$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json) Hash identifier: 3dGXxnwj6WydZTk77Uu+hYvAPVCd2PRI+UYs8xLzGd0= Subject key identifier: B7:BC:AB:5D:06:4D:7F:0F:2D:DE:C8:88:3C:BF:6C:4D:97:76:8A:97 Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft Manifest number: 07E6 Signing time: Tue 04 Nov 2025 21:35:42 +0000 Manifest this update: Tue 04 Nov 2025 21:35:42 +0000 Manifest next update: Tue 11 Nov 2025 21:35:42 +0000 Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: PW6LP0TaEgUZaUdxtA3YR2SB3ch1zBwA49FvPcy6eBo=) 2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=) 3: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: zJAHsR5vMmBId4rgQblkmv5dzmrkfUHqapxlAFUK3IU=) 4: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: fJzWMt/lGCbQqk4mF3i/8P1wkDCnq471kJQMBy/Sczg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8 Validity Not Before: Nov 4 21:35:42 2025 GMT Not After : Nov 11 21:35:42 2025 GMT Subject: CN=690a71ae-6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:ec:6d:96:6e:e5:db:cc:97:87:7c:65:94: a3:37:42:02:10:66:98:41:e7:25:b5:ac:0b:b1:6a: c2:d2:63:b8:e4:54:ee:47:d5:fe:23:23:ed:80:98: 6f:03:c4:68:69:20:37:5f:77:eb:2b:6a:bb:e6:ef: 46:59:c0:00:b5:dd:5d:07:21:99:dc:71:68:27:a5: 77:6d:6d:3a:e4:6c:5d:22:d9:e6:99:fc:31:4a:d5: 12:58:22:7b:71:e5:f5:ad:8e:c8:9e:04:80:fa:18: ea:c2:03:41:a4:9d:f7:15:f6:86:63:f3:f0:d2:66: 27:99:01:18:12:b9:4f:8a:4b:a8:d2:04:49:71:7c: 73:ef:c2:b8:02:e6:e4:25:3f:4e:32:0a:1f:7a:a2: 71:64:15:8e:6d:ef:b8:ff:19:39:b4:e9:89:83:72: 43:fa:4c:e5:1c:fd:b1:8f:d8:a8:1e:20:f1:49:a8: 11:a4:56:87:22:5d:d8:14:3f:d9:f4:86:b8:cc:f0: ff:9b:2d:fa:12:9b:74:14:45:4f:8a:1d:1a:66:eb: 32:22:ca:7a:86:a5:69:14:49:c7:ee:e7:04:e0:36: 98:21:dd:67:08:57:cb:af:9c:27:6b:91:c5:70:86: bc:27:8b:b0:a5:e6:aa:bb:be:c8:6f:cc:1b:34:3d: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BC:AB:5D:06:4D:7F:0F:2D:DE:C8:88:3C:BF:6C:4D:97:76:8A:97 X509v3 Authority Key Identifier: keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0e:91:29:0e:9b:e2:95:e5:53:d0:e7:ac:25:4a:f0:4e:02: 39:bb:0a:3d:d3:2f:1c:6a:2c:7f:ce:01:08:76:fc:0b:09:fc: d1:6d:5d:5d:18:ae:cf:02:1c:72:1e:df:f5:6f:0c:23:7d:af: f2:56:9f:6f:c1:78:37:d2:5c:42:ce:03:56:0b:02:ec:81:b5: 90:f7:4b:d1:db:a5:1c:65:1d:4f:d9:f0:91:a2:f3:d4:9d:4d: 57:90:34:26:5f:bc:c6:2f:41:75:07:18:c1:ef:ef:79:f4:4e: de:5a:c6:69:a0:7a:a3:3a:2f:31:8d:e5:36:e9:5c:6b:7a:17: aa:b7:ec:22:0f:c6:db:7c:b9:9c:8b:27:8b:ee:83:4f:d0:b2: dd:33:83:00:51:b6:13:fe:d8:aa:17:bb:de:15:ea:3c:6f:a2: de:4e:92:f0:f5:76:ef:f0:94:de:6b:b2:1d:95:64:1a:df:fb: 97:d4:31:71:bb:71:8d:bf:6c:89:ff:05:23:a3:cd:d6:6c:bd: 4b:c7:3e:f0:ca:86:0d:49:24:47:95:58:7a:0a:a0:0c:57:fd: e2:d0:38:11:77:18:11:6c:6f:b4:c4:8f:cb:51:0b:c9:f5:4b: 31:d2:39:0c:ff:fe:45:e9:22:7c:2e:d5:bd:c0:b8:05:5d:11: 7c:4b:4c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz ODEzRTVFRjgwHhcNMjUxMTA0MjEzNTQyWhcNMjUxMTExMjEzNTQyWjAYMRYwFAYD VQQDEw02OTBhNzFhZS02ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6nsbZZu5dvMl4d8ZZSjN0ICEGaYQecltawLsWrC0mO45FTuR9X+IyPtgJhv A8RoaSA3X3frK2q75u9GWcAAtd1dByGZ3HFoJ6V3bW065GxdItnmmfwxStUSWCJ7 ceX1rY7IngSA+hjqwgNBpJ33FfaGY/Pw0mYnmQEYErlPikuo0gRJcXxz78K4Aubk JT9OMgofeqJxZBWObe+4/xk5tOmJg3JD+kzlHP2xj9ioHiDxSagRpFaHIl3YFD/Z 9Ia4zPD/my36Ept0FEVPih0aZusyIsp6hqVpFEnH7ucE4DaYId1nCFfLr5wna5HF cIa8J4uwpeaqu77Ib8wbND1KEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe8q10G TX8PLd7IiDy/bE2XdoqXMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm SHYtTHZuZzlTWGM0RS1YdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANDpEpDpvileVT0OesJUrwTgI5uwo90y8caix/zgEIdvwLCfzRbV1d GK7PAhxyHt/1bwwjfa/yVp9vwXg30lxCzgNWCwLsgbWQ90vR26UcZR1P2fCRovPU nU1XkDQmX7zGL0F1BxjB7+959E7eWsZpoHqjOi8xjeU26Vxreheqt+wiD8bbfLmc iyeL7oNP0LLdM4MAUbYT/tiqF7veFeo8b6LeTpLw9Xbv8JTea7IdlWQa3/uX1DFx u3GNv2yJ/wUjo83WbL1Lxz7wyoYNSSRHlVh6CqAMV/3i0DgRdxgRbG+0xI/LUQvJ 9Usx0jkM//5F6SJ8LtW9wLgFXRF8S0xU -----END CERTIFICATE-----Generated at Wed Nov 5 18:10:01 2025 by rpki-client