$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json) Hash identifier: bbYKvXneLDdWFtPrqUwKZKFWsmyl18bj8GyftqvQfts= Subject key identifier: 30:1A:55:E3:E1:63:FF:CC:E5:C6:49:A4:93:F7:CF:D9:BF:9F:A3:BC Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft Manifest number: D8 Signing time: Wed 05 Nov 2025 05:49:00 +0000 Manifest this update: Wed 05 Nov 2025 05:48:59 +0000 Manifest next update: Wed 12 Nov 2025 05:48:59 +0000 Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: hWHfJ0E/Lvq95W6FgDENIHrHOAQfoe4ZW39ck4F3Dfo=) 2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896 Validity Not Before: Nov 5 05:48:59 2025 GMT Not After : Nov 12 05:48:59 2025 GMT Subject: CN=690ae54b-2aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:b9:c5:e6:ad:6a:41:a3:6e:5c:5b:a8:73: 6d:cf:ab:aa:84:e1:bf:7a:fd:b9:92:40:02:68:40: ef:12:cf:f9:7c:2f:00:da:90:c0:ce:32:d8:33:26: 1d:00:4e:56:a7:3a:08:82:74:bb:e1:b1:80:8e:36: 09:92:14:71:ab:d2:67:d3:0a:f7:41:9f:da:6f:1d: 4c:03:3b:63:e7:04:15:f3:04:c9:e5:aa:82:27:2a: b7:13:16:4b:44:a3:30:d0:44:f8:26:75:7c:01:e3: 12:48:0b:80:18:5f:b0:6b:82:cd:68:d7:cc:6f:c9: a0:03:7c:69:af:e0:d5:3c:67:48:2f:23:15:47:a3: d1:3a:75:21:cc:25:fa:e4:f3:d0:bf:74:31:51:5e: 71:e0:71:68:e2:4e:45:b6:f0:8b:16:98:00:45:0e: cd:2b:c5:76:6f:44:74:c8:38:cd:ce:73:25:e1:d3: de:82:55:23:19:8c:20:22:34:1d:0f:52:d7:08:a7: 8e:e3:e4:a0:7b:69:38:9b:b6:04:a7:c9:c3:69:bf: c0:b1:53:08:3c:04:a1:06:2c:bb:b1:d5:85:78:c8: c6:6f:7f:c1:ec:ac:5a:0d:2e:16:0d:e2:9a:f6:31: 5d:22:b6:d1:3a:39:c8:03:ba:55:af:a4:3b:b2:73: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1A:55:E3:E1:63:FF:CC:E5:C6:49:A4:93:F7:CF:D9:BF:9F:A3:BC X509v3 Authority Key Identifier: keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fc:15:ff:bc:f0:b6:40:88:a6:8d:f1:18:8d:1c:31:9a:7a: cb:c9:5e:87:57:35:b0:3b:b5:78:36:1f:75:2f:e3:32:43:9c: 71:8b:e5:dc:90:0e:00:78:9f:22:c0:fd:2c:8d:8e:ff:c6:60: 28:a8:6d:5b:e1:b9:0f:2a:83:72:04:27:a9:0f:94:70:be:79: 21:4b:1b:62:d5:ae:54:37:97:6f:1f:07:f4:6c:6c:5c:a1:39: 06:3b:56:aa:a4:d7:52:61:d6:5a:9a:8d:40:bf:20:a9:49:84: 6b:31:64:10:07:14:77:e8:7e:33:18:c8:30:94:16:4f:68:63: 59:31:50:91:7d:29:a3:98:2a:e2:50:ad:71:88:2b:04:23:25: 73:52:4d:11:76:f6:22:8b:4c:2c:e3:23:f8:64:9c:97:fe:ff: 74:2d:b5:4b:db:04:61:6d:e5:bb:bd:8e:dc:da:f7:e9:68:bc: 95:da:2a:f6:9d:60:3d:a0:87:29:5f:da:49:1b:61:52:63:55: 29:1b:ff:17:8b:57:bb:ba:f8:38:a5:a6:67:b3:18:ea:c2:c6: 79:4e:bf:16:25:a7:fd:8f:bc:5f:b8:0a:45:67:ed:f5:e4:a0: 6f:24:c3:32:1d:d8:2c:9f:22:d1:95:e7:02:d5:f0:71:57:b0: 05:3e:5f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2 MUUwRUE4OTYwHhcNMjUxMTA1MDU0ODU5WhcNMjUxMTEyMDU0ODU5WjAYMRYwFAYD VQQDEw02OTBhZTU0Yi0yYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35a5xeatakGjblxbqHNtz6uqhOG/ev25kkACaEDvEs/5fC8A2pDAzjLYMyYd AE5WpzoIgnS74bGAjjYJkhRxq9Jn0wr3QZ/abx1MAztj5wQV8wTJ5aqCJyq3ExZL RKMw0ET4JnV8AeMSSAuAGF+wa4LNaNfMb8mgA3xpr+DVPGdILyMVR6PROnUhzCX6 5PPQv3QxUV5x4HFo4k5FtvCLFpgARQ7NK8V2b0R0yDjNznMl4dPeglUjGYwgIjQd D1LXCKeO4+Sge2k4m7YEp8nDab/AsVMIPAShBiy7sdWFeMjGb3/B7KxaDS4WDeKa 9jFdIrbROjnIA7pVr6Q7snP4/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAaVePh Y//M5cZJpJP3z9m/n6O8MB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2 NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN/BX/vPC2QIimjfEYjRwxmnrLyV6HVzWwO7V4Nh91L+MyQ5xxi+Xc kA4AeJ8iwP0sjY7/xmAoqG1b4bkPKoNyBCepD5RwvnkhSxti1a5UN5dvHwf0bGxc oTkGO1aqpNdSYdZamo1AvyCpSYRrMWQQBxR36H4zGMgwlBZPaGNZMVCRfSmjmCri UK1xiCsEIyVzUk0RdvYii0ws4yP4ZJyX/v90LbVL2wRhbeW7vY7c2vfpaLyV2ir2 nWA9oIcpX9pJG2FSY1UpG/8Xi1e7uvg4paZnsxjqwsZ5Tr8WJaf9j7xfuApFZ+31 5KBvJMMyHdgsnyLRlecC1fBxV7AFPl82 -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:27 2025 by rpki-client