$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: VZ/S0hcSH6DnS8Jhxsm5QKc7KDR4RI1KeQZTIQI3GfU= Subject key identifier: 20:72:71:E4:12:11:A5:36:C6:BB:F2:4D:C9:D6:2B:40:8A:C0:37:27 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 20FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 55B0 Signing time: Wed 08 Oct 2025 14:53:40 +0000 Manifest this update: Wed 08 Oct 2025 14:53:40 +0000 Manifest next update: Wed 15 Oct 2025 14:53:40 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: QFLQS5auNBL3gzgqs2V9IXTxXc6PdxniLnDLOS6JGvs=) 2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=) 3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 14:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8442 (0x20fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Oct 8 14:53:40 2025 GMT Not After : Oct 15 14:53:40 2025 GMT Subject: CN=68e67af4-48f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:8e:0d:61:d7:a4:c0:3a:93:b3:01:28:02: 77:2f:74:4a:f8:c7:36:55:82:80:f3:c7:c3:25:8e: 3b:48:03:9b:3e:4d:a4:82:df:ce:15:c5:8f:02:ae: e8:fe:62:c6:82:03:21:1e:d9:b6:c7:f4:3f:62:2d: 39:0e:09:fe:89:a6:09:ad:a7:e1:cd:60:04:52:f6: 8e:2b:be:2a:32:ea:07:6a:ff:26:55:99:3a:87:93: a4:79:05:2b:55:b3:68:94:30:36:3b:9c:f4:de:c9: 8c:94:47:bc:24:6c:e6:da:07:16:2d:fa:0f:33:3e: f3:56:69:ea:59:16:b2:65:75:15:59:25:f7:66:ed: ea:44:82:97:30:71:b8:20:83:a3:82:72:fd:e2:f7: 25:3a:a3:54:3b:de:2d:74:d0:3f:1e:c4:e0:c5:d0: 55:05:e6:cf:78:4e:ef:26:98:61:85:eb:7a:4d:64: d4:62:bc:45:06:93:d7:58:45:54:d8:91:5b:93:6d: 04:0a:2c:89:a4:0d:c3:a0:05:f3:0d:0e:73:84:52: 90:fd:34:f1:f5:3b:f3:db:29:45:84:bb:1c:ea:e5: 30:66:cd:c4:03:aa:52:4c:5a:54:4d:24:4e:46:d3: 93:e8:6a:68:c7:11:f6:75:9a:5a:25:f4:05:64:94: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:71:E4:12:11:A5:36:C6:BB:F2:4D:C9:D6:2B:40:8A:C0:37:27 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:56:59:6c:eb:68:1a:cc:2d:7a:bb:fd:af:76:a3:1d:96:89: 14:e2:f7:4b:d7:7d:94:ba:5d:09:3a:a4:ed:d6:4b:2a:2a:7c: 69:64:fd:a9:aa:d6:96:37:32:69:ce:3b:83:b7:eb:39:47:a3: ea:31:23:2a:3a:7a:91:12:cd:31:93:11:c3:57:6a:52:72:69: ea:52:74:37:ac:a6:fe:8f:d7:01:5a:42:35:57:e5:01:7c:a0: e9:72:7a:59:0c:99:4a:24:41:cb:15:ca:72:29:8d:f6:fd:7d: 10:50:63:e9:f8:71:7f:db:31:d5:51:d9:29:7e:4f:6a:d4:95: b7:08:44:84:5b:6c:92:4c:6b:e6:c5:49:a5:c5:dd:29:f7:92: 1d:3d:d4:e5:35:58:e4:ed:d7:1f:0e:4d:7c:aa:6d:9f:22:e2: ee:d8:0d:60:13:55:53:63:7e:1f:1c:72:6a:c7:02:a0:fe:d1: 22:c1:cc:93:8f:bb:c1:35:ca:76:b7:9f:82:fe:c0:8d:b3:33: 4f:be:ab:32:32:4d:b0:b7:37:4f:03:66:27:99:0b:9c:88:da: 08:ac:5f:d5:aa:6a:95:da:bb:c4:5f:a7:37:33:93:d7:d1:8b: 00:1b:f5:07:28:1f:e4:fa:e2:ed:29:d9:a8:d7:12:72:f9:6a: fa:cc:ea:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjUxMDA4MTQ1MzQwWhcNMjUxMDE1MTQ1MzQwWjAYMRYwFAYD VQQDEw02OGU2N2FmNC00OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT2ODWHXpMA6k7MBKAJ3L3RK+Mc2VYKA88fDJY47SAObPk2kgt/OFcWPAq7o /mLGggMhHtm2x/Q/Yi05Dgn+iaYJrafhzWAEUvaOK74qMuoHav8mVZk6h5OkeQUr VbNolDA2O5z03smMlEe8JGzm2gcWLfoPMz7zVmnqWRayZXUVWSX3Zu3qRIKXMHG4 IIOjgnL94vclOqNUO94tdNA/HsTgxdBVBebPeE7vJphhhet6TWTUYrxFBpPXWEVU 2JFbk20ECiyJpA3DoAXzDQ5zhFKQ/TTx9Tvz2ylFhLsc6uUwZs3EA6pSTFpUTSRO RtOT6GpoxxH2dZpaJfQFZJR3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCByceQS EaU2xrvyTcnWK0CKwDcnMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiVlls62gazC16u/2vdqMdlokU4vdL132Uul0JOqTt1ksqKnxpZP2p qtaWNzJpzjuDt+s5R6PqMSMqOnqREs0xkxHDV2pScmnqUnQ3rKb+j9cBWkI1V+UB fKDpcnpZDJlKJEHLFcpyKY32/X0QUGPp+HF/2zHVUdkpfk9q1JW3CESEW2ySTGvm xUmlxd0p95IdPdTlNVjk7dcfDk18qm2fIuLu2A1gE1VTY34fHHJqxwKg/tEiwcyT j7vBNcp2t5+C/sCNszNPvqsyMk2wtzdPA2YnmQuciNoIrF/VqmqV2rvEX6c3M5PX 0YsAG/UHKB/k+uLtKdmo1xJy+Wr6zOpX -----END CERTIFICATE-----Generated at Thu Oct 9 01:26:58 2025 by rpki-client