$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft File: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json) Hash identifier: rMVd3y26d6xu+PpLZ9mhJz3FmZgHtmLDQ97nsMDVFY0= Subject key identifier: 83:E4:D4:F9:6A:7C:F0:50:5F:EA:29:5C:93:50:E7:12:C4:80:FF:36 Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 Certificate issuer: /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft Manifest number: 0B14 Signing time: Sun 02 Nov 2025 19:20:46 +0000 Manifest this update: Sun 02 Nov 2025 19:20:45 +0000 Manifest next update: Sun 09 Nov 2025 19:20:45 +0000 Files and hashes: 1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: UgVYLYQ6x3xpgPtYhl19VzhWwKm7PF8MQ3iM6boMgic=) 2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: XMZdqD9gB3JqFRbYSCLRYPYkSAmXVoSI5VBqXbHS+f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175 Validity Not Before: Nov 2 19:20:45 2025 GMT Not After : Nov 9 19:20:45 2025 GMT Subject: CN=6907af0d-67f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:f0:c5:b1:6a:2b:42:bb:a0:66:aa:eb:10: 92:78:b4:c0:df:1e:85:40:db:57:a7:c8:fd:dc:fc: a3:21:1c:58:55:7c:5c:e7:97:f3:12:68:d4:85:f2: bf:16:9d:a2:e2:dd:ad:3e:89:c2:26:b3:d4:1d:be: 2e:08:c7:34:2a:21:dc:1a:f0:94:0c:2d:65:cb:c4: 5a:e0:e5:9d:ab:ff:3e:4a:14:e9:3b:cc:e7:85:61: 08:29:a2:c6:ff:5a:ba:fa:14:31:32:5b:26:c8:d1: 40:70:45:52:05:1f:d8:60:6f:5e:a6:49:12:72:d4: 35:81:73:59:f5:71:47:06:27:b9:05:3e:95:4a:84: 27:d7:d4:7e:07:b6:2f:29:25:d6:88:63:c3:00:e5: 39:6f:42:9e:84:b1:a4:e7:6d:25:ba:0f:13:77:20: 28:8d:97:02:ec:d6:fc:34:5a:52:d3:2e:9d:2b:17: 54:1f:1a:5f:c6:6d:c1:d2:51:7e:62:60:0e:bc:0c: 1c:96:47:cc:6e:a8:9e:32:d8:bc:49:f7:ee:ee:24: 37:0b:4b:cb:07:6c:ee:c9:78:db:71:43:ab:a2:6a: 84:c0:79:c3:ac:c7:dc:45:58:a4:b8:19:a3:e5:08: ab:2a:2c:a7:9c:ee:d2:ce:07:52:d9:f1:b5:04:12: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:D4:F9:6A:7C:F0:50:5F:EA:29:5C:93:50:E7:12:C4:80:FF:36 X509v3 Authority Key Identifier: keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d8:0d:48:14:2a:ff:39:57:2d:f0:fa:42:c7:25:2a:fa:a3: 50:67:ea:c8:d5:82:00:e0:2f:48:84:54:1e:8d:d6:1f:b4:fb: 70:18:e9:ff:23:1a:02:a7:9e:d6:a2:1d:5c:61:ca:6b:28:5f: 57:ab:5f:0c:a9:95:b9:4a:33:b7:2e:35:3b:ac:ac:6e:53:f4: 46:bf:d1:f5:49:07:81:94:d0:0b:9e:61:a8:5b:41:e2:08:8d: cf:bb:a0:30:95:83:8f:b8:6b:e8:ec:c1:e3:a7:bd:65:71:95: 48:e4:5a:75:e3:16:3d:9f:c8:34:67:9b:da:d4:e7:17:4c:16: bd:4a:b0:9e:42:02:11:a2:d6:b5:ef:86:76:53:17:32:52:28: 29:b0:84:c8:4f:f9:97:fc:b7:8d:ff:0c:ff:f4:45:88:0d:78: df:74:fd:c2:7b:0b:1c:dc:95:bc:c5:3f:8d:9b:e1:ba:2e:cb: a5:77:b2:72:b5:fd:ea:17:da:9f:a6:d9:31:f5:a2:87:38:c3: 97:17:2b:ec:3a:3e:b5:3a:22:8d:cc:7a:3c:f1:62:44:15:4a: dc:69:8e:60:e7:20:1d:f7:a3:0b:a7:d0:1e:c0:07:9a:46:e1: 0e:67:63:97:b4:f4:12:a1:1d:65:51:e1:6d:2e:15:a8:7a:82: 6d:e3:4a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIxMjcxMTAvBgNVBAUTKDQxNTAyN0Q4QzkyOThFOTdEQTA1QzBDNDNEQ0Q4QkFG NTIxNzQxNzUwHhcNMjUxMTAyMTkyMDQ1WhcNMjUxMTA5MTkyMDQ1WjAYMRYwFAYD VQQDEw02OTA3YWYwZC02N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMPwxbFqK0K7oGaq6xCSeLTA3x6FQNtXp8j93PyjIRxYVXxc55fzEmjUhfK/ Fp2i4t2tPonCJrPUHb4uCMc0KiHcGvCUDC1ly8Ra4OWdq/8+ShTpO8znhWEIKaLG /1q6+hQxMlsmyNFAcEVSBR/YYG9epkkSctQ1gXNZ9XFHBie5BT6VSoQn19R+B7Yv KSXWiGPDAOU5b0KehLGk520lug8TdyAojZcC7Nb8NFpS0y6dKxdUHxpfxm3B0lF+ YmAOvAwclkfMbqieMti8Sffu7iQ3C0vLB2zuyXjbcUOromqEwHnDrMfcRVikuBmj 5QirKiynnO7SzgdS2fG1BBJLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPk1Plq fPBQX+opXJNQ5xLEgP82MB8GA1UdIwQYMBaAFEFQJ9jJKY6X2gXAxD3Ni69SF0F1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjEyNy8yMEY0NDQzQTU0 NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpwZmFCY0RFUGMyTHIxSVhR WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FWQW4yTWtwanBmYUJjREVQYzJMcjFJWFFYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjEyNy8yMEY0NDQzQTU0NkQxMUVBQkREM0MxMTdDNEY5QUUwMi9RVkFuMk1rcGpw ZmFCY0RFUGMyTHIxSVhRWFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB82A1IFCr/OVct8PpCxyUq+qNQZ+rI1YIA4C9IhFQejdYftPtwGOn/ IxoCp57Woh1cYcprKF9Xq18MqZW5SjO3LjU7rKxuU/RGv9H1SQeBlNALnmGoW0Hi CI3Pu6AwlYOPuGvo7MHjp71lcZVI5Fp14xY9n8g0Z5va1OcXTBa9SrCeQgIRota1 74Z2UxcyUigpsITIT/mX/LeN/wz/9EWIDXjfdP3Cewsc3JW8xT+Nm+G6Lsuld7Jy tf3qF9qfptkx9aKHOMOXFyvsOj61OiKNzHo88WJEFUrcaY5g5yAd96MLp9AewAea RuEOZ2OXtPQSoR1lUeFtLhWoeoJt40rw -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:25 2025 by rpki-client