$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: ZVITkUxuExy4QyRD7Bs7GWnd6AoMLG/K04W7ldl+Cs0= Subject key identifier: EC:82:8E:16:B9:F6:0A:36:E9:6F:58:1A:0E:19:EB:8A:ED:FF:03:88 Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0D33 Signing time: Tue 04 Nov 2025 18:13:24 +0000 Manifest this update: Tue 04 Nov 2025 18:13:23 +0000 Manifest next update: Tue 11 Nov 2025 18:13:23 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: FwR4r99EvEmOiarPbqcjvxfcB3L/FzAfmM4Fc+k/iJs=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: Z4p5IL2wEtdYmX76by5DzgGIGhxAsMyvBXYRGxm6vYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Nov 4 18:13:23 2025 GMT Not After : Nov 11 18:13:23 2025 GMT Subject: CN=690a4243-e2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:a6:aa:d1:09:b5:83:bb:ba:0c:e5:4c:01: 87:ff:e3:a0:b9:a7:54:61:e3:85:2e:26:b8:ba:4b: 92:c8:d4:5c:66:8d:80:cb:38:07:8e:f4:37:3f:ec: 71:c0:ca:e9:7e:a8:92:a8:49:9d:3b:87:57:df:63: 4f:18:7c:b7:91:a8:29:90:f5:5a:68:83:fc:65:91: dc:e1:a1:d4:86:75:89:e5:31:02:5f:4a:c5:0c:99: c1:a9:47:dc:51:8e:ee:61:a5:7d:16:78:85:87:82: 2f:14:8d:27:af:a6:67:67:85:c9:49:af:08:3e:23: 9f:e5:e6:54:63:7c:90:a3:f2:15:4d:0c:af:7c:cf: 03:a0:d0:1e:31:27:dc:86:bd:7b:15:79:d4:db:c8: 68:36:05:cc:95:c7:f9:f7:90:ee:ca:ee:f7:0e:51: 5f:66:d5:52:e7:b5:11:96:08:33:b4:9b:1f:86:b3: 67:a9:da:c6:03:67:a5:3f:80:6e:56:31:75:1c:16: 03:c3:2b:e5:63:bf:f9:a1:95:e2:63:a6:9a:3c:e0: 07:19:57:d3:de:8a:d2:5b:46:69:45:4a:e0:4c:86: c3:18:6e:73:62:51:60:ea:cf:5a:e6:6f:54:7c:24: 4a:0e:df:82:10:af:61:e4:3f:2a:5f:f7:c7:52:aa: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:82:8E:16:B9:F6:0A:36:E9:6F:58:1A:0E:19:EB:8A:ED:FF:03:88 X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:4e:e0:81:f3:00:a6:0c:a2:28:09:4f:9c:e4:56:d8:f1:72: 89:8d:63:89:49:2d:01:a4:5c:bb:ea:f0:f4:93:cc:ba:c2:47: 1c:76:92:a7:24:71:67:e1:45:82:a4:b7:f3:25:62:a2:02:e9: 91:92:50:ae:e5:02:41:7b:31:a0:00:ad:5f:bd:3f:4e:5d:dc: 6e:20:86:75:e2:73:30:4e:5b:ee:ce:c4:42:ab:5b:f6:ce:66: d5:4a:df:f8:6a:6e:34:dc:5d:c4:ce:d0:c2:7b:a9:e1:2c:d5: 9e:19:cb:00:30:cb:1c:0c:0c:e9:5a:8a:50:b3:1f:87:0b:19: b5:70:f1:95:e7:ad:72:af:2a:e6:b2:f5:d6:91:8a:b4:98:0b: ad:bf:b2:96:a2:2a:2a:6a:6e:03:b6:aa:03:35:53:ac:82:58: 71:cd:75:5b:c9:5a:ff:8b:73:b6:7b:79:2a:af:66:55:03:f9: a1:5c:c6:a5:04:19:8f:ad:56:93:72:e6:5f:d9:ce:81:83:9d: da:fe:98:7d:f4:1b:b7:e9:f4:83:bc:c9:2b:82:9b:f7:da:84: d7:3d:c0:60:d3:c7:49:48:3d:27:c8:21:96:2b:58:4c:39:60: e0:5f:3f:87:3f:92:78:e6:fa:73:ff:2b:1f:b8:d6:ef:b5:72: d2:2a:e0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUxMTA0MTgxMzIzWhcNMjUxMTExMTgxMzIzWjAYMRYwFAYD VQQDEw02OTBhNDI0My1lMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRCmqtEJtYO7ugzlTAGH/+OguadUYeOFLia4ukuSyNRcZo2AyzgHjvQ3P+xx wMrpfqiSqEmdO4dX32NPGHy3kagpkPVaaIP8ZZHc4aHUhnWJ5TECX0rFDJnBqUfc UY7uYaV9FniFh4IvFI0nr6ZnZ4XJSa8IPiOf5eZUY3yQo/IVTQyvfM8DoNAeMSfc hr17FXnU28hoNgXMlcf595Duyu73DlFfZtVS57URlggztJsfhrNnqdrGA2elP4Bu VjF1HBYDwyvlY7/5oZXiY6aaPOAHGVfT3orSW0ZpRUrgTIbDGG5zYlFg6s9a5m9U fCRKDt+CEK9h5D8qX/fHUqrF4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyCjha5 9go26W9YGg4Z64rt/wOIMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBATuCB8wCmDKIoCU+c5FbY8XKJjWOJSS0BpFy76vD0k8y6wkccdpKn JHFn4UWCpLfzJWKiAumRklCu5QJBezGgAK1fvT9OXdxuIIZ14nMwTlvuzsRCq1v2 zmbVSt/4am403F3EztDCe6nhLNWeGcsAMMscDAzpWopQsx+HCxm1cPGV561yryrm svXWkYq0mAutv7KWoioqam4DtqoDNVOsglhxzXVbyVr/i3O2e3kqr2ZVA/mhXMal BBmPrVaTcuZf2c6Bg53a/ph99Bu36fSDvMkrgpv32oTXPcBg08dJSD0nyCGWK1hM OWDgXz+HP5J45vpz/ysfuNbvtXLSKuDF -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:31 2025 by rpki-client