$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: nHaBiJmzqu+RzYqtMpt80nUth+VUEew0T97cYpoT6rE= Subject key identifier: 9A:E6:19:0C:6E:DC:A1:9F:6C:A2:EE:9E:8A:9B:04:6B:AE:84:41:E4 Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0D8D Signing time: Sat 18 Oct 2025 18:36:19 +0000 Manifest this update: Sat 18 Oct 2025 18:36:19 +0000 Manifest next update: Sat 25 Oct 2025 18:36:19 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: 00HcO1coE9NAJK2/kWxyTqCQhv5ZOgLy0FRMAfap5bs=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: D+ULNvDKVlD7JVj0dgqxkA98GxkgF1Daq5+neqboohk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: Oct 18 18:36:19 2025 GMT Not After : Oct 25 18:36:19 2025 GMT Subject: CN=68f3de23-89b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:e6:3d:65:4b:17:dd:58:71:35:e5:5f:ad: 52:e0:37:77:2d:72:80:e8:4a:cc:8e:a7:9f:18:a2: 33:cb:72:90:89:32:4f:8e:4d:e0:32:fc:b1:e8:8c: 06:56:67:76:f6:13:f9:85:17:64:c3:ba:34:8f:dc: 85:15:44:87:00:78:4a:2a:7f:fa:be:4f:60:e9:6d: c1:56:b5:b4:ed:21:66:db:7c:10:b1:ed:eb:a1:7e: 51:b8:04:b7:78:d4:e6:a6:a3:a0:86:ad:91:3e:0f: b2:00:87:f5:9f:0b:12:9e:10:7a:85:43:fc:7b:70: ce:4d:e4:b8:6c:a8:89:39:a1:ef:37:40:dd:84:2f: 73:a6:15:2a:15:40:33:0a:14:38:5d:25:6b:f1:f6: d0:76:8a:3d:54:d6:62:12:cb:56:35:28:17:1f:a9: 00:8b:f6:79:62:fe:5b:73:68:4f:2f:65:45:ba:27: 70:94:74:df:6e:c1:b4:d2:44:d5:da:3b:2f:21:23: 9a:8e:22:a1:a4:28:0c:d8:0f:bf:ce:1a:a6:ee:7c: d6:08:c6:dd:26:c0:8e:35:07:03:e4:e7:c9:90:b6: ff:b2:d9:8b:db:f6:fe:37:a6:16:6b:55:f6:a7:b8: 5d:0b:04:c6:21:52:55:ae:ad:fb:21:11:18:ab:70: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E6:19:0C:6E:DC:A1:9F:6C:A2:EE:9E:8A:9B:04:6B:AE:84:41:E4 X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b6:2a:e5:67:48:2f:c0:5d:d5:2d:bb:5f:d5:49:df:d3:8f: 83:15:89:5d:ab:9e:9d:c3:fb:94:f3:67:a0:fd:c4:07:9b:6b: a5:9d:62:13:34:ce:03:8f:bc:c3:41:0a:b2:0d:0b:43:41:12: 9c:cd:bf:2d:ff:c1:11:4a:3b:78:7c:14:a2:9a:ae:2b:ca:e1: f8:20:ce:1f:f9:9b:a5:ca:d8:1a:71:16:cd:ed:3d:19:f8:d4: 55:5d:2b:21:0f:54:d7:4a:e2:7e:10:b8:80:01:ee:cf:aa:ba: 35:f4:da:a5:25:ba:d2:35:66:c2:27:6c:4e:09:24:e9:5c:cb: 13:bb:56:9c:07:f4:b3:a8:4f:3d:01:9d:9f:ca:09:c5:68:24: b1:7d:74:f7:91:3d:7f:b7:73:0e:48:d6:5f:26:dc:5a:20:9e: 83:bf:ce:8c:2c:fc:f6:03:d2:a0:e8:74:7e:35:6a:2d:85:63: 8e:0a:ee:9d:5d:87:68:61:67:c3:e5:cc:82:3a:78:5a:4e:7c: 9a:49:d6:93:74:b5:2a:07:c5:a1:57:18:c3:ba:d3:05:8c:e9: b2:30:fd:d0:df:ee:cb:2e:f7:d4:e9:c6:62:1d:fb:86:5f:e1: ed:06:76:fa:e4:d9:18:c8:e3:06:7b:f7:99:bb:73:f6:12:d8: d3:d1:ef:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjUxMDE4MTgzNjE5WhcNMjUxMDI1MTgzNjE5WjAYMRYwFAYD VQQDEw02OGYzZGUyMy04OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/jmPWVLF91YcTXlX61S4Dd3LXKA6ErMjqefGKIzy3KQiTJPjk3gMvyx6IwG Vmd29hP5hRdkw7o0j9yFFUSHAHhKKn/6vk9g6W3BVrW07SFm23wQse3roX5RuAS3 eNTmpqOghq2RPg+yAIf1nwsSnhB6hUP8e3DOTeS4bKiJOaHvN0DdhC9zphUqFUAz ChQ4XSVr8fbQdoo9VNZiEstWNSgXH6kAi/Z5Yv5bc2hPL2VFuidwlHTfbsG00kTV 2jsvISOajiKhpCgM2A+/zhqm7nzWCMbdJsCONQcD5OfJkLb/stmL2/b+N6YWa1X2 p7hdCwTGIVJVrq37IREYq3CdKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrmGQxu 3KGfbKLunoqbBGuuhEHkMB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2tirlZ0gvwF3VLbtf1Unf04+DFYldq56dw/uU82eg/cQHm2ulnWIT NM4Dj7zDQQqyDQtDQRKczb8t/8ERSjt4fBSimq4ryuH4IM4f+ZulytgacRbN7T0Z +NRVXSshD1TXSuJ+ELiAAe7Pqro19NqlJbrSNWbCJ2xOCSTpXMsTu1acB/SzqE89 AZ2fygnFaCSxfXT3kT1/t3MOSNZfJtxaIJ6Dv86MLPz2A9Kg6HR+NWothWOOCu6d XYdoYWfD5cyCOnhaTnyaSdaTdLUqB8WhVxjDutMFjOmyMP3Q3+7LLvfU6cZiHfuG X+HtBnb65NkYyOMGe/eZu3P2EtjT0e+v -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:49 2025 by rpki-client