$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: gCu8Uw8wdPiYFPA/aHB2HWgEf89SZUXkgJr2mvfrlKc= Subject key identifier: 0B:A8:94:09:A3:F8:DA:CE:03:85:2A:69:42:FE:9B:A4:13:23:A2:AE Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 099A Signing time: Sun 02 Nov 2025 20:06:30 +0000 Manifest this update: Sun 02 Nov 2025 20:06:29 +0000 Manifest next update: Sun 09 Nov 2025 20:06:29 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: Sklk0XSLt0edKR+haOfKdw+qCNIishAm3LXdMkPH24M=) 2: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: ybP8IsFu0DeKSACmjJD6LLFQ1b+PpZBTXbG4HzvhKhU=) 3: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: y+1LcMZWVq0sxCzTaWENpdmxk9z32hroZYUL1UHWPKM=) 4: 31CBA5B2ADA111F0B7AAD41DC4F9AE02.roa (hash: 5CxgvuF0fJ72SB6Diy3BJqOrlsftLe1kTIIMVXc1D1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Nov 2 20:06:29 2025 GMT Not After : Nov 9 20:06:29 2025 GMT Subject: CN=6907b9c5-31e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:12:51:de:98:0b:27:0f:00:46:a1:52:6f: f8:e6:b8:f7:fe:0a:02:00:49:37:6e:de:82:a0:5d: 17:0d:ae:98:0f:56:73:4d:a2:54:d1:eb:bc:46:7e: 0a:37:ab:a7:6b:7d:9e:31:df:0f:bb:a7:85:17:d1: c5:5a:66:a8:10:75:a8:5b:ac:59:9d:e2:7c:e7:6d: 98:ea:09:10:e2:f1:6f:4c:f8:f6:c4:8b:20:98:bb: 24:80:5f:45:ef:8b:89:9a:f6:24:a2:47:f8:68:5e: 3d:1c:ea:47:16:ac:7f:0a:1d:ef:f4:f8:ca:6f:2a: a3:86:7c:84:b6:e5:91:3c:71:a9:62:0a:42:50:1b: d7:4e:f5:b6:c8:54:53:8a:43:7c:e5:c7:06:f3:3c: 20:1e:70:39:8d:62:d8:98:8a:23:6c:f4:6e:26:44: 66:1e:9c:4b:62:9e:aa:04:81:1d:07:c1:28:4d:ed: 17:29:5e:aa:9c:22:87:ce:6d:93:e8:6f:b5:e9:55: f6:41:ed:e4:53:44:3d:2c:b6:33:42:91:e0:67:32: dd:d5:44:82:ac:58:38:34:82:4d:54:6d:d4:b8:6b: c2:52:17:62:6e:49:cd:cc:a1:97:87:c0:2f:4b:8c: 6e:4c:d9:9b:6f:e9:29:64:4d:2d:56:42:01:7d:86: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A8:94:09:A3:F8:DA:CE:03:85:2A:69:42:FE:9B:A4:13:23:A2:AE X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d4:f0:b6:8a:2f:cb:eb:52:bc:7e:dd:ca:32:73:3c:13:38: 4e:14:3c:e4:65:09:a6:8c:25:65:37:a6:f6:06:db:38:13:45: b2:f3:90:0e:e6:0f:5b:6d:f3:a8:8f:73:bc:7f:9b:e5:c3:48: 6f:28:cf:35:d7:76:b0:fd:4e:03:96:4c:1e:79:b2:ef:e6:59: 79:6b:18:ef:64:73:b0:18:47:88:ef:02:17:0d:5e:e2:45:9e: 77:38:3b:57:c7:ef:34:85:eb:86:73:e4:8f:14:8d:a8:61:ca: a7:02:38:f1:67:3b:db:82:a5:92:ab:fb:1c:9b:4a:c9:bf:e7: 9d:b6:81:d6:e2:53:70:a4:85:ef:b9:b7:18:3a:e7:f0:b9:12: 54:cd:a7:12:82:d0:43:b2:7c:85:bf:54:00:c1:2f:5c:1d:f6: 9b:bd:00:65:bc:25:60:12:b4:ee:e9:94:70:70:a7:28:0d:ce: b2:73:69:56:98:3b:cf:3d:a3:08:1d:79:bf:e6:3d:03:b2:90: 48:ae:43:1c:57:29:0d:e7:2d:ca:0b:eb:53:1b:de:b7:c4:bc: a1:d9:79:41:b3:67:ed:db:7a:8b:2b:f6:bf:51:fb:a3:26:65: 39:63:c3:89:bf:38:85:57:34:7a:aa:01:26:9a:cb:8a:20:26: 7e:18:19:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjUxMTAyMjAwNjI5WhcNMjUxMTA5MjAwNjI5WjAYMRYwFAYD VQQDEw02OTA3YjljNS0zMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4cSUd6YCycPAEahUm/45rj3/goCAEk3bt6CoF0XDa6YD1ZzTaJU0eu8Rn4K N6una32eMd8Pu6eFF9HFWmaoEHWoW6xZneJ8522Y6gkQ4vFvTPj2xIsgmLskgF9F 74uJmvYkokf4aF49HOpHFqx/Ch3v9PjKbyqjhnyEtuWRPHGpYgpCUBvXTvW2yFRT ikN85ccG8zwgHnA5jWLYmIojbPRuJkRmHpxLYp6qBIEdB8EoTe0XKV6qnCKHzm2T 6G+16VX2Qe3kU0Q9LLYzQpHgZzLd1USCrFg4NIJNVG3UuGvCUhdibknNzKGXh8Av S4xuTNmbb+kpZE0tVkIBfYZqpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuolAmj +NrOA4UqaUL+m6QTI6KuMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1PC2ii/L61K8ft3KMnM8EzhOFDzkZQmmjCVlN6b2Bts4E0Wy85AO 5g9bbfOoj3O8f5vlw0hvKM8113aw/U4DlkweebLv5ll5axjvZHOwGEeI7wIXDV7i RZ53ODtXx+80heuGc+SPFI2oYcqnAjjxZzvbgqWSq/scm0rJv+edtoHW4lNwpIXv ubcYOufwuRJUzacSgtBDsnyFv1QAwS9cHfabvQBlvCVgErTu6ZRwcKcoDc6yc2lW mDvPPaMIHXm/5j0DspBIrkMcVykN5y3KC+tTG963xLyh2XlBs2ft23qLK/a/Ufuj JmU5Y8OJvziFVzR6qgEmmsuKICZ+GBmK -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:07 2025 by rpki-client