$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json) Hash identifier: RYl74ealq9taQ9I1OD/O25gMfBZM6FsocnsYisZOXVI= Subject key identifier: BC:56:B3:C9:08:20:D5:9D:FF:17:EC:70:91:5E:66:C5:AA:92:14:95 Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft Manifest number: 096C Signing time: Fri 24 Oct 2025 20:55:35 +0000 Manifest this update: Fri 24 Oct 2025 20:55:34 +0000 Manifest next update: Fri 31 Oct 2025 20:55:34 +0000 Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: 35EfEAKYBSnoaQCfrNRs0b404wyKhiGV4bqWxQZ0/Ds=) 2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: OA6Ay1bXyUAJq+KfCYl3CuSq1KvT2rPbVpCqhvkc99A=) 3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: Cf3w2+/kQFFdBNp0nOAXgGT+JLVmdNCHNGijos8QA7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C Validity Not Before: Oct 24 20:55:34 2025 GMT Not After : Oct 31 20:55:34 2025 GMT Subject: CN=68fbe7c6-0f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:c6:bb:07:dd:52:b5:39:c9:2e:00:91:9a: 56:ce:fe:2f:86:cf:c6:03:80:ad:47:77:9c:fe:3b: 4d:c4:89:42:b1:7e:44:69:f8:c7:5c:0e:82:93:a0: d7:63:16:4b:73:34:77:e3:dc:7c:ca:24:c7:a8:3d: 0e:8f:bf:c2:9b:ea:43:eb:0c:6c:d5:83:9b:eb:4e: 0c:d8:15:f8:8f:c1:79:d7:72:c1:e1:b2:99:5c:af: 05:94:3e:23:48:8b:f6:87:6a:ce:d2:d5:18:97:d8: d8:86:c9:87:81:e9:62:5d:30:aa:88:06:bc:db:cd: a1:7b:98:99:5b:44:2a:c1:fc:2a:74:18:03:50:28: 8b:5f:86:d4:31:84:94:5d:98:4b:8f:67:99:22:96: bc:8b:44:a9:d6:ca:88:95:ee:aa:27:0b:82:70:f7: 6e:05:e3:d2:18:ea:3e:1b:2b:32:7c:56:44:44:dc: 37:57:21:2c:20:85:0e:71:16:16:c3:f4:fd:80:7e: d0:19:3e:f3:b3:7d:d5:7a:94:a5:1d:c1:36:30:4c: 06:32:95:b0:95:95:e6:32:02:3a:b7:bb:79:21:fc: 39:7e:b9:23:b0:90:94:b8:1d:a5:b7:73:70:a1:73: b1:1e:35:dd:1f:a8:96:30:a8:11:42:92:70:8f:96: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:B3:C9:08:20:D5:9D:FF:17:EC:70:91:5E:66:C5:AA:92:14:95 X509v3 Authority Key Identifier: keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fa:c8:c7:7d:a8:e2:4f:6e:e1:6e:52:0a:fc:a3:9a:b8:ba: 96:5c:33:9f:e9:c3:1a:2c:ad:8d:bb:99:3f:05:4f:22:2a:d6: c5:68:1d:f1:65:69:4e:50:ed:b6:24:0e:b4:74:b7:13:a8:78: 0d:11:18:0a:b9:06:a2:98:05:e4:bc:81:12:70:13:b1:70:77: 10:3e:f9:83:91:42:70:81:a1:f4:20:bd:82:8f:2b:0e:fb:a3: 11:c2:88:3f:00:2a:ab:e7:46:f9:7d:3d:32:2a:bc:e8:35:ac: 1e:38:94:58:77:cc:f5:f0:15:09:08:dd:30:a6:9a:54:18:44: 1d:26:e3:c2:64:3e:02:ab:08:79:88:02:5f:87:ab:a1:7f:ac: e0:2e:4d:a9:be:2f:bf:f8:fe:ce:da:95:6c:09:76:97:98:b5: 03:98:53:c9:d4:d7:86:cc:15:c0:6f:d3:5e:e7:9d:15:2f:22: e3:69:92:9a:ae:a4:03:e8:da:e7:7e:48:c2:22:b0:35:b9:aa: fe:91:c4:21:0b:a7:cb:25:d4:12:0a:fe:bb:76:fa:b0:95:c8: ed:66:5e:57:c7:f5:32:af:4f:a2:78:2a:19:03:b4:c3:1b:64: 53:76:ae:2d:39:02:2c:86:9b:10:11:f5:95:2a:76:d5:5e:e4: d5:8c:94:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG QkI0NkI4OEMwHhcNMjUxMDI0MjA1NTM0WhcNMjUxMDMxMjA1NTM0WjAYMRYwFAYD VQQDEw02OGZiZTdjNi0wZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug3GuwfdUrU5yS4AkZpWzv4vhs/GA4CtR3ec/jtNxIlCsX5EafjHXA6Ck6DX YxZLczR349x8yiTHqD0Oj7/Cm+pD6wxs1YOb604M2BX4j8F513LB4bKZXK8FlD4j SIv2h2rO0tUYl9jYhsmHgeliXTCqiAa8282he5iZW0QqwfwqdBgDUCiLX4bUMYSU XZhLj2eZIpa8i0Sp1sqIle6qJwuCcPduBePSGOo+GysyfFZERNw3VyEsIIUOcRYW w/T9gH7QGT7zs33VepSlHcE2MEwGMpWwlZXmMgI6t7t5Ifw5frkjsJCUuB2lt3Nw oXOxHjXdH6iWMKgRQpJwj5Y/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxWs8kI INWd/xfscJFeZsWqkhSVMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2 NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI MVBqa3o3ZWotRFA3dEd1SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl+sjHfajiT27hblIK/KOauLqWXDOf6cMaLK2Nu5k/BU8iKtbFaB3x ZWlOUO22JA60dLcTqHgNERgKuQaimAXkvIEScBOxcHcQPvmDkUJwgaH0IL2CjysO +6MRwog/ACqr50b5fT0yKrzoNaweOJRYd8z18BUJCN0wpppUGEQdJuPCZD4Cqwh5 iAJfh6uhf6zgLk2pvi+/+P7O2pVsCXaXmLUDmFPJ1NeGzBXAb9Ne550VLyLjaZKa rqQD6NrnfkjCIrA1uar+kcQhC6fLJdQSCv67dvqwlcjtZl5Xx/Uyr0+ieCoZA7TD G2RTdq4tOQIshpsQEfWVKnbVXuTVjJSf -----END CERTIFICATE-----Generated at Sun Oct 26 06:46:19 2025 by rpki-client