$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft File: QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json) Hash identifier: ZS9Hda8hf6cSVbDI662UveTrykn9DFqtDpkoij3/TyM= Subject key identifier: 46:97:1A:4C:9D:96:A4:46:46:49:6D:1A:4C:05:71:BD:03:F1:B4:97 Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 Certificate issuer: /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft Manifest number: 0AA0 Signing time: Sun 02 Nov 2025 19:30:03 +0000 Manifest this update: Sun 02 Nov 2025 19:30:02 +0000 Manifest next update: Sun 09 Nov 2025 19:30:02 +0000 Files and hashes: 1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: d76uGhmP2ccHmJRIm6cnElVmF6PJs8natak/oUXdF9c=) 2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73 Validity Not Before: Nov 2 19:30:02 2025 GMT Not After : Nov 9 19:30:02 2025 GMT Subject: CN=6907b13b-2661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:17:9e:d0:01:83:e7:8a:ac:4e:a3:59:6b: 46:ee:88:45:ca:b6:ac:6d:b2:fa:a4:2a:de:39:71: 7b:82:55:5b:48:a1:ac:57:86:d4:6f:d7:ef:7d:dd: cb:86:ae:07:50:26:73:72:94:d8:82:75:14:26:c3: 45:fe:41:44:1a:ca:7f:44:fc:fe:db:27:ee:9d:ef: ab:8e:ef:0e:d6:66:11:75:71:4d:c6:14:14:f6:8a: 40:d9:e2:a5:a8:3d:19:15:46:2d:ba:f1:db:0e:72: 5c:b0:2b:34:e5:c8:17:8e:7b:80:16:10:0c:f1:7b: ea:28:32:64:66:b6:54:a2:73:c3:9c:52:c3:c3:6a: cb:dc:12:21:f1:8c:a0:1c:45:06:94:19:c1:3d:31: 32:62:5d:85:e9:64:35:be:44:ea:8f:61:22:0a:27: 4d:4a:86:0a:e7:79:5d:5f:2a:c6:5c:21:8f:5c:13: a7:7e:f9:2f:45:1e:86:a1:ec:3c:9a:07:c7:28:39: ac:f1:18:9f:98:38:5a:fa:06:e3:2b:2d:fb:71:43: d1:12:04:26:ae:c5:a2:dc:46:6c:54:4b:28:b6:da: 89:17:1e:41:ba:52:35:6a:56:1d:f4:51:e1:d0:93: d4:2f:37:3e:d0:82:6e:e9:65:66:ec:ec:3d:d7:2f: 0c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:97:1A:4C:9D:96:A4:46:46:49:6D:1A:4C:05:71:BD:03:F1:B4:97 X509v3 Authority Key Identifier: keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:6e:b2:90:95:ee:ea:64:8e:bc:0a:fe:73:5c:94:98:26:20: 77:66:5c:c1:04:0b:8e:5b:e9:ac:00:c2:06:67:70:22:21:3c: 75:0c:a2:48:f8:6a:f4:ca:66:f3:34:61:96:19:55:b2:e9:e9: c8:96:bf:a9:00:5a:df:44:11:d6:98:6c:c9:43:7a:8f:c4:01: 83:06:6a:46:1c:25:51:27:3d:aa:a9:c3:87:7c:53:b0:c9:53: d9:ba:e2:52:52:80:3d:64:a1:f4:d1:b8:e4:b7:ee:18:5f:25: 9e:9e:02:3e:a2:29:6a:e0:6a:9a:c1:1e:18:99:6a:2c:15:de: 93:03:fa:09:03:48:83:02:19:59:d4:e0:60:f3:8b:fd:aa:41: 4f:a4:ae:03:a9:f4:a9:f7:a1:88:f6:1f:c1:64:1a:30:ad:0c: 0a:f3:1d:e2:90:3e:9d:de:2f:11:b0:a3:c5:f2:8c:af:b2:4a: 3d:25:9c:de:e4:fd:b2:0f:03:e7:9f:62:10:9b:6b:7e:48:b6: 84:74:4e:b4:ca:84:33:31:16:36:57:c1:d6:9a:7a:6d:e0:54: c5:22:dd:cf:43:97:98:ec:8c:8a:9f:3f:cd:d5:3b:16:28:3b: c5:05:63:92:20:23:69:a7:ce:52:25:92:e5:09:af:15:d4:8d: 13:99:61:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG ODM4MkRBNzMwHhcNMjUxMTAyMTkzMDAyWhcNMjUxMTA5MTkzMDAyWjAYMRYwFAYD VQQDEw02OTA3YjEzYi0yNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrwXntABg+eKrE6jWWtG7ohFyrasbbL6pCreOXF7glVbSKGsV4bUb9fvfd3L hq4HUCZzcpTYgnUUJsNF/kFEGsp/RPz+2yfune+rju8O1mYRdXFNxhQU9opA2eKl qD0ZFUYtuvHbDnJcsCs05cgXjnuAFhAM8XvqKDJkZrZUonPDnFLDw2rL3BIh8Yyg HEUGlBnBPTEyYl2F6WQ1vkTqj2EiCidNSoYK53ldXyrGXCGPXBOnfvkvRR6Goew8 mgfHKDms8RifmDha+gbjKy37cUPREgQmrsWi3EZsVEsottqJFx5BulI1alYd9FHh 0JPULzc+0IJu6WVm7Ow91y8MPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaXGkyd lqRGRkltGkwFcb0D8bSXMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2 QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3brKQle7qZI68Cv5zXJSYJiB3ZlzBBAuOW+msAMIGZ3AiITx1DKJI +Gr0ymbzNGGWGVWy6enIlr+pAFrfRBHWmGzJQ3qPxAGDBmpGHCVRJz2qqcOHfFOw yVPZuuJSUoA9ZKH00bjkt+4YXyWengI+oilq4GqawR4YmWosFd6TA/oJA0iDAhlZ 1OBg84v9qkFPpK4DqfSp96GI9h/BZBowrQwK8x3ikD6d3i8RsKPF8oyvsko9JZze 5P2yDwPnn2IQm2t+SLaEdE60yoQzMRY2V8HWmnpt4FTFIt3PQ5eY7IyKnz/N1TsW KDvFBWOSICNpp85SJZLlCa8V1I0TmWGc -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:16 2025 by rpki-client