$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json) Hash identifier: o8apTXVe8cvARbVEzRn3kcIx2VPPxQTBWcrU3PFSRlk= Subject key identifier: BD:06:95:D7:74:C3:C3:91:F6:97:9F:EF:86:C6:91:66:D8:30:17:4D Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft Manifest number: 04C5 Signing time: Thu 23 Oct 2025 01:03:43 +0000 Manifest this update: Thu 23 Oct 2025 01:03:42 +0000 Manifest next update: Thu 30 Oct 2025 01:03:42 +0000 Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: ynzdrnev82AE/yBoV1TL0708sDCY8A/UvKdnleN4zy4=) 2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428 Validity Not Before: Oct 23 01:03:42 2025 GMT Not After : Oct 30 01:03:42 2025 GMT Subject: CN=68f97eee-8865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:d9:ac:07:ce:0a:87:be:46:b3:3a:83:e7: a5:d7:28:03:65:15:db:86:60:b2:03:b1:35:ea:b0: 9f:ed:c8:29:4d:79:ed:21:db:12:a7:f5:05:f6:1f: 57:15:9e:02:b2:18:15:e4:e5:8a:06:67:6c:af:4c: bf:4e:0d:b5:bf:15:7d:08:60:9b:b1:90:2b:62:59: 30:17:7e:6c:16:92:8c:8b:ab:0d:c4:fe:b4:6f:61: 6c:3c:8e:31:c9:ec:21:52:d3:b6:14:f6:96:58:6a: 2a:85:9c:4a:63:0d:2a:9a:af:ba:c5:ae:5e:d6:48: 27:c1:d0:37:11:27:72:17:23:f6:3e:c2:ea:b6:16: 08:f3:b1:9d:7f:74:85:b8:67:05:65:8c:fd:40:53: e1:82:ec:2b:80:37:ea:4c:a0:42:93:2d:c2:82:fb: cd:b3:11:9a:dd:8f:8b:35:da:99:24:1e:33:8b:64: a1:42:9d:36:a3:bc:d8:a1:41:61:d3:7c:43:53:a1: 16:33:db:7c:59:e9:a7:c8:f1:bd:8a:ed:13:ec:72: d3:de:89:00:10:e1:8b:03:d8:21:cf:d8:75:7a:f5: 8a:4a:83:e5:7d:92:fd:62:86:44:d4:f5:fd:61:d9: d6:f6:52:7e:54:1a:c5:74:04:6e:75:3a:38:63:3e: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:06:95:D7:74:C3:C3:91:F6:97:9F:EF:86:C6:91:66:D8:30:17:4D X509v3 Authority Key Identifier: keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b7:de:a8:39:45:fd:87:ee:2f:6d:e0:a6:a1:b9:ef:cc:08: b3:cb:90:5c:51:53:7e:57:dc:76:21:86:37:d2:39:d6:39:8f: 41:19:08:09:43:12:11:3f:ce:7b:19:03:3a:b9:11:8b:c3:94: ce:f8:34:cc:00:2a:f8:14:50:76:77:8d:af:69:b5:37:e3:bd: e3:85:a3:40:02:46:88:62:18:f0:64:00:1b:51:a7:b2:3a:9b: 09:41:24:d0:dc:cc:1a:b2:92:6b:74:a6:2f:04:9d:c5:e1:ce: ed:7f:49:f2:83:31:7f:b0:5c:07:28:a9:01:90:a5:e3:09:27: e9:30:1d:be:32:63:d3:b9:34:f3:fa:f7:7b:d8:02:b3:94:56: 80:90:09:f3:ab:23:00:78:55:c1:e4:5b:5a:62:7c:97:03:57: 12:80:bc:08:46:1f:3b:b8:bb:81:d0:ef:8c:87:11:c3:a6:60: fb:04:81:93:01:6a:3f:9e:61:e7:fe:a5:8b:0c:a1:21:94:41: 1d:aa:70:b8:90:9a:ab:29:66:71:5e:7d:2f:d4:fe:a5:63:d4: 24:8f:71:85:f9:1a:45:21:d8:bd:e4:5f:c2:91:5f:51:e9:9a: 7b:83:b6:0e:99:1b:8b:03:8f:f7:91:a2:8e:54:21:d4:ce:bf: 7d:a2:73:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2QzkxMTAvBgNVBAUTKDQxRjhCNkI0N0JBREIwMEY2RjhGRThFN0UwMTNGRjU1 QTE4RTc0MjgwHhcNMjUxMDIzMDEwMzQyWhcNMjUxMDMwMDEwMzQyWjAYMRYwFAYD VQQDEw02OGY5N2VlZS04ODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOXZrAfOCoe+RrM6g+el1ygDZRXbhmCyA7E16rCf7cgpTXntIdsSp/UF9h9X FZ4CshgV5OWKBmdsr0y/Tg21vxV9CGCbsZArYlkwF35sFpKMi6sNxP60b2FsPI4x yewhUtO2FPaWWGoqhZxKYw0qmq+6xa5e1kgnwdA3ESdyFyP2PsLqthYI87Gdf3SF uGcFZYz9QFPhguwrgDfqTKBCky3CgvvNsxGa3Y+LNdqZJB4zi2ShQp02o7zYoUFh 03xDU6EWM9t8WemnyPG9iu0T7HLT3okAEOGLA9ghz9h1evWKSoPlfZL9YoZE1PX9 YdnW9lJ+VBrFdARudTo4Yz7SoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0Gldd0 w8OR9pef74bGkWbYMBdNMB8GA1UdIwQYMBaAFEH4trR7rbAPb4/o5+AT/1WhjnQo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDZDOS83M0ZCRDMzMjQ4 MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNBOXZqLWpuNEJQX1ZhR09k Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmaTJ0SHV0c0E5dmotam40QlBfVmFHT2RDZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDZDOS83M0ZCRDMzMjQ4MUQxMUVDQjZGRURGNzdDNEY5QUUwMi9RZmkydEh1dHNB OXZqLWpuNEJQX1ZhR09kQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHt96oOUX9h+4vbeCmobnvzAizy5BcUVN+V9x2IYY30jnWOY9BGQgJ QxIRP857GQM6uRGLw5TO+DTMACr4FFB2d42vabU3473jhaNAAkaIYhjwZAAbUaey OpsJQSTQ3MwaspJrdKYvBJ3F4c7tf0nygzF/sFwHKKkBkKXjCSfpMB2+MmPTuTTz +vd72AKzlFaAkAnzqyMAeFXB5FtaYnyXA1cSgLwIRh87uLuB0O+MhxHDpmD7BIGT AWo/nmHn/qWLDKEhlEEdqnC4kJqrKWZxXn0v1P6lY9Qkj3GF+RpFIdi95F/CkV9R 6Zp7g7YOmRuLA4/3kaKOVCHUzr99onOi -----END CERTIFICATE-----Generated at Thu Oct 23 09:57:51 2025 by rpki-client