$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json) Hash identifier: BUZaVS+FwEebmYcvIOWAykRD/r3l4tNbgqpqjfmgDls= Subject key identifier: 3A:CB:9E:8E:A3:9C:E4:AF:B9:92:38:E7:BF:B1:F0:B3:A4:43:71:8B Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft Manifest number: 44 Signing time: Wed 17 Sep 2025 08:09:05 +0000 Manifest this update: Wed 17 Sep 2025 08:09:05 +0000 Manifest next update: Wed 24 Sep 2025 08:09:05 +0000 Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: gwzbgP4/JRVd7paDYyaNVqo1cb48aeeg2mDHS9RwSVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Validity Not Before: Sep 17 08:09:05 2025 GMT Not After : Sep 24 08:09:05 2025 GMT Subject: CN=68ca6ca1-4821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:c2:47:7d:0d:77:01:8e:b9:fa:79:a2:e3: c6:6c:34:8c:b8:52:d8:53:c1:cc:bb:42:82:38:08: ca:ec:69:c6:a6:92:91:ab:03:c1:eb:1d:9b:be:0b: f8:98:e0:68:98:ed:67:8c:85:7c:d4:42:57:c9:0a: 02:d1:6c:23:af:f9:3c:40:d9:f0:33:02:d0:0f:66: 97:ae:72:bf:bd:b3:df:a0:67:2c:60:db:cb:aa:34: cc:d3:2f:a8:00:8c:36:7d:33:3c:3b:db:34:65:e6: b5:bf:f1:5f:24:76:29:8c:72:af:8c:41:8b:fd:a5: dc:1a:25:a5:37:66:a0:29:7a:f4:39:42:d6:ec:55: 06:ca:96:bc:df:f2:66:33:4a:47:80:07:47:97:5b: fb:23:73:98:c8:43:01:9b:96:a2:52:44:06:22:46: b5:2b:88:f7:65:83:46:ab:2f:ce:b6:d1:c8:b5:5c: 2c:1e:f1:6b:33:34:ce:ac:af:6f:17:bf:24:4a:a2: cb:4c:3d:2d:2c:c5:2e:00:9b:43:60:a3:65:bc:f1: 0e:5e:ec:78:0a:82:20:5a:ec:c1:99:fb:b8:95:52: d3:ce:01:ab:09:c7:9d:95:10:54:a3:1e:c2:e0:17: e6:69:47:9d:a0:31:e6:28:f7:ce:ba:a6:65:00:58: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CB:9E:8E:A3:9C:E4:AF:B9:92:38:E7:BF:B1:F0:B3:A4:43:71:8B X509v3 Authority Key Identifier: keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:3e:59:df:d9:8d:5e:c6:bf:9c:9c:66:48:2f:1d:b0:7b: 97:07:e7:78:d0:8a:67:1d:76:52:1f:37:36:63:86:f1:8a:b4: c7:86:43:f1:a9:04:2b:4c:bb:20:b0:9a:55:40:39:1b:44:a4: 69:4f:c2:5d:c2:00:24:a8:3f:ab:be:b4:80:35:54:5e:d9:2e: cc:a3:5e:60:66:c7:eb:72:4c:c3:a0:ec:3c:39:b7:59:83:c9: a4:00:70:83:ba:e9:89:f6:d0:b9:b4:a4:9e:68:f7:54:33:88: 05:d5:88:58:1b:05:ed:05:44:5d:58:a9:5b:0e:cc:c9:34:86: f8:44:e3:1f:4d:38:dd:ad:04:35:0c:89:40:82:5e:36:6a:46: 10:96:94:74:8a:a3:9f:6d:c8:10:c6:72:c3:d3:f3:03:08:12: e8:db:61:dc:cb:63:2a:c1:e3:ce:45:1c:a4:b8:32:7a:ef:14: 98:86:54:92:02:3b:be:b2:ee:fa:ce:ff:8c:e6:90:20:35:f5: a0:60:16:80:7e:72:09:83:a8:04:df:fb:3e:7f:cf:79:e4:57: 8b:3f:52:fc:aa:9b:64:73:0c:ae:c0:0f:19:7b:f9:70:03:be: 63:07:7b:7f:e3:b1:36:c7:a0:c8:82:1f:e3:47:21:22:46:ad: 28:dc:42:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD MTM4RDEyMzAeFw0yNTA5MTcwODA5MDVaFw0yNTA5MjQwODA5MDVaMBgxFjAUBgNV BAMTDTY4Y2E2Y2ExLTQ4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChoMJHfQ13AY65+nmi48ZsNIy4UthTwcy7QoI4CMrsacamkpGrA8HrHZu+C/iY 4GiY7WeMhXzUQlfJCgLRbCOv+TxA2fAzAtAPZpeucr+9s9+gZyxg28uqNMzTL6gA jDZ9Mzw72zRl5rW/8V8kdimMcq+MQYv9pdwaJaU3ZqApevQ5QtbsVQbKlrzf8mYz SkeAB0eXW/sjc5jIQwGblqJSRAYiRrUriPdlg0arL8620ci1XCwe8WszNM6sr28X vyRKostMPS0sxS4Am0Ngo2W88Q5e7HgKgiBa7MGZ+7iVUtPOAasJx52VEFSjHsLg F+ZpR52gMeYo9866pmUAWL2/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOsuejqOc 5K+5kjjnv7Hws6RDcYswHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGORPlnf2Y1exr+cnGZILx2we5cH53jQimcddlIfNzZjhvGKtMeGQ/Gp BCtMuyCwmlVAORtEpGlPwl3CACSoP6u+tIA1VF7ZLsyjXmBmx+tyTMOg7Dw5t1mD yaQAcIO66Yn20Lm0pJ5o91QziAXViFgbBe0FRF1YqVsOzMk0hvhE4x9NON2tBDUM iUCCXjZqRhCWlHSKo59tyBDGcsPT8wMIEujbYdzLYyrB485FHKS4MnrvFJiGVJIC O76y7vrO/4zmkCA19aBgFoB+cgmDqATf+z5/z3nkV4s/Uvyqm2RzDK7ADxl7+XAD vmMHe3/jsTbHoMiCH+NHISJGrSjcQjg= -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:02 2025 by rpki-client