$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: 6MfC3G3fe3f0EwzVUauYPthJLTh45sDGQhBeYlZ5Npg= Subject key identifier: B1:AC:2B:C1:57:7C:BD:0B:85:9F:63:79:AC:64:79:51:4E:01:DE:47 Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 1A Signing time: Wed 05 Nov 2025 08:01:09 +0000 Manifest this update: Wed 05 Nov 2025 08:01:08 +0000 Manifest next update: Wed 12 Nov 2025 08:01:08 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: So5DmW9J/i/WYBDsleT4X5qR2CnL1zo0N0vil6RUwMk=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Nov 5 08:01:08 2025 GMT Not After : Nov 12 08:01:08 2025 GMT Subject: CN=690b0445-cea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e3:88:ef:e2:4b:9e:19:1f:3c:57:5a:c8:5b: 3d:d0:a0:44:6a:e6:86:05:7f:63:bb:de:83:50:65: 37:09:c9:98:7d:eb:50:af:37:d3:82:44:1b:ea:30: ce:df:06:be:3a:1c:31:ac:2e:f9:98:d3:87:c2:a0: 66:06:7a:9e:e3:d3:ad:28:80:02:8e:82:0d:59:5b: 0c:b8:30:1d:d6:38:b6:d9:42:b4:5a:24:91:98:d0: 99:d5:51:fe:69:d1:20:83:00:48:9c:0f:de:a1:22: 04:7c:42:87:01:33:0d:15:bd:d7:df:43:ee:ba:be: 65:2f:63:ab:44:fe:16:ec:08:30:6c:b5:e8:a8:0c: 46:4c:5e:8c:3c:62:ee:a2:2b:1f:72:50:e9:69:8c: 73:66:3b:f7:6f:34:04:2b:ef:b4:a6:2a:a8:6c:aa: 6a:3c:96:fb:61:d7:4f:ee:67:8d:1a:0d:09:fe:a9: 78:9e:1a:58:d6:66:63:6e:f3:9f:9b:d3:78:4a:0d: 0b:cc:19:3a:6f:9a:7f:b8:d3:67:46:89:fb:3b:1d: e7:ce:a3:30:a5:ae:3a:b9:13:5e:a6:34:91:e7:d4: 63:71:f3:80:98:ff:47:08:e3:cd:6f:a0:f7:c8:d5: 38:23:5a:f2:f5:5e:f8:19:e8:18:b9:e4:86:b6:8a: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AC:2B:C1:57:7C:BD:0B:85:9F:63:79:AC:64:79:51:4E:01:DE:47 X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:69:cf:90:bd:bd:38:40:8c:89:45:aa:9d:be:f2:57:de:c8: 95:37:2a:2e:a0:81:b0:9c:55:cd:2c:ae:0b:f4:8b:59:01:fe: 3d:eb:1c:0e:f0:43:f4:8a:04:48:c0:6a:b1:2f:3c:7b:e5:08: 5c:f0:9e:d1:a8:bb:f3:73:16:b7:9c:ac:f7:75:36:27:88:35: 95:43:a7:52:0a:6d:77:d0:4f:e3:d6:7b:0d:a6:40:9f:53:3f: 30:f1:12:d7:df:82:7b:ca:b3:2f:34:e4:f0:be:37:d3:43:96: 29:aa:48:94:05:5b:80:45:6e:a4:46:da:d4:f8:1b:49:8c:d6: fe:b6:67:d9:c6:52:ef:6a:3d:22:19:e8:23:1f:02:3b:0c:96: 91:29:8c:16:bb:58:1a:dc:fc:c8:98:e7:0a:c9:f1:9b:10:4e: f2:ce:79:a5:53:0d:65:d4:e5:19:d9:5e:2a:46:c1:ce:5b:c5: 7b:3b:7f:8a:8e:52:50:5f:ce:62:9c:07:df:22:cd:f8:9e:71: b5:98:57:06:55:94:0e:38:43:e4:8b:02:b0:d5:ca:78:90:ea: 66:30:08:c2:37:e6:1c:66:49:06:5c:00:b3:b3:b5:1b:cc:17: b7:27:03:33:11:c5:80:81:97:b1:aa:23:c5:81:69:f8:1a:b4: 4a:6a:5d:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNTExMDUwODAxMDhaFw0yNTExMTIwODAxMDhaMBgxFjAUBgNV BAMTDTY5MGIwNDQ1LWNlYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDl44jv4kueGR88V1rIWz3QoERq5oYFf2O73oNQZTcJyZh961CvN9OCRBvqMM7f Br46HDGsLvmY04fCoGYGep7j060ogAKOgg1ZWwy4MB3WOLbZQrRaJJGY0JnVUf5p 0SCDAEicD96hIgR8QocBMw0VvdffQ+66vmUvY6tE/hbsCDBsteioDEZMXow8Yu6i Kx9yUOlpjHNmO/dvNAQr77SmKqhsqmo8lvth10/uZ40aDQn+qXieGljWZmNu85+b 03hKDQvMGTpvmn+402dGifs7HefOozClrjq5E16mNJHn1GNx84CY/0cI481voPfI 1TgjWvL1XvgZ6Bi55Ia2ipPbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsawrwVd8 vQuFn2N5rGR5UU4B3kcwHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADxpz5C9vThAjIlFqp2+8lfeyJU3Ki6ggbCcVc0srgv0i1kB/j3rHA7w Q/SKBEjAarEvPHvlCFzwntGou/NzFrecrPd1NieINZVDp1IKbXfQT+PWew2mQJ9T PzDxEtffgnvKsy805PC+N9NDlimqSJQFW4BFbqRG2tT4G0mM1v62Z9nGUu9qPSIZ 6CMfAjsMlpEpjBa7WBrc/MiY5wrJ8ZsQTvLOeaVTDWXU5RnZXipGwc5bxXs7f4qO UlBfzmKcB98izfiecbWYVwZVlA44Q+SLArDVyniQ6mYwCMI35hxmSQZcALOztRvM F7cnAzMRxYCBl7GqI8WBafgatEpqXeA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:35:17 2025 by rpki-client