$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: zSCikXDGwKt4gn3EYJfRiLZbb/VDO6XNj7TWLt5FvBY= Subject key identifier: 02:09:C2:A4:35:92:F4:70:4E:A5:99:BF:AC:A7:97:5F:E8:9F:C0:2A Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: D8 Signing time: Wed 05 Nov 2025 05:50:20 +0000 Manifest this update: Wed 05 Nov 2025 05:50:20 +0000 Manifest next update: Wed 12 Nov 2025 05:50:20 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: NIY4WIOvUzKSq272/aJiftD89k3l9nm2GdZql05yA7w=) 2: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: OJAV4WkM6x0VNa00vf9C4w5wbjHBK75s7rqnrmFq6U0=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: RfcMIG1IXwx6pF5vk+cVTv0c/fwzJvqDiir11C+zzpI=) 4: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: gFT3tE7cOKt1wG5K3C0Vr6g5ehw7Cbh9wHU/cKgl+po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Nov 5 05:50:20 2025 GMT Not After : Nov 12 05:50:20 2025 GMT Subject: CN=690ae59c-fad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ec:ed:0d:d5:1f:e8:66:03:e6:ed:7a:66:70: a1:bf:dc:e3:45:bd:50:0b:c9:ee:02:f5:1e:7e:40: 50:73:f0:6c:49:c5:b6:df:88:1e:3f:d2:dc:52:94: 11:ba:eb:eb:63:2a:6a:4a:b2:eb:6b:86:3a:5d:8e: 61:ec:f7:24:01:2a:6a:6a:b5:b6:d9:5a:e0:61:04: 37:04:c1:75:1c:4a:7f:b7:9d:85:dc:9e:48:8b:0a: 7a:46:03:18:be:74:46:82:a3:b4:d3:24:c1:eb:3e: 64:e4:b4:99:a8:ad:02:33:95:37:be:bf:2d:02:0c: 46:1a:e2:6a:db:86:f5:49:bb:cb:a3:07:93:f1:93: 10:17:eb:2d:25:ab:81:2c:68:33:9a:45:18:eb:a3: 0e:2c:47:64:df:b1:0d:00:4e:79:5e:ea:71:b8:0e: bc:97:47:05:06:dc:95:fb:a8:55:e2:72:88:0e:c1: c4:ee:4e:85:6c:95:f3:61:23:a8:22:2a:29:c0:d5: 22:a9:a1:9e:d3:5d:6d:1b:48:49:03:59:e9:b9:ef: 6c:37:7e:28:07:12:b7:e8:f2:e5:d4:52:c0:0f:f6: ed:d8:74:68:76:0b:9d:5e:f3:59:00:b6:72:65:c2: 0b:3a:68:ad:5b:f9:fe:86:85:70:88:12:40:70:a9: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:C2:A4:35:92:F4:70:4E:A5:99:BF:AC:A7:97:5F:E8:9F:C0:2A X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b1:f4:08:06:59:d0:ce:6c:fb:92:47:a6:58:b9:97:a3:c4: a7:cb:40:21:96:02:61:29:ec:d3:8e:61:5a:45:5c:08:f6:95: 77:f9:5a:90:22:03:0a:16:fc:c1:38:e2:d1:8b:9a:22:70:3c: 82:61:f8:a4:a6:1c:a4:9f:12:f8:da:c2:6d:c3:09:16:a7:ec: 0f:76:8c:96:59:df:42:1d:75:77:65:42:4b:1f:97:df:05:5a: 52:cd:29:a3:f9:ab:59:02:9c:ae:29:f3:f1:1a:7b:63:3c:a9: a3:7e:7b:a7:a3:1a:3f:f2:a6:9c:0a:7b:f4:05:0b:44:dc:de: df:b3:c2:54:85:8b:86:1a:f4:ed:4e:3d:d1:df:74:2f:2c:9f: 2a:09:9e:19:44:4c:2a:aa:3c:ab:a4:4a:b4:f0:8d:30:85:d7: bc:04:c0:aa:0f:4f:53:85:fb:15:1d:eb:bf:84:45:56:0b:33: 67:b8:94:53:b3:3d:58:6d:e8:46:7b:a6:76:ec:8c:6b:7c:02: 95:ac:3f:93:d4:13:02:d7:96:00:ba:be:51:81:ab:3c:ba:0d: 87:ea:05:3d:88:bb:33:73:03:bd:5c:d8:2a:80:6e:3d:5e:bf: bc:22:6f:a5:7a:36:1b:f7:ff:8f:8a:86:d4:52:0a:21:85:61: f3:78:46:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUxMTA1MDU1MDIwWhcNMjUxMTEyMDU1MDIwWjAYMRYwFAYD VQQDEw02OTBhZTU5Yy1mYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uztDdUf6GYD5u16ZnChv9zjRb1QC8nuAvUefkBQc/BsScW234geP9LcUpQR uuvrYypqSrLra4Y6XY5h7PckASpqarW22VrgYQQ3BMF1HEp/t52F3J5Iiwp6RgMY vnRGgqO00yTB6z5k5LSZqK0CM5U3vr8tAgxGGuJq24b1SbvLoweT8ZMQF+stJauB LGgzmkUY66MOLEdk37ENAE55XupxuA68l0cFBtyV+6hV4nKIDsHE7k6FbJXzYSOo IiopwNUiqaGe011tG0hJA1npue9sN34oBxK36PLl1FLAD/bt2HRodgudXvNZALZy ZcILOmitW/n+hoVwiBJAcKnerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIJwqQ1 kvRwTqWZv6ynl1/on8AqMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWsfQIBlnQzmz7kkemWLmXo8Sny0AhlgJhKezTjmFaRVwI9pV3+VqQ IgMKFvzBOOLRi5oicDyCYfikphyknxL42sJtwwkWp+wPdoyWWd9CHXV3ZUJLH5ff BVpSzSmj+atZApyuKfPxGntjPKmjfnunoxo/8qacCnv0BQtE3N7fs8JUhYuGGvTt Tj3R33QvLJ8qCZ4ZREwqqjyrpEq08I0whde8BMCqD09ThfsVHeu/hEVWCzNnuJRT sz1YbehGe6Z27IxrfAKVrD+T1BMC15YAur5Rgas8ug2H6gU9iLszcwO9XNgqgG49 Xr+8Im+lejYb9/+PiobUUgohhWHzeEZL -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:13 2025 by rpki-client