$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft File: QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json) Hash identifier: xl9ysRVjYWb4WLieolabTB5zH7MXIedyP+0x5sjZjyA= Subject key identifier: 39:B7:41:2A:9E:34:2D:B7:83:89:EF:30:27:81:5B:02:C8:E3:C3:AF Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF Certificate issuer: /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft Manifest number: 0203 Signing time: Mon 03 Nov 2025 02:18:32 +0000 Manifest this update: Mon 03 Nov 2025 02:18:31 +0000 Manifest next update: Mon 10 Nov 2025 02:18:31 +0000 Files and hashes: 1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: msbD+6HCAA/0eShs5Z/Lf1NsAz+qCva0zmg1ifp/mXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF Validity Not Before: Nov 3 02:18:31 2025 GMT Not After : Nov 10 02:18:31 2025 GMT Subject: CN=690810f7-15be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:94:9b:48:0d:9f:db:52:51:99:ba:1f:68: 20:57:ea:c1:ef:3d:5e:ac:3f:d3:30:a7:f8:35:78: e4:40:92:49:1f:1e:02:b6:db:6b:50:28:b8:fe:bb: 2d:db:3f:75:ff:dd:19:a6:aa:29:ef:c4:09:9b:9c: 70:c7:99:8f:ea:17:94:22:5b:64:43:19:61:87:a4: d9:7e:ef:05:68:ba:b0:29:95:31:ff:35:f0:dc:ba: 33:0f:13:c0:58:23:17:96:d9:89:4a:25:ff:4c:76: 2f:24:2e:9f:54:04:1b:b1:dd:b6:6d:b5:89:4a:64: 5b:16:37:2e:5c:6e:4e:59:d4:de:58:7e:b2:38:e6: 30:d7:a1:d6:ef:fd:5a:f7:1c:7c:4f:4a:66:fb:27: 7d:33:73:2c:b2:c5:9d:df:f8:48:16:54:f8:09:22: d3:8a:63:09:66:f7:b4:8d:67:70:8c:ab:ad:fd:d6: ac:3a:39:44:a7:cc:56:e6:0f:2a:a2:05:2e:6a:a4: d8:82:16:aa:3b:4f:47:aa:ef:45:1a:30:dc:7f:3e: ca:13:3e:a9:41:9b:06:d4:41:31:8c:87:f9:f5:0b: 7b:75:d9:e2:c5:78:3b:d5:1c:78:c2:de:9b:a2:dd: 9a:1d:b8:29:86:e7:e4:9b:34:60:2c:a3:a7:dc:4b: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B7:41:2A:9E:34:2D:B7:83:89:EF:30:27:81:5B:02:C8:E3:C3:AF X509v3 Authority Key Identifier: keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:da:ab:3f:2d:a3:c6:c7:39:da:09:36:e8:5a:75:74:f5:96: a4:19:8e:11:35:ca:77:47:a6:26:7e:2a:95:2e:08:83:98:0b: af:62:ca:73:cf:9a:bb:f9:8c:59:bb:ca:6e:79:0e:c1:61:45: 8a:ea:0c:12:e7:e5:8e:40:b8:b0:30:97:61:ff:df:f1:cb:81: d1:be:72:f5:b0:60:54:36:7b:ac:32:0f:a5:16:6f:3f:19:3a: 45:b4:dd:df:a3:dd:b8:53:5c:66:06:76:17:10:3c:8d:05:0c: ef:0d:95:eb:68:cc:f7:af:eb:a6:27:53:fb:f5:07:e8:52:10: db:18:c8:84:6f:48:25:3b:40:5b:20:10:ee:08:db:33:47:62: 72:98:45:97:86:ff:f2:d8:c2:7a:97:14:75:b7:4e:31:36:d4: af:da:da:41:35:89:7f:81:f1:a2:b4:07:c3:7e:8e:33:b9:32: 73:87:bf:19:a8:fd:30:d1:b6:9e:59:bd:39:23:4c:60:ef:0f: 7d:be:bd:4b:13:b5:af:32:fd:1a:e2:4e:bb:ec:8c:2b:43:69: da:b6:2a:df:38:a1:56:b9:9e:03:72:2b:6a:cb:ea:4f:dd:8d: b9:dc:f7:34:e1:a3:d7:60:99:34:0f:2e:54:99:08:05:40:2c: 4e:f7:92:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD RDI4QTRBRUYwHhcNMjUxMTAzMDIxODMxWhcNMjUxMTEwMDIxODMxWjAYMRYwFAYD VQQDEw02OTA4MTBmNy0xNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGGUm0gNn9tSUZm6H2ggV+rB7z1erD/TMKf4NXjkQJJJHx4CtttrUCi4/rst 2z91/90Zpqop78QJm5xwx5mP6heUIltkQxlhh6TZfu8FaLqwKZUx/zXw3LozDxPA WCMXltmJSiX/THYvJC6fVAQbsd22bbWJSmRbFjcuXG5OWdTeWH6yOOYw16HW7/1a 9xx8T0pm+yd9M3MsssWd3/hIFlT4CSLTimMJZve0jWdwjKut/dasOjlEp8xW5g8q ogUuaqTYghaqO09Hqu9FGjDcfz7KEz6pQZsG1EExjIf59Qt7ddnixXg71Rx4wt6b ot2aHbgphufkmzRgLKOn3Euz7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm3QSqe NC23g4nvMCeBWwLI48OvMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011 QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG2qs/LaPGxznaCTboWnV09ZakGY4RNcp3R6YmfiqVLgiDmAuvYspz z5q7+YxZu8pueQ7BYUWK6gwS5+WOQLiwMJdh/9/xy4HRvnL1sGBUNnusMg+lFm8/ GTpFtN3fo924U1xmBnYXEDyNBQzvDZXraMz3r+umJ1P79QfoUhDbGMiEb0glO0Bb IBDuCNszR2JymEWXhv/y2MJ6lxR1t04xNtSv2tpBNYl/gfGitAfDfo4zuTJzh78Z qP0w0baeWb05I0xg7w99vr1LE7WvMv0a4k677IwrQ2natirfOKFWuZ4Dcitqy+pP 3Y253Pc04aPXYJk0Dy5UmQgFQCxO95IA -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:29 2025 by rpki-client