$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: 8BLOYzIMrJ8DY+pCE3oth70nCnhlgC3rHQJfOUDpW6E= Subject key identifier: 1C:09:44:25:68:AF:D0:F3:0B:69:E7:69:BA:30:F4:C9:D5:96:3C:8E Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 043E Signing time: Mon 03 Nov 2025 00:15:38 +0000 Manifest this update: Mon 03 Nov 2025 00:15:37 +0000 Manifest next update: Mon 10 Nov 2025 00:15:37 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: o9kYhVapS5i8ZSDumf+wPPXP1slZd5ZBeZDaT410N00=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Nov 3 00:15:37 2025 GMT Not After : Nov 10 00:15:37 2025 GMT Subject: CN=6907f429-c953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:0f:59:ea:60:56:3c:67:49:0c:e1:01:19: e3:df:22:7f:95:c9:6e:a9:53:c7:d6:78:c4:af:cc: 63:b2:f3:08:35:bd:67:8c:a6:99:2f:0f:a3:07:ad: e1:f0:42:86:55:37:20:7e:30:10:bd:68:11:e1:95: 99:b9:80:48:a0:0e:6a:d0:84:b6:93:30:0f:b1:59: e2:5d:0b:e5:62:33:a9:f4:d3:b5:0b:df:a3:b4:34: 4f:a8:35:e8:b4:2a:f4:8e:9d:49:20:2f:82:d2:67: 66:1b:23:f2:e3:d5:ee:7a:f6:13:00:72:90:a8:9b: 54:c9:be:e4:a4:73:fb:4c:29:30:3d:ba:37:13:5e: a7:cc:32:04:de:fa:31:be:c5:82:ec:9f:3e:39:49: 9e:10:74:8c:df:7d:6b:bf:88:2f:1d:7c:ab:ce:70: 30:c3:a5:c6:b5:4d:f3:81:0d:8e:d0:38:c4:45:23: 23:6d:6e:e9:08:d7:d0:f7:f5:4c:3c:d2:fb:36:31: b9:d5:57:43:87:68:d0:51:74:aa:34:45:dc:84:f7: 93:6e:41:89:e3:e7:97:0a:ff:b6:d6:fb:fc:b5:87: e4:4c:99:cd:10:67:17:93:ce:63:88:02:2f:6a:29: 63:e8:b1:20:e4:62:15:f0:a1:e1:8d:30:30:76:54: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:44:25:68:AF:D0:F3:0B:69:E7:69:BA:30:F4:C9:D5:96:3C:8E X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5f:42:63:fb:9e:e8:61:87:7f:90:bd:cf:02:2b:c7:33:58: 9a:44:ca:8f:d0:0c:86:71:ae:c8:22:d1:7d:47:0b:e1:a8:e5: 71:da:8c:e5:30:a2:c3:5b:54:0e:92:f4:91:98:76:84:6b:0b: f4:10:27:d3:2d:b5:23:19:ce:88:aa:2b:e9:e9:f4:c7:7a:54: 0a:e3:a4:e9:52:61:ee:bb:70:82:cf:e7:dc:cc:73:36:b2:97: 5f:95:1d:00:5e:fa:08:ac:19:72:5f:04:74:c7:66:97:b1:28: 84:2b:82:85:27:21:88:d9:9b:71:10:77:9d:49:4a:51:3f:fa: 67:1d:59:76:3f:47:0f:31:a0:4f:8d:1e:dc:29:b9:3d:7b:fd: 35:f3:f3:85:92:63:36:37:66:b4:32:4d:70:45:ff:32:91:9a: 37:59:4d:7e:61:14:da:fd:52:cb:e9:9e:b6:79:e6:fd:c0:22: 8d:e6:9e:75:fc:ce:8e:a9:16:5a:a2:df:9b:7e:d5:bd:0b:79: 12:19:7c:a8:e7:a1:40:83:34:bd:20:5d:12:48:5e:d1:d2:c7: 0d:0e:88:37:9d:93:c8:92:b4:5e:89:fa:0b:34:8a:d2:62:0d: 6c:16:c4:ba:bb:d6:e4:ed:dc:43:49:f7:e6:43:36:57:6d:e7: 4b:31:eb:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUxMTAzMDAxNTM3WhcNMjUxMTEwMDAxNTM3WjAYMRYwFAYD VQQDEw02OTA3ZjQyOS1jOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ToPWepgVjxnSQzhARnj3yJ/lcluqVPH1njEr8xjsvMINb1njKaZLw+jB63h 8EKGVTcgfjAQvWgR4ZWZuYBIoA5q0IS2kzAPsVniXQvlYjOp9NO1C9+jtDRPqDXo tCr0jp1JIC+C0mdmGyPy49XuevYTAHKQqJtUyb7kpHP7TCkwPbo3E16nzDIE3vox vsWC7J8+OUmeEHSM331rv4gvHXyrznAww6XGtU3zgQ2O0DjERSMjbW7pCNfQ9/VM PNL7NjG51VdDh2jQUXSqNEXchPeTbkGJ4+eXCv+21vv8tYfkTJnNEGcXk85jiAIv ailj6LEg5GIV8KHhjTAwdlT2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwJRCVo r9DzC2nnabow9MnVljyOMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjX0Jj+57oYYd/kL3PAivHM1iaRMqP0AyGca7IItF9RwvhqOVx2ozl MKLDW1QOkvSRmHaEawv0ECfTLbUjGc6Iqivp6fTHelQK46TpUmHuu3CCz+fczHM2 spdflR0AXvoIrBlyXwR0x2aXsSiEK4KFJyGI2ZtxEHedSUpRP/pnHVl2P0cPMaBP jR7cKbk9e/018/OFkmM2N2a0Mk1wRf8ykZo3WU1+YRTa/VLL6Z62eeb9wCKN5p51 /M6OqRZaot+bftW9C3kSGXyo56FAgzS9IF0SSF7R0scNDog3nZPIkrReifoLNIrS Yg1sFsS6u9bk7dxDSffmQzZXbedLMev0 -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:37 2025 by rpki-client