$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: m+37YFohUyvCavl/2ph6g4aeSqfSCK2Li9Kh8+Fcnd0= Subject key identifier: 56:EF:47:E4:79:B3:30:DF:3C:B8:B4:4E:C8:3B:19:42:03:ED:3C:96 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 2808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 27F8 Signing time: Tue 04 Nov 2025 15:42:13 +0000 Manifest this update: Tue 04 Nov 2025 15:42:12 +0000 Manifest next update: Tue 11 Nov 2025 15:42:12 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: 9OWXHDM6smBRp/MzDBIFlBSNaQFv/k9sxidtxFvQp2U=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10248 (0x2808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Nov 4 15:42:12 2025 GMT Not After : Nov 11 15:42:12 2025 GMT Subject: CN=690a1ed5-0e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:4e:85:6d:e7:6a:a4:d7:11:d0:29:50:eb: 2d:f7:30:7c:af:d8:99:73:87:8e:c1:ab:5f:be:8c: 93:4d:18:83:ff:4a:60:59:67:6a:98:42:a2:a7:8d: 26:dd:f6:00:26:26:e3:e1:51:18:57:0a:a2:72:ce: 00:69:48:95:24:5e:42:89:47:8f:06:42:91:75:db: 05:79:bb:9d:a2:55:f8:06:b9:c9:9f:89:8e:62:7d: b3:db:2c:fb:a7:96:cf:f9:99:c4:af:29:af:24:4f: 84:78:d0:fa:ad:51:8d:fd:c6:7b:fe:4a:0c:89:72: 63:73:ea:b2:53:98:00:2a:ba:3e:ae:31:84:49:f2: 64:43:57:03:a2:86:c2:24:f7:0e:31:46:fd:39:16: 4e:3a:c5:d5:9c:b1:9a:f5:03:ae:2e:32:08:e5:9e: f4:ee:f3:d8:d2:cc:fd:b1:4b:6a:b4:1e:f5:50:33: 14:eb:f8:48:9b:32:86:61:21:08:e6:30:85:db:66: bb:fd:4c:e3:be:31:66:87:d9:c3:77:39:7f:77:55: 6b:e4:08:e7:7a:7d:77:fe:e8:34:fb:ec:1d:86:fb: 56:70:9f:a6:18:44:d0:6f:76:ad:bf:0f:a8:dd:21: c6:02:87:40:6a:94:f7:a9:77:f9:93:89:45:c6:fe: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:47:E4:79:B3:30:DF:3C:B8:B4:4E:C8:3B:19:42:03:ED:3C:96 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e6:67:f0:7b:f6:4a:18:53:d9:ee:67:d7:46:f5:e3:22:c6: d5:c4:ae:c2:3e:9b:f5:31:97:4a:31:21:a2:ea:6c:db:88:32: 79:fe:1e:05:b1:5d:63:bd:f4:e5:c9:fa:98:fb:ef:fd:40:9c: 20:83:88:61:63:99:f2:7e:5d:23:38:75:b1:09:4a:57:81:df: 7f:c1:4b:cf:de:03:78:3a:18:3e:59:b2:50:ff:bf:20:0b:d3: d8:cf:51:8e:49:ed:11:31:54:4e:4d:40:0d:64:ae:17:62:59: 74:e9:ce:04:7b:16:7e:87:44:53:85:ae:e0:49:1b:22:96:8b: 2e:ca:01:23:a3:09:9c:72:b4:bc:e7:2f:32:13:9e:e8:45:4b: 92:bc:55:d2:e8:8f:93:7e:93:ea:2a:30:9c:68:a5:32:04:39: 32:c7:ef:3d:89:7e:ae:6d:ad:c7:f9:5d:5b:f7:b9:1d:bc:66: 95:11:bd:e0:80:c2:e7:74:12:14:06:00:a0:b1:fe:9c:44:2e: 83:4a:40:3e:ee:c3:a6:61:c5:6f:b7:26:2c:da:cc:4f:8f:ca: aa:59:b8:3f:3b:0b:a0:ce:96:dd:77:9b:23:27:b5:b4:58:0c: 5b:9a:8f:d4:61:ee:47:2d:a3:87:fa:ce:e7:78:4e:1a:f3:5e: 77:dc:10:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUxMTA0MTU0MjEyWhcNMjUxMTExMTU0MjEyWjAYMRYwFAYD VQQDEw02OTBhMWVkNS0wZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbBOhW3naqTXEdApUOst9zB8r9iZc4eOwatfvoyTTRiD/0pgWWdqmEKip40m 3fYAJibj4VEYVwqics4AaUiVJF5CiUePBkKRddsFebudolX4BrnJn4mOYn2z2yz7 p5bP+ZnErymvJE+EeND6rVGN/cZ7/koMiXJjc+qyU5gAKro+rjGESfJkQ1cDoobC JPcOMUb9ORZOOsXVnLGa9QOuLjII5Z707vPY0sz9sUtqtB71UDMU6/hImzKGYSEI 5jCF22a7/UzjvjFmh9nDdzl/d1Vr5Ajnen13/ug0++wdhvtWcJ+mGETQb3atvw+o 3SHGAodAapT3qXf5k4lFxv4XwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbvR+R5 szDfPLi0Tsg7GUID7TyWMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB5mfwe/ZKGFPZ7mfXRvXjIsbVxK7CPpv1MZdKMSGi6mzbiDJ5/h4F sV1jvfTlyfqY++/9QJwgg4hhY5nyfl0jOHWxCUpXgd9/wUvP3gN4Ohg+WbJQ/78g C9PYz1GOSe0RMVROTUANZK4XYll06c4EexZ+h0RTha7gSRsilosuygEjowmccrS8 5y8yE57oRUuSvFXS6I+TfpPqKjCcaKUyBDkyx+89iX6uba3H+V1b97kdvGaVEb3g gMLndBIUBgCgsf6cRC6DSkA+7sOmYcVvtyYs2sxPj8qqWbg/Owugzpbdd5sjJ7W0 WAxbmo/UYe5HLaOH+s7neE4a81533BD6 -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:48 2025 by rpki-client