$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: 1cTI562xqtU3xaMy/oblvzg7125LWOGeF2PF6fUdjSI= Subject key identifier: 49:5A:7F:32:55:E0:BF:ED:AA:93:00:33:08:8C:5C:64:E7:12:63:7C Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 06CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 06BF Signing time: Tue 04 Nov 2025 22:14:26 +0000 Manifest this update: Tue 04 Nov 2025 22:14:25 +0000 Manifest next update: Tue 11 Nov 2025 22:14:25 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: NlPwGNFg9ukqP/YawyaZHYoenx2rn77wzYqF9Yqds1Q=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: Sxl9Vw9Z+DTDShpFQB0WpYJiHDd/mA9uIojiho1C+jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1738 (0x6ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Nov 4 22:14:25 2025 GMT Not After : Nov 11 22:14:25 2025 GMT Subject: CN=690a7ac1-5edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:ab:71:86:25:67:6f:6c:cf:d8:7e:86:09: 5d:00:b9:40:98:47:35:e9:a9:5f:92:67:5e:e3:8d: 4c:ea:9f:9b:1a:1c:65:12:22:80:29:b7:c8:45:69: e7:33:b3:ab:54:e5:99:6a:f5:4f:8d:18:a2:2a:ae: 9e:63:ae:5f:82:7a:a0:15:9d:a4:4b:03:75:12:8c: be:18:99:58:ca:a0:b6:c2:09:54:02:1b:11:ba:68: 6c:6e:8f:ac:49:45:ee:e0:30:68:0c:08:0c:5e:8c: df:77:f1:89:93:f1:cd:30:43:2f:6f:15:7a:f0:f0: 38:b4:4b:44:3c:72:3e:a1:72:ed:d3:64:29:67:90: 78:11:bb:08:f3:2b:92:13:2f:a9:7d:a3:ee:bc:ef: 57:3b:d1:63:ef:d9:dd:a4:24:67:85:a4:c5:09:c0: 0e:91:7a:60:ea:c5:56:66:4e:a7:bb:78:86:c0:07: 05:d1:7e:0c:65:9f:34:bf:5f:bf:37:3c:02:20:a6: 6a:8b:fd:e6:dc:4d:77:c1:ae:09:00:7d:4e:e5:42: dd:90:98:4c:01:d1:d5:c4:cb:30:14:47:88:40:62: fc:ab:58:92:c0:b1:5c:1e:36:4c:55:77:1d:84:73: 55:c2:e9:ee:70:e2:c2:79:69:a5:b4:ef:ca:a3:64: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:7F:32:55:E0:BF:ED:AA:93:00:33:08:8C:5C:64:E7:12:63:7C X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a8:c3:a1:43:2c:0b:56:fb:b6:5d:5e:60:be:68:27:b4:4e: 9e:3e:e7:f7:84:c0:16:f0:a3:ec:8a:32:86:77:3a:67:86:31: 29:80:5e:b6:70:e0:97:4f:6f:cc:02:28:b7:56:53:82:f3:1f: ca:08:bb:a3:be:6c:73:b5:2b:05:e3:d0:a1:35:24:ac:4f:9e: ad:75:8a:ac:96:17:9f:4d:bf:ed:3a:5c:9d:e1:db:fa:08:cf: 36:7e:ca:52:f0:85:92:c2:9a:09:ec:27:6c:ab:c8:0b:d0:79: 76:c6:eb:09:2c:00:e7:c8:27:ac:ee:8f:b4:c4:ed:59:50:ab: b1:4e:43:0d:66:c6:ef:d9:a3:cd:58:81:98:8b:ae:4a:f7:ec: 4c:b6:fd:d6:b0:aa:b4:dc:c8:65:87:b3:40:68:b6:c4:0d:ab: 0a:f4:e1:89:e4:40:0a:31:45:f5:a9:c4:b5:01:41:c2:0c:83: ef:1c:35:1f:49:87:f4:5a:b5:3c:17:51:e2:1a:20:85:f4:a9: 37:85:be:b3:d4:9c:36:bd:b5:f2:2d:cc:fa:d5:99:30:60:8a: 7e:e8:81:9c:9a:e7:05:7e:7c:45:4e:15:7f:d4:d5:50:b8:09: c5:9f:d8:3e:fa:88:2e:af:d6:1e:d8:cf:9a:b5:6c:54:4a:b2: 2f:73:45:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUxMTA0MjIxNDI1WhcNMjUxMTExMjIxNDI1WjAYMRYwFAYD VQQDEw02OTBhN2FjMS01ZWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eqrcYYlZ29sz9h+hgldALlAmEc16alfkmde441M6p+bGhxlEiKAKbfIRWnn M7OrVOWZavVPjRiiKq6eY65fgnqgFZ2kSwN1Eoy+GJlYyqC2wglUAhsRumhsbo+s SUXu4DBoDAgMXozfd/GJk/HNMEMvbxV68PA4tEtEPHI+oXLt02QpZ5B4EbsI8yuS Ey+pfaPuvO9XO9Fj79ndpCRnhaTFCcAOkXpg6sVWZk6nu3iGwAcF0X4MZZ80v1+/ NzwCIKZqi/3m3E13wa4JAH1O5ULdkJhMAdHVxMswFEeIQGL8q1iSwLFcHjZMVXcd hHNVwunucOLCeWmltO/Ko2RsXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElafzJV 4L/tqpMAMwiMXGTnEmN8MB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwqMOhQywLVvu2XV5gvmgntE6ePuf3hMAW8KPsijKGdzpnhjEpgF62 cOCXT2/MAii3VlOC8x/KCLujvmxztSsF49ChNSSsT56tdYqslhefTb/tOlyd4dv6 CM82fspS8IWSwpoJ7Cdsq8gL0Hl2xusJLADnyCes7o+0xO1ZUKuxTkMNZsbv2aPN WIGYi65K9+xMtv3WsKq03Mhlh7NAaLbEDasK9OGJ5EAKMUX1qcS1AUHCDIPvHDUf SYf0WrU8F1HiGiCF9Kk3hb6z1Jw2vbXyLcz61ZkwYIp+6IGcmucFfnxFThV/1NVQ uAnFn9g++ogur9Ye2M+atWxUSrIvc0Wz -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:40 2025 by rpki-client