$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: DDZ0FHGkQDJaghrGL9xizhSU3JeBlsdy3z2O/5JOggE= Subject key identifier: 27:57:EC:00:93:AC:CC:B8:28:D3:F2:09:D5:B2:60:1F:C7:27:88:F4 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 1784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 177B Signing time: Tue 04 Nov 2025 16:41:01 +0000 Manifest this update: Tue 04 Nov 2025 16:41:00 +0000 Manifest next update: Tue 11 Nov 2025 16:41:00 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: P7gsbHucByvRtr81M1Ey4Z7+Id7XGDNdEPSrAjD2+2Y=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6020 (0x1784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Nov 4 16:41:00 2025 GMT Not After : Nov 11 16:41:00 2025 GMT Subject: CN=690a2c9c-a66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:52:a1:b1:fe:a8:f1:72:6d:09:d0:91:ab: a0:42:66:0a:9b:32:f2:30:56:3b:c3:86:bf:9a:85: 38:7e:5e:99:13:0e:87:91:dc:bb:a8:ab:3e:60:e6: b0:90:3a:32:48:d4:3d:4b:cf:96:f4:64:0c:dc:88: f9:5b:23:08:18:4b:a3:ec:94:1a:d1:37:bd:9a:c3: 75:03:cf:c9:61:16:ba:bb:22:cd:b7:83:8d:08:47: c7:1f:d1:1b:a8:0b:3e:f0:11:6b:0f:89:0e:2b:db: e1:53:36:aa:4d:de:b0:d8:01:fc:3c:66:f7:95:9e: e9:a5:fa:d7:dc:f2:f1:5e:71:ab:9e:12:2a:89:e2: fb:e5:a4:f5:2f:46:fa:e8:8c:aa:c1:08:d3:d6:aa: f5:c6:38:15:c2:81:de:72:9e:fd:39:59:0b:7d:7f: 5c:4f:98:bc:35:b3:79:27:df:05:25:ac:30:fb:2e: 7c:1e:64:54:bd:d2:42:aa:33:21:ef:47:4c:48:56: 74:cc:23:bd:a8:ad:e4:b5:86:94:57:52:8a:a8:7b: 7e:10:28:19:ee:f3:46:2a:e0:05:20:79:be:6a:28: 01:70:64:68:3d:85:97:45:7b:7a:1e:47:48:1e:bb: 4d:b8:6a:7e:a7:46:3f:73:a3:c5:89:ed:e4:63:75: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:57:EC:00:93:AC:CC:B8:28:D3:F2:09:D5:B2:60:1F:C7:27:88:F4 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:fe:93:43:78:db:6c:87:c9:c7:b9:42:3d:bf:c9:e2:7d:f9: 6b:93:b4:ec:c4:39:74:6e:9f:46:af:c5:d5:9e:f7:f6:35:83: d9:19:55:a1:a0:6a:b6:ed:29:28:0c:9c:31:01:0f:fa:4b:a0: 55:a9:70:e0:83:bc:87:13:59:dd:e7:0d:9f:93:a9:33:66:b1: 18:81:9a:b4:c1:c5:53:62:74:b9:b8:24:9d:7c:6c:86:de:e4: 53:08:ef:82:30:67:88:a9:54:29:83:c5:8f:61:f5:15:e4:2e: c7:e2:2e:a5:f0:87:f1:a8:8b:38:4b:b2:1e:0b:88:1e:c0:df: 17:58:06:a2:6f:87:9a:e6:c5:da:13:fe:ea:cf:7a:b3:16:70: fb:a5:da:cf:6d:3c:cc:27:29:c6:66:0d:65:76:46:01:7b:ee: e0:10:d8:25:9e:8e:a4:3d:1a:db:2a:ef:d4:72:e4:a0:74:a5: 45:de:80:9e:31:d0:b1:9e:68:ea:06:17:ae:87:c1:76:ef:bf: 33:26:38:da:bf:d1:ed:95:2f:88:28:23:8f:0b:e8:c2:c8:8c: c3:dc:83:9c:20:72:45:7a:3e:4e:03:a6:d4:7a:c4:b0:6b:e3: 0b:5b:56:ef:7d:78:51:4c:76:35:ac:00:a7:3d:c1:3e:d5:dc: 1a:75:43:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUxMTA0MTY0MTAwWhcNMjUxMTExMTY0MTAwWjAYMRYwFAYD VQQDEw02OTBhMmM5Yy1hNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUFSobH+qPFybQnQkaugQmYKmzLyMFY7w4a/moU4fl6ZEw6Hkdy7qKs+YOaw kDoySNQ9S8+W9GQM3Ij5WyMIGEuj7JQa0Te9msN1A8/JYRa6uyLNt4ONCEfHH9Eb qAs+8BFrD4kOK9vhUzaqTd6w2AH8PGb3lZ7ppfrX3PLxXnGrnhIqieL75aT1L0b6 6IyqwQjT1qr1xjgVwoHecp79OVkLfX9cT5i8NbN5J98FJaww+y58HmRUvdJCqjMh 70dMSFZ0zCO9qK3ktYaUV1KKqHt+ECgZ7vNGKuAFIHm+aigBcGRoPYWXRXt6HkdI HrtNuGp+p0Y/c6PFie3kY3VjqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdX7ACT rMy4KNPyCdWyYB/HJ4j0MB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG/pNDeNtsh8nHuUI9v8nifflrk7TsxDl0bp9Gr8XVnvf2NYPZGVWh oGq27SkoDJwxAQ/6S6BVqXDgg7yHE1nd5w2fk6kzZrEYgZq0wcVTYnS5uCSdfGyG 3uRTCO+CMGeIqVQpg8WPYfUV5C7H4i6l8IfxqIs4S7IeC4gewN8XWAaib4ea5sXa E/7qz3qzFnD7pdrPbTzMJynGZg1ldkYBe+7gENglno6kPRrbKu/UcuSgdKVF3oCe MdCxnmjqBheuh8F2778zJjjav9HtlS+IKCOPC+jCyIzD3IOcIHJFej5OA6bUesSw a+MLW1bvfXhRTHY1rACnPcE+1dwadUNU -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:58 2025 by rpki-client