$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json) Hash identifier: OOp2rNqeJR6o7dHyLSDdiR+U62LXu8k39JJkUDwJK0s= Subject key identifier: E0:20:EF:43:E0:A4:44:8B:02:0A:09:09:94:00:BF:7C:AE:31:D2:EE Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft Manifest number: 0208 Signing time: Mon 03 Nov 2025 02:19:00 +0000 Manifest this update: Mon 03 Nov 2025 02:18:59 +0000 Manifest next update: Mon 10 Nov 2025 02:18:59 +0000 Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: u40irG2uY3giJqEplqjZ6kmM9E0ntARSlhdRWRH6v9U=) 2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: pYWe5nhEh7lryxcWey5nEqoA/9P5QKHAVOb9CwXBhN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB Validity Not Before: Nov 3 02:18:59 2025 GMT Not After : Nov 10 02:18:59 2025 GMT Subject: CN=69081113-67d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bb:e6:3f:25:f9:f4:e1:3a:de:1d:05:74:13: b8:6d:90:ab:f4:cd:1d:76:b1:e4:b3:32:a5:ef:f3: c8:e1:30:59:69:c9:00:9b:2f:cf:17:99:bb:6e:03: b2:16:59:bc:05:65:1b:bf:76:64:15:6e:3b:9d:71: a3:08:eb:6d:1a:7e:23:10:f1:d3:2e:3a:e5:d2:6a: 64:5a:c7:8b:30:d6:44:22:24:60:e0:4d:a8:3e:49: f5:87:ec:67:9b:2d:af:c9:c2:6e:67:93:4d:68:70: 87:33:f5:4d:49:57:43:de:83:49:48:e6:ab:2d:bf: 68:35:65:7c:fe:6b:39:b6:4e:41:8c:6a:70:51:b8: cf:2e:de:66:76:8a:b3:a8:f5:15:42:20:53:16:02: b9:00:31:c1:4b:b6:9a:69:cf:f2:31:dd:de:91:55: 4e:d0:9f:c2:75:32:64:05:27:6c:7b:91:dc:83:45: 50:5f:6f:77:94:7b:64:8d:41:6f:d7:f7:40:2a:a5: b8:19:16:c1:88:ef:a2:8e:fd:02:15:4b:21:6f:b8: b5:95:10:a8:bc:fa:bd:e4:01:f2:31:64:f8:ce:59: 8e:13:1d:13:6f:53:9b:94:b2:13:9e:18:05:c8:13: 98:a8:21:2b:f0:7a:2b:f5:7c:ca:ee:c0:e0:a2:70: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:20:EF:43:E0:A4:44:8B:02:0A:09:09:94:00:BF:7C:AE:31:D2:EE X509v3 Authority Key Identifier: keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7e:14:ba:bf:48:30:00:13:61:06:ab:e0:65:e1:a2:da:aa: 92:ee:3d:61:4e:15:95:aa:e6:e6:c3:48:c3:5e:42:36:b2:e0: 2a:aa:e8:51:2a:b5:f8:b5:ed:13:08:e6:b0:b9:e9:bf:7f:da: b7:f0:8d:27:0f:7f:cc:af:5b:45:c6:1d:9e:93:68:ed:ef:eb: ee:d6:88:af:1c:f1:1b:66:e8:c7:9d:fc:f6:ba:52:5d:bb:f3: 85:ce:6e:1d:b8:ee:18:c1:3c:fc:30:a7:bb:20:07:cc:30:da: 9d:99:20:39:e3:f1:77:ad:10:cc:c2:19:2f:da:d7:e4:10:22: e8:81:eb:d6:03:9a:58:65:34:d5:01:3c:b9:04:8c:0f:7a:bb: a8:71:12:2f:a8:a8:44:6b:69:ba:c5:35:01:22:ba:42:d0:76: 25:21:a9:fe:0f:9c:64:74:46:44:4e:2d:76:4e:b4:79:08:4e: 0b:39:da:ca:16:20:8a:6c:30:f3:cd:4f:c5:e7:22:89:7e:d0: 61:85:64:ed:1f:3e:8c:f4:59:60:be:45:91:c0:7b:dc:42:60: 26:be:68:68:0d:17:9a:84:37:c8:84:f1:44:7b:9c:79:d1:a2: 34:16:71:00:a6:10:bd:a1:91:40:98:df:7e:5f:b1:8e:fc:bb: 5e:ea:b7:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2 QTM3NzYzQUIwHhcNMjUxMTAzMDIxODU5WhcNMjUxMTEwMDIxODU5WjAYMRYwFAYD VQQDEw02OTA4MTExMy02N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07vmPyX59OE63h0FdBO4bZCr9M0ddrHkszKl7/PI4TBZackAmy/PF5m7bgOy Flm8BWUbv3ZkFW47nXGjCOttGn4jEPHTLjrl0mpkWseLMNZEIiRg4E2oPkn1h+xn my2vycJuZ5NNaHCHM/VNSVdD3oNJSOarLb9oNWV8/ms5tk5BjGpwUbjPLt5mdoqz qPUVQiBTFgK5ADHBS7aaac/yMd3ekVVO0J/CdTJkBSdse5Hcg0VQX293lHtkjUFv 1/dAKqW4GRbBiO+ijv0CFUshb7i1lRCovPq95AHyMWT4zlmOEx0Tb1OblLITnhgF yBOYqCEr8Hor9XzK7sDgonC66wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAg70Pg pESLAgoJCZQAv3yuMdLuMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4 YjYwbGdwbUlJMFZxTjNZNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLfhS6v0gwABNhBqvgZeGi2qqS7j1hThWVqubmw0jDXkI2suAqquhR KrX4te0TCOawuem/f9q38I0nD3/Mr1tFxh2ek2jt7+vu1oivHPEbZujHnfz2ulJd u/OFzm4duO4YwTz8MKe7IAfMMNqdmSA54/F3rRDMwhkv2tfkECLogevWA5pYZTTV ATy5BIwPeruocRIvqKhEa2m6xTUBIrpC0HYlIan+D5xkdEZETi12TrR5CE4LOdrK FiCKbDDzzU/F5yKJftBhhWTtHz6M9FlgvkWRwHvcQmAmvmhoDReahDfIhPFEe5x5 0aI0FnEAphC9oZFAmN9+X7GO/Lte6rdq -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:13 2025 by rpki-client