$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json) Hash identifier: 1RCbWPggHqq+1ItvGijrqzXmvKHkPLfoE+Ag4kyUIwc= Subject key identifier: FB:C8:BF:2E:32:90:CA:4C:83:7B:30:6D:C3:3C:72:29:E3:59:DA:8B Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:07:27 +0000 Manifest this update: Sun 19 Oct 2025 08:07:26 +0000 Manifest next update: Sun 26 Oct 2025 08:07:26 +0000 Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: ANaulWk0zGCBWWU9OBs2/OYy7DXdypP7u08zu+1q5DM=) 2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: V+nudqfqbNoV97hl4ZZQ3M1A1LzH6OKD9ocfKTUUibo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6 Validity Not Before: Oct 19 08:07:26 2025 GMT Not After : Oct 26 08:07:26 2025 GMT Subject: CN=68f49c3f-3891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:12:98:ca:35:90:21:c6:62:11:4d:bb:d0: 93:d9:a9:09:4e:3f:e1:38:5b:55:82:58:b8:72:5f: ee:f1:e6:53:16:93:b0:41:a5:7d:cb:7e:62:f3:fe: b4:b6:20:33:90:09:7b:d4:7a:39:43:b8:32:47:06: 0f:e0:d8:89:32:ed:25:5f:d4:63:93:de:6f:52:46: f9:d6:42:86:22:4d:c5:2f:b5:e1:d4:fb:62:6d:11: 2a:84:a4:71:13:19:bf:b0:a4:6d:8b:f5:cb:1c:55: a6:ff:a1:69:56:10:83:9f:2a:62:32:ca:7f:6f:63: 25:89:fe:06:0c:33:01:9a:15:93:ab:9d:61:e8:39: f1:1b:4d:f9:91:cd:99:4f:37:15:14:49:ea:55:cf: 92:94:8b:6d:b7:6d:94:a9:0a:8c:92:6e:e6:ab:71: 6a:22:2c:0c:17:c3:69:df:f6:19:fc:04:57:88:63: 90:34:be:e3:fa:36:3c:1b:2c:5d:46:41:fb:3c:5f: 44:b3:0c:08:d6:7e:bc:c4:3e:c4:cb:a6:75:ab:ee: 73:1a:e0:58:ec:99:e4:c0:46:9f:e3:33:5d:d4:de: b6:98:c8:50:3b:f3:35:98:ac:c6:f6:ea:ee:bb:9b: d2:22:ef:04:ce:89:3e:7d:67:55:ab:e3:a7:b3:2d: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C8:BF:2E:32:90:CA:4C:83:7B:30:6D:C3:3C:72:29:E3:59:DA:8B X509v3 Authority Key Identifier: keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:01:a6:60:7a:d1:1d:48:30:d7:b8:17:24:7e:02:1a:36:35: 4b:d3:bd:8c:11:b6:34:fb:18:ff:ff:fe:1a:5c:13:71:e1:96: ef:32:30:72:49:f5:55:5b:85:23:16:f3:e2:2d:02:4d:2b:6a: 85:b2:e8:93:c8:69:11:32:be:bc:27:77:34:be:af:97:58:df: 30:02:9f:74:21:d0:e2:f9:be:5f:7e:f9:b2:3b:29:4b:fe:ac: dc:a3:17:f6:9d:3f:c2:d0:66:bf:f5:6c:8e:3c:51:27:23:82: 66:87:46:eb:e8:29:e9:b6:88:35:01:cc:4d:16:4a:8c:9d:ab: 78:2d:ad:00:d7:37:5e:b4:57:81:2f:90:dd:1f:46:b2:c3:c3: 79:68:de:5b:7d:93:ea:9b:ff:48:36:1e:fd:05:04:c5:00:75: d1:77:98:7a:31:2f:03:bb:87:38:64:9f:a4:2b:99:df:28:3f: 39:fa:55:23:16:7a:d5:ff:1d:13:76:1a:fb:35:67:0b:58:10: d1:dc:e3:ff:c8:8a:42:e4:1f:31:a0:89:49:b8:2d:2c:07:e0: 73:be:a4:57:36:51:4a:aa:91:b4:1d:5e:2e:43:c9:3d:0f:93: 00:25:47:5b:5c:89:bd:9a:d5:1b:32:4b:4c:34:f0:d1:4f:a3: d9:e5:ea:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC RkZENENDQjYwHhcNMjUxMDE5MDgwNzI2WhcNMjUxMDI2MDgwNzI2WjAYMRYwFAYD VQQDEw02OGY0OWMzZi0zODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ysSmMo1kCHGYhFNu9CT2akJTj/hOFtVgli4cl/u8eZTFpOwQaV9y35i8/60 tiAzkAl71Ho5Q7gyRwYP4NiJMu0lX9Rjk95vUkb51kKGIk3FL7Xh1PtibREqhKRx Exm/sKRti/XLHFWm/6FpVhCDnypiMsp/b2Mlif4GDDMBmhWTq51h6DnxG035kc2Z TzcVFEnqVc+SlIttt22UqQqMkm7mq3FqIiwMF8Np3/YZ/ARXiGOQNL7j+jY8Gyxd RkH7PF9EswwI1n68xD7Ey6Z1q+5zGuBY7JnkwEaf4zNd1N62mMhQO/M1mKzG9uru u5vSIu8Ezok+fWdVq+Onsy2L9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvIvy4y kMpMg3swbcM8cinjWdqLMB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6 TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr ZFZTSGxOMzZScENfX1V6TFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqAaZgetEdSDDXuBckfgIaNjVL072MEbY0+xj///4aXBNx4ZbvMjBy SfVVW4UjFvPiLQJNK2qFsuiTyGkRMr68J3c0vq+XWN8wAp90IdDi+b5ffvmyOylL /qzcoxf2nT/C0Ga/9WyOPFEnI4Jmh0br6Cnptog1AcxNFkqMnat4La0A1zdetFeB L5DdH0ayw8N5aN5bfZPqm/9INh79BQTFAHXRd5h6MS8Du4c4ZJ+kK5nfKD85+lUj FnrV/x0Tdhr7NWcLWBDR3OP/yIpC5B8xoIlJuC0sB+BzvqRXNlFKqpG0HV4uQ8k9 D5MAJUdbXIm9mtUbMktMNPDRT6PZ5epp -----END CERTIFICATE-----Generated at Tue Oct 21 02:46:46 2025 by rpki-client