$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json) Hash identifier: eCB7y5Hl8F1dlobVDXDtlJ4Gqw2UlaiwQ9J77Cab0uk= Subject key identifier: 21:02:52:04:78:EA:1B:84:C4:3D:73:E2:A3:2E:BC:3D:CC:45:39:6A Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Certificate serial: 2E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft Manifest number: 2E47 Signing time: Tue 04 Nov 2025 15:30:33 +0000 Manifest this update: Tue 04 Nov 2025 15:30:33 +0000 Manifest next update: Tue 11 Nov 2025 15:30:33 +0000 Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: AF6rpG1vj/D07RL3oPjplUGskCVxpwSSOa8LGubsPFw=) 2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: SF0KSzVCHmFw/vbmezHEwC+CagFNOXzqq/EI5Ov054o=) 3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: ziUiMds6NJgi8TDHiQaMAYIvEJIsNCMspTIFgHdhreo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11860 (0x2e54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE Validity Not Before: Nov 4 15:30:33 2025 GMT Not After : Nov 11 15:30:33 2025 GMT Subject: CN=690a1c19-d470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:18:86:8c:56:c1:95:6b:4e:90:7a:73:9f: cf:f8:5d:16:ba:ae:d6:f9:4a:28:1e:dc:9b:0d:24: 7b:28:c1:8a:d1:26:26:38:74:6a:ca:1e:aa:87:a1: 79:02:fb:98:b4:8c:2b:fc:77:19:ff:07:0e:f5:2b: 91:77:58:ea:85:27:ef:1a:60:8c:60:14:8e:fc:b4: cb:4c:c5:6e:d6:7b:60:d0:fd:4a:93:3c:ec:b2:d5: 50:2d:47:45:43:15:62:88:f7:24:43:08:9e:86:93: 56:1a:75:34:9d:6e:cc:48:37:35:53:37:ee:8e:c4: 9c:d9:fa:9d:a0:88:56:23:f7:fd:27:0b:7f:06:36: 10:64:9c:92:60:14:44:9b:a4:9e:ad:9a:fd:b0:89: 88:15:93:56:ef:40:5f:0e:a9:72:1f:0b:45:27:ed: 5d:90:c4:17:67:d6:f2:65:87:eb:cc:c2:ae:e0:e7: 79:91:81:3e:7e:7f:70:10:ca:9e:d7:3b:70:97:f0: d4:73:78:c4:30:98:1b:bb:d5:2c:58:b0:d2:17:2d: bd:e6:ee:c7:35:a6:40:12:2b:1b:63:b4:4b:0c:1c: 5b:15:b5:d2:f2:8e:0c:f3:ef:c5:e3:ba:c7:a5:59: 8d:53:ff:eb:44:30:87:e7:7c:31:e7:96:bb:7c:f3: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:02:52:04:78:EA:1B:84:C4:3D:73:E2:A3:2E:BC:3D:CC:45:39:6A X509v3 Authority Key Identifier: keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:5b:a3:b0:6c:b1:9f:18:b3:20:fd:02:ec:b4:5e:c7:3d:ea: d5:58:ab:5b:f1:de:f2:99:1d:c4:84:9a:d7:92:8d:30:e9:e8: 12:a9:cf:65:9f:cd:0a:55:d5:bc:6e:9d:97:67:56:8c:8e:5e: ce:d6:7d:c4:38:8e:9f:64:19:28:9d:c5:4c:f7:bc:1f:cf:ae: 56:5a:de:c3:df:d9:d0:d3:98:5a:19:b9:fb:8e:b2:11:ed:7c: 4e:aa:c9:ff:23:7d:e8:67:88:16:05:a5:05:6a:46:3b:3a:a8: cb:61:21:ad:9a:8b:b2:e3:76:84:cc:41:88:28:03:b3:1e:45: e3:a2:8e:35:70:df:cf:df:0e:1f:1e:45:8a:f3:37:a8:a0:64: 6e:f0:06:84:6a:21:37:ad:ab:28:2b:fd:af:38:ae:d0:70:96: 3b:97:93:2a:ed:50:5d:ea:cf:81:e8:1a:71:fa:9f:e6:aa:d5: 9a:ed:dd:5d:ba:8f:c1:2d:ef:0a:f9:18:7f:27:55:ac:92:5e: d3:26:04:78:c7:e5:eb:36:86:7d:8c:78:bb:cb:61:94:c0:2a: 2b:79:b9:06:db:0c:b7:46:bf:54:f6:ec:df:93:71:b4:a5:23: 6d:fc:3e:b0:83:8b:1b:ba:55:86:13:78:13:e2:7f:0b:f8:af: ee:5e:ac:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx MUExREUyQUUwHhcNMjUxMTA0MTUzMDMzWhcNMjUxMTExMTUzMDMzWjAYMRYwFAYD VQQDEw02OTBhMWMxOS1kNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxIYhoxWwZVrTpB6c5/P+F0Wuq7W+UooHtybDSR7KMGK0SYmOHRqyh6qh6F5 AvuYtIwr/HcZ/wcO9SuRd1jqhSfvGmCMYBSO/LTLTMVu1ntg0P1KkzzsstVQLUdF QxViiPckQwiehpNWGnU0nW7MSDc1UzfujsSc2fqdoIhWI/f9Jwt/BjYQZJySYBRE m6SerZr9sImIFZNW70BfDqlyHwtFJ+1dkMQXZ9byZYfrzMKu4Od5kYE+fn9wEMqe 1ztwl/DUc3jEMJgbu9UsWLDSFy295u7HNaZAEisbY7RLDBxbFbXS8o4M8+/F47rH pVmNU//rRDCH53wx55a7fPO2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCECUgR4 6huExD1z4qMuvD3MRTlqMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5 MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQW6OwbLGfGLMg/QLstF7HPerVWKtb8d7ymR3EhJrXko0w6egSqc9l n80KVdW8bp2XZ1aMjl7O1n3EOI6fZBkoncVM97wfz65WWt7D39nQ05haGbn7jrIR 7XxOqsn/I33oZ4gWBaUFakY7OqjLYSGtmouy43aEzEGIKAOzHkXjoo41cN/P3w4f HkWK8zeooGRu8AaEaiE3rasoK/2vOK7QcJY7l5Mq7VBd6s+B6Bpx+p/mqtWa7d1d uo/BLe8K+Rh/J1Wskl7TJgR4x+XrNoZ9jHi7y2GUwCorebkG2wy3Rr9U9uzfk3G0 pSNt/D6wg4sbulWGE3gT4n8L+K/uXqzz -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:15 2025 by rpki-client