$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: 4h+I1lLasNm72ynBRj8V9RwXb8avpb/lr7b0mD19caI= Subject key identifier: 88:EA:28:A0:2B:60:93:AD:D3:6F:32:54:65:98:D9:A4:16:BB:D6:36 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 09:32:51 +0000 Manifest this update: Sun 19 Oct 2025 09:32:50 +0000 Manifest next update: Sun 26 Oct 2025 09:32:50 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: StU8HJ0TUl1FC1EKG/pC1QgHEDtgGNhPKj48eIavEz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Oct 19 09:32:50 2025 GMT Not After : Oct 26 09:32:50 2025 GMT Subject: CN=68f4b043-3d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:cb:8d:fa:1a:72:26:63:0d:33:b3:17:c3: e9:75:a9:15:19:77:db:3f:6c:7c:33:27:37:4e:2c: d9:33:1e:6b:d3:18:00:13:d6:55:12:be:10:c2:1b: c9:a8:f6:9d:04:1c:f3:79:21:3a:d7:88:08:17:ad: 4d:77:16:11:dd:ce:1b:6b:f7:18:0f:61:70:ad:f8: e6:b4:3d:bf:33:c4:1b:4f:db:93:d7:ca:41:ae:05: e6:b7:70:8a:d2:8d:5d:af:2a:2e:36:7b:76:96:7e: 6e:12:a5:64:19:38:75:60:9f:1b:ee:d0:1d:d5:f4: 2e:a9:f6:fd:67:60:33:af:71:35:92:d4:df:47:38: 61:14:dd:4f:0f:88:cc:a9:1f:81:b0:70:1f:ae:7f: 53:d8:d3:0a:a1:4c:90:ed:00:19:3f:fc:c1:15:2c: 4c:46:7b:c9:07:64:da:c5:8d:8c:0f:99:71:0e:cb: 8a:6c:83:bc:47:df:d5:a6:70:d1:ee:2c:5a:20:02: 76:a3:4b:74:d2:53:7c:c2:f8:3f:a6:97:b3:a8:fe: a9:a7:42:69:c1:b6:a9:b1:ef:99:67:cc:01:ff:82: e1:05:00:f3:6e:ef:60:8a:25:91:8b:e1:29:01:b5: e7:8f:c5:50:1d:26:21:62:61:31:7b:e8:ae:e5:32: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:28:A0:2B:60:93:AD:D3:6F:32:54:65:98:D9:A4:16:BB:D6:36 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b1:51:de:0c:26:74:04:fd:44:86:40:bf:03:32:97:fb:f9: 5d:91:88:df:e8:02:a9:1f:5d:ef:eb:97:f4:7f:e8:13:43:77: dd:2b:64:14:f2:41:a8:94:66:45:37:f8:3a:51:ba:80:4f:83: f6:f3:85:b0:4d:43:d2:14:8b:e6:6d:b6:19:67:8b:19:fc:9c: 2f:3a:42:fa:5c:0f:a1:63:fc:90:6b:1b:59:6d:18:6a:95:0f: bf:e0:24:c9:7f:83:84:47:98:cd:21:78:d9:7a:ad:73:38:34: 61:c1:bf:29:6d:a3:bb:9f:d2:b0:03:a4:5e:b3:77:39:9a:73: af:81:42:15:de:eb:59:ce:dc:6d:33:37:eb:44:e6:a2:e3:10: 31:e8:f1:b8:c4:51:c7:aa:54:b4:f3:bf:e4:ac:71:c7:c4:a6: 60:c5:22:e7:32:54:c2:b6:4b:33:dc:65:82:cb:ad:f6:2e:4f: fc:2e:6f:87:8a:f1:94:c6:05:d1:5a:2f:6d:ad:31:f5:45:c9: 3f:28:87:ef:63:8b:17:4a:a9:bc:ed:8c:21:22:47:74:25:12: 20:fd:db:ca:c7:88:84:d3:60:b6:ea:52:67:6b:ae:5f:69:7e: f7:c4:f6:60:52:e7:9d:99:c5:05:65:96:63:f2:82:c3:96:64: e5:e0:40:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDQzQjIyMkZFM0JFNDkxQUQ3MDU4QkVEMzgwNDIxNDQy NUQ2OTQxQjcwHhcNMjUxMDE5MDkzMjUwWhcNMjUxMDI2MDkzMjUwWjAYMRYwFAYD VQQDEw02OGY0YjA0My0zZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNfLjfoaciZjDTOzF8PpdakVGXfbP2x8Myc3TizZMx5r0xgAE9ZVEr4QwhvJ qPadBBzzeSE614gIF61NdxYR3c4ba/cYD2FwrfjmtD2/M8QbT9uT18pBrgXmt3CK 0o1dryouNnt2ln5uEqVkGTh1YJ8b7tAd1fQuqfb9Z2Azr3E1ktTfRzhhFN1PD4jM qR+BsHAfrn9T2NMKoUyQ7QAZP/zBFSxMRnvJB2TaxY2MD5lxDsuKbIO8R9/VpnDR 7ixaIAJ2o0t00lN8wvg/ppezqP6pp0Jpwbapse+ZZ8wB/4LhBQDzbu9giiWRi+Ep AbXnj8VQHSYhYmExe+iu5TLagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjqKKAr YJOt028yVGWY2aQWu9Y2MB8GA1UdIwQYMBaAFEOyIv475JGtcFi+04BCFEJdaUG3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny9FNUJGRUE0NkI4 MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9RN0lpX2p2a2thMXdXTDdUZ0VJVVFsMXBR YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny9FNUJGRUE0NkI4MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9RN0lpX2p2a2th MXdXTDdUZ0VJVVFsMXBRYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqsVHeDCZ0BP1EhkC/AzKX+/ldkYjf6AKpH13v65f0f+gTQ3fdK2QU 8kGolGZFN/g6UbqAT4P284WwTUPSFIvmbbYZZ4sZ/JwvOkL6XA+hY/yQaxtZbRhq lQ+/4CTJf4OER5jNIXjZeq1zODRhwb8pbaO7n9KwA6Res3c5mnOvgUIV3utZztxt MzfrROai4xAx6PG4xFHHqlS087/krHHHxKZgxSLnMlTCtksz3GWCy632Lk/8Lm+H ivGUxgXRWi9trTH1Rck/KIfvY4sXSqm87YwhIkd0JRIg/dvKx4iE02C26lJna65f aX73xPZgUuedmcUFZZZj8oLDlmTl4EA5 -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:27 2025 by rpki-client