$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft File: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json) Hash identifier: eOehGcAnNMXeeR4do8eiCQVDVxLk2Gy5xiYKM+jV1r0= Subject key identifier: 15:02:DD:9D:8B:42:B4:B1:D6:88:36:C4:60:16:DC:EE:22:04:9C:0C Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 Certificate issuer: /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Certificate serial: 0DA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft Manifest number: 0D97 Signing time: Tue 04 Nov 2025 18:00:11 +0000 Manifest this update: Tue 04 Nov 2025 18:00:11 +0000 Manifest next update: Tue 11 Nov 2025 18:00:11 +0000 Files and hashes: 1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: 0dC8KSpw9xg1TUQISeBpSRxP7NJwNGKzxogzvLuE+ow=) 2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: D+ULNvDKVlD7JVj0dgqxkA98GxkgF1Daq5+neqboohk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3489 (0xda1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4 Validity Not Before: Nov 4 18:00:11 2025 GMT Not After : Nov 11 18:00:11 2025 GMT Subject: CN=690a3f2b-fc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:51:66:b1:da:88:d1:6a:4c:6f:14:e5:75: 4a:e5:0f:24:03:c3:16:57:07:ab:20:01:92:8d:be: 4e:03:03:08:ac:a7:c4:46:a2:b9:de:99:46:e5:dd: 6d:5a:9d:71:f3:87:1c:4c:b5:48:f7:c9:90:53:f2: 10:be:77:1a:75:70:7a:57:43:93:94:aa:21:b6:a4: 42:9f:f3:a5:5c:b6:4d:59:d9:7a:c9:b8:ce:bb:f7: f5:c1:36:43:5e:72:78:a7:38:48:78:a6:9b:1c:36: 77:6b:c9:ae:c0:b3:be:b8:ef:33:87:27:86:2a:51: 40:79:f7:51:94:8f:b2:0e:1b:a0:95:b3:1c:99:38: 33:b4:5f:9d:8b:d3:fb:28:07:fe:fc:1b:27:c0:c7: af:d6:ec:4d:c9:3a:24:5d:82:43:87:1e:f5:63:1f: e9:c6:7a:4c:6f:28:ed:94:8c:c5:4f:84:e0:3a:f5: 4e:77:da:1e:00:62:65:b2:93:3d:0c:26:73:37:cc: e2:e5:7b:32:d6:9f:28:71:f8:9d:8a:62:73:25:c2: 6e:e9:01:3a:c1:f2:db:9a:01:4d:bf:a7:fb:de:4d: c9:39:4b:2f:a6:bd:90:50:ad:e7:e6:9e:e7:d9:7e: e9:af:db:b7:dd:62:d4:93:d4:b7:e6:e1:4b:da:27: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:02:DD:9D:8B:42:B4:B1:D6:88:36:C4:60:16:DC:EE:22:04:9C:0C X509v3 Authority Key Identifier: keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8d:d2:e3:d7:45:8a:9e:90:61:a0:05:30:5b:18:d3:c2:20: 16:a5:00:85:23:c4:31:94:87:f2:77:db:76:ae:48:63:84:6a: a6:7e:51:2f:0b:9c:30:7c:9c:08:88:91:44:1b:10:82:07:6e: 56:f2:3d:7c:95:dc:a6:2e:a9:a3:e1:5d:a8:c8:2f:20:b7:6c: 38:97:3a:8d:63:31:a8:12:9a:9b:fa:a1:c3:d5:d0:d8:aa:e4: c7:7e:4d:68:1b:1c:1b:1d:f5:58:51:25:a8:18:b2:65:87:83: ef:d2:78:36:82:c0:9e:eb:3f:cb:85:7b:f8:0e:2b:1c:10:ca: 87:9a:21:18:7e:42:bc:77:96:57:75:33:75:52:62:60:20:05: e0:e2:dd:44:9a:1a:d2:4c:2c:0a:28:03:43:d0:5f:60:0f:57: 2c:1d:53:8e:7f:3b:f7:9a:a3:c4:8a:45:56:3a:6e:cb:47:f7: 7d:30:83:29:97:5b:31:5e:2b:19:91:16:74:6a:2b:51:66:74: dd:d1:f1:21:d9:1c:9c:25:2b:09:cc:35:82:1e:97:1e:b6:3b: f2:26:d9:00:15:84:bd:a6:bb:44:3d:a2:41:2c:85:71:39:99: 3c:af:cd:48:3f:8d:8e:d6:6b:51:5e:2b:25:a1:f1:47:92:31: 07:2c:7d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA0ODQxMTAvBgNVBAUTKDQzNUJERjkzMDMwNDE5NEEwODY5QURFRTg3QTBCNTU2 QzU4OEY2RjQwHhcNMjUxMTA0MTgwMDExWhcNMjUxMTExMTgwMDExWjAYMRYwFAYD VQQDEw02OTBhM2YyYi1mYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVNRZrHaiNFqTG8U5XVK5Q8kA8MWVwerIAGSjb5OAwMIrKfERqK53plG5d1t Wp1x84ccTLVI98mQU/IQvncadXB6V0OTlKohtqRCn/OlXLZNWdl6ybjOu/f1wTZD XnJ4pzhIeKabHDZ3a8muwLO+uO8zhyeGKlFAefdRlI+yDhuglbMcmTgztF+di9P7 KAf+/BsnwMev1uxNyTokXYJDhx71Yx/pxnpMbyjtlIzFT4TgOvVOd9oeAGJlspM9 DCZzN8zi5Xsy1p8ocfidimJzJcJu6QE6wfLbmgFNv6f73k3JOUsvpr2QUK3n5p7n 2X7pr9u33WLUk9S35uFL2ieKFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUC3Z2L QrSx1og2xGAW3O4iBJwMMB8GA1UdIwQYMBaAFENb35MDBBlKCGmt7oegtVbFiPb0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4NC82OTI1QkQ4RUQy QzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdVb0lhYTN1aDZDMVZzV0k5 dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ExdmZrd01FR1VvSWFhM3VoNkMxVnNXSTl2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDQ4NC82OTI1QkQ4RUQyQzExMUU5QTkyNUNEMjlDNEY5QUUwMi9RMXZma3dNRUdV b0lhYTN1aDZDMVZzV0k5dlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jdLj10WKnpBhoAUwWxjTwiAWpQCFI8QxlIfyd9t2rkhjhGqmflEv C5wwfJwIiJFEGxCCB25W8j18ldymLqmj4V2oyC8gt2w4lzqNYzGoEpqb+qHD1dDY quTHfk1oGxwbHfVYUSWoGLJlh4Pv0ng2gsCe6z/LhXv4DiscEMqHmiEYfkK8d5ZX dTN1UmJgIAXg4t1EmhrSTCwKKAND0F9gD1csHVOOfzv3mqPEikVWOm7LR/d9MIMp l1sxXisZkRZ0aitRZnTd0fEh2RycJSsJzDWCHpcetjvyJtkAFYS9prtEPaJBLIVx OZk8r81IP42O1mtRXislofFHkjEHLH0h -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:57 2025 by rpki-client