$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: k9tS2RcaFpQ4Msj/ILS5mF6bHLwx6Gs4YxGuFAB6ziA= Subject key identifier: 13:C3:B1:BE:A8:AE:96:EE:12:2A:E1:D5:03:C0:A1:10:89:BD:FA:7D Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C17 Signing time: Tue 04 Nov 2025 18:51:21 +0000 Manifest this update: Tue 04 Nov 2025 18:51:21 +0000 Manifest next update: Tue 11 Nov 2025 18:51:21 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: J9n/6JvF3+MJrZmA+r0gxYjFOoXgfxyqS3VfPeeTl78=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: /clDM2qDPD5uC0RxJEAiWWigew7J9uL+PN4x0Vi4eF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3102 (0xc1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Nov 4 18:51:21 2025 GMT Not After : Nov 11 18:51:21 2025 GMT Subject: CN=690a4b29-011d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:71:c5:1f:94:36:60:e8:09:c8:9b:78:64: 42:c8:3f:b1:1e:88:55:4f:fb:c5:6f:f2:bc:0e:4f: f5:16:84:b4:13:71:4a:32:76:ea:9c:67:5b:4b:e1: 05:7f:c8:ab:61:41:70:3e:0e:e1:56:81:0c:8b:da: fa:5b:da:86:51:c0:a9:9b:c0:90:a3:8f:ee:31:9c: 1c:98:0c:48:4f:b1:43:bb:2f:01:28:0f:2c:71:3c: 16:58:5d:47:c6:d9:97:3d:4d:c0:4e:01:d8:cb:63: 61:2c:97:eb:7d:55:18:41:07:1c:c8:49:34:51:bb: 67:0f:20:85:ae:bd:1f:ea:48:bf:51:44:4d:04:98: d1:f0:cc:c6:fc:8a:d2:b0:56:e9:47:16:dc:38:bf: 6e:63:db:f5:83:39:2d:52:ad:12:d6:9c:0c:91:da: f9:ca:12:62:8b:aa:88:45:1a:6e:9f:0c:a0:a8:59: 25:df:d8:2d:72:1a:26:ea:3e:a2:58:77:1a:3a:c2: 7c:b7:90:56:81:77:55:81:2b:6a:28:12:34:a1:d9: 23:50:6c:22:6e:f4:fb:bc:b1:ba:00:50:1d:7b:43: f1:62:17:8a:6d:31:b2:26:7e:4e:b1:58:4d:59:53: fa:58:c4:bd:86:55:5a:26:b7:3b:53:39:90:e4:4a: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:B1:BE:A8:AE:96:EE:12:2A:E1:D5:03:C0:A1:10:89:BD:FA:7D X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:d2:ec:6d:7b:fe:0d:15:3c:0e:28:81:6f:6b:86:1f:78: c1:d3:18:73:cd:ba:86:77:ea:17:fa:24:02:ac:92:2f:e1:a4: a8:fe:e9:25:c2:93:dd:0f:37:a0:f8:d9:93:47:ae:30:24:55: ea:6f:ea:52:b7:6d:8a:e6:84:b1:c4:34:5a:bc:38:d5:83:b0: c5:61:95:1d:7e:93:05:c1:5f:fc:01:70:3c:48:37:a3:a0:40: 40:17:b6:26:df:28:2c:be:dc:d5:35:d4:07:2b:b0:c7:09:73: 84:4c:69:15:72:7b:c6:ea:cc:d7:18:3c:eb:07:49:a1:36:76: 94:33:6e:bd:61:0a:32:c5:36:50:1c:b7:4c:43:9a:d6:3b:ea: 40:f7:2e:34:90:09:6c:8e:0e:22:e3:39:4e:ac:01:08:96:2a: dd:40:57:4b:00:d7:7e:c2:75:e9:d6:ca:8e:6c:2d:f0:73:82: f1:52:71:3b:68:94:1b:2e:8f:c2:4c:28:ff:e2:e5:ea:b3:9f: 4d:27:4c:e3:c0:b3:59:e4:81:31:33:94:2b:39:4a:86:7a:05: 37:5c:2c:67:66:eb:c3:06:35:8c:d8:e6:72:bb:73:66:bf:31: fa:ab:70:a1:af:45:22:9b:4c:35:d7:cc:a6:fa:de:a3:9c:64: 11:e8:fd:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjUxMTA0MTg1MTIxWhcNMjUxMTExMTg1MTIxWjAYMRYwFAYD VQQDEw02OTBhNGIyOS0wMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM9xxR+UNmDoCcibeGRCyD+xHohVT/vFb/K8Dk/1FoS0E3FKMnbqnGdbS+EF f8irYUFwPg7hVoEMi9r6W9qGUcCpm8CQo4/uMZwcmAxIT7FDuy8BKA8scTwWWF1H xtmXPU3ATgHYy2NhLJfrfVUYQQccyEk0UbtnDyCFrr0f6ki/UURNBJjR8MzG/IrS sFbpRxbcOL9uY9v1gzktUq0S1pwMkdr5yhJii6qIRRpunwygqFkl39gtchom6j6i WHcaOsJ8t5BWgXdVgStqKBI0odkjUGwibvT7vLG6AFAde0PxYheKbTGyJn5OsVhN WVP6WMS9hlVaJrc7UzmQ5EqkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPDsb6o rpbuEirh1QPAoRCJvfp9MB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA22NLsbXv+DRU8DiiBb2uGH3jB0xhzzbqGd+oX+iQCrJIv4aSo/ukl wpPdDzeg+NmTR64wJFXqb+pSt22K5oSxxDRavDjVg7DFYZUdfpMFwV/8AXA8SDej oEBAF7Ym3ygsvtzVNdQHK7DHCXOETGkVcnvG6szXGDzrB0mhNnaUM269YQoyxTZQ HLdMQ5rWO+pA9y40kAlsjg4i4zlOrAEIlirdQFdLANd+wnXp1sqObC3wc4LxUnE7 aJQbLo/CTCj/4uXqs59NJ0zjwLNZ5IExM5QrOUqGegU3XCxnZuvDBjWM2OZyu3Nm vzH6q3Chr0Uim0w118ym+t6jnGQR6P3X -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:59 2025 by rpki-client