$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft File: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft (raw, json) Hash identifier: XGDT9TEGMDtcWGeiXgTjqeHCyynERxYhdJrkrkfOxxY= Subject key identifier: 21:B1:B4:2E:C5:C8:5E:4D:EE:E2:D9:4D:61:A7:4C:1E:C4:13:EF:61 Authority key identifier: 43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B Certificate issuer: /CN=A9132C09/serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft Manifest number: 018B Signing time: Mon 03 Nov 2025 03:29:34 +0000 Manifest this update: Mon 03 Nov 2025 03:29:34 +0000 Manifest next update: Mon 10 Nov 2025 03:29:34 +0000 Files and hashes: 1: Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl (hash: EqWBPanOqVs0FXFpr3c5htEOl8PYUSuDgthuh12efNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C09, serialNumber=43929D916DC9C9CE3463FF9158CCBEFE9F182C3B Validity Not Before: Nov 3 03:29:34 2025 GMT Not After : Nov 10 03:29:34 2025 GMT Subject: CN=6908219e-ac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:a6:78:0f:81:9f:a3:1a:84:ea:a4:db:39: 29:f0:df:fe:b9:b3:4f:d2:5c:35:11:78:ea:de:7f: 54:ef:0a:58:1f:a7:d5:83:17:3f:c4:e2:c5:83:2a: ed:37:e0:2a:5c:ae:20:6a:7b:97:72:42:27:00:7a: ec:77:fe:72:6c:c8:ac:9c:13:3c:05:f5:9b:12:71: 8a:41:a0:ee:a3:e5:2c:d5:90:b3:b5:f4:b7:29:bd: 53:19:14:be:6c:fd:9a:48:0f:73:d2:c8:36:91:a5: d2:94:93:83:2b:c7:46:a0:1c:5a:3f:da:e5:53:47: c0:5e:52:99:f8:6c:60:3d:82:a2:c6:03:03:38:38: 40:b9:3c:10:1a:a6:0f:45:ab:59:4a:a5:89:2c:35: c7:87:33:df:07:a7:ed:65:a0:fe:cc:80:f2:ef:e5: d3:e7:ad:7d:77:ba:c3:c2:66:c7:ad:4e:74:f8:86: 52:00:c7:05:78:7b:29:92:80:cd:06:69:fd:1f:7a: 05:d8:4e:51:1e:01:15:8f:c2:67:fb:d6:76:75:66: 06:d2:ec:cb:b8:23:4b:2a:5a:64:91:7d:de:0c:8e: 41:6d:b2:45:47:cf:d2:cc:42:9c:41:bb:a0:09:c5: 65:55:97:26:61:b0:b5:42:14:30:a9:43:63:5a:1d: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B1:B4:2E:C5:C8:5E:4D:EE:E2:D9:4D:61:A7:4C:1E:C4:13:EF:61 X509v3 Authority Key Identifier: keyid:43:92:9D:91:6D:C9:C9:CE:34:63:FF:91:58:CC:BE:FE:9F:18:2C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C09/CD6D520256C511EEBED32E0BC4F9AE02/Q5KdkW3Jyc40Y_-RWMy-_p8YLDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:78:85:5c:6c:4f:28:21:0d:84:1a:ed:d3:ce:92:6a:87:2a: f7:a7:96:e9:e5:db:c9:ad:65:81:03:a1:20:64:b2:3b:50:40: ec:e2:36:a8:f1:42:1c:60:ea:9d:6c:f7:c5:91:f6:13:57:b3: 16:a3:a5:f6:90:4d:88:56:4c:47:02:e3:a1:b4:1e:8f:ef:6d: a1:31:15:1c:4c:af:3b:a7:fc:da:7f:48:f7:72:81:7e:25:2d: e9:25:b2:04:1b:04:f7:13:39:64:28:5b:da:7d:2b:e9:0f:4c: bd:06:b5:82:83:25:a3:2f:10:7d:e4:dc:56:0f:b6:1e:a5:0a: af:c6:18:de:6a:21:ee:4b:e7:2e:6f:a6:0e:0d:c2:19:2e:f3: 86:d0:78:2a:61:bb:03:98:f0:d1:fa:e5:0b:52:8e:b0:ce:a5: 40:61:bc:6e:7b:96:67:61:31:ba:d5:23:fb:0a:c7:f2:80:7e: aa:1d:89:2d:96:25:73:4a:95:32:c1:d9:f5:36:30:18:18:79: 7f:29:16:97:3c:3e:22:98:64:4c:02:a3:f2:8d:81:14:28:f8: 40:8a:ea:07:9e:b2:91:db:e2:09:f8:4e:67:80:a0:46:55:b7: eb:84:df:ef:10:11:8c:c8:b3:12:f9:f4:dd:c3:7e:3b:61:71: da:10:aa:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMDkxMTAvBgNVBAUTKDQzOTI5RDkxNkRDOUM5Q0UzNDYzRkY5MTU4Q0NCRUZF OUYxODJDM0IwHhcNMjUxMTAzMDMyOTM0WhcNMjUxMTEwMDMyOTM0WjAYMRYwFAYD VQQDEw02OTA4MjE5ZS1hYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoWmeA+Bn6MahOqk2zkp8N/+ubNP0lw1EXjq3n9U7wpYH6fVgxc/xOLFgyrt N+AqXK4ganuXckInAHrsd/5ybMisnBM8BfWbEnGKQaDuo+Us1ZCztfS3Kb1TGRS+ bP2aSA9z0sg2kaXSlJODK8dGoBxaP9rlU0fAXlKZ+GxgPYKixgMDODhAuTwQGqYP RatZSqWJLDXHhzPfB6ftZaD+zIDy7+XT5619d7rDwmbHrU50+IZSAMcFeHspkoDN Bmn9H3oF2E5RHgEVj8Jn+9Z2dWYG0uzLuCNLKlpkkX3eDI5BbbJFR8/SzEKcQbug CcVlVZcmYbC1QhQwqUNjWh28PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGxtC7F yF5N7uLZTWGnTB7EE+9hMB8GA1UdIwQYMBaAFEOSnZFtycnONGP/kVjMvv6fGCw7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMwOS9DRDZENTIwMjU2 QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnljNDBZXy1SV015LV9wOFlM RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1S2RrVzNKeWM0MFlfLVJXTXktX3A4WUxEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMwOS9DRDZENTIwMjU2QzUxMUVFQkVEMzJFMEJDNEY5QUUwMi9RNUtka1czSnlj NDBZXy1SV015LV9wOFlMRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXeIVcbE8oIQ2EGu3TzpJqhyr3p5bp5dvJrWWBA6EgZLI7UEDs4jao 8UIcYOqdbPfFkfYTV7MWo6X2kE2IVkxHAuOhtB6P722hMRUcTK87p/zaf0j3coF+ JS3pJbIEGwT3EzlkKFvafSvpD0y9BrWCgyWjLxB95NxWD7YepQqvxhjeaiHuS+cu b6YODcIZLvOG0HgqYbsDmPDR+uULUo6wzqVAYbxue5ZnYTG61SP7CsfygH6qHYkt liVzSpUywdn1NjAYGHl/KRaXPD4imGRMAqPyjYEUKPhAiuoHnrKR2+IJ+E5ngKBG VbfrhN/vEBGMyLMS+fTdw347YXHaEKri -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:58 2025 by rpki-client