$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft File: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json) Hash identifier: DA/k/vw0Mh6qjiofFVcsFUtUS35vKnacjxNutRwf4cE= Subject key identifier: 54:BF:30:E6:45:00:E5:7F:38:46:1E:C7:80:70:1C:28:DA:B4:8B:AC Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 Certificate issuer: /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft Manifest number: 9D Signing time: Mon 03 Nov 2025 06:19:18 +0000 Manifest this update: Mon 03 Nov 2025 06:19:18 +0000 Manifest next update: Mon 10 Nov 2025 06:19:18 +0000 Files and hashes: 1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: rOMHtFRlrhC3peDFX3Hx5p/kEDxoL/461tm+metHAzM=) 2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590 Validity Not Before: Nov 3 06:19:18 2025 GMT Not After : Nov 10 06:19:18 2025 GMT Subject: CN=69084966-a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:75:e9:a9:c2:ee:66:e8:aa:7f:a5:f1:8a: 95:89:8f:1f:2f:4b:de:a7:a2:49:cd:33:c9:c0:36: e6:eb:3e:d9:de:f4:74:80:0a:a8:10:c2:eb:d8:b6: 39:e9:1b:4a:99:84:d4:ee:3a:ed:11:76:28:aa:0f: 85:3b:1d:2e:54:cb:a9:69:db:e1:ae:3d:46:c0:d5: d9:17:45:15:1e:81:ce:e8:29:81:da:84:64:05:04: 2e:8b:a9:26:93:96:ce:92:77:aa:b8:9a:af:2d:10: e3:dc:46:64:14:b4:09:88:29:fa:ca:94:dd:83:08: 84:fe:93:7b:47:c9:1f:80:77:12:71:c8:2b:fa:77: 6e:77:7f:88:9f:79:4f:c7:21:68:40:36:fc:6d:8e: 98:9a:01:bd:8d:c2:4f:b9:ed:6f:44:ee:71:20:df: 29:47:99:02:2b:c4:15:c7:35:0b:a3:fc:16:75:d1: 2f:37:b8:64:88:22:9b:cf:bc:4b:89:cd:53:51:25: ca:45:16:2b:4c:cd:f4:62:89:3f:e3:ef:4f:67:e9: 01:dd:82:2e:86:2d:df:99:7a:da:0f:5d:70:71:fd: 7a:c0:bb:70:12:73:38:74:bc:94:5c:b1:fc:b8:b4: ed:a4:ed:5b:54:b7:03:d9:f9:b6:35:10:bd:41:1e: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:30:E6:45:00:E5:7F:38:46:1E:C7:80:70:1C:28:DA:B4:8B:AC X509v3 Authority Key Identifier: keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:f5:c2:04:c8:45:c8:1b:c5:d4:2d:9b:5b:19:0c:bf:dd: 14:07:c6:c8:6f:2d:55:df:22:29:70:3d:f1:e8:d4:82:8d:ec: 8e:e6:d0:f3:d0:79:e1:41:7e:0b:6f:fc:d1:9a:69:d4:f6:c0: 6c:06:7a:f9:57:69:c5:15:06:65:19:78:ba:9c:5e:57:d5:47: e6:c4:94:bb:93:a2:ec:c0:13:66:4e:19:77:e2:5e:0e:13:64: 29:a2:17:06:cd:39:64:b2:71:a8:fb:54:1d:4c:6c:ba:2e:81: 70:16:68:67:d9:c9:89:68:7a:92:6c:11:d6:f7:d6:51:3e:c2: 2a:4b:aa:2c:57:45:4f:89:ac:d7:7c:52:b1:8a:f3:f8:9e:c8: 24:79:d5:d4:10:2e:61:4a:f0:a8:d5:ce:cb:b0:52:f5:14:dd: d4:2e:49:ed:57:d1:bb:bb:10:d6:fc:13:22:ad:9b:74:be:e8: d5:0b:0b:9c:b6:e7:0f:f7:54:54:fb:ff:40:5c:ec:ed:d8:26: 74:ed:eb:51:1a:27:89:34:70:ac:9a:8f:28:fb:52:b1:9e:bd: e1:c4:45:1c:d4:5a:f7:dd:69:23:06:82:73:13:7a:15:7d:fe: 2d:82:7c:37:d0:51:15:b8:7c:83:4c:72:02:38:e9:c7:a5:a8: 3a:82:d6:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNjIxMTAvBgNVBAUTKDQxQTc1RTA1N0UyNTA1NUYxNEE4OUY1MzBDNzhFMjIz QjFGMEY1OTAwHhcNMjUxMTAzMDYxOTE4WhcNMjUxMTEwMDYxOTE4WjAYMRYwFAYD VQQDEw02OTA4NDk2Ni1hNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfB16anC7mboqn+l8YqViY8fL0vep6JJzTPJwDbm6z7Z3vR0gAqoEMLr2LY5 6RtKmYTU7jrtEXYoqg+FOx0uVMupadvhrj1GwNXZF0UVHoHO6CmB2oRkBQQui6km k5bOknequJqvLRDj3EZkFLQJiCn6ypTdgwiE/pN7R8kfgHcSccgr+ndud3+In3lP xyFoQDb8bY6YmgG9jcJPue1vRO5xIN8pR5kCK8QVxzULo/wWddEvN7hkiCKbz7xL ic1TUSXKRRYrTM30Yok/4+9PZ+kB3YIuhi3fmXraD11wcf16wLtwEnM4dLyUXLH8 uLTtpO1bVLcD2fm2NRC9QR6tgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS/MOZF AOV/OEYex4BwHCjatIusMB8GA1UdIwQYMBaAFEGnXgV+JQVfFKifUwx44iOx8PWQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I2Mi8yRThBNzU0QUM2 RTgxMUVGQkI1MjBCMERDNEY5QUUwMi9RYWRlQlg0bEJWOFVxSjlUREhqaUk3SHc5 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FhZGVCWDRsQlY4VXFKOVRESGppSTdIdzlaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I2Mi8yRThBNzU0QUM2RTgxMUVGQkI1MjBCMERDNEY5QUUwMi9RYWRlQlg0bEJW OFVxSjlUREhqaUk3SHc5WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAArPXCBMhFyBvF1C2bWxkMv90UB8bIby1V3yIpcD3x6NSCjeyO5tDz 0HnhQX4Lb/zRmmnU9sBsBnr5V2nFFQZlGXi6nF5X1UfmxJS7k6LswBNmThl34l4O E2QpohcGzTlksnGo+1QdTGy6LoFwFmhn2cmJaHqSbBHW99ZRPsIqS6osV0VPiazX fFKxivP4nsgkedXUEC5hSvCo1c7LsFL1FN3ULkntV9G7uxDW/BMirZt0vujVCwuc tucP91RU+/9AXOzt2CZ07etRGieJNHCsmo8o+1Kxnr3hxEUc1Fr33WkjBoJzE3oV ff4tgnw30FEVuHyDTHICOOnHpag6gtZm -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:46 2025 by rpki-client