$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: lqwE2cfZeuNMWVju7s6/FvO4TBYZCXGYz2+O6k7kREE= Subject key identifier: BF:5E:EA:BD:EC:8F:9F:2C:FD:6A:52:77:63:C7:62:D1:AC:E2:B0:D5 Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 0276 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 026D Signing time: Sun 19 Oct 2025 03:55:18 +0000 Manifest this update: Sun 19 Oct 2025 03:55:18 +0000 Manifest next update: Sun 26 Oct 2025 03:55:17 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: 0ssB18WamKmgmxF21PS2XK2uNGo6hbdY2QR8BzFlNGI=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: gYrGpBtOa5YIIgPcE2GiFbVbv7Rp37pYIDK6OFW+qv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 630 (0x276) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Oct 19 03:55:18 2025 GMT Not After : Oct 26 03:55:17 2025 GMT Subject: CN=68f46126-ec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:1d:e8:06:58:e4:1f:a9:fc:bc:e2:0f:d0: 16:c0:cb:79:b2:f3:fb:40:35:58:97:7c:3b:0a:9d: 4e:88:1e:96:23:a2:28:3c:d7:c8:c2:98:f9:2f:5a: 65:5c:bc:3a:f0:27:e6:c8:8d:ac:cc:ce:9c:ba:aa: 15:96:14:ef:3a:57:d8:59:30:3e:93:75:69:7f:07: 17:9b:de:db:fb:2d:49:91:80:85:00:60:fc:99:c2: d4:c2:ca:cf:61:72:aa:5e:84:d5:a8:f6:22:f9:67: a9:49:64:81:31:a2:20:38:6f:1d:2c:68:e0:a3:90: 73:fd:c3:ae:84:59:ae:3f:f7:43:b1:80:90:1f:4e: 6c:ca:fe:3b:43:ca:4d:cd:c3:42:89:3e:9e:f4:7d: 5a:e7:56:06:5f:d8:11:45:3a:60:44:d7:b2:98:06: 2a:d9:9b:59:d4:56:99:e3:72:28:b5:00:29:07:a0: 09:fa:21:d1:45:c6:bc:e5:c3:53:74:15:78:59:a2: e9:37:c3:b8:6e:5f:34:2b:2d:8c:15:3b:7d:97:34: 19:62:37:67:d5:91:39:72:57:85:3c:d1:97:e1:35: 54:de:d9:6f:52:af:9e:19:37:db:66:b6:c8:a7:2d: 32:7b:86:49:d2:06:d9:ec:7c:d3:33:de:88:ee:1b: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:EA:BD:EC:8F:9F:2C:FD:6A:52:77:63:C7:62:D1:AC:E2:B0:D5 X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:41:e3:42:11:4a:e6:28:ea:17:34:89:0d:5c:7e:d0:ec: d6:ee:cd:cf:5f:64:95:fe:32:ea:2d:68:cb:1f:7e:17:53:27: 6d:2a:9f:bf:eb:48:64:7a:ac:20:26:e8:a1:de:ca:b8:35:6f: ba:84:38:56:74:7b:c7:f1:41:2c:1d:8b:ef:08:cb:00:c7:b8: d8:7a:cd:ab:8b:29:71:49:7d:d0:a7:e1:1f:f3:06:51:a6:17: 0a:46:29:ec:7a:6f:ad:cf:58:cf:ce:85:2c:b4:8e:92:ed:bb: 62:99:ec:0d:79:30:6a:ae:6e:b1:bc:df:17:b9:21:a8:49:82: 1f:73:12:96:9a:0c:21:b8:5c:59:88:ea:e7:dd:d3:37:b2:47: bf:28:a6:70:42:5d:14:50:5c:ba:b8:a7:ab:d3:6d:d8:85:14: 2a:4d:01:26:fc:f9:90:fa:25:26:25:ec:d1:90:80:b9:ae:96: d6:4b:29:ca:bd:2a:6b:6a:30:a3:68:bf:59:a2:a1:01:05:fd: 34:a3:26:9b:83:fc:0e:75:88:fd:0c:b6:6b:b2:4f:d7:89:86: ea:7b:7d:4e:58:f1:ca:45:13:4f:1c:fb:f4:92:07:5b:f3:1c: 11:01:2c:05:b4:53:c2:d9:5c:89:50:88:88:4c:f1:af:6b:cc: 6f:7d:f6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjUxMDE5MDM1NTE4WhcNMjUxMDI2MDM1NTE3WjAYMRYwFAYD VQQDEw02OGY0NjEyNi1lYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrcd6AZY5B+p/LziD9AWwMt5svP7QDVYl3w7Cp1OiB6WI6IoPNfIwpj5L1pl XLw68CfmyI2szM6cuqoVlhTvOlfYWTA+k3VpfwcXm97b+y1JkYCFAGD8mcLUwsrP YXKqXoTVqPYi+WepSWSBMaIgOG8dLGjgo5Bz/cOuhFmuP/dDsYCQH05syv47Q8pN zcNCiT6e9H1a51YGX9gRRTpgRNeymAYq2ZtZ1FaZ43IotQApB6AJ+iHRRca85cNT dBV4WaLpN8O4bl80Ky2MFTt9lzQZYjdn1ZE5cleFPNGX4TVU3tlvUq+eGTfbZrbI py0ye4ZJ0gbZ7HzTM96I7htr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9e6r3s j58s/WpSd2PHYtGs4rDVMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs7kHjQhFK5ijqFzSJDVx+0OzW7s3PX2SV/jLqLWjLH34XUydtKp+/ 60hkeqwgJuih3sq4NW+6hDhWdHvH8UEsHYvvCMsAx7jYes2riylxSX3Qp+Ef8wZR phcKRinsem+tz1jPzoUstI6S7btimewNeTBqrm6xvN8XuSGoSYIfcxKWmgwhuFxZ iOrn3dM3ske/KKZwQl0UUFy6uKer023YhRQqTQEm/PmQ+iUmJezRkIC5rpbWSynK vSprajCjaL9ZoqEBBf00oyabg/wOdYj9DLZrsk/XiYbqe31OWPHKRRNPHPv0kgdb 8xwRASwFtFPC2VyJUIiITPGva8xvffb9 -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:06 2025 by rpki-client