$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft File: qHs26y4WaoD40fwBFc6ZGwoBh50.mft (raw, json) Hash identifier: 4OW9j4cZxIIr3NRMq8RSjAmQnk6D4q5bgff9eOTw6w8= Subject key identifier: 5F:95:DB:00:9E:1E:1D:E7:71:D9:8D:70:4E:9E:FE:8B:F3:BE:EC:12 Authority key identifier: A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D Certificate issuer: /CN=A9166279/serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft Manifest number: 39 Signing time: Sun 19 Oct 2025 11:00:09 +0000 Manifest this update: Sun 19 Oct 2025 11:00:09 +0000 Manifest next update: Sun 26 Oct 2025 11:00:09 +0000 Files and hashes: 1: qHs26y4WaoD40fwBFc6ZGwoBh50.crl (hash: doumQDJshdYPLaa9KSn87Yl5xd3QqyaZL3cUwm1yuhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166279, serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D Validity Not Before: Oct 19 11:00:09 2025 GMT Not After : Oct 26 11:00:09 2025 GMT Subject: CN=68f4c4b9-4859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:45:27:4e:f9:4b:7d:cd:b8:2e:3b:8a:13: 8a:4d:ba:3a:c2:5a:33:f1:71:d1:7a:3a:66:ef:18: fc:3f:2a:b7:18:cf:ea:ea:71:e4:0a:54:f4:32:d8: 42:47:ab:41:cf:11:b7:42:c8:97:6f:8d:09:50:4a: ad:9f:47:67:ef:b0:7a:b3:71:71:6f:7a:54:38:c7: 7e:95:e7:97:01:0b:d3:3f:a2:3e:e4:1c:cd:75:d8: 1a:7a:bd:ec:f1:02:d0:3c:92:8e:da:ce:47:49:73: 43:1d:1f:f3:d6:81:d8:9a:91:d8:c0:bf:0a:ba:9f: af:38:e9:c6:c1:d7:1b:fa:a8:f8:dd:4d:c0:f5:01: 79:7e:07:ec:7e:72:ab:5f:37:20:e4:e2:65:30:6a: ad:29:e9:e3:00:7a:0d:75:19:c6:e4:c7:f9:55:9e: db:51:95:4c:a1:3c:0b:72:6d:27:40:19:ac:3d:30: 97:7a:75:22:cc:c8:02:64:bf:ed:e4:4f:f9:72:78: 2d:ad:9e:4e:d7:12:db:6b:36:db:3e:f5:e7:65:ed: a4:e7:5e:1a:66:47:35:4e:f5:27:6d:36:3f:72:e5: 70:a6:bf:4f:be:c1:c3:1f:97:1c:fe:bb:20:62:30: 0f:47:54:e8:da:4f:1a:79:94:c5:8e:c0:7e:a6:14: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:DB:00:9E:1E:1D:E7:71:D9:8D:70:4E:9E:FE:8B:F3:BE:EC:12 X509v3 Authority Key Identifier: keyid:A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d0:36:0c:a2:74:57:d1:e2:76:16:ff:0e:cb:34:ab:3e:04: 3a:aa:dc:a4:66:72:2f:34:fe:9e:6e:9a:92:09:f8:87:54:ba: c6:db:8e:f2:ae:46:f0:59:b5:3d:4d:0e:f9:ca:8a:f7:97:97: 04:b3:9f:f3:62:7b:10:cc:dd:0e:e0:71:a2:b2:cb:99:47:5c: ed:5b:5a:c1:fa:6a:18:c6:08:f7:8d:f4:74:ac:14:1a:69:9a: 0a:c6:d0:10:95:d4:d2:69:1e:65:78:a4:a0:a3:a0:c0:1a:b9: 7f:0d:d8:5b:8d:65:bc:da:6a:9d:d0:08:29:cb:cc:96:37:a2: ab:a4:bf:04:1e:35:df:ef:bc:a8:70:82:47:c3:23:11:c8:27: 2e:cf:a7:5e:a6:fb:be:90:e6:c5:2d:50:da:58:e8:6b:01:81: fc:e1:33:ae:d9:b4:71:2b:05:6a:1d:fa:e0:40:f9:de:9c:d4: 4d:d4:f0:a6:4d:ca:62:6c:6a:ce:22:d8:f7:9f:2c:4e:b9:65: 93:b1:f3:9e:43:3d:03:7e:af:6b:73:46:f8:28:cd:0e:86:8c: 78:c2:ab:eb:76:e0:02:1c:0d:de:5c:dc:f7:56:83:3e:bb:64: 78:67:68:19:4b:cb:38:bf:ac:49:35:9d:4f:ff:17:70:17:bb: 93:2f:22:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjI3OTExMC8GA1UEBRMoQTg3QjM2RUIyRTE2NkE4MEY4RDFGQzAxMTVDRTk5MUIw QTAxODc5RDAeFw0yNTEwMTkxMTAwMDlaFw0yNTEwMjYxMTAwMDlaMBgxFjAUBgNV BAMTDTY4ZjRjNGI5LTQ4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMeUUnTvlLfc24LjuKE4pNujrCWjPxcdF6OmbvGPw/KrcYz+rqceQKVPQy2EJH q0HPEbdCyJdvjQlQSq2fR2fvsHqzcXFvelQ4x36V55cBC9M/oj7kHM112Bp6vezx AtA8ko7azkdJc0MdH/PWgdiakdjAvwq6n6846cbB1xv6qPjdTcD1AXl+B+x+cqtf NyDk4mUwaq0p6eMAeg11Gcbkx/lVnttRlUyhPAtybSdAGaw9MJd6dSLMyAJkv+3k T/lyeC2tnk7XEttrNts+9edl7aTnXhpmRzVO9SdtNj9y5XCmv0++wcMflxz+uyBi MA9HVOjaTxp5lMWOwH6mFCK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX5XbAJ4e Hedx2Y1wTp7+i/O+7BIwHwYDVR0jBBgwFoAUqHs26y4WaoD40fwBFc6ZGwoBh50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2Mjc5LzQxODFDNENFNThD RDExRjBBRDEwMDg3N0M0RjlBRTAyL3FIczI2eTRXYW9ENDBmd0JGYzZaR3dvQmg1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUhzMjZ5NFdhb0Q0MGZ3QkZjNlpHd29CaDUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 Mjc5LzQxODFDNENFNThDRDExRjBBRDEwMDg3N0M0RjlBRTAyL3FIczI2eTRXYW9E NDBmd0JGYzZaR3dvQmg1MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHQNgyidFfR4nYW/w7LNKs+BDqq3KRmci80/p5umpIJ+IdUusbbjvKu RvBZtT1NDvnKiveXlwSzn/NiexDM3Q7gcaKyy5lHXO1bWsH6ahjGCPeN9HSsFBpp mgrG0BCV1NJpHmV4pKCjoMAauX8N2FuNZbzaap3QCCnLzJY3oqukvwQeNd/vvKhw gkfDIxHIJy7Pp16m+76Q5sUtUNpY6GsBgfzhM67ZtHErBWod+uBA+d6c1E3U8KZN ymJsas4i2PefLE65ZZOx855DPQN+r2tzRvgozQ6GjHjCq+t24AIcDd5c3PdWgz67 ZHhnaBlLyzi/rEk1nU//F3AXu5MvIvo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:39 2025 by rpki-client