$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: qIp6CFGgSrpFD++UQ/d1U9BoDIxHxx4b17xdFyyZvUc= Subject key identifier: FB:47:F5:67:39:2F:24:6C:75:A2:0D:4D:C6:63:25:0E:67:EE:48:4D Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: CE Signing time: Sun 19 Oct 2025 08:51:37 +0000 Manifest this update: Sun 19 Oct 2025 08:51:36 +0000 Manifest next update: Sun 26 Oct 2025 08:51:36 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: hNmK/ngOgMrxNtiZ393HU7dC+ROc3xq2giJvASAmvHU=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: cK3qZ0WbmEjnc5MEuUycpoBiFZhSbR9pAa+lxxTpapw=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: RfcMIG1IXwx6pF5vk+cVTv0c/fwzJvqDiir11C+zzpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Oct 19 08:51:36 2025 GMT Not After : Oct 26 08:51:36 2025 GMT Subject: CN=68f4a698-cc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:96:71:77:3e:12:17:a1:6f:83:b3:b6:94:d9: 80:e9:33:27:95:a7:26:c2:b1:94:f0:94:20:03:1a: 37:8c:51:53:7c:53:9a:1d:77:b1:c3:2e:27:b8:a7: de:03:e8:f2:4d:bc:b1:d4:aa:d1:d4:eb:1d:92:52: 0e:13:9e:87:d2:81:67:f8:83:d1:70:87:a0:f7:61: 04:73:2d:75:65:57:6a:18:85:fe:01:ca:ca:21:a8: 25:41:f3:92:2b:80:79:f5:da:3c:7b:6c:19:8d:33: 57:d2:4d:2b:d5:13:98:b4:6c:63:e7:c4:39:72:90: b6:e4:2b:6f:94:7d:77:21:d7:2b:25:c5:ff:9f:c0: d0:ae:c9:e7:60:53:a8:00:e1:3f:87:d9:3e:ee:6b: 75:37:c7:7a:65:1c:2a:e5:53:80:21:4c:4b:53:ea: 51:19:1d:34:2d:75:5c:c1:a4:43:89:54:e6:18:0f: fa:59:5c:7e:e3:29:02:e2:ce:c9:f8:6e:ff:dd:f1: 18:ce:11:f0:72:fc:a0:42:dd:83:d6:f7:29:b2:2d: c6:4d:d8:a2:d2:b5:c2:2f:50:9d:8c:0f:20:26:5f: 8c:7d:d4:b7:84:0d:52:7c:1b:7b:a6:b5:35:64:f0: 41:3f:0c:72:5c:a2:27:d0:bc:e6:7a:b5:de:1a:a6: b4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:47:F5:67:39:2F:24:6C:75:A2:0D:4D:C6:63:25:0E:67:EE:48:4D X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:36:6e:bd:bd:6f:33:38:2f:68:86:48:be:5a:ad:71:d3:e8: 69:39:8d:e2:94:c5:ff:ea:98:26:bd:c5:61:58:05:47:c3:6e: dd:27:a6:24:1f:bb:ab:c5:fe:6d:c0:b8:b2:0b:3f:b3:99:76: 57:83:ed:a3:1b:4f:7f:b8:32:1d:b8:9e:ae:1d:bf:83:ff:19: 3b:6c:9f:10:3e:6a:8c:f2:04:55:41:29:7e:bc:f3:d2:d3:41: 08:04:cc:67:03:9f:73:06:8f:bc:f5:8a:75:7e:5e:a5:f0:f7: d1:d0:8d:37:49:a9:ee:f1:d0:50:cf:2d:c7:8e:8d:95:c2:53: 40:ae:2f:57:38:25:97:de:c5:22:6d:42:70:4e:c1:24:8b:be: 2f:86:51:05:18:e9:e7:b4:08:e1:9b:ae:3d:2e:40:48:57:50: 09:8e:bc:57:f4:2f:12:02:1a:f7:65:50:11:4b:9a:bc:a5:7d: 40:6a:92:b3:14:6a:a3:ca:30:81:3d:37:2b:62:83:38:7e:da: 37:6b:12:9e:21:a0:b5:61:79:f7:73:ea:9d:df:3f:df:05:d6: 7b:3a:49:ab:6c:11:f7:9a:70:99:ad:39:b1:87:58:44:f5:a4: b9:f5:16:ea:65:08:69:34:6e:e3:5e:b8:de:ba:4b:a0:ed:5e: e7:75:73:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUxMDE5MDg1MTM2WhcNMjUxMDI2MDg1MTM2WjAYMRYwFAYD VQQDEw02OGY0YTY5OC1jYzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA95Zxdz4SF6Fvg7O2lNmA6TMnlacmwrGU8JQgAxo3jFFTfFOaHXexwy4nuKfe A+jyTbyx1KrR1OsdklIOE56H0oFn+IPRcIeg92EEcy11ZVdqGIX+AcrKIaglQfOS K4B59do8e2wZjTNX0k0r1ROYtGxj58Q5cpC25CtvlH13IdcrJcX/n8DQrsnnYFOo AOE/h9k+7mt1N8d6ZRwq5VOAIUxLU+pRGR00LXVcwaRDiVTmGA/6WVx+4ykC4s7J +G7/3fEYzhHwcvygQt2D1vcpsi3GTdii0rXCL1CdjA8gJl+MfdS3hA1SfBt7prU1 ZPBBPwxyXKIn0LzmerXeGqa0FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtH9Wc5 LyRsdaINTcZjJQ5n7khNMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXNm69vW8zOC9ohki+Wq1x0+hpOY3ilMX/6pgmvcVhWAVHw27dJ6Yk H7urxf5twLiyCz+zmXZXg+2jG09/uDIduJ6uHb+D/xk7bJ8QPmqM8gRVQSl+vPPS 00EIBMxnA59zBo+89Yp1fl6l8PfR0I03Sanu8dBQzy3Hjo2VwlNAri9XOCWX3sUi bUJwTsEki74vhlEFGOnntAjhm649LkBIV1AJjrxX9C8SAhr3ZVARS5q8pX1AapKz FGqjyjCBPTcrYoM4fto3axKeIaC1YXn3c+qd3z/fBdZ7OkmrbBH3mnCZrTmxh1hE 9aS59RbqZQhpNG7jXrjeukug7V7ndXMp -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:50 2025 by rpki-client