$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json) Hash identifier: 2z/lbZFGJGWOhnl3cb185GX9ITk4sUkt3w9BLcGeq+g= Subject key identifier: 83:B6:87:B4:29:6A:2F:CB:BC:05:85:A7:7B:51:04:99:6A:4B:D3:42 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft Manifest number: 0103 Signing time: Mon 03 Nov 2025 05:02:38 +0000 Manifest this update: Mon 03 Nov 2025 05:02:38 +0000 Manifest next update: Mon 10 Nov 2025 05:02:38 +0000 Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: +xy39R1KKBkWQk20xgMJyUZ7UB2MOlVDHwYZ9qcnj70=) 2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: w+HKOaC0+jfhSxKVMJ9ShZE05MyOqwYCqtIs1clN5KI=) 3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: wkNRLxYMTSQ9zGepk4yzqzlqbEMp0dmX1JQWykvEvPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Nov 3 05:02:38 2025 GMT Not After : Nov 10 05:02:38 2025 GMT Subject: CN=6908376e-a7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:9c:97:cc:33:83:1c:6c:54:79:05:4f:36: e5:7c:77:1b:6d:c5:15:1b:3a:93:ae:e7:32:9e:80: 0e:c4:3e:6f:c7:e1:b1:fd:3c:25:28:ce:ec:70:ba: 30:82:7b:7b:54:13:08:a2:3b:cc:d2:76:82:5b:1c: 8d:ea:29:e7:69:fe:bf:02:7f:df:41:77:bd:65:f2: d4:aa:a9:a6:20:20:e2:99:29:bf:97:4a:48:67:1d: 38:51:ef:a0:cb:ef:0c:d6:be:d2:ee:ea:ae:39:d0: 03:76:cf:bb:55:3a:f9:cb:31:17:33:6b:ee:15:21: 7a:9d:3d:0f:ee:26:84:c9:d5:29:38:52:2a:80:8e: 22:f6:34:a4:ca:f3:04:eb:55:4e:ba:f6:38:50:fc: 59:a8:06:d4:38:12:55:6b:95:23:6c:0f:62:bc:a2: d7:6a:49:85:86:bf:6e:a0:c4:ca:e0:c3:44:24:45: 19:dd:0f:9c:38:9a:9c:51:cf:c6:23:a7:a7:26:7b: 81:f9:a5:f5:6a:2c:fc:15:d2:3c:c4:79:42:75:dc: da:7c:37:22:57:3a:dd:7b:47:30:0d:d0:5b:35:8d: ad:d6:eb:c3:d4:a9:bb:9b:ea:90:b7:00:df:d6:65: 53:41:d6:5a:9b:21:b0:f8:c7:4f:67:88:7c:66:69: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B6:87:B4:29:6A:2F:CB:BC:05:85:A7:7B:51:04:99:6A:4B:D3:42 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:51:2c:76:fb:36:d9:08:28:ef:d1:bb:78:19:65:ef:1e:7e: 60:e6:c3:4f:64:d3:6b:33:a1:a8:6f:f8:16:02:b1:65:9c:03: 7d:3f:6e:9a:98:ca:81:f1:37:89:8b:5c:86:0f:90:f6:d8:d4: df:5a:bd:c8:03:77:f1:24:a6:90:e6:01:83:31:b9:2a:dc:dc: 70:4b:1c:23:07:d9:c2:33:29:0b:13:4d:c5:7a:3b:ec:c0:91: 6d:97:8d:7a:fc:b0:a3:97:91:7f:ec:20:2f:ea:4a:d8:f7:4c: aa:44:26:53:3b:0b:97:f3:66:3b:10:85:84:45:b4:04:05:77: f5:b3:33:6a:bc:5e:a3:ed:b0:57:f6:c8:c2:50:08:0c:ce:12: 45:89:6c:67:67:42:05:f0:80:ef:bf:f7:f2:c0:2f:bd:31:92: 5f:4a:ae:47:a1:10:40:f4:b3:bf:37:ae:4f:0a:5d:b8:08:1b: 9c:f5:78:3b:99:e1:d9:1e:4d:c8:64:ee:9c:6d:77:2a:2d:72: 42:bf:d9:8b:24:ef:28:92:33:59:85:62:a7:01:04:a4:07:fd: ac:2b:56:06:79:f7:a9:95:2a:9c:51:40:1b:94:da:eb:90:1d: 38:d0:34:57:94:8d:55:e7:45:ea:10:21:2a:8f:c9:fa:e1:34: af:8c:0d:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy OEQyNjQ5OUQwHhcNMjUxMTAzMDUwMjM4WhcNMjUxMTEwMDUwMjM4WjAYMRYwFAYD VQQDEw02OTA4Mzc2ZS1hN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uecl8wzgxxsVHkFTzblfHcbbcUVGzqTrucynoAOxD5vx+Gx/TwlKM7scLow gnt7VBMIojvM0naCWxyN6innaf6/An/fQXe9ZfLUqqmmICDimSm/l0pIZx04Ue+g y+8M1r7S7uquOdADds+7VTr5yzEXM2vuFSF6nT0P7iaEydUpOFIqgI4i9jSkyvME 61VOuvY4UPxZqAbUOBJVa5UjbA9ivKLXakmFhr9uoMTK4MNEJEUZ3Q+cOJqcUc/G I6enJnuB+aX1aiz8FdI8xHlCddzafDciVzrde0cwDdBbNY2t1uvD1Km7m+qQtwDf 1mVTQdZamyGw+MdPZ4h8Zmm98wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO2h7Qp ai/LvAWFp3tRBJlqS9NCMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn bHBRRm43STk3NFVvMG1TWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOUSx2+zbZCCjv0bt4GWXvHn5g5sNPZNNrM6Gob/gWArFlnAN9P26a mMqB8TeJi1yGD5D22NTfWr3IA3fxJKaQ5gGDMbkq3NxwSxwjB9nCMykLE03Fejvs wJFtl416/LCjl5F/7CAv6krY90yqRCZTOwuX82Y7EIWERbQEBXf1szNqvF6j7bBX 9sjCUAgMzhJFiWxnZ0IF8IDvv/fywC+9MZJfSq5HoRBA9LO/N65PCl24CBuc9Xg7 meHZHk3IZO6cbXcqLXJCv9mLJO8okjNZhWKnAQSkB/2sK1YGefeplSqcUUAblNrr kB040DRXlI1V50XqECEqj8n64TSvjA1B -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:15 2025 by rpki-client