$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: ebHB9+tRvlpKER72Vf0+mSOBx3X1WpcusF4/71T/ugQ= Subject key identifier: 76:B5:DB:CE:4C:69:87:0F:FA:FD:66:CE:5A:31:6D:3A:0C:8D:55:F5 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 06BE Signing time: Sun 02 Nov 2025 22:09:10 +0000 Manifest this update: Sun 02 Nov 2025 22:09:10 +0000 Manifest next update: Sun 09 Nov 2025 22:09:10 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: /jb9TYTkiwVMSKDeFUthwdQmj2sjbBDk11upoinv+iU=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: Sxl9Vw9Z+DTDShpFQB0WpYJiHDd/mA9uIojiho1C+jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Nov 2 22:09:10 2025 GMT Not After : Nov 9 22:09:10 2025 GMT Subject: CN=6907d686-1ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:7a:f4:18:47:02:9c:62:ae:20:b5:51:f0: 4a:17:a9:0c:b5:dc:17:da:4e:f3:35:75:5e:ba:86: c8:b8:3f:d5:6a:71:ae:c0:86:b7:b0:13:9a:7b:bf: 7e:13:54:ca:67:26:8d:92:23:b8:2f:93:63:5d:d9: 85:ec:ed:88:f0:00:74:cb:a2:03:d8:6f:b3:28:d2: 5c:a1:cc:24:38:38:9c:f6:01:56:47:75:89:7e:37: 21:22:87:ba:90:93:67:e2:fe:c6:cf:1a:67:24:82: c1:ae:42:34:1f:26:f3:7d:54:b6:ff:35:07:11:0b: 55:75:d5:79:3a:78:ae:3d:73:84:7b:c3:1b:09:f2: 4d:e3:29:ea:62:ee:75:6a:18:88:a9:1d:b0:7c:85: 92:a8:d4:0a:24:b1:76:16:f1:67:e8:07:a1:00:12: d0:44:01:61:0c:f9:fa:1d:91:e7:1c:2b:a0:ab:3b: 75:03:59:50:0f:c9:9d:8b:6c:a8:7e:78:44:54:c5: fb:8e:e5:1f:31:a5:3b:74:e8:af:64:0e:24:ef:60: 38:1a:c9:0f:6b:a9:4e:2a:8d:8c:ab:08:70:77:b2: 85:aa:d0:59:08:12:76:76:cf:19:d7:e0:a7:9b:e9: 72:62:36:9b:81:64:2f:0a:8a:7d:c2:58:00:03:7c: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B5:DB:CE:4C:69:87:0F:FA:FD:66:CE:5A:31:6D:3A:0C:8D:55:F5 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1c:c3:ce:d9:41:9c:cd:5d:20:15:0b:50:9d:88:69:5d:4b: 29:2d:dc:37:47:ed:cf:e3:14:b1:9a:48:3d:ea:83:f6:5b:ba: 1a:21:61:be:e5:52:f0:74:86:a3:5e:e1:45:7c:66:dd:aa:2d: 94:b8:e6:5c:65:f4:9c:73:da:9d:4e:68:93:e9:75:52:cf:38: 06:eb:05:83:19:bc:be:1c:c8:50:30:ce:62:7b:39:28:4b:a8: d3:53:10:71:ac:1d:57:94:02:90:8b:9d:42:d4:8d:a1:1c:35: 50:ad:d4:37:78:1d:52:cc:fa:43:d1:0f:d2:d0:0f:82:b5:1c: 8e:bd:67:9c:bc:aa:44:aa:59:d6:51:63:4e:a1:e6:17:ed:21: ab:ff:1a:58:27:09:e8:fc:61:8d:79:bd:7f:b3:59:90:58:26: d6:8a:e9:98:4e:c5:77:82:16:05:85:a4:e8:94:40:ec:e6:f8: 81:60:be:8d:ed:a7:70:51:d6:4b:3e:43:b2:3e:00:e3:92:ce: 3a:50:62:9e:3c:80:c0:9f:68:2a:bb:5d:a0:12:d7:72:73:94: bb:8a:17:1f:8f:0f:e4:9d:2b:57:9b:d9:ac:db:55:c1:fc:cc: de:b9:ae:2b:98:88:44:33:56:e2:1e:11:d8:57:80:bd:9c:12: 6d:a6:ef:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUxMTAyMjIwOTEwWhcNMjUxMTA5MjIwOTEwWjAYMRYwFAYD VQQDEw02OTA3ZDY4Ni0xZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWl69BhHApxiriC1UfBKF6kMtdwX2k7zNXVeuobIuD/VanGuwIa3sBOae79+ E1TKZyaNkiO4L5NjXdmF7O2I8AB0y6ID2G+zKNJcocwkODic9gFWR3WJfjchIoe6 kJNn4v7GzxpnJILBrkI0HybzfVS2/zUHEQtVddV5OniuPXOEe8MbCfJN4ynqYu51 ahiIqR2wfIWSqNQKJLF2FvFn6AehABLQRAFhDPn6HZHnHCugqzt1A1lQD8mdi2yo fnhEVMX7juUfMaU7dOivZA4k72A4GskPa6lOKo2Mqwhwd7KFqtBZCBJ2ds8Z1+Cn m+lyYjabgWQvCop9wlgAA3xezQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa1285M aYcP+v1mzloxbToMjVX1MB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHMPO2UGczV0gFQtQnYhpXUspLdw3R+3P4xSxmkg96oP2W7oaIWG+ 5VLwdIajXuFFfGbdqi2UuOZcZfScc9qdTmiT6XVSzzgG6wWDGby+HMhQMM5iezko S6jTUxBxrB1XlAKQi51C1I2hHDVQrdQ3eB1SzPpD0Q/S0A+CtRyOvWecvKpEqlnW UWNOoeYX7SGr/xpYJwno/GGNeb1/s1mQWCbWiumYTsV3ghYFhaTolEDs5viBYL6N 7adwUdZLPkOyPgDjks46UGKePIDAn2gqu12gEtdyc5S7ihcfjw/knStXm9ms21XB /Mzeua4rmIhEM1biHhHYV4C9nBJtpu8y -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:21 2025 by rpki-client