$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json) Hash identifier: 7aVia+tDLyUQs5SuH3cDB70KUmVWQOGT5H4QGiRS6ps= Subject key identifier: 17:1B:30:A1:FB:9C:5C:40:90:66:E6:83:7E:28:F5:61:7F:EA:35:A9 Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft Manifest number: 0608 Signing time: Sun 02 Nov 2025 22:53:13 +0000 Manifest this update: Sun 02 Nov 2025 22:53:12 +0000 Manifest next update: Sun 09 Nov 2025 22:53:12 +0000 Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: SG5L/RU0h4bi9QL4DHBKkxj3qDrObLa5JrXcOG319JI=) 2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: +2Hbaxr801NyDnPE1ldFyqXo4OeCNMmMLf3UKaT2zEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416 Validity Not Before: Nov 2 22:53:12 2025 GMT Not After : Nov 9 22:53:12 2025 GMT Subject: CN=6907e0d9-6f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:ed:04:8b:11:00:c8:21:0f:8a:52:6d:da: 48:8d:1c:11:98:a4:ee:1f:74:67:05:3c:f2:25:ce: 6a:b9:b7:c1:66:13:a2:6a:e0:4f:69:d2:70:00:0c: 6f:51:82:8c:40:38:73:e3:2a:23:eb:b5:2c:ae:1f: 5b:d2:8a:29:97:35:ba:ce:18:11:7f:24:90:fd:dc: 4c:d9:48:e6:2c:52:09:d9:5f:74:07:b6:89:89:d2: 98:32:71:86:84:8d:c9:bc:d1:15:08:74:30:51:fd: a8:40:d5:e0:4b:2c:59:fa:c1:7b:4d:58:29:90:a2: 2b:f1:c0:9f:af:e8:e6:14:aa:95:7b:70:9e:4e:b2: 6a:e4:ab:ed:78:84:7c:06:83:bf:b2:89:8f:b8:e5: a3:8d:5e:ad:aa:fe:2b:5d:33:3d:f6:97:c2:3b:42: 92:2d:fd:65:21:0f:62:9f:73:e7:c4:cb:c9:55:2e: c8:7b:d7:fe:4e:e5:1b:f9:7a:20:6e:ea:a0:82:7b: 2f:05:0d:de:82:b4:d3:0c:cf:86:14:25:07:95:c7: b3:75:4b:8a:c4:b3:cf:08:51:d1:75:21:d3:40:16: 4b:3e:8a:09:fc:b3:25:90:2d:86:e5:d6:41:32:57: 7e:f2:24:43:71:99:33:ef:8b:d0:f2:49:a5:ce:1c: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1B:30:A1:FB:9C:5C:40:90:66:E6:83:7E:28:F5:61:7F:EA:35:A9 X509v3 Authority Key Identifier: keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:12:35:90:bb:6d:74:93:45:83:31:6e:3b:ea:b0:8e:61:d6: 16:39:4e:0c:39:ba:41:97:b8:1f:74:eb:ec:9d:d3:b4:fe:51: de:fb:0f:62:bf:cc:08:35:7a:ea:e7:09:13:f5:dd:dd:c6:fc: e7:c9:f3:22:c6:ea:9e:fe:87:46:47:6f:c3:bc:c3:c1:48:61: 3e:59:31:a8:04:78:df:77:f6:d2:84:d1:7e:c1:89:00:35:b8: 20:68:36:69:86:1e:44:06:0f:28:92:11:14:c9:25:66:59:c7: 00:5b:e3:46:7c:8e:73:99:a9:2e:c2:63:30:bc:87:ef:dc:8f: dd:1e:08:f1:48:dc:e3:e4:c1:ba:18:ca:3b:f7:5e:e7:f6:82: 3c:7b:6e:ef:bf:3a:99:cf:e9:8b:eb:1b:97:f9:5a:ac:68:95: 5a:42:74:b1:4b:b9:3d:a0:7f:8c:90:da:5b:9b:c2:ca:16:cd: ec:8c:11:78:99:e0:48:da:70:5d:dc:9c:a2:5e:67:43:af:4a: 19:92:b1:b6:85:a2:35:e3:ed:7c:52:0e:de:dc:0c:0e:72:9b: 9c:16:7f:16:a4:df:0e:ef:db:39:16:75:21:bd:ea:f7:35:1d: 9f:ea:89:53:13:5c:65:69:a6:1f:95:65:18:cc:04:36:4a:a2: 72:6f:00:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCOUUxMTAvBgNVBAUTKEE4QTM4M0U2MzQ5MUUxMUJBRDdCNUUyQ0QyNDE0MTYy MUY0REI0MTYwHhcNMjUxMTAyMjI1MzEyWhcNMjUxMTA5MjI1MzEyWjAYMRYwFAYD VQQDEw02OTA3ZTBkOS02ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAvtBIsRAMghD4pSbdpIjRwRmKTuH3RnBTzyJc5qubfBZhOiauBPadJwAAxv UYKMQDhz4yoj67Usrh9b0ooplzW6zhgRfySQ/dxM2UjmLFIJ2V90B7aJidKYMnGG hI3JvNEVCHQwUf2oQNXgSyxZ+sF7TVgpkKIr8cCfr+jmFKqVe3CeTrJq5KvteIR8 BoO/somPuOWjjV6tqv4rXTM99pfCO0KSLf1lIQ9in3PnxMvJVS7Ie9f+TuUb+Xog buqggnsvBQ3egrTTDM+GFCUHlcezdUuKxLPPCFHRdSHTQBZLPooJ/LMlkC2G5dZB Mld+8iRDcZkz74vQ8kmlzhwUowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcbMKH7 nFxAkGbmg34o9WF/6jWpMB8GA1UdIwQYMBaAFKijg+Y0keEbrXteLNJBQWIfTbQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkI5RS80M0UyQzQyNkM3 RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRSdXRlMTRzMGtGQlloOU50 QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLT0Q1alNSNFJ1dGUxNHMwa0ZCWWg5TnRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkI5RS80M0UyQzQyNkM3RjgxMUVCODA5NDc1MTVDNEY5QUUwMi9xS09ENWpTUjRS dXRlMTRzMGtGQlloOU50QlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdEjWQu210k0WDMW476rCOYdYWOU4MObpBl7gfdOvsndO0/lHe+w9i v8wINXrq5wkT9d3dxvznyfMixuqe/odGR2/DvMPBSGE+WTGoBHjfd/bShNF+wYkA NbggaDZphh5EBg8okhEUySVmWccAW+NGfI5zmakuwmMwvIfv3I/dHgjxSNzj5MG6 GMo7917n9oI8e27vvzqZz+mL6xuX+VqsaJVaQnSxS7k9oH+MkNpbm8LKFs3sjBF4 meBI2nBd3JyiXmdDr0oZkrG2haI14+18Ug7e3AwOcpucFn8WpN8O79s5FnUhver3 NR2f6olTE1xlaaYflWUYzAQ2SqJybwB2 -----END CERTIFICATE-----Generated at Tue Nov 4 12:17:01 2025 by rpki-client