$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft File: QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json) Hash identifier: I5BR3GbQWsmvFfuUMV3uqAf+hhZf0keJGxKQWAa9Fjk= Subject key identifier: 97:E6:D0:8E:68:10:1A:BE:81:18:8B:73:C3:5F:61:9F:39:F6:46:16 Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 Certificate issuer: /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft Manifest number: 0898 Signing time: Sun 02 Nov 2025 20:31:40 +0000 Manifest this update: Sun 02 Nov 2025 20:31:40 +0000 Manifest next update: Sun 09 Nov 2025 20:31:40 +0000 Files and hashes: 1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: wwArEwBVHVBOeN4fScD9EgNzPJiST/0IhqjHh5+sSYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403 Validity Not Before: Nov 2 20:31:40 2025 GMT Not After : Nov 9 20:31:40 2025 GMT Subject: CN=6907bfac-a780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:47:40:74:a4:dd:55:da:09:a5:03:8a:db: c3:79:8f:70:9e:c0:d2:c5:c1:fb:82:9c:ae:c2:66: 1a:ef:ef:1e:dd:ca:1e:de:b8:f6:38:1e:10:50:5f: d9:2d:10:d7:26:c1:32:0a:a8:41:8e:a5:e7:7f:c5: 86:a2:b5:1f:32:aa:2e:29:ad:22:90:c5:89:7a:66: d7:28:2b:0c:4e:e2:d7:8c:79:e9:ab:84:bd:a2:79: 15:25:37:3d:73:82:66:17:fb:44:1d:9b:a8:8e:6a: e8:f0:6f:e3:2e:8a:f8:da:3a:e1:d6:4a:07:85:4b: 27:ab:07:9d:4b:8c:08:78:fd:4b:38:e8:82:b3:94: a0:00:e4:07:c1:a8:67:b8:4b:18:69:10:b7:f0:69: 2f:17:9f:50:37:53:7e:55:1e:f8:c1:64:09:72:cc: 37:ea:ce:9a:27:f2:4f:b6:0e:07:01:3b:d7:a7:2a: e9:c9:1e:33:fa:49:9f:94:a5:0a:0c:3e:ae:03:3d: f1:2e:f4:58:19:e0:b3:e7:0d:99:54:d7:79:d0:12: e8:bc:4a:62:e1:41:3d:87:2a:d2:dd:0a:d1:25:e2: bb:4e:e2:eb:40:9e:2b:a3:39:54:a7:ef:56:24:92: 29:f1:a8:c0:6d:fb:c3:85:f9:ec:00:bf:33:31:c4: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E6:D0:8E:68:10:1A:BE:81:18:8B:73:C3:5F:61:9F:39:F6:46:16 X509v3 Authority Key Identifier: keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:bd:4a:63:55:9e:8c:ca:a8:e9:3d:ef:5d:53:e3:91:49:70: 2f:7d:d5:c8:e8:70:19:64:dd:5c:d5:3f:a7:3c:8c:fc:a0:44: 6c:f3:07:18:7b:7c:98:44:bf:c3:f9:c6:18:40:1d:40:24:bd: 07:fc:1a:79:94:a1:54:51:fe:ab:15:75:5c:17:be:e3:96:a0: af:11:17:85:b1:da:1f:6d:d5:7a:e3:52:be:a8:bd:02:d1:6a: da:94:4b:7e:23:ea:45:b6:c3:41:64:dd:a7:8f:ae:c3:ae:ba: 4e:1f:19:3d:0d:f1:c8:4c:7b:02:3c:1f:76:6b:1c:25:a5:f4: 89:f1:5b:ff:f7:55:b8:de:66:bc:ee:63:8e:33:ec:08:98:e0: aa:2b:1f:f9:1d:38:b0:0f:e3:89:67:33:d2:ed:4b:83:26:66: 84:66:a8:e9:b6:9c:82:de:be:9b:9d:d3:82:cf:a1:83:79:e1: be:38:e6:f0:ba:a6:ef:5a:1b:91:31:5c:e5:62:c8:5c:27:50: 9a:b7:32:d1:90:fa:5e:ed:40:3b:03:f5:94:44:50:72:74:fa: 18:ee:10:de:0d:42:73:4b:27:1c:57:13:e8:f7:59:6a:d6:3e: 39:4f:dc:e5:e7:1e:a9:e4:4a:7d:8d:41:39:81:31:fd:bd:0f: ae:2d:77:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0MEYxMTAvBgNVBAUTKDQxNUNERkMzRTZDRTY1MzMwNkVBOTVBRDE2N0QyRTg5 NzVDNUU0MDMwHhcNMjUxMTAyMjAzMTQwWhcNMjUxMTA5MjAzMTQwWjAYMRYwFAYD VQQDEw02OTA3YmZhYy1hNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WZHQHSk3VXaCaUDitvDeY9wnsDSxcH7gpyuwmYa7+8e3coe3rj2OB4QUF/Z LRDXJsEyCqhBjqXnf8WGorUfMqouKa0ikMWJembXKCsMTuLXjHnpq4S9onkVJTc9 c4JmF/tEHZuojmro8G/jLor42jrh1koHhUsnqwedS4wIeP1LOOiCs5SgAOQHwahn uEsYaRC38GkvF59QN1N+VR74wWQJcsw36s6aJ/JPtg4HATvXpyrpyR4z+kmflKUK DD6uAz3xLvRYGeCz5w2ZVNd50BLovEpi4UE9hyrS3QrRJeK7TuLrQJ4rozlUp+9W JJIp8ajAbfvDhfnsAL8zMcTfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfm0I5o EBq+gRiLc8NfYZ859kYWMB8GA1UdIwQYMBaAFEFc38PmzmUzBuqVrRZ9Lol1xeQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQwRi80MTQyRDUwRUND OTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pUTUc2cFd0Rm4wdWlYWEY1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWemZ3LWJPWlRNRzZwV3RGbjB1aVhYRjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzQwRi80MTQyRDUwRUNDOTQxMUVBOUIyREY3NTNDNEY5QUUwMi9RVnpmdy1iT1pU TUc2cFd0Rm4wdWlYWEY1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEvUpjVZ6MyqjpPe9dU+ORSXAvfdXI6HAZZN1c1T+nPIz8oERs8wcY e3yYRL/D+cYYQB1AJL0H/Bp5lKFUUf6rFXVcF77jlqCvEReFsdofbdV641K+qL0C 0WralEt+I+pFtsNBZN2nj67DrrpOHxk9DfHITHsCPB92axwlpfSJ8Vv/91W43ma8 7mOOM+wImOCqKx/5HTiwD+OJZzPS7UuDJmaEZqjptpyC3r6bndOCz6GDeeG+OObw uqbvWhuRMVzlYshcJ1CatzLRkPpe7UA7A/WURFBydPoY7hDeDUJzSyccVxPo91lq 1j45T9zl5x6p5Ep9jUE5gTH9vQ+uLXfY -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:33 2025 by rpki-client