$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: MxepVsOoNqNEsnodZymP0DjYNcrmXwtzUbGWadRQWgw= Subject key identifier: 2D:ED:E9:68:91:18:45:4B:0A:46:B7:34:5F:21:9D:DC:FF:CF:5A:98 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 07D9 Signing time: Sat 18 Oct 2025 22:52:08 +0000 Manifest this update: Sat 18 Oct 2025 22:52:07 +0000 Manifest next update: Sat 25 Oct 2025 22:52:07 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: N1Hy8hrUWIGZ1ZLyhDubBWq1r+x03/IyUzDY6GqR78I=) 2: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (hash: 03wi7IG5P1czOcddPN5vsNRfyzHh+7OYacomNnDj2fI=) 3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) 4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: zJAHsR5vMmBId4rgQblkmv5dzmrkfUHqapxlAFUK3IU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Oct 18 22:52:07 2025 GMT Not After : Oct 25 22:52:07 2025 GMT Subject: CN=68f41a18-ddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:e1:ac:50:76:07:06:dd:d3:d8:ac:2e:31: 00:a5:bc:4e:2d:d9:a6:29:a6:cd:a2:0d:ae:5e:c5: 03:38:62:54:1e:cb:f7:45:b9:3b:24:13:14:12:62: 50:1e:9c:7e:27:ac:53:6c:cd:5f:10:43:51:6a:38: 70:6f:93:45:5a:16:b4:1f:65:86:b1:99:02:13:fd: 53:08:39:f9:ee:d4:73:d4:b5:6e:5f:bc:11:ea:5e: f1:3f:05:af:87:28:f0:50:ab:d9:49:4c:16:e5:88: 2a:57:fb:b7:ac:8a:04:28:2e:cb:49:c5:3d:6e:0b: ac:c0:c2:b3:e6:9d:b4:98:c4:73:0c:9d:8b:57:6f: 2f:fc:5a:2f:da:81:18:a0:23:1a:45:85:48:84:c8: 2a:f8:6a:01:17:00:1e:ff:b8:9b:3f:7f:36:6e:47: 01:47:d6:79:8a:4b:ba:5f:58:4c:71:6b:16:7f:f2: f4:60:a3:9a:b5:72:48:7f:d6:79:09:14:22:28:2a: 78:15:27:d4:88:f2:30:59:f1:1c:95:40:cb:28:4f: 18:c1:92:83:44:51:9d:72:2e:fb:d7:38:a1:8d:09: 92:54:2a:17:03:cf:53:2f:96:ed:6d:ed:41:65:84: f5:af:c9:c3:f5:b2:34:e7:21:bc:6b:1a:6e:17:a9: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:ED:E9:68:91:18:45:4B:0A:46:B7:34:5F:21:9D:DC:FF:CF:5A:98 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:47:e1:7d:42:ea:11:97:2d:84:2d:c6:d9:db:09:97:22:b3: 30:19:99:37:1c:b3:76:be:ec:66:ad:91:2a:cb:ad:4e:6d:ad: be:be:db:aa:9c:fa:39:03:56:4d:c7:b5:8b:5e:f3:4b:86:43: 84:e3:2a:58:82:51:de:b9:24:bf:61:c9:37:1b:86:04:20:bb: 8e:63:f4:89:c9:4d:a4:5f:32:cf:a3:68:7b:f0:04:ce:1d:de: a6:db:c6:46:f2:35:01:cc:5b:db:a6:1b:68:4b:c2:22:6e:84: 8f:92:27:42:17:70:8f:a3:8c:cf:28:5d:6b:25:b4:ad:4d:20: c2:0d:ed:ff:f7:0e:1e:80:8c:7b:49:b3:14:a9:17:2e:5e:6f: 23:3a:fc:68:3b:32:c3:08:07:23:6b:85:d8:d1:28:88:62:bb: 41:dc:33:86:3d:ea:fe:38:3b:f6:02:2f:40:b7:84:df:93:32: 24:94:f0:d4:68:25:de:17:63:ef:d2:33:69:67:54:eb:a4:6a: f9:9b:8e:79:51:3e:74:b1:a0:35:51:eb:d8:cb:bf:e8:bc:24: 01:1d:16:3a:6e:be:44:79:50:3a:a3:19:52:10:cb:fa:a3:63: f3:65:b8:4f:50:a2:e6:44:52:bf:f6:2f:7a:55:0b:61:8d:44: f8:30:5e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUxMDE4MjI1MjA3WhcNMjUxMDI1MjI1MjA3WjAYMRYwFAYD VQQDEw02OGY0MWExOC1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcDhrFB2Bwbd09isLjEApbxOLdmmKabNog2uXsUDOGJUHsv3Rbk7JBMUEmJQ Hpx+J6xTbM1fEENRajhwb5NFWha0H2WGsZkCE/1TCDn57tRz1LVuX7wR6l7xPwWv hyjwUKvZSUwW5YgqV/u3rIoEKC7LScU9bguswMKz5p20mMRzDJ2LV28v/Fov2oEY oCMaRYVIhMgq+GoBFwAe/7ibP382bkcBR9Z5iku6X1hMcWsWf/L0YKOatXJIf9Z5 CRQiKCp4FSfUiPIwWfEclUDLKE8YwZKDRFGdci771zihjQmSVCoXA89TL5btbe1B ZYT1r8nD9bI05yG8axpuF6n9mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3t6WiR GEVLCka3NF8hndz/z1qYMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7R+F9QuoRly2ELcbZ2wmXIrMwGZk3HLN2vuxmrZEqy61Oba2+vtuq nPo5A1ZNx7WLXvNLhkOE4ypYglHeuSS/Yck3G4YEILuOY/SJyU2kXzLPo2h78ATO Hd6m28ZG8jUBzFvbphtoS8IiboSPkidCF3CPo4zPKF1rJbStTSDCDe3/9w4egIx7 SbMUqRcuXm8jOvxoOzLDCAcja4XY0SiIYrtB3DOGPer+ODv2Ai9At4TfkzIklPDU aCXeF2Pv0jNpZ1TrpGr5m455UT50saA1UevYy7/ovCQBHRY6br5EeVA6oxlSEMv6 o2PzZbhPUKLmRFK/9i96VQthjUT4MF6u -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:02 2025 by rpki-client