$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft File: QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json) Hash identifier: aJW+zggR2+aT/IVoKj9w7+yUKVsfPHo48vB2RlZCMC8= Subject key identifier: CF:11:FE:32:F8:EE:8C:74:9F:0E:9A:6A:29:64:25:97:A4:80:96:3B Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C Certificate issuer: /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Certificate serial: 048F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft Manifest number: 048B Signing time: Thu 23 Oct 2025 01:14:29 +0000 Manifest this update: Thu 23 Oct 2025 01:14:28 +0000 Manifest next update: Thu 30 Oct 2025 01:14:28 +0000 Files and hashes: 1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: WiAAcaU8h8X9kqo0zdJmzasxhGhEezI34qkERBquwV0=) 2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: aXuFAPx3sTT3XGxZkToSNXJ/vwo2rNiJs7Ikunvy7v4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1167 (0x48f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C Validity Not Before: Oct 23 01:14:28 2025 GMT Not After : Oct 30 01:14:28 2025 GMT Subject: CN=68f98174-e8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:66:7b:d0:56:dd:9a:76:cf:bc:6d:55:4c: 9e:8f:9e:46:4b:cc:ae:48:2a:95:bc:eb:af:80:a2: 83:79:d1:c1:d2:46:34:e0:03:0e:72:56:d5:ef:b3: aa:cc:e0:26:9a:37:25:61:b2:87:73:90:0d:46:a7: 5e:3b:e3:af:0e:85:6f:d3:e3:0e:96:8f:a3:f0:90: ba:01:f7:0a:f1:26:f8:74:fe:13:cd:86:68:33:7e: 57:8c:bc:a4:3f:12:82:ae:c0:8f:73:a4:6b:84:8a: 17:49:61:67:7e:da:74:fa:c0:bd:ed:5e:4f:b4:ad: 5a:4c:62:81:d6:56:7e:86:b2:f5:e5:68:1f:a7:2b: 97:bf:be:6c:7e:d7:68:af:e8:24:0b:33:1a:3c:e0: e6:21:be:61:6d:e5:3a:c5:9f:b2:f3:d6:75:21:79: 4a:29:8c:75:2a:de:34:2d:d2:41:5a:5e:28:7e:2d: d7:4a:7b:88:c5:e0:c0:58:7b:f8:c9:f5:82:1d:0f: cb:53:b4:3b:90:58:93:ad:8e:d4:9a:3e:2a:8e:c8: aa:0e:75:24:9c:78:95:13:01:d5:e3:4e:93:74:91: 6a:a5:05:ec:50:27:ef:8f:52:5e:7e:81:95:29:72: 54:c6:b6:74:bc:20:a5:d1:78:e3:02:4d:08:d1:53: cd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:11:FE:32:F8:EE:8C:74:9F:0E:9A:6A:29:64:25:97:A4:80:96:3B X509v3 Authority Key Identifier: keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:56:5c:8b:72:f5:5a:75:32:94:96:6d:50:39:97:7a:5a:6c: da:df:6b:5f:38:44:c6:34:37:69:54:ac:b4:ed:b1:66:ee:21: 18:08:2b:8a:e2:b6:1a:d8:18:f6:8e:fe:b5:94:55:e8:53:a8: c1:d0:15:6b:76:82:f4:9e:76:51:81:17:7a:e9:59:bb:ed:2c: 7d:f2:2c:ea:e8:16:f5:80:a4:f2:04:42:a1:43:00:a1:9a:c3: b9:4f:43:7f:ff:ed:1c:ac:c2:41:24:04:be:f0:64:8a:ce:d8: c4:b6:6b:bd:85:76:8e:5d:ae:c7:ae:1d:f0:46:4c:8d:6d:f6: 3a:a8:c5:14:63:be:53:77:cb:c1:e5:ee:c7:86:7f:e5:74:b4: 7f:42:85:e5:9b:d0:23:42:37:dc:1f:68:f8:df:7c:85:19:fd: f0:96:fb:1c:9b:08:0c:98:7e:b6:59:08:e7:a0:05:1e:0f:ce: ea:47:6b:41:39:35:5a:60:af:3f:2f:dc:79:a9:60:ba:61:9d: 99:66:c5:99:e4:4d:5b:d6:ed:10:dd:d9:a9:d8:7c:15:e7:8b: a2:e7:d7:f9:4b:49:9e:7a:c2:c9:65:33:fb:c0:08:41:2f:d5: c2:75:c7:62:77:ed:53:33:5f:d5:3c:48:75:38:cd:4e:c1:09: ad:4a:a4:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz MDU1MzUwNUMwHhcNMjUxMDIzMDExNDI4WhcNMjUxMDMwMDExNDI4WjAYMRYwFAYD VQQDEw02OGY5ODE3NC1lOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXlme9BW3Zp2z7xtVUyej55GS8yuSCqVvOuvgKKDedHB0kY04AMOclbV77Oq zOAmmjclYbKHc5ANRqdeO+OvDoVv0+MOlo+j8JC6AfcK8Sb4dP4TzYZoM35XjLyk PxKCrsCPc6RrhIoXSWFnftp0+sC97V5PtK1aTGKB1lZ+hrL15WgfpyuXv75sftdo r+gkCzMaPODmIb5hbeU6xZ+y89Z1IXlKKYx1Kt40LdJBWl4ofi3XSnuIxeDAWHv4 yfWCHQ/LU7Q7kFiTrY7Umj4qjsiqDnUknHiVEwHV406TdJFqpQXsUCfvj1JefoGV KXJUxrZ0vCCl0XjjAk0I0VPN0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8R/jL4 7ox0nw6aailkJZekgJY7MB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5 NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy SVJNMGhRcGMxdW93VlRVRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIVlyLcvVadTKUlm1QOZd6Wmza32tfOETGNDdpVKy07bFm7iEYCCuK 4rYa2Bj2jv61lFXoU6jB0BVrdoL0nnZRgRd66Vm77Sx98izq6Bb1gKTyBEKhQwCh msO5T0N//+0crMJBJAS+8GSKztjEtmu9hXaOXa7Hrh3wRkyNbfY6qMUUY75Td8vB 5e7Hhn/ldLR/QoXlm9AjQjfcH2j433yFGf3wlvscmwgMmH62WQjnoAUeD87qR2tB OTVaYK8/L9x5qWC6YZ2ZZsWZ5E1b1u0Q3dmp2HwV54ui59f5S0meesLJZTP7wAhB L9XCdcdid+1TM1/VPEh1OM1OwQmtSqRP -----END CERTIFICATE-----Generated at Fri Oct 24 06:12:12 2025 by rpki-client