$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json) Hash identifier: wfgXroPL9cO0cBNJlEFo33tvkdLTrcnlPxtbNrQM0ew= Subject key identifier: 78:89:C4:CB:85:42:14:87:5F:56:B2:1D:D3:06:D2:4F:31:0E:B5:8F Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft Manifest number: 017D Signing time: Tue 04 Nov 2025 17:13:13 +0000 Manifest this update: Tue 04 Nov 2025 17:13:12 +0000 Manifest next update: Tue 11 Nov 2025 17:13:12 +0000 Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: MEEOkoEvxaQqGpO2DfprpN3JmiTBFcg9rcP+dBh776E=) 2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: mR7p6xLL+eywaq3IEYtE5q1FtrVRKFEpVD4lZkW4skg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4 Validity Not Before: Nov 4 17:13:12 2025 GMT Not After : Nov 11 17:13:12 2025 GMT Subject: CN=690a3428-b7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:e1:63:b4:26:21:86:dc:f8:cc:d1:1d:e9: fc:78:c9:70:0a:bd:9f:bd:ea:a4:61:96:b5:be:8a: 50:3f:5d:21:f9:0f:ae:b9:1a:a6:12:4a:21:96:d7: 0a:47:b1:44:c6:43:5a:4c:fd:ab:8d:80:33:45:ee: 57:a0:04:4d:94:4d:6c:79:22:87:25:cf:2a:10:45: d0:5d:f3:f1:f9:07:3a:70:7d:e0:65:57:42:f5:c2: d4:b2:0d:5c:6b:44:bd:c9:08:32:9b:80:a5:10:13: 39:37:b2:2b:12:db:e5:bb:e4:ad:c0:8d:4c:0d:c7: 4e:ed:6c:e8:1e:60:77:83:cb:93:04:25:6a:92:f6: df:e5:89:10:0a:ba:1e:52:00:7b:52:45:ca:23:43: d7:8e:36:a6:00:7c:fb:71:eb:3b:2a:c0:0d:06:e0: 03:8a:8e:5a:1a:a7:97:6c:81:ba:ea:1f:22:4c:f2: 27:df:ee:bc:7c:26:29:93:ea:79:f9:f1:eb:7b:4b: 9e:cc:4d:d9:4e:ac:81:24:88:46:a1:e2:4d:bf:27: 9d:22:23:c8:a7:3d:32:18:61:8d:bc:98:b8:b7:2a: 60:97:28:73:cd:4c:9b:88:e4:5b:4b:94:a9:8a:8e: 89:04:83:78:ed:81:e4:4f:f2:0f:22:ec:d2:c3:86: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:C4:CB:85:42:14:87:5F:56:B2:1D:D3:06:D2:4F:31:0E:B5:8F X509v3 Authority Key Identifier: keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2e:51:dd:03:91:3f:a1:fc:93:4e:eb:43:c8:80:e1:00:9d: 72:8c:eb:00:f4:96:93:53:11:88:f1:5a:bc:ff:f0:2d:95:d4: 02:4d:7e:3c:b7:46:a3:e7:85:52:5b:ef:5f:67:17:cf:d5:88: 74:89:86:00:5d:f3:a4:1f:43:a4:04:fd:a3:7c:3e:3e:d0:cb: 0b:b7:1b:73:f2:35:e9:33:3c:2e:8c:8c:22:a7:2d:4a:28:b7: ff:57:ad:34:ff:ef:af:b7:81:03:c5:53:19:45:1c:0d:43:74: 7e:7e:db:f4:a2:a6:bd:e1:ce:dc:1a:3e:d2:58:80:b1:98:10: 07:a5:fc:43:7b:e5:9a:ca:fe:51:c1:2b:e1:7d:33:ae:ff:d8: da:fa:d9:52:86:0d:e1:f4:88:04:15:d8:bd:59:bb:e9:ed:2f: dd:0c:03:39:f3:54:cc:d0:39:ee:83:8f:dc:cd:6e:0e:64:02: f1:57:1c:8d:a2:b7:d5:00:4f:55:e3:b4:5f:3b:4a:eb:ec:07: e9:d4:87:f8:e9:39:f0:00:9d:44:80:dd:d6:0b:fe:30:8c:72: be:ac:5e:05:56:c7:2b:5a:75:44:86:7d:72:08:de:97:1b:c4: c8:5f:2c:70:ef:52:20:4e:54:05:49:23:a5:03:93:4c:6b:a4: c6:a8:d2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKDQwRkQyNzMzMDFBOEJGOEUyNzA5NzYyQzY0RjRBRUEy NkQyQUUwQjQwHhcNMjUxMTA0MTcxMzEyWhcNMjUxMTExMTcxMzEyWjAYMRYwFAYD VQQDEw02OTBhMzQyOC1iN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3DhY7QmIYbc+MzRHen8eMlwCr2fveqkYZa1vopQP10h+Q+uuRqmEkohltcK R7FExkNaTP2rjYAzRe5XoARNlE1seSKHJc8qEEXQXfPx+Qc6cH3gZVdC9cLUsg1c a0S9yQgym4ClEBM5N7IrEtvlu+StwI1MDcdO7WzoHmB3g8uTBCVqkvbf5YkQCroe UgB7UkXKI0PXjjamAHz7ces7KsANBuADio5aGqeXbIG66h8iTPIn3+68fCYpk+p5 +fHre0uezE3ZTqyBJIhGoeJNvyedIiPIpz0yGGGNvJi4typglyhzzUybiORbS5Sp io6JBIN47YHkT/IPIuzSw4b7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiJxMuF QhSHX1ayHdMG0k8xDrWPMB8GA1UdIwQYMBaAFED9JzMBqL+OJwl2LGT0rqJtKuC0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC82QkVBRTA4ODdC MzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0NG5DWFlzWlBTdW9tMHE0 TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FQMG5Nd0dvdjQ0bkNYWXNaUFN1b20wcTRMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC82QkVBRTA4ODdCMzkxMUVFOUU5MTg0NUZDNEY5QUUwMi9RUDBuTXdHb3Y0 NG5DWFlzWlBTdW9tMHE0TFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASLlHdA5E/ofyTTutDyIDhAJ1yjOsA9JaTUxGI8Vq8//AtldQCTX48 t0aj54VSW+9fZxfP1Yh0iYYAXfOkH0OkBP2jfD4+0MsLtxtz8jXpMzwujIwipy1K KLf/V600/++vt4EDxVMZRRwNQ3R+ftv0oqa94c7cGj7SWICxmBAHpfxDe+Wayv5R wSvhfTOu/9ja+tlShg3h9IgEFdi9Wbvp7S/dDAM581TM0Dnug4/czW4OZALxVxyN orfVAE9V47RfO0rr7Afp1If46TnwAJ1EgN3WC/4wjHK+rF4FVscrWnVEhn1yCN6X G8TIXyxw71IgTlQFSSOlA5NMa6TGqNIN -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:44 2025 by rpki-client