$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json) Hash identifier: +wiNLWfcQL37zb9V9wRguTFglITyhPvrO1xTf5XCNVs= Subject key identifier: BD:E2:A9:A0:DB:27:71:B4:75:A1:31:86:95:54:89:5E:0F:16:3D:2F Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft Manifest number: 5C Signing time: Wed 05 Nov 2025 07:18:39 +0000 Manifest this update: Wed 05 Nov 2025 07:18:39 +0000 Manifest next update: Wed 12 Nov 2025 07:18:39 +0000 Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: hIKoOujagReoRPwty6uBYX8YIoP+f6aqZxhc97mw4KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123 Validity Not Before: Nov 5 07:18:39 2025 GMT Not After : Nov 12 07:18:39 2025 GMT Subject: CN=690afa4f-eb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:86:60:0d:62:9a:25:8d:c8:66:34:7c:f4: 32:bc:72:8c:20:46:df:51:a6:b0:c9:87:95:6e:c5: 3a:2a:29:4c:86:d1:0e:38:ff:be:61:1e:2f:90:68: 01:5b:84:8f:ac:d9:21:07:ca:60:ea:2f:5c:8c:ff: b4:aa:6e:34:32:14:24:59:c9:cb:dd:d4:2d:97:67: 77:41:b2:ad:f3:e4:53:87:5b:ea:0e:04:c9:f5:19: 47:67:e3:f0:e0:95:20:a3:c2:16:ed:07:e2:3a:89: 56:37:b5:fc:b2:41:f3:84:33:1f:6b:2c:8c:3f:bf: 11:5e:5f:7f:4b:70:e8:d6:57:73:3e:3e:02:7c:1e: f4:cd:6b:e8:39:c0:63:8c:cd:b4:fb:e9:d8:4f:86: 47:04:11:9a:03:69:4b:ac:fb:04:17:8d:c6:9d:76: e2:66:47:b7:da:05:3a:0d:22:05:0d:f6:12:ce:29: 5c:f3:7d:b3:80:47:e9:d9:3e:92:98:82:fa:bd:04: ec:50:77:97:6f:86:3a:34:dc:df:6a:9a:12:28:d8: 06:6e:1e:8f:88:e3:45:49:34:96:d4:fe:ae:cb:51: e0:e8:f0:86:15:91:03:47:46:45:c6:8e:b5:5e:24: fa:57:c1:39:6d:2e:38:19:a8:26:26:51:fb:1a:23: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E2:A9:A0:DB:27:71:B4:75:A1:31:86:95:54:89:5E:0F:16:3D:2F X509v3 Authority Key Identifier: keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3c:f1:ca:c4:ed:65:75:de:f0:03:36:86:3b:46:eb:e9:6e: 98:84:ec:82:d3:6b:a3:0b:e0:7a:89:7b:a5:90:34:f9:7b:d5: b0:ed:21:09:fc:f2:e1:2e:70:45:06:7b:69:25:1b:88:a7:2c: 4d:f1:f7:56:04:d2:3e:02:bb:81:79:2a:ca:e3:76:1a:5f:42: 72:02:10:1b:7a:ad:04:fe:c6:c4:f1:50:63:ff:39:3c:ee:52: a0:82:11:18:41:69:19:da:0e:b5:26:b0:0f:f9:31:3c:7a:f7: ed:35:2a:61:2e:80:cb:79:6a:db:db:be:b6:9c:4b:62:79:44: 6f:d6:ce:96:e5:87:17:a5:11:6f:99:19:1a:d3:17:c2:a3:cc: ab:d1:12:e9:20:32:f5:fd:ca:11:b0:f0:bc:5c:a9:11:17:94: 31:7f:2d:90:36:67:26:88:ed:47:56:25:79:79:98:de:7f:2c: 34:ca:0f:8d:fa:dc:ec:45:fa:6d:a4:3c:6a:6b:aa:01:7b:22: 9c:60:23:46:cd:b0:09:99:f8:f8:fc:eb:12:c9:7d:b6:36:de: ec:49:88:e3:64:c2:10:69:9c:c9:da:55:8a:ae:95:7e:19:c7: 69:03:11:5a:d7:34:7e:d0:2f:d9:47:2c:a7:19:81:23:0c:84: 9b:dc:9c:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD MTM4RDEyMzAeFw0yNTExMDUwNzE4MzlaFw0yNTExMTIwNzE4MzlaMBgxFjAUBgNV BAMTDTY5MGFmYTRmLWViMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVboZgDWKaJY3IZjR89DK8cowgRt9RprDJh5VuxToqKUyG0Q44/75hHi+QaAFb hI+s2SEHymDqL1yM/7SqbjQyFCRZycvd1C2XZ3dBsq3z5FOHW+oOBMn1GUdn4/Dg lSCjwhbtB+I6iVY3tfyyQfOEMx9rLIw/vxFeX39LcOjWV3M+PgJ8HvTNa+g5wGOM zbT76dhPhkcEEZoDaUus+wQXjcadduJmR7faBToNIgUN9hLOKVzzfbOAR+nZPpKY gvq9BOxQd5dvhjo03N9qmhIo2AZuHo+I40VJNJbU/q7LUeDo8IYVkQNHRkXGjrVe JPpXwTltLjgZqCYmUfsaI16jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUveKpoNsn cbR1oTGGlVSJXg8WPS8wHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJw88crE7WV13vADNoY7RuvpbpiE7ILTa6ML4HqJe6WQNPl71bDtIQn8 8uEucEUGe2klG4inLE3x91YE0j4Cu4F5KsrjdhpfQnICEBt6rQT+xsTxUGP/OTzu UqCCERhBaRnaDrUmsA/5MTx69+01KmEugMt5atvbvracS2J5RG/WzpblhxelEW+Z GRrTF8KjzKvREukgMvX9yhGw8LxcqREXlDF/LZA2ZyaI7UdWJXl5mN5/LDTKD436 3OxF+m2kPGprqgF7IpxgI0bNsAmZ+Pj86xLJfbY23uxJiONkwhBpnMnaVYqulX4Z x2kDEVrXNH7QL9lHLKcZgSMMhJvcnGs= -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:26 2025 by rpki-client