$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json) Hash identifier: Z8WRbiWSOqzexIyBXsO8GLd1TwAB98LB6CsiryUXOpY= Subject key identifier: B6:F4:6D:B0:84:09:E8:E8:8C:BC:65:7F:69:A0:9A:A1:AF:23:5A:00 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1AF7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft Manifest number: 1AE2 Signing time: Tue 04 Nov 2025 15:43:38 +0000 Manifest this update: Tue 04 Nov 2025 15:43:37 +0000 Manifest next update: Tue 11 Nov 2025 15:43:37 +0000 Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: 62l+YjNd0dZ6gfjOVlPli7DN7ixKXlbVfm5SJ/m/Xv0=) 2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=) 3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6903 (0x1af7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: Nov 4 15:43:37 2025 GMT Not After : Nov 11 15:43:37 2025 GMT Subject: CN=690a1f29-9de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:0d:1f:76:9d:30:71:92:d0:b2:b4:37:57: 80:f1:1d:e1:20:94:5d:49:d3:02:4e:4c:1c:1c:39: c2:3e:c7:61:76:72:7a:3b:21:3c:3b:99:7d:51:ec: b5:51:91:da:7a:50:ea:bc:d7:cd:35:37:db:4f:95: 66:2f:39:ce:39:56:b1:6d:90:da:fe:c6:ca:8c:c5: 00:83:3b:b8:49:a5:41:24:92:f0:42:f0:d2:41:06: db:19:73:6a:af:ce:d2:d5:d0:94:e4:c0:f8:a0:66: 9a:2a:a2:c7:d5:05:ec:11:62:d0:7d:ae:2d:0a:e8: 23:4c:9e:09:ce:21:af:0b:f7:e7:f4:87:52:0d:2e: 7e:d1:12:c8:3a:79:eb:6e:c3:5e:7e:36:b2:a1:7f: f4:12:be:fd:14:96:96:0e:18:a2:2f:e8:9b:67:8a: f7:49:aa:c0:48:cc:78:9a:df:d6:b7:14:75:8f:cb: 8d:3e:95:1a:15:4e:78:aa:06:d4:2a:3e:72:5f:dd: 23:53:2b:a4:2d:64:86:77:75:68:2a:ba:df:d4:12: 30:93:db:19:87:93:19:b0:9a:8d:41:78:22:d0:6a: 0d:b2:cb:0c:88:8f:9a:71:b8:12:b7:2f:76:15:b9: 9d:be:16:75:07:73:28:21:be:d5:71:cf:59:6d:c5: 34:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:6D:B0:84:09:E8:E8:8C:BC:65:7F:69:A0:9A:A1:AF:23:5A:00 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:97:c6:23:e4:60:43:49:aa:9e:5e:06:61:92:5b:39:9e:4c: f7:ef:38:73:cd:33:d8:8b:2f:59:f6:6c:b2:f8:35:9d:2e:ff: 09:31:d7:5a:cf:36:f8:c9:29:dd:1a:d8:96:19:1d:38:fd:49: 57:82:45:1b:3a:51:a3:30:b1:fc:38:80:6f:94:0e:b9:93:d7: dd:70:bb:48:98:7f:52:98:c5:46:25:e4:40:fe:70:53:3b:62: 1d:92:68:28:20:ef:6d:a0:b0:9b:16:8c:d5:92:d1:4a:47:d2: 80:e8:8e:a4:04:03:67:78:12:53:9d:72:1f:93:72:99:7b:fa: ba:1e:21:ab:71:89:d1:07:c6:ac:73:1d:dd:f3:99:26:72:e9: c2:a3:5b:62:be:28:01:a0:6f:91:bb:02:25:e8:4c:0c:e3:1e: 1d:0d:ae:aa:56:36:a9:59:fd:b4:29:fd:36:f0:76:31:01:32: f0:4c:71:f9:6c:3e:38:38:bd:5e:59:b4:9c:b9:f7:1e:98:7d: 17:46:f6:22:1f:2c:75:55:f6:85:3b:3d:8b:c2:3c:4a:44:41: 1e:f9:38:aa:a9:6b:17:c2:63:a7:32:71:3f:c3:b2:1b:7f:05: 79:95:05:d0:ad:91:03:7e:de:45:ce:27:c9:c6:4a:3e:da:c0: 95:a8:a8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjUxMTA0MTU0MzM3WhcNMjUxMTExMTU0MzM3WjAYMRYwFAYD VQQDEw02OTBhMWYyOS05ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YwNH3adMHGS0LK0N1eA8R3hIJRdSdMCTkwcHDnCPsdhdnJ6OyE8O5l9Uey1 UZHaelDqvNfNNTfbT5VmLznOOVaxbZDa/sbKjMUAgzu4SaVBJJLwQvDSQQbbGXNq r87S1dCU5MD4oGaaKqLH1QXsEWLQfa4tCugjTJ4JziGvC/fn9IdSDS5+0RLIOnnr bsNefjayoX/0Er79FJaWDhiiL+ibZ4r3SarASMx4mt/WtxR1j8uNPpUaFU54qgbU Kj5yX90jUyukLWSGd3VoKrrf1BIwk9sZh5MZsJqNQXgi0GoNsssMiI+acbgSty92 FbmdvhZ1B3MoIb7Vcc9ZbcU0awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb0bbCE CejojLxlf2mgmqGvI1oAMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz Q2x5OTVXUkRGSUF6bS11cGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOl8Yj5GBDSaqeXgZhkls5nkz37zhzzTPYiy9Z9myy+DWdLv8JMdda zzb4ySndGtiWGR04/UlXgkUbOlGjMLH8OIBvlA65k9fdcLtImH9SmMVGJeRA/nBT O2IdkmgoIO9toLCbFozVktFKR9KA6I6kBANneBJTnXIfk3KZe/q6HiGrcYnRB8as cx3d85kmcunCo1tivigBoG+RuwIl6EwM4x4dDa6qVjapWf20Kf028HYxATLwTHH5 bD44OL1eWbScufcemH0XRvYiHyx1VfaFOz2LwjxKREEe+TiqqWsXwmOnMnE/w7Ib fwV5lQXQrZEDft5FzifJxko+2sCVqKgu -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:00 2025 by rpki-client