$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: QntLEc3ERWxj9IzNYMu26po6aanKOy46YZioIgNpxD8= Subject key identifier: 51:D2:70:AF:F7:D3:4E:2C:80:E1:4E:8C:B9:65:DA:8F:AD:F7:CE:3B Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: A8 Signing time: Sun 19 Oct 2025 09:22:41 +0000 Manifest this update: Sun 19 Oct 2025 09:22:40 +0000 Manifest next update: Sun 26 Oct 2025 09:22:40 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: ICRWO0PsHGxzAYck0cjh9qOG5t1d5jklM5XqtQb3WRg=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Oct 19 09:22:40 2025 GMT Not After : Oct 26 09:22:40 2025 GMT Subject: CN=68f4ade0-10e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e8:23:30:43:e6:80:b8:77:a6:f3:b5:2d:0c: c3:e4:da:ca:b1:80:54:06:aa:a0:11:9f:79:ed:6f: 15:38:ba:95:2c:d4:84:74:b9:56:38:07:b9:84:1e: 57:8c:dd:50:1b:d8:b6:7e:4f:c9:e1:bf:0b:67:72: c0:d4:6b:b0:52:9a:cc:3c:2c:da:c3:71:62:cd:86: 96:01:27:be:0c:94:d4:66:ad:73:f6:6f:c6:1c:34: e8:2f:58:bc:9c:95:fc:0f:c4:02:e6:af:25:f4:c8: 48:53:3d:0f:10:02:74:cd:a7:b3:23:d0:c3:74:7c: 06:a0:40:6c:aa:9a:21:42:8b:e4:54:2c:18:d2:33: cc:21:88:85:73:3e:c6:e2:6c:c7:75:ab:e0:43:dd: b0:d2:f6:02:35:7f:d9:05:54:4b:63:20:69:3d:12: 4f:ef:21:3f:d4:31:0e:2a:ba:e2:4f:2a:85:a4:59: 04:50:d2:8b:42:dd:8a:76:65:cf:52:0a:f3:a9:a3: d4:3e:f6:15:9d:8f:86:a3:bc:04:51:d0:3e:04:de: df:0c:99:9f:2f:cd:24:7d:91:75:8a:d1:a9:c8:8d: e5:4f:8f:9c:9a:18:0e:7a:c1:99:a4:73:88:c7:9d: 24:f1:2e:d0:4a:33:c0:b4:8d:4e:c8:37:e3:dd:95: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:70:AF:F7:D3:4E:2C:80:E1:4E:8C:B9:65:DA:8F:AD:F7:CE:3B X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:34:16:1d:60:e4:72:40:f9:3d:de:c2:6f:6d:e5:05:b3:97: f3:88:ed:a6:71:df:9d:45:c5:43:50:d4:88:cb:4b:ed:8c:c9: f4:22:9d:c9:c1:88:ea:3e:e0:c1:14:8a:5f:e1:c6:9d:95:0e: 95:ef:bb:0d:fc:2e:b7:a5:3e:20:23:0f:38:49:8b:4d:3f:13: a4:6c:6c:da:bb:07:c2:d8:0d:65:39:2a:57:d0:e1:61:bc:0b: a7:d2:eb:79:fb:29:b8:3a:34:90:7e:99:1a:19:d8:c8:8d:1e: 21:26:7d:70:2d:56:dc:e3:09:33:ed:37:97:ff:a0:7a:58:f6: e3:78:11:84:d7:24:62:f9:3f:8f:fc:32:e5:fe:8d:7c:18:b5: 2e:3e:8c:0b:8f:ee:56:82:62:64:d8:d7:2d:bf:37:e0:5e:0d: 79:fd:f7:e0:32:a3:55:85:f0:51:13:65:03:4e:30:5b:97:a4: 84:30:a9:a0:2f:96:b7:59:5f:11:f9:0f:71:eb:2b:d2:b0:f7: a2:79:fa:24:78:91:9a:aa:b5:aa:24:48:21:42:1a:6e:c6:16: 5d:eb:51:5b:3d:1e:d6:ca:3a:5a:5d:68:d5:89:bc:51:28:30: 04:24:70:62:2c:aa:93:4e:6a:4a:44:e1:bf:bf:09:13:52:ff: 72:51:5b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYxNzkxMTAvBgNVBAUTKDQwNTAyQTRCMEMxRkY0NjgyRjUyRTM0MDY0MDQ0NDQ1 Mjg3RDRCQjgwHhcNMjUxMDE5MDkyMjQwWhcNMjUxMDI2MDkyMjQwWjAYMRYwFAYD VQQDEw02OGY0YWRlMC0xMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6egjMEPmgLh3pvO1LQzD5NrKsYBUBqqgEZ957W8VOLqVLNSEdLlWOAe5hB5X jN1QG9i2fk/J4b8LZ3LA1GuwUprMPCzaw3FizYaWASe+DJTUZq1z9m/GHDToL1i8 nJX8D8QC5q8l9MhIUz0PEAJ0zaezI9DDdHwGoEBsqpohQovkVCwY0jPMIYiFcz7G 4mzHdavgQ92w0vYCNX/ZBVRLYyBpPRJP7yE/1DEOKrriTyqFpFkEUNKLQt2KdmXP UgrzqaPUPvYVnY+Go7wEUdA+BN7fDJmfL80kfZF1itGpyI3lT4+cmhgOesGZpHOI x50k8S7QSjPAtI1OyDfj3ZV2JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHScK/3 004sgOFOjLll2o+t9847MB8GA1UdIwQYMBaAFEBQKksMH/RoL1LjQGQEREUofUu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS81NEUwNDcxNkFB N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlHZ3ZVdU5BWkFSRVJTaDlT N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjE3OS81NEUwNDcxNkFBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlH Z3ZVdU5BWkFSRVJTaDlTN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCINBYdYORyQPk93sJvbeUFs5fziO2mcd+dRcVDUNSIy0vtjMn0Ip3J wYjqPuDBFIpf4cadlQ6V77sN/C63pT4gIw84SYtNPxOkbGzauwfC2A1lOSpX0OFh vAun0ut5+ym4OjSQfpkaGdjIjR4hJn1wLVbc4wkz7TeX/6B6WPbjeBGE1yRi+T+P /DLl/o18GLUuPowLj+5WgmJk2NctvzfgXg15/ffgMqNVhfBRE2UDTjBbl6SEMKmg L5a3WV8R+Q9x6yvSsPeiefokeJGaqrWqJEghQhpuxhZd61FbPR7WyjpaXWjVibxR KDAEJHBiLKqTTmpKROG/vwkTUv9yUVvQ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:04 2025 by rpki-client