$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: 8nQi575ckCiFEEkfWl6E4Ph6Gl7l+G4fdVdiC6S6m0c= Subject key identifier: 4B:86:34:B8:AB:A6:DF:57:38:C1:FC:72:9B:41:81:7E:FF:2F:2F:8A Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 36A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 35CC Signing time: Mon 20 Oct 2025 14:29:33 +0000 Manifest this update: Mon 20 Oct 2025 14:29:33 +0000 Manifest next update: Mon 27 Oct 2025 14:29:33 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: ufF89YfP5HfY9uyD9VQrbJaOGTcFgYhonQ6vubMaPaY=) 2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=) 3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13984 (0x36a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Oct 20 14:29:33 2025 GMT Not After : Oct 27 14:29:33 2025 GMT Subject: CN=68f6474d-9ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:c2:64:5d:04:f4:5a:38:87:24:bc:0b:8d: ed:d8:ac:71:95:78:3f:df:90:70:85:09:0a:ff:40: ed:ec:57:3b:06:20:87:92:cf:41:e0:4f:5c:e4:a9: c9:49:94:32:a2:6e:0b:1d:94:91:3d:ad:2d:f1:10: 5a:72:ef:c2:8a:6f:21:bc:5b:1a:89:27:b3:cd:58: 5f:a8:ca:b7:2f:83:35:9c:04:ca:8b:d9:42:8a:d7: 21:b5:fa:9e:2e:39:a1:bd:4f:f7:1e:63:84:a6:1e: 3e:7e:86:ba:e0:3a:89:c9:19:55:52:38:3e:4b:d9: ab:fb:b1:42:13:c6:e2:f3:48:a9:97:cc:9a:67:68: 34:b4:a6:62:af:91:b9:f5:0b:f7:0d:d9:90:e3:9b: 7d:95:70:83:5b:84:c1:f8:87:56:fa:18:96:96:cb: 15:a8:54:98:c1:85:94:14:f7:2e:63:ef:a6:4c:89: ec:3b:5d:e8:d5:0b:fc:26:d4:d4:07:c3:b5:56:0c: b3:d0:c4:17:aa:53:c3:2e:cb:13:56:03:e4:b6:83: ee:1d:49:7e:5c:5f:4e:39:bb:fc:56:c7:7a:d8:cc: fb:85:9c:bb:a9:ef:66:29:0a:03:9b:b3:19:19:cc: d5:5d:85:43:4a:70:6e:62:d3:85:78:5e:bd:cb:c7: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:34:B8:AB:A6:DF:57:38:C1:FC:72:9B:41:81:7E:FF:2F:2F:8A X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:6a:7d:4c:48:b7:a8:6b:d2:50:7c:b1:2b:fc:94:05:45: fd:13:4a:df:8c:10:56:db:f7:fa:fa:a8:e0:d1:5d:f8:4f:74: 82:8b:4a:a3:fd:b8:a2:7a:5f:8b:88:65:dc:47:d2:56:73:fd: 1c:3b:ca:b7:27:53:f2:03:c5:5e:53:83:e2:00:c1:01:fb:83: 04:68:3f:f8:f0:fb:38:e2:f1:55:8d:26:4d:62:7d:f2:fa:fc: d7:11:68:20:4c:3d:e4:e9:67:57:0a:86:08:18:b9:7f:7e:7b: 15:d9:73:13:a1:b4:c4:5d:fb:65:7d:84:c4:7c:60:45:68:80: 80:08:77:4e:e6:4c:f2:36:00:e0:8e:b6:e6:d7:18:cd:0a:b2: eb:32:25:f9:66:d8:59:9f:55:fa:e3:49:a7:c4:18:eb:7f:7c: 2c:1f:28:e8:7d:75:83:cd:09:87:d9:a0:ee:c6:1d:ac:b6:80: 1f:4e:f9:94:a6:00:28:c4:ab:e4:cb:ed:29:a5:44:a9:12:83: 38:20:5b:7d:b7:72:77:45:1d:83:33:37:4a:2e:9f:05:b2:4a: 59:d2:fa:a6:e8:e9:7b:bd:74:c7:2c:f9:98:56:1d:6e:36:65: 0f:56:c5:fe:24:54:a6:5b:99:33:7d:ba:3f:34:51:8b:9a:79: cd:dc:aa:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUxMDIwMTQyOTMzWhcNMjUxMDI3MTQyOTMzWjAYMRYwFAYD VQQDEw02OGY2NDc0ZC05ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkvCZF0E9Fo4hyS8C43t2KxxlXg/35BwhQkK/0Dt7Fc7BiCHks9B4E9c5KnJ SZQyom4LHZSRPa0t8RBacu/Cim8hvFsaiSezzVhfqMq3L4M1nATKi9lCitchtfqe LjmhvU/3HmOEph4+foa64DqJyRlVUjg+S9mr+7FCE8bi80ipl8yaZ2g0tKZir5G5 9Qv3DdmQ45t9lXCDW4TB+IdW+hiWlssVqFSYwYWUFPcuY++mTInsO13o1Qv8JtTU B8O1Vgyz0MQXqlPDLssTVgPktoPuHUl+XF9OObv8Vsd62Mz7hZy7qe9mKQoDm7MZ GczVXYVDSnBuYtOFeF69y8cvHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuGNLir pt9XOMH8cptBgX7/Ly+KMB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhWGp9TEi3qGvSUHyxK/yUBUX9E0rfjBBW2/f6+qjg0V34T3SCi0qj /biiel+LiGXcR9JWc/0cO8q3J1PyA8VeU4PiAMEB+4MEaD/48Ps44vFVjSZNYn3y +vzXEWggTD3k6WdXCoYIGLl/fnsV2XMTobTEXftlfYTEfGBFaICACHdO5kzyNgDg jrbm1xjNCrLrMiX5ZthZn1X640mnxBjrf3wsHyjofXWDzQmH2aDuxh2stoAfTvmU pgAoxKvky+0ppUSpEoM4IFt9t3J3RR2DMzdKLp8FskpZ0vqm6Ol7vXTHLPmYVh1u NmUPVsX+JFSmW5kzfbo/NFGLmnnN3KpN -----END CERTIFICATE-----Generated at Wed Oct 22 10:25:11 2025 by rpki-client