$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: vUT/+PsZWLmkSDnnabU9XFYOaCge+6W60cbjmh/QTsw= Subject key identifier: 6A:70:93:14:23:01:D2:E0:27:C7:E8:12:90:4A:B1:4A:0B:3D:F2:95 Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0470 Signing time: Sun 19 Oct 2025 02:02:38 +0000 Manifest this update: Sun 19 Oct 2025 02:02:37 +0000 Manifest next update: Sun 26 Oct 2025 02:02:37 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: 2athPMo9gkif4pCwHouwtXeQ+IPLspA9bH+GEbc65Y4=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: Oct 19 02:02:37 2025 GMT Not After : Oct 26 02:02:37 2025 GMT Subject: CN=68f446bd-3d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:3e:fa:f3:69:a7:d8:af:e0:49:a2:56:16: 32:36:89:6a:e9:f5:9f:d2:6b:51:0d:56:7f:7c:06: 04:b6:09:68:95:a5:43:e2:12:68:33:24:16:72:2e: 56:bb:e2:96:b4:6c:fd:5d:fe:95:be:42:c5:45:4b: bc:4a:92:f5:90:6a:77:38:27:f1:85:84:ab:e0:54: c6:3e:22:85:84:97:a6:61:84:28:7d:e6:be:ea:02: 9e:f0:df:05:e3:db:38:97:52:62:c2:5e:2d:23:bd: 19:21:1b:f7:c9:91:11:b5:69:b2:17:ab:db:07:b0: 58:08:c7:34:98:38:94:e8:14:86:b3:da:79:79:76: ae:1e:40:25:26:27:8e:8b:0a:2d:40:d9:e7:82:a2: 30:a3:13:3c:eb:e8:6b:83:66:65:12:53:04:ff:7f: a9:ac:b3:91:a9:1d:41:82:0a:2e:0a:75:6b:b1:49: 53:32:aa:9e:4f:96:f0:13:3d:a9:b0:ca:2f:f3:86: 48:d4:d4:dd:f6:ec:12:53:74:ff:67:0b:c6:1b:92: 7a:ae:35:01:5a:b4:85:49:ea:e4:00:1e:03:42:59: 34:86:4e:db:eb:97:2d:f3:8e:d1:ef:95:a6:35:9d: 78:d4:12:ef:77:b7:1c:b3:72:35:9a:e7:cb:4e:f5: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:70:93:14:23:01:D2:E0:27:C7:E8:12:90:4A:B1:4A:0B:3D:F2:95 X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:06:ae:c1:d6:24:e5:c2:fa:bd:28:42:0b:8d:f9:d8:c7:f2: 77:42:eb:df:42:9c:6f:6e:ae:f7:bf:ec:08:b0:1d:9c:6f:c0: f0:ea:2f:72:f6:66:c9:e2:02:d8:3e:2d:d5:bb:d2:c3:3f:4f: 22:fc:e5:77:49:56:e8:be:36:de:65:2b:e1:a9:38:58:9e:fd: d2:a9:de:9f:c7:27:f6:79:f1:d4:6f:45:14:f4:00:74:ef:66: 29:b5:26:ec:20:01:42:28:69:d4:43:13:e1:c1:5e:48:87:0f: a8:1a:4f:6d:54:07:68:ed:0a:b7:55:54:f6:62:b0:90:57:fd: 13:6c:2f:f1:49:29:57:44:26:4f:ef:2a:52:d6:f4:05:a4:bd: 14:22:d9:00:b1:63:bb:4c:79:7c:e2:c3:de:a0:37:ba:91:a7: d0:af:20:7e:13:00:de:21:02:24:eb:33:7b:9e:cd:6e:60:36: 7b:47:2e:15:4e:23:31:b7:dc:fb:2c:32:3c:7d:03:9d:c0:9d: 68:21:bd:3a:68:6c:dc:b1:85:5d:16:b8:39:28:43:68:5d:15: ad:3f:58:ca:fa:2c:73:93:ca:48:0c:01:c4:b2:6f:b0:4b:38: 67:b4:86:a2:e5:19:f6:6c:59:e7:25:e5:48:02:57:2e:85:b6: aa:bd:e7:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUxMDE5MDIwMjM3WhcNMjUxMDI2MDIwMjM3WjAYMRYwFAYD VQQDEw02OGY0NDZiZC0zZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PQ++vNpp9iv4EmiVhYyNolq6fWf0mtRDVZ/fAYEtglolaVD4hJoMyQWci5W u+KWtGz9Xf6VvkLFRUu8SpL1kGp3OCfxhYSr4FTGPiKFhJemYYQofea+6gKe8N8F 49s4l1Jiwl4tI70ZIRv3yZERtWmyF6vbB7BYCMc0mDiU6BSGs9p5eXauHkAlJieO iwotQNnngqIwoxM86+hrg2ZlElME/3+prLORqR1BggouCnVrsUlTMqqeT5bwEz2p sMov84ZI1NTd9uwSU3T/ZwvGG5J6rjUBWrSFSerkAB4DQlk0hk7b65ct847R75Wm NZ141BLvd7ccs3I1mufLTvWImwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpwkxQj AdLgJ8foEpBKsUoLPfKVMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxBq7B1iTlwvq9KEILjfnYx/J3QuvfQpxvbq73v+wIsB2cb8Dw6i9y 9mbJ4gLYPi3Vu9LDP08i/OV3SVbovjbeZSvhqThYnv3Sqd6fxyf2efHUb0UU9AB0 72YptSbsIAFCKGnUQxPhwV5Ihw+oGk9tVAdo7Qq3VVT2YrCQV/0TbC/xSSlXRCZP 7ypS1vQFpL0UItkAsWO7THl84sPeoDe6kafQryB+EwDeIQIk6zN7ns1uYDZ7Ry4V TiMxt9z7LDI8fQOdwJ1oIb06aGzcsYVdFrg5KENoXRWtP1jK+ixzk8pIDAHEsm+w SzhntIai5Rn2bFnnJeVIAlcuhbaqvedh -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:15 2025 by rpki-client