$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft File: qP6b7_xlQea2MsQh14p9zAiwrIw.mft (raw, json) Hash identifier: a+6nUirzS8k21s9bUSv2OJa1yQ12V8fOzuKvKqCgtH4= Subject key identifier: 62:25:4A:39:F5:38:47:7F:AA:B8:5B:6A:18:D0:9E:7F:97:CC:AD:95 Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft Manifest number: 13 Signing time: Sun 19 Oct 2025 11:29:23 +0000 Manifest this update: Sun 19 Oct 2025 11:29:23 +0000 Manifest next update: Sun 26 Oct 2025 11:29:23 +0000 Files and hashes: 1: qP6b7_xlQea2MsQh14p9zAiwrIw.crl (hash: Y/Qrag+o7kce1vXqYA/kOrUQtzaOqEmsfIVTq9IGECk=) 2: EF9B0ACE909B11F09E634B7AC4F9AE02.roa (hash: 9dYGUjFWYuN31AuscKGSqmOWFznYjjVv+DbwenmQE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Validity Not Before: Oct 19 11:29:23 2025 GMT Not After : Oct 26 11:29:23 2025 GMT Subject: CN=68f4cb93-6317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:91:c4:fa:13:b4:86:47:04:b6:d1:e5:79: d3:82:1c:b1:7d:23:d2:41:1f:87:51:8c:c9:73:c6: 61:04:a1:c4:92:98:e6:06:a3:37:d5:fb:4c:1f:f4: 5e:3a:6f:2b:08:76:76:c7:4e:b5:d3:91:c3:83:1d: 83:fb:50:d7:4b:a2:9a:87:0a:be:28:93:7a:fd:96: e4:6b:1a:6b:01:70:68:d8:7a:fa:d3:60:a9:22:cd: 8b:aa:06:50:bb:71:6a:4f:f6:9c:bc:66:1c:f5:e4: 14:1e:eb:a2:0a:9b:30:bc:44:c8:8a:df:22:7d:25: 2a:1a:13:7d:77:68:ab:02:f6:3d:fd:ba:be:d0:38: cf:93:9c:52:b8:24:c2:e8:d0:71:dc:2a:7c:64:11: d6:5f:2b:1c:fb:60:13:d4:86:ea:f1:6d:ff:72:0d: ac:b4:56:de:c1:0d:ee:23:87:84:df:79:2e:c8:f0: 8c:9f:77:3a:ee:7a:f4:31:a6:cb:52:c5:ae:4f:57: 79:5d:98:41:66:1a:d5:05:0d:7b:53:ee:95:44:8d: 23:e6:e6:39:d2:2d:7c:92:a3:e1:aa:30:c9:9c:36: fe:09:b1:8c:6b:f3:33:6e:f2:ec:0d:29:fb:8a:d4: 7d:43:c9:10:75:79:c8:c3:07:0e:d5:47:e5:ae:81: 1d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:25:4A:39:F5:38:47:7F:AA:B8:5B:6A:18:D0:9E:7F:97:CC:AD:95 X509v3 Authority Key Identifier: keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e0:ab:41:8d:27:0a:9b:25:f4:c1:88:3a:da:cd:da:91:1c: 19:a4:2b:dc:af:0b:f3:a6:a3:86:38:78:e3:0d:49:6c:4d:a3: f2:b1:1d:7b:48:13:84:1f:97:32:86:c0:69:9c:3a:fd:c7:7c: c9:5e:52:c4:43:45:e5:2c:36:40:23:91:14:84:45:29:27:80: f6:23:bb:7e:57:a0:b3:03:2c:c4:b7:7a:c6:d9:ed:a2:46:d9: 5f:fc:27:16:02:da:07:c2:4b:06:2c:95:79:36:42:17:ba:fb: 6f:0e:ee:8b:5c:38:b7:aa:89:66:c2:f7:f6:0f:b1:c1:f4:fe: fe:91:f7:18:0f:4c:ce:a6:61:d8:bb:ee:41:c4:c1:aa:e7:2f: 57:ca:59:12:d2:d3:21:f8:07:ed:c4:37:50:8f:79:52:2c:99: 8e:db:ea:c5:f7:85:3f:d9:f8:fd:3f:51:7f:86:a8:e4:38:22: df:7b:15:b7:77:a0:73:4a:6f:bb:c4:42:e3:ba:5c:fd:fe:d1: 8e:3e:94:30:93:05:e8:7e:7c:53:67:96:e5:9c:fe:0c:20:48: 1e:71:f9:6e:52:9e:6a:1a:a4:0c:88:19:79:67:66:9f:8f:33: 31:9f:1e:c7:f5:7d:ce:79:57:d5:49:a4:dc:1f:ca:46:5f:12: 42:d7:44:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkMwNzExMC8GA1UEBRMoQThGRTlCRUZGQzY1NDFFNkI2MzJDNDIxRDc4QTdEQ0Mw OEIwQUM4QzAeFw0yNTEwMTkxMTI5MjNaFw0yNTEwMjYxMTI5MjNaMBgxFjAUBgNV BAMTDTY4ZjRjYjkzLTYzMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjwJHE+hO0hkcEttHledOCHLF9I9JBH4dRjMlzxmEEocSSmOYGozfV+0wf9F46 bysIdnbHTrXTkcODHYP7UNdLopqHCr4ok3r9luRrGmsBcGjYevrTYKkizYuqBlC7 cWpP9py8Zhz15BQe66IKmzC8RMiK3yJ9JSoaE313aKsC9j39ur7QOM+TnFK4JMLo 0HHcKnxkEdZfKxz7YBPUhurxbf9yDay0Vt7BDe4jh4TfeS7I8IyfdzruevQxpstS xa5PV3ldmEFmGtUFDXtT7pVEjSPm5jnSLXySo+GqMMmcNv4JsYxr8zNu8uwNKfuK 1H1DyRB1ecjDBw7VR+WugR3rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYiVKOfU4 R3+quFtqGNCef5fMrZUwHwYDVR0jBBgwFoAUqP6b7/xlQea2MsQh14p9zAiwrIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyQzA3LzRDQTAyOTc2OTA5 QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVhMk1zUWgxNHA5ekFpd3JJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVA2YjdfeGxRZWEyTXNRaDE0cDl6QWl3ckl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy QzA3LzRDQTAyOTc2OTA5QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVh Mk1zUWgxNHA5ekFpd3JJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFngq0GNJwqbJfTBiDrazdqRHBmkK9yvC/Omo4Y4eOMNSWxNo/KxHXtI E4QflzKGwGmcOv3HfMleUsRDReUsNkAjkRSERSkngPYju35XoLMDLMS3esbZ7aJG 2V/8JxYC2gfCSwYslXk2Qhe6+28O7otcOLeqiWbC9/YPscH0/v6R9xgPTM6mYdi7 7kHEwarnL1fKWRLS0yH4B+3EN1CPeVIsmY7b6sX3hT/Z+P0/UX+GqOQ4It97Fbd3 oHNKb7vEQuO6XP3+0Y4+lDCTBeh+fFNnluWc/gwgSB5x+W5SnmoapAyIGXlnZp+P MzGfHsf1fc55V9VJpNwfykZfEkLXRFM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:19 2025 by rpki-client