$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: 5yxrIGY0GO/R5mKGvL65N5TET0ji3rVTX0vpLDMFEtM= Subject key identifier: 12:BC:B7:B7:21:55:FE:DD:C6:83:A4:38:53:2F:68:65:BA:D1:A2:58 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01DE Signing time: Mon 03 Nov 2025 02:42:35 +0000 Manifest this update: Mon 03 Nov 2025 02:42:34 +0000 Manifest next update: Mon 10 Nov 2025 02:42:34 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: ewMhxVwIaVzsjMTYQWcwb1WqS0p9WrfAPhYDyzp/dHc=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Nov 3 02:42:34 2025 GMT Not After : Nov 10 02:42:34 2025 GMT Subject: CN=6908169a-a70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:0c:e1:80:84:d2:02:7a:d8:2c:c9:7f:58: 34:81:5d:71:f5:c6:8f:93:2d:5c:09:9b:a1:2b:d5: ba:ac:e8:f3:88:1f:db:f4:ac:47:47:39:9f:b8:d5: 22:67:e2:17:e0:da:61:60:dd:f6:c3:bb:60:a3:d2: 3d:0e:1a:52:85:87:7a:7b:26:68:f8:2f:0f:17:07: 99:0b:67:1f:6f:54:e8:9b:d5:ac:75:3f:44:e9:51: 9f:c6:84:d5:82:10:86:ee:23:34:ae:f8:83:23:ed: f6:7c:db:40:0e:c7:aa:a8:98:32:3e:69:28:0c:7b: 41:87:05:95:59:42:4c:99:ad:ee:9b:83:20:25:3b: 30:6f:ae:4a:6b:f4:32:14:a5:45:52:2c:da:d0:71: a9:76:5c:25:9d:f7:07:37:18:08:9d:cd:a8:67:6c: 50:76:d6:99:39:2b:a2:39:0e:ba:83:54:c0:3e:ce: b5:47:18:3a:4b:e5:eb:7d:88:5b:63:37:df:39:be: ce:78:f7:79:16:0d:f4:79:3b:4e:29:65:dd:86:ae: 75:b5:1e:b3:03:e9:ed:e8:01:b5:d1:81:8d:2c:b4: ee:ed:5c:4a:4d:d2:66:f5:ba:a6:a7:b3:7b:5a:ab: e2:85:e8:a8:4b:a7:af:c2:9c:61:4f:2e:37:3b:f1: d5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BC:B7:B7:21:55:FE:DD:C6:83:A4:38:53:2F:68:65:BA:D1:A2:58 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e3:ee:1e:1e:c4:6b:ff:e3:5f:c1:11:9c:e3:20:db:56:5b: 13:da:e0:3b:a6:57:7e:96:a7:82:3f:2b:c3:fd:5b:99:f7:58: 3f:2c:f6:df:fb:08:3b:b8:11:10:45:e1:76:7f:3f:cd:e2:c3: 0c:87:64:13:26:76:bc:81:45:c5:00:40:b6:77:d7:f8:23:13: ad:3f:75:59:5a:6e:e8:4b:12:1f:f1:4e:87:19:07:aa:84:c4: 70:76:7c:68:6a:0e:32:83:1b:c4:64:05:09:02:db:39:e7:ec: 98:82:0e:1a:06:dc:ae:34:c4:67:ca:ce:d4:ab:9c:62:ef:9a: ea:86:ba:5a:4e:13:40:4f:01:07:40:61:6d:39:02:c1:49:a8: 78:74:3c:ef:dd:51:7b:ba:bd:5b:53:90:90:5c:ac:9f:63:a6: 9f:c9:da:cb:8f:af:44:2c:ed:dd:8a:88:db:02:8a:49:f7:ef: 6d:12:6e:87:2f:04:d5:50:bb:3e:eb:cf:4a:c6:59:37:8e:33: fd:fd:3c:ff:4f:f6:0b:27:d3:30:e6:d9:c7:e8:cd:a1:8a:e1: c8:eb:7a:81:9a:c1:da:da:51:79:a8:f8:1c:b7:9d:b7:ee:df: aa:5b:a0:19:4c:b2:c3:cd:40:61:6f:33:e9:a1:fb:cb:91:e5: 73:a4:03:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUxMTAzMDI0MjM0WhcNMjUxMTEwMDI0MjM0WjAYMRYwFAYD VQQDEw02OTA4MTY5YS1hNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d0M4YCE0gJ62CzJf1g0gV1x9caPky1cCZuhK9W6rOjziB/b9KxHRzmfuNUi Z+IX4NphYN32w7tgo9I9DhpShYd6eyZo+C8PFweZC2cfb1Tom9WsdT9E6VGfxoTV ghCG7iM0rviDI+32fNtADseqqJgyPmkoDHtBhwWVWUJMma3um4MgJTswb65Ka/Qy FKVFUiza0HGpdlwlnfcHNxgInc2oZ2xQdtaZOSuiOQ66g1TAPs61Rxg6S+XrfYhb YzffOb7OePd5Fg30eTtOKWXdhq51tR6zA+nt6AG10YGNLLTu7VxKTdJm9bqmp7N7 WqviheioS6evwpxhTy43O/HVFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK8t7ch Vf7dxoOkOFMvaGW60aJYMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY4+4eHsRr/+NfwRGc4yDbVlsT2uA7pld+lqeCPyvD/VuZ91g/LPbf +wg7uBEQReF2fz/N4sMMh2QTJna8gUXFAEC2d9f4IxOtP3VZWm7oSxIf8U6HGQeq hMRwdnxoag4ygxvEZAUJAts55+yYgg4aBtyuNMRnys7Uq5xi75rqhrpaThNATwEH QGFtOQLBSah4dDzv3VF7ur1bU5CQXKyfY6afydrLj69ELO3diojbAopJ9+9tEm6H LwTVULs+689Kxlk3jjP9/Tz/T/YLJ9Mw5tnH6M2hiuHI63qBmsHa2lF5qPgct523 7t+qW6AZTLLDzUBhbzPpofvLkeVzpAPq -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:24 2025 by rpki-client