxckrgAd5DVGhqy74VNGApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh+U67z DLRQ+9Y7uYIw7qPv0h/6MB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy Q1E2MkFlMnpONXdOUFlwdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAJ74vdesB6Ly0JLMDUo2czRH3fijXjeUehnI7t5/kmIaD2MdFfyTB NH+2HrRAVy+36dF1kguC9l+2hLtslpwEPFuGdO20REkc2kbr4lWj99qU1M0zOHb1 Nln5dwMWStuSEUtuDJYRHpBaNSImqH/CpO0WeJ/9zSeIuxy9Dg+YAyhpjp6NcAWi 8GCqQ+I9wgCTMj3MgnUB6umEjQHEaGxwkK9eNZUkDU3BvmuWnO/KFcdPZhRQArW8 noSjLHRYi8bbF+850U9CwjUxpjU9Zs40fGSZXDGLJ9w7Ou7Bo90Ko6PKvGZtfLZn yw7OmWeOHuqvKnoip4y63bhaHmVQw+hi -----END CERTIFICATE-----Generated at Thu Oct 23 10:07:10 2025 by rpki-client