$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: CEczFVroulmKBoq+dLKZWqo9HGwFIuYlZxee3RtE+j8= Subject key identifier: D6:B2:A7:DB:AE:D5:28:4D:3E:CA:5F:7E:AE:0F:CB:A0:50:BF:58:77 Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 0468 Signing time: Thu 23 Oct 2025 01:23:29 +0000 Manifest this update: Thu 23 Oct 2025 01:23:29 +0000 Manifest next update: Thu 30 Oct 2025 01:23:29 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: A1hp+Pa1BRwxtD4ZTuQYryNlqYvW3BZKhr88Tg7JklY=) 2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: 5latq2+YRolk+7/RCZ77DIkjarUkzR1toXI6OoV7ng8=) 3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 06e2Kd9kP50w5XlMiJZ3tSgrZONMMPBPJ5HjMD4Ujzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Oct 23 01:23:29 2025 GMT Not After : Oct 30 01:23:29 2025 GMT Subject: CN=68f98391-c569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:5b:2c:64:9d:1e:ac:cd:22:e6:a9:78:87: ea:0b:06:9f:45:85:b4:44:63:f5:fd:b4:d0:07:63: fa:c9:9f:4b:f7:06:c5:0b:85:f6:61:35:c1:05:7d: 90:cc:e5:b1:2d:70:e0:09:65:b1:23:f9:f1:1f:12: 8e:67:c7:a3:f8:59:c6:b0:5e:b0:66:5c:74:51:92: 59:1a:e0:bf:2b:4d:fc:aa:3a:78:d7:93:b9:77:75: 29:10:9d:53:85:1d:17:56:bb:b5:8b:0f:18:07:6a: c5:f3:63:40:b8:d8:52:a0:bf:55:1b:5f:eb:b9:d7: 27:1b:24:8c:b2:24:42:ff:17:a9:a1:01:f9:c9:42: e9:a5:3a:42:16:a8:1f:c0:e4:34:e6:f2:ce:10:1c: 97:a4:79:28:e0:8a:d3:db:b9:d4:a9:74:b6:c9:c2: 58:b0:9e:1f:b8:36:60:e2:28:c7:8e:7a:30:c8:df: 87:6b:f0:a4:0b:ad:97:01:a6:d0:4e:64:51:4e:26: 13:dc:fb:a2:0d:e1:6c:41:09:de:e9:e4:f7:7f:69: 0e:e4:35:ed:7f:04:7c:04:54:f7:95:6f:9b:7d:59: 7a:6c:bf:26:08:44:c8:3e:b0:68:30:69:1c:f8:a3: 41:b3:8b:17:ef:66:fa:c7:90:66:c3:f8:d8:2a:d8: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:A7:DB:AE:D5:28:4D:3E:CA:5F:7E:AE:0F:CB:A0:50:BF:58:77 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:8a:3d:9e:54:8e:de:d2:3d:5c:3c:4c:1e:62:0c:68:a4:08: 56:ab:f2:05:76:34:ec:81:61:ff:f2:02:39:08:bc:d9:37:e0: bc:72:b6:2b:98:30:57:22:0f:92:b4:36:fc:09:a5:3b:09:9c: 35:5c:2f:35:fb:fd:31:1f:5b:a1:5f:68:ea:d5:46:9a:e1:6e: 65:49:04:ae:0c:7a:e5:79:ab:a4:0d:56:13:2c:68:5f:b3:ab: 74:3e:bf:4f:00:8c:6d:8b:67:e4:5b:90:8c:a5:7b:6a:54:b4: 7b:7c:ce:0f:e5:9e:3a:a8:5c:3b:89:53:ee:31:a3:9f:0b:5c: 6a:26:06:d3:6d:26:e0:f4:c9:32:c2:0a:ef:39:73:74:b1:b9: a4:f0:3c:14:80:25:a9:fa:4c:89:e0:3c:36:6b:74:81:cb:82: e2:ea:0a:19:7a:4d:36:5e:eb:3e:fe:cd:3e:e3:9a:2a:55:a7: b2:fa:f2:50:70:ae:83:64:7d:fb:1f:16:29:56:f3:99:f9:9b: a4:0d:5c:42:09:b7:f7:f3:b7:a6:67:81:82:c5:ec:99:a4:49: fb:31:58:80:ef:6f:f8:dc:62:bc:a9:2d:b9:42:e3:b8:48:28: 53:60:99:32:06:59:ee:f2:8e:15:06:3f:2b:72:04:2e:3c:37: 4a:15:01:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjUxMDIzMDEyMzI5WhcNMjUxMDMwMDEyMzI5WjAYMRYwFAYD VQQDEw02OGY5ODM5MS1jNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs1bLGSdHqzNIuapeIfqCwafRYW0RGP1/bTQB2P6yZ9L9wbFC4X2YTXBBX2Q zOWxLXDgCWWxI/nxHxKOZ8ej+FnGsF6wZlx0UZJZGuC/K038qjp415O5d3UpEJ1T hR0XVru1iw8YB2rF82NAuNhSoL9VG1/rudcnGySMsiRC/xepoQH5yULppTpCFqgf wOQ05vLOEByXpHko4IrT27nUqXS2ycJYsJ4fuDZg4ijHjnowyN+Ha/CkC62XAabQ TmRRTiYT3PuiDeFsQQne6eT3f2kO5DXtfwR8BFT3lW+bfVl6bL8mCETIPrBoMGkc +KNBs4sX72b6x5Bmw/jYKtgywQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNayp9uu 1ShNPspffq4Py6BQv1h3MB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzij2eVI7e0j1cPEweYgxopAhWq/IFdjTsgWH/8gI5CLzZN+C8crYr mDBXIg+StDb8CaU7CZw1XC81+/0xH1uhX2jq1Uaa4W5lSQSuDHrleaukDVYTLGhf s6t0Pr9PAIxti2fkW5CMpXtqVLR7fM4P5Z46qFw7iVPuMaOfC1xqJgbTbSbg9Mky wgrvOXN0sbmk8DwUgCWp+kyJ4Dw2a3SBy4Li6goZek02Xus+/s0+45oqVaey+vJQ cK6DZH37HxYpVvOZ+ZukDVxCCbf387emZ4GCxeyZpEn7MViA72/43GK8qS25QuO4 SChTYJkyBlnu8o4VBj8rcgQuPDdKFQE2 -----END CERTIFICATE-----Generated at Fri Oct 24 00:01:16 2025 by rpki-client