$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json) Hash identifier: dP065hmiOcgU/U484bukdm3o50J1QA8QXV1zKL/fNxQ= Subject key identifier: 3E:67:82:D5:A9:FF:08:C2:B0:6C:68:10:B5:52:CD:34:92:AD:B3:B3 Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft Manifest number: 03FB Signing time: Mon 03 Nov 2025 00:25:16 +0000 Manifest this update: Mon 03 Nov 2025 00:25:15 +0000 Manifest next update: Mon 10 Nov 2025 00:25:15 +0000 Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: rrjH8WJ/4gkzXKrqhVWGKc9DEIns3d1jA/IugfERQ6o=) 2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C Validity Not Before: Nov 3 00:25:15 2025 GMT Not After : Nov 10 00:25:15 2025 GMT Subject: CN=6907f66b-7037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:67:0e:9d:b4:74:47:e4:ab:28:2b:f1:12: e6:d1:e5:42:95:b9:f0:d7:0d:2a:86:a4:12:b7:40: 75:c1:40:35:60:85:cb:d6:97:4f:cb:94:68:72:d2: 56:78:06:a7:e6:38:40:0c:34:50:68:1d:d5:a5:be: 91:97:c7:9a:92:0d:44:c3:16:26:e5:2a:06:4d:6e: c8:40:68:5c:bf:34:1c:1f:9d:b4:30:7d:de:dd:e0: 0d:1d:98:35:cb:12:1f:80:d9:7c:05:cc:e5:28:ca: 96:90:ef:68:f7:49:9b:a8:2f:4b:cb:e7:b9:dd:b3: 0d:2b:f9:b3:89:7c:bf:04:45:cd:a0:59:c6:2f:a6: 75:3e:0c:6d:a0:8b:86:7d:b1:b1:eb:38:eb:d1:b9: ad:94:6c:c1:c4:33:55:67:64:38:d2:e6:70:0e:75: f1:ee:f7:c2:b7:fb:60:42:50:66:82:41:04:db:42: 96:90:c4:12:78:d0:56:ba:39:28:f1:cd:06:72:89: 0c:52:5d:6f:c2:58:66:e9:cf:ff:c6:24:ec:47:92: 3d:f9:34:b5:2a:33:35:33:5f:e8:e4:09:63:fd:8b: 89:b9:2b:c2:13:3c:d8:d8:17:88:d6:44:ed:44:0f: 37:e3:18:59:a2:d3:28:d8:4b:73:dc:a4:e8:c6:7f: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:67:82:D5:A9:FF:08:C2:B0:6C:68:10:B5:52:CD:34:92:AD:B3:B3 X509v3 Authority Key Identifier: keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:56:e3:82:fd:4e:fc:12:3b:c6:db:26:d6:52:6e:aa:fc: 56:eb:a0:43:00:a7:c0:ea:30:09:34:b8:56:bd:fd:fc:36:fc: a1:55:15:93:f7:5f:ae:f8:c1:a3:1f:b1:45:c3:f7:52:a7:4a: ff:44:b0:6b:82:21:3e:24:bb:3e:2f:0b:42:4a:0c:25:7d:08: c7:31:5f:1e:cf:20:66:13:3a:db:a5:ac:8b:ea:f1:f9:86:3a: 76:3f:d7:14:a1:4c:28:28:50:f8:6b:08:75:a9:b6:b7:6f:6b: 70:37:75:34:95:d6:09:9a:82:62:76:78:b5:dd:93:0d:d0:2b: 69:cb:9b:fb:56:92:4c:d1:8b:49:6c:cd:83:2e:b4:46:4a:bf: 84:2f:54:21:04:0c:b4:20:04:f1:c2:b3:59:00:1f:6c:28:c0: 71:39:eb:ee:7f:d0:83:34:71:41:7a:a9:2d:fc:6c:93:d9:5c: d2:e6:4c:f1:cd:2c:07:58:ca:5b:6f:cd:48:e8:7d:a4:f7:ca: e8:b0:cc:6b:93:cb:ac:3f:45:49:95:5d:ab:24:00:41:48:3c: 9c:7c:e0:06:03:28:8a:2a:08:68:f5:e2:03:b1:d1:5c:43:ca: f4:ba:e9:83:ae:35:f6:7b:2c:76:5f:ec:39:f4:00:1d:9a:c1: 23:18:04:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM4QzkxMTAvBgNVBAUTKDQxMjNBQzJFQzA2OUQyRUYyNzIwMUY0REJDQUFDNkMx OTEyMTkwMkMwHhcNMjUxMTAzMDAyNTE1WhcNMjUxMTEwMDAyNTE1WjAYMRYwFAYD VQQDEw02OTA3ZjY2Yi03MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzZnDp20dEfkqygr8RLm0eVClbnw1w0qhqQSt0B1wUA1YIXL1pdPy5RoctJW eAan5jhADDRQaB3Vpb6Rl8eakg1EwxYm5SoGTW7IQGhcvzQcH520MH3e3eANHZg1 yxIfgNl8BczlKMqWkO9o90mbqC9Ly+e53bMNK/mziXy/BEXNoFnGL6Z1PgxtoIuG fbGx6zjr0bmtlGzBxDNVZ2Q40uZwDnXx7vfCt/tgQlBmgkEE20KWkMQSeNBWujko 8c0GcokMUl1vwlhm6c//xiTsR5I9+TS1KjM1M1/o5Alj/YuJuSvCEzzY2BeI1kTt RA834xhZotMo2Etz3KToxn9LIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5ngtWp /wjCsGxoELVSzTSSrbOzMB8GA1UdIwQYMBaAFEEjrC7AadLvJyAfTbyqxsGRIZAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzhDOS83MzhEREZDNDk0 QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1OG5JQjlOdktyR3daRWhr Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTT3NMc0JwMHU4bklCOU52S3JHd1pFaGtDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzhDOS83MzhEREZDNDk0QzgxMUVDOTVDQjk3NjVDNEY5QUUwMi9RU09zTHNCcDB1 OG5JQjlOdktyR3daRWhrQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADJlbjgv1O/BI7xtsm1lJuqvxW66BDAKfA6jAJNLhWvf38NvyhVRWT 91+u+MGjH7FFw/dSp0r/RLBrgiE+JLs+LwtCSgwlfQjHMV8ezyBmEzrbpayL6vH5 hjp2P9cUoUwoKFD4awh1qba3b2twN3U0ldYJmoJidni13ZMN0Ctpy5v7VpJM0YtJ bM2DLrRGSr+EL1QhBAy0IATxwrNZAB9sKMBxOevuf9CDNHFBeqkt/GyT2VzS5kzx zSwHWMpbb81I6H2k98rosMxrk8usP0VJlV2rJABBSDycfOAGAyiKKgho9eIDsdFc Q8r0uumDrjX2eyx2X+w59AAdmsEjGAT0 -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:38 2025 by rpki-client