$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json) Hash identifier: SCiuH9XaMPta1/XWh3AdfyuwdbzrHjwCQT7P+38vuJk= Subject key identifier: 94:2C:8F:61:D7:F4:26:6A:DA:08:C6:7E:EA:28:E4:C4:3A:E6:25:38 Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:31:49 +0000 Manifest this update: Mon 03 Nov 2025 07:31:48 +0000 Manifest next update: Mon 10 Nov 2025 07:31:48 +0000 Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: QomFZtHrUhK3bWfl421RtvCV5TLZNAEcVJQ9DfnhhhQ=) 2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9 Validity Not Before: Nov 3 07:31:48 2025 GMT Not After : Nov 10 07:31:48 2025 GMT Subject: CN=69085a64-bb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:85:0c:d7:d9:32:fe:99:6b:70:6c:49:6d: f0:61:9f:1e:16:a2:20:65:7a:0c:64:c5:3a:d0:38: 43:5b:63:a3:e0:0c:d2:c4:6d:4d:63:b8:91:01:ad: 73:0e:b6:3c:9b:0d:09:af:e5:36:d5:51:b6:70:ea: 18:b2:97:21:f1:92:0b:61:ec:35:19:98:d7:c3:f4: 81:f2:29:4b:d0:0b:75:c3:5d:f5:90:3d:aa:d2:62: 49:8e:12:1f:75:51:4d:b0:7b:f2:79:a6:45:cc:69: 2b:91:a3:a4:c1:c8:b6:58:42:77:64:2e:92:73:14: 75:fa:27:73:89:ec:4a:9a:d2:ab:2e:1c:d8:47:ad: 91:4f:96:25:12:fc:97:e2:9e:21:b2:73:49:ea:15: 0a:53:89:90:6f:03:49:38:0f:f2:52:f3:15:50:bd: 1a:1f:f6:a6:dc:21:de:36:bb:95:23:ce:9d:c7:b7: 51:3d:fd:af:7d:d6:ea:7f:78:13:0e:b1:c7:9e:3a: f3:28:6e:76:c0:ce:90:93:7d:d9:22:94:fd:ae:77: 44:e5:47:92:98:86:05:5b:03:6b:60:51:ec:38:0a: c4:47:5a:5e:98:e4:ee:8e:3a:34:e5:57:a1:43:c9: cd:36:d3:c2:96:80:4e:19:83:c3:33:13:07:83:48: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2C:8F:61:D7:F4:26:6A:DA:08:C6:7E:EA:28:E4:C4:3A:E6:25:38 X509v3 Authority Key Identifier: keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:16:e7:8b:e9:54:56:44:d4:bb:f3:ca:e8:96:8c:89:4f:38: b0:8c:06:4b:6e:31:02:c7:fc:c1:8d:5e:10:d4:20:f8:f6:56: d8:2b:14:ff:ab:7b:14:7f:24:2c:1c:76:12:b3:03:71:c8:c2: 1a:30:ec:c0:09:ac:66:f2:38:96:33:6b:9e:ea:66:60:8e:c1: 59:32:a1:3d:45:47:8c:fa:b3:dc:1c:8c:89:83:85:9e:56:13: 47:18:50:21:e7:42:9b:a4:f9:5b:4a:e8:05:54:ec:42:fe:7e: 16:65:8b:92:80:2c:a2:b1:24:ea:18:b8:b3:f8:40:16:a7:c7: a1:8f:cb:8d:b6:f9:c9:ac:a8:2e:6d:75:b6:ee:84:b1:e2:f6: 2a:f2:5a:6d:39:14:e6:8c:c2:93:f4:dc:83:ce:4b:0a:8c:95: ce:45:cc:7c:96:72:56:eb:8b:be:f1:f6:55:a8:cd:06:51:f7: 7e:ca:5e:63:8a:51:96:7c:d6:c2:3f:1e:df:4d:c7:44:9a:4c: 91:f6:16:4d:3a:f0:c5:3d:0a:33:e7:9d:14:02:94:03:b2:04: 9e:b3:d0:2c:6a:11:0b:f9:94:cb:9f:b5:b0:8c:7c:f3:69:8c: d6:53:ca:20:fd:56:74:7c:1b:96:5b:ec:de:38:4a:ff:9d:c9: 7f:91:ee:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDU4NzExMC8GA1UEBRMoQTlCNTNGN0I2MTk2MzE4NzA5Mjg5MDJGRjQ4NDc2NTc0 MUJEQTJFOTAeFw0yNTExMDMwNzMxNDhaFw0yNTExMTAwNzMxNDhaMBgxFjAUBgNV BAMTDTY5MDg1YTY0LWJiOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhDYUM19ky/plrcGxJbfBhnx4WoiBlegxkxTrQOENbY6PgDNLEbU1juJEBrXMO tjybDQmv5TbVUbZw6hiylyHxkgth7DUZmNfD9IHyKUvQC3XDXfWQParSYkmOEh91 UU2we/J5pkXMaSuRo6TByLZYQndkLpJzFHX6J3OJ7Eqa0qsuHNhHrZFPliUS/Jfi niGyc0nqFQpTiZBvA0k4D/JS8xVQvRof9qbcId42u5Ujzp3Ht1E9/a991up/eBMO sceeOvMobnbAzpCTfdkilP2ud0TlR5KYhgVbA2tgUew4CsRHWl6Y5O6OOjTlV6FD yc0208KWgE4Zg8MzEweDSCohAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlCyPYdf0 JmraCMZ+6ijkxDrmJTgwHwYDVR0jBBgwFoAUqbU/e2GWMYcJKJAv9IR2V0G9oukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwNTg3LzkwRjE0MzVBNjIx ODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWJVX2UyR1dNWWNKS0pBdjlJUjJWMEc5b3VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw NTg3LzkwRjE0MzVBNjIxODExRjBBQTIyQTAyNkM0RjlBRTAyL3FiVV9lMkdXTVlj SktKQXY5SVIyVjBHOW91ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADMW54vpVFZE1LvzyuiWjIlPOLCMBktuMQLH/MGNXhDUIPj2VtgrFP+r exR/JCwcdhKzA3HIwhow7MAJrGbyOJYza57qZmCOwVkyoT1FR4z6s9wcjImDhZ5W E0cYUCHnQpuk+VtK6AVU7EL+fhZli5KALKKxJOoYuLP4QBanx6GPy422+cmsqC5t dbbuhLHi9iryWm05FOaMwpP03IPOSwqMlc5FzHyWclbri77x9lWozQZR937KXmOK UZZ81sI/Ht9Nx0SaTJH2Fk068MU9CjPnnRQClAOyBJ6z0CxqEQv5lMuftbCMfPNp jNZTyiD9VnR8G5Zb7N44Sv+dyX+R7k4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:57 2025 by rpki-client