$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: mJO8mxrBKQ5ieKI7JBa/gWWOw/jCwXg16s1OdAZYgH4= Subject key identifier: 6C:A4:3A:08:31:5D:21:8F:E7:92:6A:6E:25:3A:94:4F:CC:66:68:B0 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 1891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 1885 Signing time: Sun 02 Nov 2025 16:29:44 +0000 Manifest this update: Sun 02 Nov 2025 16:29:43 +0000 Manifest next update: Sun 09 Nov 2025 16:29:43 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: MB40O2z8UsDSS2R8RJFA7PN1udbGnhQAQ/RAYbbr3zA=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6289 (0x1891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Nov 2 16:29:43 2025 GMT Not After : Nov 9 16:29:43 2025 GMT Subject: CN=690786f8-ed2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:60:c4:c8:cf:4a:6c:78:fe:d1:c7:49:ad: d2:7d:90:0f:fe:eb:c2:8a:f1:da:d0:a3:40:9c:f8: 0d:0c:39:0a:9b:d0:1d:0c:3c:3e:a3:e6:f6:65:9e: 10:c4:96:68:94:cc:da:6d:fa:ce:41:32:43:45:b1: 64:96:09:be:4b:13:f4:ee:5a:bc:92:11:9d:88:3f: f0:19:ff:59:46:73:ed:72:48:63:dd:84:d0:7b:d0: 0a:05:e3:86:58:a1:9b:ae:ce:b5:7a:cb:85:5a:f1: d6:d5:41:23:29:77:95:9c:4f:ec:43:ec:f0:b7:ee: a1:d9:c2:3b:f7:dd:3d:76:23:6d:48:1f:31:53:97: 2b:a2:6c:86:c2:a9:3b:cc:e8:c3:86:20:db:9c:18: a2:d3:c6:8c:d0:7b:55:dc:c9:36:59:ee:79:11:1a: 5f:c6:11:4e:11:d5:a4:0b:3c:2f:4e:1e:e0:2e:58: 7b:38:df:75:b0:c1:18:c8:64:4e:c9:cb:2b:5a:f7: c7:5f:4b:74:e5:8e:95:56:67:9e:08:1f:55:47:00: a4:41:36:54:fe:aa:b5:46:c5:88:e4:97:16:03:19: 93:da:8a:b2:19:57:5c:3d:cc:2b:4f:c7:fb:79:e3: 2c:9a:82:3e:e6:13:97:d2:7e:ec:15:18:a6:5d:cb: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A4:3A:08:31:5D:21:8F:E7:92:6A:6E:25:3A:94:4F:CC:66:68:B0 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ae:c9:94:4b:8b:77:63:cc:f7:2a:b1:c4:96:cb:0a:a4:5b: 62:72:68:2e:8f:fe:c0:9f:69:11:8b:ae:3a:c3:07:9d:bf:3c: 8d:b4:3c:bb:37:d3:36:31:e6:f5:fd:d6:fa:47:c2:cd:d9:de: 53:b6:9a:47:fb:be:0f:96:59:9d:db:38:14:6d:04:e6:ed:68: 2b:c7:fe:0b:e0:3c:f9:c2:a2:ce:31:e5:ca:b4:ae:a5:2f:22: 59:37:68:bc:6f:23:09:3c:43:e7:ca:28:3e:bf:ad:f2:5c:b9: f9:81:b4:0d:bf:78:50:30:c1:ce:95:7b:02:a4:93:03:68:4c: 9e:fa:cf:71:b9:71:3f:4c:57:52:70:4b:3c:23:3b:4d:c4:3e: a1:ab:bc:4e:2d:6b:74:57:e6:6a:63:af:72:2e:88:8a:b3:a2: 1a:09:67:73:65:7c:c8:ed:41:f5:69:49:8e:1b:3b:45:33:12: 58:38:40:de:22:e2:90:9c:e9:5e:0d:ea:f4:8a:b0:be:0c:63: 6a:07:96:68:63:f9:a6:f7:a2:99:84:b0:da:df:90:0d:fd:ac: 12:9e:d4:81:82:09:51:7e:99:fe:7a:e8:ed:8f:cd:d4:83:c8: 7c:50:db:b2:c0:90:e2:b1:10:b8:18:a4:79:7f:39:34:44:18: 65:6e:62:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjUxMTAyMTYyOTQzWhcNMjUxMTA5MTYyOTQzWjAYMRYwFAYD VQQDEw02OTA3ODZmOC1lZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYFgxMjPSmx4/tHHSa3SfZAP/uvCivHa0KNAnPgNDDkKm9AdDDw+o+b2ZZ4Q xJZolMzabfrOQTJDRbFklgm+SxP07lq8khGdiD/wGf9ZRnPtckhj3YTQe9AKBeOG WKGbrs61esuFWvHW1UEjKXeVnE/sQ+zwt+6h2cI79909diNtSB8xU5cromyGwqk7 zOjDhiDbnBii08aM0HtV3Mk2We55ERpfxhFOEdWkCzwvTh7gLlh7ON91sMEYyGRO ycsrWvfHX0t05Y6VVmeeCB9VRwCkQTZU/qq1RsWI5JcWAxmT2oqyGVdcPcwrT8f7 eeMsmoI+5hOX0n7sFRimXcsRoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGykOggx XSGP55JqbiU6lE/MZmiwMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzrsmUS4t3Y8z3KrHElssKpFticmguj/7An2kRi646wwedvzyNtDy7 N9M2Meb1/db6R8LN2d5TtppH+74Pllmd2zgUbQTm7Wgrx/4L4Dz5wqLOMeXKtK6l LyJZN2i8byMJPEPnyig+v63yXLn5gbQNv3hQMMHOlXsCpJMDaEye+s9xuXE/TFdS cEs8IztNxD6hq7xOLWt0V+ZqY69yLoiKs6IaCWdzZXzI7UH1aUmOGztFMxJYOEDe IuKQnOleDer0irC+DGNqB5ZoY/mm96KZhLDa35AN/awSntSBgglRfpn+eujtj83U g8h8UNuywJDisRC4GKR5fzk0RBhlbmKD -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:02 2025 by rpki-client