$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json) Hash identifier: sVCblWYb2/sWnn7KFgdupp1axXJhvNaNa/ZbYiiCSPY= Subject key identifier: 84:D0:B4:25:0D:9A:08:08:DF:3E:86:06:A9:31:E8:2B:0D:7D:BD:0B Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft Manifest number: AB Signing time: Fri 17 Oct 2025 06:01:24 +0000 Manifest this update: Fri 17 Oct 2025 06:01:23 +0000 Manifest next update: Fri 24 Oct 2025 06:01:23 +0000 Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: GUbLToFfjDfXFTbTLuz+Y4JjqpvS9CeeRmEftRDrn5I=) 2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Oct 17 06:01:23 2025 GMT Not After : Oct 24 06:01:23 2025 GMT Subject: CN=68f1dbb3-5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:11:eb:d8:8d:76:4c:c3:bf:34:d9:85:57: e8:ef:9a:ff:af:2a:63:82:94:55:29:cb:73:23:51: fb:e4:59:99:6e:55:62:93:b3:19:48:e7:94:11:c3: 17:fc:b9:b7:54:df:e0:42:a0:1d:55:e4:32:19:88: 15:4e:9f:2f:cf:3a:ca:9a:52:d8:18:73:d4:7e:77: 9f:10:2b:04:28:d9:15:d5:56:ed:40:f9:1c:4c:90: a3:c8:bc:3d:93:fc:9b:1c:82:d6:6d:0e:0c:23:de: cc:d6:36:3f:dc:83:10:9e:49:39:ab:cb:0b:51:0a: ff:75:29:8a:cc:3d:6f:38:ec:68:93:42:30:0b:20: b5:13:bb:bb:db:a2:69:15:49:b6:bf:ec:ce:67:f7: bd:71:eb:f5:87:bd:b5:f2:59:df:bb:d5:d8:54:8b: 83:0e:e7:6e:82:c1:62:2a:5a:3f:a6:92:c1:a3:77: c5:39:b9:60:9e:f0:ea:1a:af:c1:25:e5:cb:23:c8: 1f:fe:e0:72:8e:d9:84:fd:99:32:d4:42:01:10:37: 09:e4:66:6f:8a:b9:14:dc:e2:32:aa:a2:b6:98:a6: e8:f9:04:79:04:5a:ec:50:2c:0e:7b:36:53:e4:68: 58:34:b6:de:0f:32:c9:b1:31:3a:2e:02:ea:5f:0b: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:B4:25:0D:9A:08:08:DF:3E:86:06:A9:31:E8:2B:0D:7D:BD:0B X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fa:32:30:49:c8:d3:56:21:4d:c0:23:35:2f:e0:f1:4d:48: 03:78:4a:a6:cf:b5:75:0f:b7:ec:5e:56:bb:c7:9e:86:5b:82: 45:3d:e7:6b:f0:07:5e:e7:11:52:c3:e0:72:ce:32:36:3d:fc: 3e:68:05:c0:38:fd:0b:4c:79:d1:0f:77:d1:fa:3b:31:28:62: d9:8b:1c:5f:04:4c:d4:86:67:e6:65:83:bf:2d:d6:63:75:eb: 25:a5:aa:09:b5:00:0d:f0:31:c2:d7:e0:9f:fd:c0:0b:9c:85: bf:d1:4c:b5:90:5b:e5:6e:3e:59:cb:6e:7d:e7:79:ee:c4:68: 86:13:56:ef:cc:10:7e:0d:d9:f3:5a:14:05:60:a3:c1:bb:98: d7:5c:5f:d0:70:1c:f7:ad:d5:6d:e1:83:9b:fe:81:f2:35:d4: 72:9d:b7:d7:f6:24:1d:ff:f1:99:a6:45:13:3b:5b:66:30:00: 04:45:f4:22:12:12:79:4e:8b:90:47:38:cf:93:6d:8f:1e:d1: 44:67:ec:07:7f:7a:b7:fc:ba:24:28:b5:31:18:22:69:56:5e: 14:3a:53:d0:46:a3:d3:eb:81:14:36:36:a1:58:74:89:32:bb: a3:ce:39:56:8e:17:4c:2f:70:f2:bc:71:ec:1c:1d:14:7b:fc: bb:dc:81:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKDQxMTUyMjM0NjBBM0RERkFDODNBODJGQzYxQjJCRTlF QzYyNkMyMEMwHhcNMjUxMDE3MDYwMTIzWhcNMjUxMDI0MDYwMTIzWjAYMRYwFAYD VQQDEw02OGYxZGJiMy01ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9YR69iNdkzDvzTZhVfo75r/rypjgpRVKctzI1H75FmZblVik7MZSOeUEcMX /Lm3VN/gQqAdVeQyGYgVTp8vzzrKmlLYGHPUfnefECsEKNkV1VbtQPkcTJCjyLw9 k/ybHILWbQ4MI97M1jY/3IMQnkk5q8sLUQr/dSmKzD1vOOxok0IwCyC1E7u726Jp FUm2v+zOZ/e9cev1h7218lnfu9XYVIuDDudugsFiKlo/ppLBo3fFOblgnvDqGq/B JeXLI8gf/uByjtmE/Zky1EIBEDcJ5GZvirkU3OIyqqK2mKbo+QR5BFrsUCwOezZT 5GhYNLbeDzLJsTE6LgLqXwsPhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITQtCUN mggI3z6GBqkx6CsNfb0LMB8GA1UdIwQYMBaAFEEVIjRgo936yDqC/GGyvp7GJsIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri84Q0EyMEExQ0FB RDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNmcklPb0w4WWJLLW5zWW13 Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNm cklPb0w4WWJLLW5zWW13Z3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/+jIwScjTViFNwCM1L+DxTUgDeEqmz7V1D7fsXla7x56GW4JFPedr 8Ade5xFSw+ByzjI2Pfw+aAXAOP0LTHnRD3fR+jsxKGLZixxfBEzUhmfmZYO/LdZj deslpaoJtQAN8DHC1+Cf/cALnIW/0Uy1kFvlbj5Zy25953nuxGiGE1bvzBB+Ddnz WhQFYKPBu5jXXF/QcBz3rdVt4YOb/oHyNdRynbfX9iQd//GZpkUTO1tmMAAERfQi EhJ5TouQRzjPk22PHtFEZ+wHf3q3/LokKLUxGCJpVl4UOlPQRqPT64EUNjahWHSJ MrujzjlWjhdML3DyvHHsHB0Ue/y73IFL -----END CERTIFICATE-----Generated at Sat Oct 18 23:35:52 2025 by rpki-client