$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft File: sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json) Hash identifier: iuH8mGxPlVKPjDXeAbqX5KmAdfotBBmUlaHnDfrOuU0= Subject key identifier: AD:29:F0:FA:0D:42:AA:11:FC:17:49:9A:9D:3F:83:89:44:66:AE:69 Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 Certificate issuer: /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft Manifest number: 09 Signing time: Mon 03 Nov 2025 08:01:21 +0000 Manifest this update: Mon 03 Nov 2025 08:01:21 +0000 Manifest next update: Mon 10 Nov 2025 08:01:21 +0000 Files and hashes: 1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: dxNjeDaUlghklOsibdb2aO+n1GFnkYGqilJj2hSgi7A=) 2: 46C34A4AAE5C11F089298455C4F9AE02.roa (hash: /8isj7A8QykmIni1m78r+3HjaeZ+3t1TxlWUa4PHm/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4 Validity Not Before: Nov 3 08:01:21 2025 GMT Not After : Nov 10 08:01:21 2025 GMT Subject: CN=69086151-e1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:8c:4e:23:10:7c:06:18:f6:ad:2d:db:82: 78:b3:f0:af:8a:fe:81:55:13:69:46:ea:b0:d4:e1: 8b:48:f5:41:dd:b8:14:58:4b:32:ab:33:e9:34:be: b4:9e:6f:5d:49:e4:0e:3f:dd:5b:19:b7:1b:2e:f0: a4:72:70:34:1d:f4:d6:3d:dd:6f:35:70:2d:a3:a5: 65:d3:37:b2:9d:15:4b:9f:8b:bf:f3:38:ba:72:88: 22:5e:96:f9:e2:a7:a0:53:b2:66:05:45:63:11:5f: b1:d2:89:24:25:8a:c8:66:d2:f5:fa:c7:4b:38:a0: 04:aa:08:56:68:01:bd:b6:d1:61:3a:53:39:09:84: 75:21:44:f7:35:a2:0e:ca:e8:7f:c7:4d:f0:16:5d: cb:06:80:7b:61:3c:63:69:9d:9a:bd:a4:5d:16:1a: 57:d3:83:af:f1:83:d7:6f:b4:da:19:dc:a9:52:84: 8d:28:90:a5:32:ac:fc:ce:5b:1e:7e:9b:e8:43:da: 38:f0:5e:3a:04:0a:a1:84:86:7f:b2:d9:e6:75:64: 12:05:f4:d5:4a:82:84:ec:a0:bd:cc:86:f7:cd:10: 7c:6d:69:cd:c2:a1:40:75:9e:89:d5:ca:14:91:6b: c9:f3:79:44:bd:6f:8a:25:d3:9f:43:6d:b2:18:46: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:F0:FA:0D:42:AA:11:FC:17:49:9A:9D:3F:83:89:44:66:AE:69 X509v3 Authority Key Identifier: keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:6d:4e:d5:c9:09:45:ca:f3:d6:43:08:0b:86:67:9d:ee: 7e:c2:85:46:a9:9e:bf:16:ad:0b:12:c2:af:d5:c7:55:37:57: f9:f5:0c:0c:cf:84:34:e3:cd:0e:d2:55:9e:0b:13:01:c6:32: df:89:cd:31:3f:de:e0:ce:75:80:80:08:4e:b3:2c:1a:70:72: 26:dc:23:ce:96:b9:33:03:d3:00:3d:9c:a0:87:c4:81:4e:80: db:41:8d:77:fc:10:c1:db:85:1e:ff:2c:b2:5b:30:da:7b:fe: 28:01:be:f2:ca:98:ac:5f:3e:55:be:a3:60:b5:7a:1a:dc:1d: f0:57:d9:ce:d7:95:03:fa:dc:0e:24:98:ba:e8:07:8d:c4:a5: 91:4c:eb:45:dc:e0:e8:9e:5e:ba:7d:37:66:63:95:0d:12:05: 22:83:28:b2:92:05:54:26:71:4f:64:89:5b:b0:c5:e3:58:ec: db:76:12:f7:41:98:f2:cf:6c:99:fd:4b:7a:c0:59:f0:54:cf: a0:09:c9:a4:c9:c2:92:d8:cb:59:a2:34:ff:14:d0:03:cc:ee: 36:8f:0d:f6:47:55:26:fb:30:c8:06:88:af:19:79:80:f4:1b: 67:33:2a:2b:4d:e2:1e:94:dc:f1:cb:c2:a4:93:4f:9a:9f:bd: 45:d9:94:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoQjEwOURBOTUwNTc2RTY2MjY3Nzk1QTM0RUJBOTFCQzM3 QTk5MjNCNDAeFw0yNTExMDMwODAxMjFaFw0yNTExMTAwODAxMjFaMBgxFjAUBgNV BAMTDTY5MDg2MTUxLWUxZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKeIxOIxB8Bhj2rS3bgniz8K+K/oFVE2lG6rDU4YtI9UHduBRYSzKrM+k0vrSe b11J5A4/3VsZtxsu8KRycDQd9NY93W81cC2jpWXTN7KdFUufi7/zOLpyiCJelvni p6BTsmYFRWMRX7HSiSQlishm0vX6x0s4oASqCFZoAb220WE6UzkJhHUhRPc1og7K 6H/HTfAWXcsGgHthPGNpnZq9pF0WGlfTg6/xg9dvtNoZ3KlShI0okKUyrPzOWx5+ m+hD2jjwXjoECqGEhn+y2eZ1ZBIF9NVKgoTsoL3MhvfNEHxtac3CoUB1nonVyhSR a8nzeUS9b4ol059DbbIYRp9pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrSnw+g1C qhH8F0manT+DiURmrmkwHwYDVR0jBBgwFoAUsQnalQV25mJneVo066kbw3qZI7Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzBFNkZGNTRBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1KbmVWbzA2NmtidzNxWkk3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc1FuYWxRVjI1bUpuZVZvMDY2a2J3M3FaSTdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 REM5LzBFNkZGNTRBQUU1QjExRjA4QzdDQUM1M0M0RjlBRTAyL3NRbmFsUVYyNW1K bmVWbzA2NmtidzNxWkk3US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+IbU7VyQlFyvPWQwgLhmed7n7ChUapnr8WrQsSwq/Vx1U3V/n1DAzP hDTjzQ7SVZ4LEwHGMt+JzTE/3uDOdYCACE6zLBpwcibcI86WuTMD0wA9nKCHxIFO gNtBjXf8EMHbhR7/LLJbMNp7/igBvvLKmKxfPlW+o2C1ehrcHfBX2c7XlQP63A4k mLroB43EpZFM60Xc4OieXrp9N2ZjlQ0SBSKDKLKSBVQmcU9kiVuwxeNY7Nt2EvdB mPLPbJn9S3rAWfBUz6AJyaTJwpLYy1miNP8U0APM7jaPDfZHVSb7MMgGiK8ZeYD0 G2czKitN4h6U3PHLwqSTT5qfvUXZlCg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:42 2025 by rpki-client