$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: aOSTbObFIWVcVfB1FhQ22nGRwDE3VvgEshRwUn55kSc= Subject key identifier: A5:04:24:D4:0B:20:AB:F1:84:CF:0A:87:07:97:71:73:D2:9E:04:D6 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 019D Signing time: Wed 05 Nov 2025 03:34:33 +0000 Manifest this update: Wed 05 Nov 2025 03:34:32 +0000 Manifest next update: Wed 12 Nov 2025 03:34:32 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: g4a+VNfg8L/07aTYo6ukCPVd0D6ew93Nm4IOhGx1IxA=) 2: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: u8AwSmxDFWZDKiV8J1m6ovC7b3ZHtGWT1cfjDOWs8Nc=) 3: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: MhowPeZSiNZp59R7cxUY280rgW3KhDyuYTuF7r4VgLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Nov 5 03:34:32 2025 GMT Not After : Nov 12 03:34:32 2025 GMT Subject: CN=690ac5c8-58fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:ca:82:a6:c6:87:2f:fe:f9:81:b2:d2:92: 92:e4:36:ce:ff:9f:38:90:5a:a2:a8:c5:d2:df:ad: 69:a9:13:7c:6b:f7:33:8c:b1:6a:a8:90:f6:86:c0: 43:74:39:c5:69:e2:77:da:dc:40:1e:39:6e:19:2c: 56:78:52:55:42:b2:3e:ef:6c:b2:92:fa:36:6d:00: 20:45:f4:4e:70:a1:ff:9e:c4:37:8d:c1:ef:4f:57: 64:32:50:6a:cd:0a:53:8a:07:dc:53:4f:cb:2d:c6: 2f:54:58:d8:c2:ec:fb:51:59:a8:d8:43:ce:4c:62: 6d:9e:54:e0:e6:ef:e5:65:2f:5b:83:4b:14:91:fa: b7:5b:a5:56:72:8a:62:00:ca:3d:c5:df:c9:6b:2d: d5:9d:71:71:eb:c4:bb:54:12:31:9e:5a:a7:d0:e7: e3:89:25:1c:69:d3:8f:ea:31:d3:a3:ff:a6:e9:3d: 30:ea:2f:33:41:6a:f5:b5:b2:aa:b1:70:11:aa:d9: 36:03:c5:f7:53:12:67:f8:f7:81:ea:08:ec:ec:ec: 49:a1:bb:12:33:dd:b7:d1:fd:39:77:a6:bb:80:97: cd:2e:bd:8d:ff:9d:7c:72:4f:c6:02:77:ba:fd:3c: 45:e2:ea:f1:2e:e1:c7:90:bc:d6:11:07:72:7b:07: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:24:D4:0B:20:AB:F1:84:CF:0A:87:07:97:71:73:D2:9E:04:D6 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:93:29:89:42:ce:cf:33:a4:8b:5c:8a:54:ba:23:98:5a:e0: 3b:58:d5:0b:a6:71:59:c9:3c:76:5c:47:a3:58:0e:30:95:90: 29:26:f6:b1:9f:ed:48:30:2e:43:f1:ca:94:67:22:32:1b:62: 67:87:3c:7b:e4:67:dc:96:a8:6d:0a:c8:12:65:b8:95:49:9d: ff:68:0d:fe:24:c1:a4:d3:7d:e8:be:2c:9f:9e:6b:1a:e4:38: 34:01:cb:68:2f:0d:d7:2d:11:67:ca:c2:53:96:b6:fd:3f:fc: 8e:39:98:47:20:31:73:0e:c1:0e:6e:e5:d4:62:11:e6:5c:66: 4d:34:40:74:f3:42:c0:46:83:7e:9c:9f:48:d1:79:6c:f1:da: c7:dc:84:78:86:1d:f1:09:0a:51:11:32:dc:18:ac:76:47:e5: bb:ca:c6:56:bf:f8:47:ef:83:78:e9:23:58:d9:c6:da:df:b4: 13:d8:27:cd:a7:eb:e3:c8:35:46:7a:83:a2:b6:a8:33:2c:cc: eb:0e:00:dd:33:e8:4b:00:ca:e6:cd:5a:3a:30:64:21:ba:66: 0b:f2:9e:45:5b:fc:84:a2:35:97:b1:43:2f:17:66:4c:35:8d: 0a:2b:08:d1:81:b8:06:f3:65:aa:26:17:c2:7a:d6:9a:33:84: a6:bc:bb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjUxMTA1MDMzNDMyWhcNMjUxMTEyMDMzNDMyWjAYMRYwFAYD VQQDEw02OTBhYzVjOC01OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2vKgqbGhy/++YGy0pKS5DbO/584kFqiqMXS361pqRN8a/czjLFqqJD2hsBD dDnFaeJ32txAHjluGSxWeFJVQrI+72yykvo2bQAgRfROcKH/nsQ3jcHvT1dkMlBq zQpTigfcU0/LLcYvVFjYwuz7UVmo2EPOTGJtnlTg5u/lZS9bg0sUkfq3W6VWcopi AMo9xd/Jay3VnXFx68S7VBIxnlqn0OfjiSUcadOP6jHTo/+m6T0w6i8zQWr1tbKq sXARqtk2A8X3UxJn+PeB6gjs7OxJobsSM9230f05d6a7gJfNLr2N/518ck/GAne6 /TxF4urxLuHHkLzWEQdyewcMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUEJNQL IKvxhM8KhweXcXPSngTWMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0kymJQs7PM6SLXIpUuiOYWuA7WNULpnFZyTx2XEejWA4wlZApJvax n+1IMC5D8cqUZyIyG2Jnhzx75GfclqhtCsgSZbiVSZ3/aA3+JMGk033oviyfnmsa 5Dg0ActoLw3XLRFnysJTlrb9P/yOOZhHIDFzDsEObuXUYhHmXGZNNEB080LARoN+ nJ9I0Xls8drH3IR4hh3xCQpRETLcGKx2R+W7ysZWv/hH74N46SNY2cba37QT2CfN p+vjyDVGeoOitqgzLMzrDgDdM+hLAMrmzVo6MGQhumYL8p5FW/yEojWXsUMvF2ZM NY0KKwjRgbgG82WqJhfCetaaM4SmvLuW -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:35 2025 by rpki-client