$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json) Hash identifier: x+eTFa4lbe+sDYygAT5ynXXUn6c6VcSpYPIeokCtv7k= Subject key identifier: 7D:75:EC:C3:BE:28:E4:21:A0:0E:7E:08:A3:08:12:33:FE:E4:64:73 Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft Manifest number: 0B1F Signing time: Sun 02 Nov 2025 19:15:55 +0000 Manifest this update: Sun 02 Nov 2025 19:15:55 +0000 Manifest next update: Sun 09 Nov 2025 19:15:55 +0000 Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: ohxPWMczt4uvaPiyalMGTI93s70hxEJDK1wNTFLjUJk=) 2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5 Validity Not Before: Nov 2 19:15:55 2025 GMT Not After : Nov 9 19:15:55 2025 GMT Subject: CN=6907adeb-2c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:2d:66:65:b2:e9:71:a3:7a:24:23:9f:57: e7:d8:ff:74:ff:78:b7:3d:f2:56:4f:ae:4c:4b:ed: d4:3d:6d:75:f1:cf:7f:42:33:b0:67:cc:99:a1:d4: 9b:b5:44:ab:b4:9f:3b:f6:a4:6f:ee:04:df:bd:77: 8a:6f:4b:04:1b:2d:5b:fa:95:6f:d8:99:50:8f:78: 97:86:a1:ba:83:79:24:e3:68:71:80:f3:69:a0:92: 14:5b:53:01:97:bf:96:f7:0f:be:24:40:41:60:a6: 0d:5a:29:e1:37:b0:a2:21:41:bf:13:48:6c:4f:08: 5a:b9:5e:6a:d9:2a:35:0a:00:03:60:06:1d:a9:ed: 47:c9:b9:16:c3:90:40:18:10:db:1e:69:14:ae:c1: 4d:3f:6e:cf:97:73:d7:e6:40:70:db:79:f8:55:56: ec:2c:f3:a0:27:a9:83:cb:92:36:6e:bc:d7:d9:8e: de:99:18:53:84:5c:68:32:18:ba:ba:d3:41:4c:fb: b0:6f:91:77:71:9e:88:93:b7:2d:aa:78:26:03:e3: e1:79:2b:c3:4d:65:8e:d3:f9:d3:d6:8b:5b:c1:8a: b8:ce:20:ac:1c:92:73:c0:04:39:16:1c:3e:b6:33: 03:42:e0:47:bb:1a:41:6f:7d:5c:87:9a:08:43:73: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:75:EC:C3:BE:28:E4:21:A0:0E:7E:08:A3:08:12:33:FE:E4:64:73 X509v3 Authority Key Identifier: keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:17:1a:58:3a:02:1c:ad:8d:8e:4a:05:a7:4c:3b:1c:d6:75: 61:68:f6:be:18:7a:36:22:31:6a:c4:1d:c0:db:83:87:ae:b6: 43:ff:2d:cf:83:f6:79:cb:46:77:f8:02:50:eb:d8:01:06:90: c3:cd:f9:fa:70:88:88:17:47:2a:5d:0f:5d:af:ac:90:39:bb: 75:bb:91:4e:3d:73:dc:60:bf:4a:ba:f6:94:50:ca:b9:2f:eb: 7f:a5:39:ba:b4:56:d2:10:47:ed:a2:29:3b:c8:81:6f:a8:e6: 69:1d:b2:bd:a6:81:09:3c:8a:32:44:c9:13:28:d5:d6:76:c8: 75:e5:52:4e:a4:27:cd:5d:35:0d:2a:05:38:1e:cd:ed:ec:1f: 2c:39:e1:11:ae:fd:5c:51:51:3c:15:72:44:6e:4a:ca:ea:b1: 5e:dd:c1:32:31:86:e6:54:f8:71:32:4a:11:3c:1a:83:8f:62: 71:4e:58:51:f0:c5:4b:46:c1:2b:cf:3c:fe:11:3c:24:5a:5d: 05:d6:2e:a2:ef:6c:d6:55:8d:7a:93:6d:82:68:85:37:7f:fa: e6:77:70:80:00:06:66:22:d5:1e:0b:65:4b:c0:51:8c:11:bb: ac:e3:3f:56:b6:c8:3c:9a:7e:83:82:11:a9:b4:4c:2c:7e:71: b1:7a:54:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4 MTU3OEVDQjUwHhcNMjUxMTAyMTkxNTU1WhcNMjUxMTA5MTkxNTU1WjAYMRYwFAYD VQQDEw02OTA3YWRlYi0yYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10YtZmWy6XGjeiQjn1fn2P90/3i3PfJWT65MS+3UPW118c9/QjOwZ8yZodSb tUSrtJ879qRv7gTfvXeKb0sEGy1b+pVv2JlQj3iXhqG6g3kk42hxgPNpoJIUW1MB l7+W9w++JEBBYKYNWinhN7CiIUG/E0hsTwhauV5q2So1CgADYAYdqe1HybkWw5BA GBDbHmkUrsFNP27Pl3PX5kBw23n4VVbsLPOgJ6mDy5I2brzX2Y7emRhThFxoMhi6 utNBTPuwb5F3cZ6Ik7ctqngmA+PheSvDTWWO0/nT1otbwYq4ziCsHJJzwAQ5Fhw+ tjMDQuBHuxpBb31ch5oIQ3P8awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH117MO+ KOQhoA5+CKMIEjP+5GRzMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnFxpYOgIcrY2OSgWnTDsc1nVhaPa+GHo2IjFqxB3A24OHrrZD/y3P g/Z5y0Z3+AJQ69gBBpDDzfn6cIiIF0cqXQ9dr6yQObt1u5FOPXPcYL9KuvaUUMq5 L+t/pTm6tFbSEEftoik7yIFvqOZpHbK9poEJPIoyRMkTKNXWdsh15VJOpCfNXTUN KgU4Hs3t7B8sOeERrv1cUVE8FXJEbkrK6rFe3cEyMYbmVPhxMkoRPBqDj2JxTlhR 8MVLRsErzzz+ETwkWl0F1i6i72zWVY16k22CaIU3f/rmd3CAAAZmItUeC2VLwFGM Ebus4z9Wtsg8mn6DghGptEwsfnGxelQQ -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:12 2025 by rpki-client