$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: 6c3DCJ7LZOucDWoq/fwW9eRfQ1inUU8tKwvjNBoDffE= Subject key identifier: 47:FE:ED:F4:F2:5D:F7:ED:C7:10:F1:98:C5:88:6C:8C:39:3B:F9:B4 Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E46 Signing time: Sun 02 Nov 2025 15:28:56 +0000 Manifest this update: Sun 02 Nov 2025 15:28:56 +0000 Manifest next update: Sun 09 Nov 2025 15:28:56 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: X75Mdu1fQKifjK4rvYQakXqcBTj/PIO5snsHL4Cq/6A=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11859 (0x2e53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Nov 2 15:28:56 2025 GMT Not After : Nov 9 15:28:56 2025 GMT Subject: CN=690778b8-f25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:d7:8c:06:e8:bb:77:86:07:ab:65:ed:8c: 90:8a:c8:fc:8b:80:53:ce:ab:eb:bd:30:2e:b9:47: 2f:9b:33:42:f4:a9:3a:0f:db:bb:da:7f:e3:ed:33: 7d:fa:bf:e8:de:b1:cf:7f:53:ec:a1:fc:78:ef:02: 33:c6:65:f5:bf:fd:9f:f6:d0:d8:d3:d3:92:74:14: c9:72:6b:ac:64:99:1f:13:a3:c3:81:0e:f5:74:c0: 6c:71:70:80:de:15:f0:ea:f9:b1:19:6a:6d:ed:3d: 22:dc:84:4a:65:7c:40:26:93:ec:0a:19:7f:10:09: e1:7b:20:88:c1:6a:ef:52:fc:63:40:f6:1d:00:d3: 9b:14:9e:d2:db:46:a6:c7:ea:e0:d3:f0:45:92:e4: 07:bb:a3:ac:0b:8b:54:e2:3a:da:26:6d:24:b5:46: c1:c0:39:72:9d:05:79:d0:77:f4:60:f4:3d:0f:89: 5d:51:a7:c0:a4:eb:cd:bf:99:ab:b2:42:d9:df:e2: cf:0c:c1:94:aa:32:1f:a9:33:4a:38:41:a6:01:d7: b3:50:3e:55:0a:25:c5:e6:b3:8a:47:3f:c6:57:c9: fa:34:2e:d7:1b:b9:b4:97:0c:c8:b8:c5:c3:50:bf: 50:0f:33:f1:8c:d8:82:14:9f:19:73:4b:96:5b:57: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FE:ED:F4:F2:5D:F7:ED:C7:10:F1:98:C5:88:6C:8C:39:3B:F9:B4 X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:df:33:d8:b0:5e:eb:30:28:22:18:a1:70:c1:fe:91:2d:b5: 58:c2:9c:45:67:93:2d:3c:fd:dc:9a:c0:35:91:7d:c9:56:29: e3:cb:51:96:99:26:14:0e:c8:99:a7:83:b7:36:8d:b3:24:d1: 2d:9c:64:30:f1:fd:2d:d2:02:a8:0f:20:ad:fd:1f:3b:cf:b3: fe:d9:ec:48:bd:4a:62:06:3f:34:38:e7:ae:16:25:5b:a3:e3: b3:b3:cc:55:47:6c:ed:71:8a:d6:48:bd:4c:46:44:57:3f:44: 90:66:79:e2:be:a2:30:98:87:62:6f:8a:ff:db:c2:9c:b8:87: 45:fd:38:b3:60:61:e0:6d:ce:59:0c:a1:73:52:84:c7:5c:29: d4:77:6c:64:83:da:c8:ec:53:24:a1:f1:3a:e2:eb:b0:a9:53: 27:c7:84:a1:07:bf:cc:c8:78:9d:14:69:5b:bc:db:22:eb:58: 33:ed:08:50:7c:cc:5e:0b:91:ab:be:6b:b0:14:57:07:98:18: 60:53:4b:2d:16:00:38:29:bf:da:57:d7:10:de:68:46:00:6c: 54:ed:40:fa:d8:3a:10:57:0e:2e:fd:ef:17:ce:49:06:7f:33: 05:6d:cd:52:e7:7f:c8:3b:03:d2:84:bf:80:85:31:40:c5:da: fa:05:03:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUxMTAyMTUyODU2WhcNMjUxMTA5MTUyODU2WjAYMRYwFAYD VQQDEw02OTA3NzhiOC1mMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQHXjAbou3eGB6tl7YyQisj8i4BTzqvrvTAuuUcvmzNC9Kk6D9u72n/j7TN9 +r/o3rHPf1Psofx47wIzxmX1v/2f9tDY09OSdBTJcmusZJkfE6PDgQ71dMBscXCA 3hXw6vmxGWpt7T0i3IRKZXxAJpPsChl/EAnheyCIwWrvUvxjQPYdANObFJ7S20am x+rg0/BFkuQHu6OsC4tU4jraJm0ktUbBwDlynQV50Hf0YPQ9D4ldUafApOvNv5mr skLZ3+LPDMGUqjIfqTNKOEGmAdezUD5VCiXF5rOKRz/GV8n6NC7XG7m0lwzIuMXD UL9QDzPxjNiCFJ8Zc0uWW1eKbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf+7fTy XfftxxDxmMWIbIw5O/m0MB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ3zPYsF7rMCgiGKFwwf6RLbVYwpxFZ5MtPP3cmsA1kX3JVinjy1GW mSYUDsiZp4O3No2zJNEtnGQw8f0t0gKoDyCt/R87z7P+2exIvUpiBj80OOeuFiVb o+Ozs8xVR2ztcYrWSL1MRkRXP0SQZnnivqIwmIdib4r/28KcuIdF/TizYGHgbc5Z DKFzUoTHXCnUd2xkg9rI7FMkofE64uuwqVMnx4ShB7/MyHidFGlbvNsi61gz7QhQ fMxeC5GrvmuwFFcHmBhgU0stFgA4Kb/aV9cQ3mhGAGxU7UD62DoQVw4u/e8XzkkG fzMFbc1S53/IOwPShL+AhTFAxdr6BQPr -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:31 2025 by rpki-client