$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json) Hash identifier: mQX9VwVVKTA6op2R+6G9Z6UprQV5jNeCnpzHXFf7icg= Subject key identifier: 91:76:2D:B0:15:73:68:E7:3F:BD:CE:DE:97:C6:4E:52:63:8D:61:7C Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft Manifest number: 01FC Signing time: Wed 05 Nov 2025 02:40:52 +0000 Manifest this update: Wed 05 Nov 2025 02:40:52 +0000 Manifest next update: Wed 12 Nov 2025 02:40:52 +0000 Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: FX4cmuLrE98VTPTm/yJxnoYg8vGkPLTetjt72VWNjTQ=) 2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: yQWifcUacebm0QWmZ7UB602HfF6Yw1unRDBx3kif0PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA Validity Not Before: Nov 5 02:40:52 2025 GMT Not After : Nov 12 02:40:52 2025 GMT Subject: CN=690ab934-1b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:e7:5c:dd:7f:28:e8:a3:25:09:8e:02:db: 4f:c8:7c:d5:00:74:3b:e4:db:5b:83:bf:7f:62:da: f7:81:86:73:d5:da:6d:ff:6c:93:e6:08:ba:a4:2b: ec:0e:15:f0:a0:b8:19:4e:dc:b1:c3:3c:b4:f2:50: 71:d8:71:a2:ba:5d:41:f8:3a:90:b0:32:1c:29:3e: 76:d6:3f:bb:89:78:24:d9:90:20:da:9c:ba:a3:32: ef:13:ed:94:38:ff:59:4c:6c:79:2e:7f:3d:e4:89: ba:af:11:47:fa:2f:15:53:39:cf:f3:c8:96:37:9a: f4:21:5e:81:61:ab:5f:55:7e:67:ab:c3:92:86:e2: 16:7f:c7:e6:5e:87:c8:18:63:cd:fa:fb:a8:68:70: d7:2b:78:fd:8e:83:09:2f:2a:e2:8d:e8:c2:38:4d: a9:0a:13:48:39:4b:63:d3:6e:7c:55:71:f4:21:c7: ab:24:ff:21:b7:a5:bd:27:5c:5d:11:75:77:f6:cc: f4:7d:17:a2:98:e1:d7:6d:aa:19:9e:81:a5:c1:00: 72:1b:9f:eb:48:85:0e:70:50:a2:fb:d1:81:cf:af: 50:8f:5c:51:12:1c:68:eb:4d:c7:9c:a2:4a:f1:07: 28:6d:a9:df:3c:70:c2:ef:63:a0:77:74:00:37:29: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:76:2D:B0:15:73:68:E7:3F:BD:CE:DE:97:C6:4E:52:63:8D:61:7C X509v3 Authority Key Identifier: keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:08:a8:85:6e:53:a8:01:1e:86:57:f1:16:19:55:07:6d:df: 77:e9:4f:3a:d0:60:c2:99:f4:76:30:d8:77:86:17:04:f5:04: b0:80:d8:89:32:5d:cb:fd:5d:d6:60:40:79:06:84:81:8a:47: 74:8c:2c:ae:6a:e3:a3:c0:e1:5c:b1:c1:e9:b9:1f:22:3a:d6: 4e:b3:26:9e:d5:c7:43:2d:3e:b4:6d:39:f4:c7:2d:b2:0b:6b: e5:85:17:53:00:60:09:d4:aa:5f:57:f4:72:a8:ec:71:de:63: 4d:c5:df:03:17:75:4c:f0:de:95:64:4d:11:03:11:59:d5:01: bf:7f:a3:61:4f:f7:b2:df:ea:a8:8b:da:8d:34:43:83:b5:62: 9a:6f:c5:e0:a3:9a:c3:3a:05:4b:d2:ec:e2:6b:7e:79:75:fe: 1f:bb:e6:a9:f8:03:ce:17:9b:92:51:91:15:e3:54:41:ad:a2: e3:55:c7:69:a0:51:77:d9:29:c0:7c:b9:44:ae:47:79:46:91: 4e:46:2c:c4:bf:ea:9e:b4:76:fd:23:b7:09:92:92:cf:a1:fc: 1c:94:a5:f9:02:08:b7:d9:ed:ab:0c:44:01:24:57:25:02:b9: ed:c0:b0:e1:00:5c:17:6c:78:3f:e0:cc:d2:e8:33:46:56:47: 53:4b:f3:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx RUJCRTg3QUEwHhcNMjUxMTA1MDI0MDUyWhcNMjUxMTEyMDI0MDUyWjAYMRYwFAYD VQQDEw02OTBhYjkzNC0xYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolfnXN1/KOijJQmOAttPyHzVAHQ75Ntbg79/Ytr3gYZz1dpt/2yT5gi6pCvs DhXwoLgZTtyxwzy08lBx2HGiul1B+DqQsDIcKT521j+7iXgk2ZAg2py6ozLvE+2U OP9ZTGx5Ln895Im6rxFH+i8VUznP88iWN5r0IV6BYatfVX5nq8OShuIWf8fmXofI GGPN+vuoaHDXK3j9joMJLyrijejCOE2pChNIOUtj0258VXH0IcerJP8ht6W9J1xd EXV39sz0fReimOHXbaoZnoGlwQByG5/rSIUOcFCi+9GBz69Qj1xREhxo603HnKJK 8QcobanfPHDC72Ogd3QANymGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF2LbAV c2jnP73O3pfGTlJjjWF8MB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0 RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD a2pTbDlVeFNPN1FldS1oNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPCKiFblOoAR6GV/EWGVUHbd936U860GDCmfR2MNh3hhcE9QSwgNiJ Ml3L/V3WYEB5BoSBikd0jCyuauOjwOFcscHpuR8iOtZOsyae1cdDLT60bTn0xy2y C2vlhRdTAGAJ1KpfV/RyqOxx3mNNxd8DF3VM8N6VZE0RAxFZ1QG/f6NhT/ey3+qo i9qNNEODtWKab8Xgo5rDOgVL0uzia355df4fu+ap+APOF5uSUZEV41RBraLjVcdp oFF32SnAfLlErkd5RpFORizEv+qetHb9I7cJkpLPofwclKX5Agi32e2rDEQBJFcl ArntwLDhAFwXbHg/4MzS6DNGVkdTS/PD -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:13 2025 by rpki-client