$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: YdSKEkO8Y149jt04rUrLDVyG/WuXdW+tIbmLw32ACCI= Subject key identifier: C9:5D:83:89:0E:47:AC:B1:F8:11:06:47:6E:C7:5B:D1:8C:4E:0A:FF Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1AEE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1AD9 Signing time: Mon 20 Oct 2025 15:50:09 +0000 Manifest this update: Mon 20 Oct 2025 15:50:09 +0000 Manifest next update: Mon 27 Oct 2025 15:50:09 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: /D1iHLUTr96RFm1WrE5d6eC3mpqbXrJouw6zAD9N8JU=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6894 (0x1aee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Oct 20 15:50:09 2025 GMT Not After : Oct 27 15:50:09 2025 GMT Subject: CN=68f65a31-c66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:a7:77:96:b4:c0:e0:a4:87:75:39:4c:91: 47:e9:44:9f:34:f5:84:84:a3:3e:7b:b7:37:78:12: 8a:eb:e3:36:71:95:5c:39:6a:3f:0d:d4:21:9b:43: 6d:16:c4:fe:e4:58:7e:d7:b7:05:64:d9:26:08:f4: 8e:f9:6a:a8:b8:bd:10:da:07:f6:e2:22:66:c8:cb: bf:3b:77:59:c3:f6:45:a7:65:f3:47:14:aa:a8:89: 5b:4f:98:8a:58:18:14:25:af:f0:da:59:8b:8e:04: 14:41:b1:20:bc:d8:77:46:64:c0:6c:9f:3c:3c:d1: 3d:db:3a:53:53:ba:e3:ad:89:dc:23:91:83:c3:40: 0d:2a:ec:25:3f:d7:b8:6e:0e:74:70:dd:30:45:95: eb:2b:11:42:cb:8b:d8:83:cf:a6:7a:eb:ab:ed:c2: d2:a2:c0:1e:21:17:c2:09:29:54:9f:ca:16:1b:5d: 73:35:2e:8a:5a:c3:21:e0:a6:2a:ba:89:dd:a9:b1: 75:77:de:6e:5e:de:2e:7f:6b:0d:9d:c1:05:c6:2b: 57:02:b8:1a:02:6e:66:c4:14:45:af:61:d9:ac:1d: f0:16:b8:ca:ff:6f:4d:0a:5f:69:1c:e9:ba:74:c8: b9:79:04:63:e7:26:de:27:c1:55:28:f4:87:e3:24: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:83:89:0E:47:AC:B1:F8:11:06:47:6E:C7:5B:D1:8C:4E:0A:FF X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:e1:94:04:88:99:eb:66:ab:b2:78:07:5b:37:10:fc:9d: ad:af:50:05:bd:1b:34:93:ce:09:c1:6e:5f:7b:d7:c3:1d:19: c0:99:c4:17:a2:ed:7c:9e:b0:0a:38:cb:21:f6:9d:4a:ca:35: e1:f2:0e:74:75:60:79:4d:11:11:1a:84:3f:10:bd:c9:05:f7: a4:70:eb:e0:43:5d:8b:3a:1e:ac:72:bc:4f:e9:9c:3b:72:9e: aa:ab:b6:2c:82:63:1f:c6:2a:88:57:46:fc:31:9c:c0:e3:3c: f4:93:c8:a5:87:c6:34:34:58:08:8e:ec:e3:5c:8d:79:4d:62: 37:4b:e5:d6:8f:af:b2:38:22:82:d4:05:b3:9b:7f:10:5e:9f: f9:60:b5:4f:76:c3:d5:3e:31:3b:06:0a:c7:6e:7f:36:4e:66: ab:5c:30:c1:9d:df:37:f2:07:68:d6:e6:99:0f:a5:c7:e9:85: 32:61:bf:d8:66:23:86:ba:1d:91:f9:26:a5:7f:72:ad:7c:68: 5d:60:cd:16:61:73:ed:d3:fc:34:64:09:68:44:d3:23:be:34: ee:de:b7:a5:ae:77:e1:6e:d2:dc:f9:7f:04:d2:a6:6a:9e:35: 8c:5a:14:17:23:5b:e4:4c:a9:90:df:d9:ff:cd:f5:0c:62:67: 1d:76:a3:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjUxMDIwMTU1MDA5WhcNMjUxMDI3MTU1MDA5WjAYMRYwFAYD VQQDEw02OGY2NWEzMS1jNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw32nd5a0wOCkh3U5TJFH6USfNPWEhKM+e7c3eBKK6+M2cZVcOWo/DdQhm0Nt FsT+5Fh+17cFZNkmCPSO+WqouL0Q2gf24iJmyMu/O3dZw/ZFp2XzRxSqqIlbT5iK WBgUJa/w2lmLjgQUQbEgvNh3RmTAbJ88PNE92zpTU7rjrYncI5GDw0ANKuwlP9e4 bg50cN0wRZXrKxFCy4vYg8+meuur7cLSosAeIRfCCSlUn8oWG11zNS6KWsMh4KYq uondqbF1d95uXt4uf2sNncEFxitXArgaAm5mxBRFr2HZrB3wFrjK/29NCl9pHOm6 dMi5eQRj5ybeJ8FVKPSH4yRGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMldg4kO R6yx+BEGR27HW9GMTgr/MB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlneGUBIiZ62arsngHWzcQ/J2tr1AFvRs0k84JwW5fe9fDHRnAmcQX ou18nrAKOMsh9p1KyjXh8g50dWB5TRERGoQ/EL3JBfekcOvgQ12LOh6scrxP6Zw7 cp6qq7YsgmMfxiqIV0b8MZzA4zz0k8ilh8Y0NFgIjuzjXI15TWI3S+XWj6+yOCKC 1AWzm38QXp/5YLVPdsPVPjE7BgrHbn82TmarXDDBnd838gdo1uaZD6XH6YUyYb/Y ZiOGuh2R+Salf3KtfGhdYM0WYXPt0/w0ZAloRNMjvjTu3relrnfhbtLc+X8E0qZq njWMWhQXI1vkTKmQ39n/zfUMYmcddqPT -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:41 2025 by rpki-client