$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json) Hash identifier: W8JpfmvSOer54y6AQl07lrUoXmkqYDJi2H7hmwTKoM4= Subject key identifier: 9F:4A:70:85:C3:B4:68:DF:0F:F2:C1:A7:B7:2C:2C:78:AE:98:B1:B9 Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft Manifest number: 66 Signing time: Wed 05 Nov 2025 07:11:43 +0000 Manifest this update: Wed 05 Nov 2025 07:11:42 +0000 Manifest next update: Wed 12 Nov 2025 07:11:42 +0000 Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: gBcvjS8KXjajoo3x0Zv0kwqO58eTeRpA8Aq9NgLVVA0=) 2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C Validity Not Before: Nov 5 07:11:42 2025 GMT Not After : Nov 12 07:11:42 2025 GMT Subject: CN=690af8af-6c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:48:17:3d:c0:66:cb:62:44:29:d3:48:be: 3b:fa:f3:64:f9:5b:39:ef:4c:65:b2:6f:46:ba:9b: 2e:4b:a0:9e:dd:a8:53:2d:09:8b:d6:96:c6:31:75: 90:c5:03:98:81:a7:ca:b1:a2:7e:bf:d7:34:d3:a5: 1b:5a:8a:47:99:a5:b5:fa:62:3b:2a:d7:fe:55:1d: a7:e2:5f:75:15:f3:2e:16:0c:b5:10:63:4d:73:35: 34:0a:bf:0f:f7:99:4e:e9:ac:18:74:33:e6:5c:94: cb:09:cd:51:f5:3c:2e:5c:20:b1:a4:80:dd:53:2c: 28:49:1d:41:c5:98:54:c7:62:5c:00:10:c7:fe:9b: f8:21:8a:6d:99:5b:10:b1:41:63:2d:01:68:9a:32: 55:75:68:13:31:34:51:05:2b:75:44:93:8e:c6:93: 7b:f6:52:ae:7f:8d:97:f2:9b:e5:50:2e:dd:fa:a4: 63:f9:b2:0f:88:ab:f0:70:bb:94:ac:80:e8:88:6a: 48:0d:ee:e6:dc:b2:26:2f:72:e4:31:3b:1c:67:a6: c0:7f:70:40:12:91:c3:ac:08:e6:1d:79:ff:6e:d8: d3:5d:5a:25:9d:d6:b5:9f:1e:b2:fc:27:d7:c5:f0: 88:03:f5:5c:e6:23:c9:11:81:ec:66:9a:74:72:a4: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:70:85:C3:B4:68:DF:0F:F2:C1:A7:B7:2C:2C:78:AE:98:B1:B9 X509v3 Authority Key Identifier: keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:24:6b:9f:2d:3a:cf:ae:cd:5f:1f:39:b0:c6:9e:c2:a6:c3: a1:cf:03:16:9f:57:90:5f:02:2b:cf:f9:5a:f7:6c:aa:98:06: 92:a7:ea:51:f6:7c:75:93:b0:7a:16:71:12:ff:53:d9:16:3e: 01:f8:55:f7:2a:ce:97:39:d3:3b:c7:6c:8c:d7:1e:2a:e6:eb: 2e:b7:b8:c4:fe:6e:df:b4:f3:97:97:36:a9:0b:9e:2d:80:23: bd:a6:be:29:5d:c9:62:92:76:72:f4:40:2e:2d:ac:52:e7:11: 91:8c:3e:b0:08:c2:16:96:6c:3c:cd:16:bb:ec:7f:6b:60:4e: c0:88:4c:9f:a5:f8:ad:bd:c4:82:82:e8:d6:e1:45:dd:c0:96: 57:a4:26:2d:0a:31:ea:8d:13:7f:a4:ba:ee:d9:2b:f1:7c:b3: de:5b:f8:6e:51:56:0c:4a:b3:36:55:82:f2:11:78:02:01:a4: a9:f1:c6:31:64:f1:94:fa:73:8e:43:24:6c:ee:18:a7:85:a8: 41:38:a6:07:b6:41:1c:84:83:f1:e2:90:0e:fb:8b:d1:d6:36: 77:fc:3a:c5:71:dd:bb:4c:32:6e:14:d0:3b:ab:9e:1c:af:c6: 83:3f:8b:12:3a:a4:a7:80:5f:97:79:d5:96:10:0f:52:9b:1d: 92:cb:79:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OEJDMTExMC8GA1UEBRMoNDI3NzNBQTg0MUQ3MEU3M0M0RUY3RDI3Qzk4RkNCOUQ0 NDIwQzQ2QzAeFw0yNTExMDUwNzExNDJaFw0yNTExMTIwNzExNDJaMBgxFjAUBgNV BAMTDTY5MGFmOGFmLTZjMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAGkgXPcBmy2JEKdNIvjv682T5WznvTGWyb0a6my5LoJ7dqFMtCYvWlsYxdZDF A5iBp8qxon6/1zTTpRtaikeZpbX6Yjsq1/5VHafiX3UV8y4WDLUQY01zNTQKvw/3 mU7prBh0M+ZclMsJzVH1PC5cILGkgN1TLChJHUHFmFTHYlwAEMf+m/ghim2ZWxCx QWMtAWiaMlV1aBMxNFEFK3VEk47Gk3v2Uq5/jZfym+VQLt36pGP5sg+Iq/Bwu5Ss gOiIakgN7ubcsiYvcuQxOxxnpsB/cEASkcOsCOYdef9u2NNdWiWd1rWfHrL8J9fF 8IgD9VzmI8kRgexmmnRypJGdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn0pwhcO0 aN8P8sGntywseK6YsbkwHwYDVR0jBBgwFoAUQnc6qEHXDnPE730nyY/LnUQgxGww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4QkMxLzE1MkQ1Qzg2MUI2 OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5QRTczMG55WV9MblVRZ3hH dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW5jNnFFSFhEblBFNzMwbnlZX0xuVVFneEd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 QkMxLzE1MkQ1Qzg2MUI2OTExRjBCRkZDM0YyRkM0RjlBRTAyL1FuYzZxRUhYRG5Q RTczMG55WV9MblVRZ3hHdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAEka58tOs+uzV8fObDGnsKmw6HPAxafV5BfAivP+Vr3bKqYBpKn6lH2 fHWTsHoWcRL/U9kWPgH4Vfcqzpc50zvHbIzXHirm6y63uMT+bt+085eXNqkLni2A I72mvildyWKSdnL0QC4trFLnEZGMPrAIwhaWbDzNFrvsf2tgTsCITJ+l+K29xIKC 6NbhRd3AllekJi0KMeqNE3+kuu7ZK/F8s95b+G5RVgxKszZVgvIReAIBpKnxxjFk 8ZT6c45DJGzuGKeFqEE4pge2QRyEg/HikA77i9HWNnf8OsVx3btMMm4U0Durnhyv xoM/ixI6pKeAX5d51ZYQD1KbHZLLeUo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:59 2025 by rpki-client