$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft File: qP6b7_xlQea2MsQh14p9zAiwrIw.mft (raw, json) Hash identifier: cInECgb8tVoUsfHN/j1RnFcYv7m70fGLrXOKLmMlPs8= Subject key identifier: 11:EB:91:20:A6:1B:30:86:0A:81:45:01:68:92:2B:F8:F1:61:05:B1 Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft Manifest number: 1A Signing time: Mon 03 Nov 2025 07:49:26 +0000 Manifest this update: Mon 03 Nov 2025 07:49:26 +0000 Manifest next update: Mon 10 Nov 2025 07:49:25 +0000 Files and hashes: 1: qP6b7_xlQea2MsQh14p9zAiwrIw.crl (hash: B3Z2ekwmfMymwXKkTY7BCieIQnGiBGXI0zx98Eegv2Q=) 2: EF9B0ACE909B11F09E634B7AC4F9AE02.roa (hash: 9dYGUjFWYuN31AuscKGSqmOWFznYjjVv+DbwenmQE88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C Validity Not Before: Nov 3 07:49:26 2025 GMT Not After : Nov 10 07:49:25 2025 GMT Subject: CN=69085e86-3dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:ad:e9:be:13:c1:e1:25:d8:ec:18:b3:7b: 5a:5a:9f:91:27:3e:46:7c:b8:3b:2f:9b:d4:88:25: 2a:ad:f8:b0:b2:17:77:fd:fb:9f:82:47:9d:4f:46: 30:45:6b:e2:fe:0c:b4:09:ff:89:1a:b4:f5:b4:3f: fb:74:f7:1b:e7:a9:93:04:60:48:71:7e:28:01:d3: 85:76:ce:81:e9:b4:de:2e:d3:0e:97:62:f9:e5:fe: b1:b9:e6:23:27:a9:2f:ee:b0:71:d9:dc:4c:8f:57: 17:d7:98:03:96:76:fc:24:f9:82:6a:c0:84:60:0e: 9c:33:24:04:d2:c0:cf:ad:8d:fd:17:84:76:32:bd: a1:ae:c4:ca:06:ac:86:7a:79:6f:81:36:8d:b0:fd: 42:ad:0f:5f:9f:36:c5:c0:9d:77:c5:73:e5:ac:29: 99:b8:bb:b2:37:f9:05:3f:62:d6:4c:f7:4c:fb:4b: 9a:04:33:fc:87:d4:15:db:03:69:61:65:4d:fa:70: 6b:46:7f:26:8d:77:3a:fb:0d:e7:83:cb:ad:de:96: 31:fd:af:d7:2d:3a:9a:96:be:14:6e:1a:37:6d:dd: 7d:10:35:a8:2d:2c:f8:2f:f4:47:ce:d6:18:be:db: 3b:5d:e1:f4:ec:67:10:99:c4:cd:77:48:7b:db:48: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EB:91:20:A6:1B:30:86:0A:81:45:01:68:92:2B:F8:F1:61:05:B1 X509v3 Authority Key Identifier: keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:fd:d6:43:0c:a6:03:ac:3b:e2:eb:69:53:2b:4c:c1:02: 26:eb:28:33:b9:8f:c9:2a:8a:af:84:17:bc:e0:d2:5b:d7:58: fc:4e:9d:0a:4f:2b:8e:1d:b1:3e:df:45:cf:56:88:9a:f9:73: 93:f2:04:f0:c9:84:64:1a:f1:f0:e0:15:2a:95:e8:2a:80:46: c0:d0:2c:5e:a0:cc:cd:97:5d:9c:db:2f:e0:98:72:7f:00:bf: 92:5f:8d:d5:d8:52:a1:55:d0:0d:2d:51:77:8e:b1:3a:79:cc: aa:07:bb:1a:40:df:12:25:1e:d7:04:85:0d:60:4d:1e:8b:fa: 41:dd:79:59:c7:80:85:47:9c:9c:ee:a8:6e:7a:bc:20:29:01: b5:2f:c1:8b:94:6a:ca:38:6a:ef:35:65:d3:c3:b3:7d:76:e1: 46:38:ed:26:38:b0:4c:73:19:88:a2:45:4c:dc:87:a4:17:00: 1d:e1:01:89:2b:c1:b9:07:2f:ae:24:40:45:51:0e:72:6a:4f: e1:07:97:3f:5e:78:d6:89:a8:e1:0f:92:fd:53:49:44:ad:a5: b5:0a:27:eb:0d:fd:f8:ff:48:ef:d7:d6:27:44:cc:dc:48:28: e0:aa:96:ad:85:1b:f4:bd:09:6a:49:24:c4:32:d3:e7:f4:29: e5:b0:ba:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MkMwNzExMC8GA1UEBRMoQThGRTlCRUZGQzY1NDFFNkI2MzJDNDIxRDc4QTdEQ0Mw OEIwQUM4QzAeFw0yNTExMDMwNzQ5MjZaFw0yNTExMTAwNzQ5MjVaMBgxFjAUBgNV BAMTDTY5MDg1ZTg2LTNkZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvZ63pvhPB4SXY7Bize1pan5EnPkZ8uDsvm9SIJSqt+LCyF3f9+5+CR51PRjBF a+L+DLQJ/4katPW0P/t09xvnqZMEYEhxfigB04V2zoHptN4u0w6XYvnl/rG55iMn qS/usHHZ3EyPVxfXmAOWdvwk+YJqwIRgDpwzJATSwM+tjf0XhHYyvaGuxMoGrIZ6 eW+BNo2w/UKtD1+fNsXAnXfFc+WsKZm4u7I3+QU/YtZM90z7S5oEM/yH1BXbA2lh ZU36cGtGfyaNdzr7DeeDy63eljH9r9ctOpqWvhRuGjdt3X0QNagtLPgv9EfO1hi+ 2ztd4fTsZxCZxM13SHvbSHWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEeuRIKYb MIYKgUUBaJIr+PFhBbEwHwYDVR0jBBgwFoAUqP6b7/xlQea2MsQh14p9zAiwrIww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyQzA3LzRDQTAyOTc2OTA5 QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVhMk1zUWgxNHA5ekFpd3JJ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcVA2YjdfeGxRZWEyTXNRaDE0cDl6QWl3ckl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy QzA3LzRDQTAyOTc2OTA5QjExRjBBOTNCOTEzN0M0RjlBRTAyL3FQNmI3X3hsUWVh Mk1zUWgxNHA5ekFpd3JJdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIY/dZDDKYDrDvi62lTK0zBAibrKDO5j8kqiq+EF7zg0lvXWPxOnQpP K44dsT7fRc9WiJr5c5PyBPDJhGQa8fDgFSqV6CqARsDQLF6gzM2XXZzbL+CYcn8A v5JfjdXYUqFV0A0tUXeOsTp5zKoHuxpA3xIlHtcEhQ1gTR6L+kHdeVnHgIVHnJzu qG56vCApAbUvwYuUaso4au81ZdPDs3124UY47SY4sExzGYiiRUzch6QXAB3hAYkr wbkHL64kQEVRDnJqT+EHlz9eeNaJqOEPkv1TSUStpbUKJ+sN/fj/SO/X1idEzNxI KOCqlq2FG/S9CWpJJMQy0+f0KeWwugs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:38 2025 by rpki-client