$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: ZC2PWvM9oT96aVHniQji3LT8glqrnyyMWyQv83ktSgE= Subject key identifier: 7C:76:AD:3B:13:18:0A:EB:E2:89:4F:75:9F:EB:D0:BF:EF:7B:44:1F Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 0214 Signing time: Wed 05 Nov 2025 02:21:57 +0000 Manifest this update: Wed 05 Nov 2025 02:21:57 +0000 Manifest next update: Wed 12 Nov 2025 02:21:57 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: TFjlaUo2S0Koks2twyxuri6dyzuxyWUq2NELUdowjf8=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: L+V30ULZZ1KBiifHC7zDGdNJ17lrpWMv8iHx76Nc92w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Nov 5 02:21:57 2025 GMT Not After : Nov 12 02:21:57 2025 GMT Subject: CN=690ab4c5-059a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:06:d5:01:05:b2:17:af:02:a8:ba:41:61: 88:7a:03:1a:10:2a:c8:92:ec:7b:11:fc:1c:43:8e: f7:6b:42:9b:39:67:6e:0b:d1:d6:3b:e6:e1:24:b8: b4:cb:83:f6:10:09:5f:2f:34:89:75:74:d0:8f:4b: 4f:a7:32:c8:a4:23:79:60:4b:dc:97:57:c5:77:5a: 61:00:2a:cf:20:59:29:bb:37:66:bb:19:19:81:db: 77:36:db:09:63:33:dd:82:96:a2:88:e0:92:d4:f3: 61:76:fd:5d:a3:8d:7c:fa:51:5d:14:c5:46:f5:c2: b5:46:ef:e8:e1:61:2b:bf:c8:b5:ec:b4:e2:0c:44: 41:a4:22:e6:87:e1:27:c0:9a:33:56:ed:f6:65:37: 8a:ef:c8:99:74:4d:31:6c:0a:2d:10:78:15:2a:73: 2f:3c:1d:bf:fa:34:e6:f0:52:2e:38:53:04:72:67: 6f:b4:1f:5a:d7:57:c2:c4:2c:4a:95:d3:57:40:d1: 81:9c:4e:bc:fb:09:f6:2f:e7:50:04:46:04:65:f8: d7:0e:3c:94:5b:81:08:86:ca:77:5a:0e:86:c9:80: 67:9b:65:af:fb:e9:d9:19:4f:53:84:2c:cf:b3:c9: 57:be:3f:7f:bd:8b:37:10:0b:6c:82:70:2e:ce:a2: ec:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:76:AD:3B:13:18:0A:EB:E2:89:4F:75:9F:EB:D0:BF:EF:7B:44:1F X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1e:1b:38:e9:67:9f:8e:cf:31:ef:e8:64:d8:48:9e:b6:a6: 58:a6:fe:68:90:c7:6d:bc:f8:45:57:12:ae:b6:3c:98:d9:52: 4a:61:f3:f8:c6:1f:17:cc:c6:37:d1:64:5f:ae:ce:8e:37:41: 71:58:70:cc:09:64:8f:b1:6e:8f:5a:e3:e6:8d:74:85:63:7d: 53:ef:28:60:9e:eb:2d:06:19:e5:8c:d5:7c:e2:9b:de:1a:bb: 78:04:ff:06:2f:c3:8c:02:e6:36:71:3d:83:7b:38:fd:4f:70: a2:5e:54:0d:ff:86:58:3d:6e:96:e7:26:5b:44:fc:60:87:cf: 0a:ad:b6:67:0c:0f:2f:9b:c5:ff:ee:b8:a2:2f:54:44:87:3c: d0:22:59:f1:ba:fe:b0:44:df:3d:a9:46:8c:36:5b:8a:a7:72: c6:8c:ec:45:66:70:b9:ab:be:ca:a9:41:80:d8:b8:73:64:74: 97:61:0c:43:2a:aa:3f:e1:ce:19:dc:2b:96:bf:70:0e:f0:89: ab:ac:cf:50:2e:f2:f4:be:06:26:68:83:0e:d9:69:f6:e4:86: b3:65:89:28:bb:ad:c0:78:22:93:fb:e6:a8:df:bb:16:97:d4: 5b:b1:ac:f7:b6:e1:a2:ae:28:34:4d:a8:3b:4a:fa:5d:bb:d2: dc:f6:35:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUxMTA1MDIyMTU3WhcNMjUxMTEyMDIyMTU3WjAYMRYwFAYD VQQDEw02OTBhYjRjNS0wNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfwG1QEFshevAqi6QWGIegMaECrIkux7EfwcQ473a0KbOWduC9HWO+bhJLi0 y4P2EAlfLzSJdXTQj0tPpzLIpCN5YEvcl1fFd1phACrPIFkpuzdmuxkZgdt3NtsJ YzPdgpaiiOCS1PNhdv1do418+lFdFMVG9cK1Ru/o4WErv8i17LTiDERBpCLmh+En wJozVu32ZTeK78iZdE0xbAotEHgVKnMvPB2/+jTm8FIuOFMEcmdvtB9a11fCxCxK ldNXQNGBnE68+wn2L+dQBEYEZfjXDjyUW4EIhsp3Wg6GyYBnm2Wv++nZGU9ThCzP s8lXvj9/vYs3EAtsgnAuzqLs4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx2rTsT GArr4olPdZ/r0L/ve0QfMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQHhs46Wefjs8x7+hk2EietqZYpv5okMdtvPhFVxKutjyY2VJKYfP4 xh8XzMY30WRfrs6ON0FxWHDMCWSPsW6PWuPmjXSFY31T7yhgnustBhnljNV84pve Grt4BP8GL8OMAuY2cT2Dezj9T3CiXlQN/4ZYPW6W5yZbRPxgh88KrbZnDA8vm8X/ 7riiL1REhzzQIlnxuv6wRN89qUaMNluKp3LGjOxFZnC5q77KqUGA2LhzZHSXYQxD Kqo/4c4Z3CuWv3AO8ImrrM9QLvL0vgYmaIMO2Wn25IazZYkou63AeCKT++ao37sW l9Rbsaz3tuGirig0Tag7Svpdu9Lc9jXM -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:13 2025 by rpki-client