$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: oLEUilKA3wRSP1p+7+jJ2OqK7dw3eqrvQKGzefPAjfw= Subject key identifier: E5:A6:21:F5:19:98:DF:6B:8E:EC:EF:80:0B:8B:F6:A1:51:53:94:69 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 1054 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 1040 Signing time: Sat 18 Oct 2025 17:59:18 +0000 Manifest this update: Sat 18 Oct 2025 17:59:17 +0000 Manifest next update: Sat 25 Oct 2025 17:59:17 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: QKaFLYbTKMNwoe5PHYzwT2A0YMjK1402gqYNU6Nv8Ak=) 2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=) 3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4180 (0x1054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Oct 18 17:59:17 2025 GMT Not After : Oct 25 17:59:17 2025 GMT Subject: CN=68f3d576-6258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:d2:97:eb:c9:58:f3:36:99:fe:f6:7b:18: ac:c3:b8:54:45:bf:ec:fa:a5:55:c9:91:9c:d9:4f: ca:a1:0e:67:d4:79:57:3f:79:70:b7:a2:d0:33:54: 1f:72:ee:be:cc:03:4f:e8:22:bb:b0:b2:e8:ce:be: 73:80:bb:2d:30:d7:9d:02:41:cf:5c:4e:c9:f9:fb: 63:e0:ff:e8:e0:97:10:1e:5f:98:62:9b:0c:0e:6b: 44:cf:47:2d:28:5d:32:f5:0f:75:2f:98:64:fe:ab: e8:80:52:d8:df:74:01:b1:42:6b:ff:7e:97:a1:08: 31:a5:19:a4:83:7c:9c:6d:7c:a1:1e:a2:97:4e:5d: 06:08:86:6e:8c:f3:d5:09:51:4b:83:59:d6:f0:65: ae:c2:29:c6:f0:d5:4b:6f:71:d4:33:3f:0e:2d:07: 4a:03:a9:66:c1:f1:df:f7:7a:07:f6:27:4f:4c:9e: a6:5d:a9:43:58:69:e5:cc:d4:91:5b:0a:d2:e5:57: b8:2a:54:7c:ca:ee:7d:b4:af:89:45:69:52:81:76: 01:7e:4c:c1:dc:0b:45:11:50:75:de:41:d7:1e:d3: f0:51:0f:7c:dc:b6:01:66:77:e6:74:8a:d6:c7:f8: d6:a7:97:60:9f:7d:1f:88:35:09:50:8e:1c:43:d7: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A6:21:F5:19:98:DF:6B:8E:EC:EF:80:0B:8B:F6:A1:51:53:94:69 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1c:8e:8e:d8:1c:05:81:fd:ff:05:49:cb:f1:90:88:06:72: 94:b1:04:6c:ef:b2:b9:3e:c1:d6:f8:0a:44:64:4a:09:79:fa: f7:8a:d6:db:91:02:f5:36:2c:94:df:fb:e8:00:51:f3:87:83: 58:30:3a:40:0f:e6:bb:be:0f:17:7b:c3:e6:d8:08:54:2f:35: 7a:61:ad:c9:73:2c:bc:d4:36:e6:e6:f8:b1:fb:ee:4b:f5:48: 7e:10:85:90:c3:06:89:93:91:8a:1d:20:82:73:03:1c:fe:9e: a4:6e:50:cb:eb:fc:59:7b:77:c4:d0:5e:c9:8c:e2:ec:82:a2: 91:f0:ab:bd:91:aa:55:c2:99:85:9f:08:58:74:2b:7a:79:4b: bd:60:42:e8:ed:41:b3:f3:43:59:b1:da:f0:c5:c3:dd:7f:fa: 7f:b3:4c:4a:38:47:7b:02:b3:ef:ba:e7:e6:23:fb:5c:b8:ff: 38:c8:47:25:59:f2:8a:bd:23:ef:c1:d1:3c:fe:c3:7e:48:ac: 7c:51:47:47:7f:1d:e0:9d:51:da:6d:e5:60:1d:b2:43:bd:1a: 04:db:4d:fa:91:96:3b:4b:b8:eb:6b:7f:2d:d6:3c:c7:6c:1a: 5d:a5:df:82:04:ae:98:86:a7:7d:02:ab:93:45:a5:b4:49:63: 93:85:79:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjUxMDE4MTc1OTE3WhcNMjUxMDI1MTc1OTE3WjAYMRYwFAYD VQQDEw02OGYzZDU3Ni02MjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgjSl+vJWPM2mf72exisw7hURb/s+qVVyZGc2U/KoQ5n1HlXP3lwt6LQM1Qf cu6+zANP6CK7sLLozr5zgLstMNedAkHPXE7J+ftj4P/o4JcQHl+YYpsMDmtEz0ct KF0y9Q91L5hk/qvogFLY33QBsUJr/36XoQgxpRmkg3ycbXyhHqKXTl0GCIZujPPV CVFLg1nW8GWuwinG8NVLb3HUMz8OLQdKA6lmwfHf93oH9idPTJ6mXalDWGnlzNSR WwrS5Ve4KlR8yu59tK+JRWlSgXYBfkzB3AtFEVB13kHXHtPwUQ983LYBZnfmdIrW x/jWp5dgn30fiDUJUI4cQ9f9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWmIfUZ mN9rjuzvgAuL9qFRU5RpMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWHI6O2BwFgf3/BUnL8ZCIBnKUsQRs77K5PsHW+ApEZEoJefr3itbb kQL1NiyU3/voAFHzh4NYMDpAD+a7vg8Xe8Pm2AhULzV6Ya3Jcyy81Dbm5vix++5L 9Uh+EIWQwwaJk5GKHSCCcwMc/p6kblDL6/xZe3fE0F7JjOLsgqKR8Ku9kapVwpmF nwhYdCt6eUu9YELo7UGz80NZsdrwxcPdf/p/s0xKOEd7ArPvuufmI/tcuP84yEcl WfKKvSPvwdE8/sN+SKx8UUdHfx3gnVHabeVgHbJDvRoE2036kZY7S7jra38t1jzH bBpdpd+CBK6Yhqd9AquTRaW0SWOThXnF -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:26 2025 by rpki-client