$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json) Hash identifier: Y5PTR/Uzq2bBTRzZVjn9fYlywOkaIZi1hRl8PwFRpKM= Subject key identifier: 84:64:A7:27:E3:C0:37:78:3E:CE:F7:A6:E0:14:1B:6D:B6:A5:89:D3 Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Certificate serial: 2DD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft Manifest number: 2DB5 Signing time: Sun 02 Nov 2025 15:29:45 +0000 Manifest this update: Sun 02 Nov 2025 15:29:45 +0000 Manifest next update: Sun 09 Nov 2025 15:29:45 +0000 Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: BbkZczB5SyNw2vMmQ8Kp+X8knZ4bwlClAB+sas4bRCg=) 2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: B6weuy2U7VjqemndD9JlkjRjdvpM++iJ2EL75fmO3yk=) 3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: H0Aul5FoePWmdJ4ws06EeBfgwjOLxYt9oVPG8uQPMlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11729 (0x2dd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857 Validity Not Before: Nov 2 15:29:45 2025 GMT Not After : Nov 9 15:29:45 2025 GMT Subject: CN=690778e9-ac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:05:4e:83:95:42:cb:75:a5:50:9f:35:dc: 4f:b5:d3:c0:3c:c9:f1:34:36:23:f2:3a:c9:99:63: cf:d9:9c:ba:66:a0:68:ba:1b:7f:8f:24:30:76:b0: ed:32:48:48:d1:4f:02:f8:bc:e8:b0:b0:c8:60:6f: c9:09:cd:f7:fc:13:f9:08:f2:51:a4:5f:da:03:6f: bb:41:b0:dc:e3:c6:d2:b6:69:2d:37:be:d7:b4:5a: 62:d8:af:74:0b:1a:14:ec:82:79:7d:32:03:58:e9: 88:0f:d3:8f:90:23:c6:6b:97:13:cd:26:41:7c:3e: f1:e1:56:81:a4:04:97:53:af:9e:18:04:59:a9:6c: fb:7c:26:94:c0:21:38:7e:d1:eb:54:c5:b3:b8:de: 91:6c:a4:ce:47:d7:7a:e7:8c:90:89:8a:f0:ee:75: ba:6e:ae:10:ff:2d:39:38:9b:27:71:d9:9e:3b:34: a3:02:09:31:6e:df:54:4e:36:3b:39:02:cc:82:54: b6:83:3f:19:45:00:76:0c:fb:fc:89:b4:a8:e0:10: 9b:9a:40:3b:c8:4c:d1:f4:1b:82:07:7c:28:33:29: 04:d8:83:fa:41:94:d9:cd:d5:4f:89:49:4c:16:2e: 9b:e6:b0:17:30:42:e7:76:72:47:92:67:30:62:a8: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:A7:27:E3:C0:37:78:3E:CE:F7:A6:E0:14:1B:6D:B6:A5:89:D3 X509v3 Authority Key Identifier: keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:ee:0b:0f:07:cb:8c:72:0d:5b:35:30:2d:5e:fa:8a:9b: 05:35:53:8d:ea:2d:60:d0:ba:d5:02:3a:c3:30:bf:c0:fa:69: 9a:a3:8c:ae:e9:00:13:31:c2:34:ea:96:6a:25:0f:fc:53:c9: cd:9c:b4:bf:a3:fc:12:4d:6b:21:e5:e4:5f:78:4a:3b:3b:18: 32:47:7a:51:77:17:24:b4:a8:34:53:27:4f:fb:3d:c2:f7:b6: 68:ac:0d:23:1c:25:93:63:0b:c3:6b:d4:d3:93:ab:f4:c3:38: 9a:92:11:a0:2d:93:c3:ab:a9:b7:3a:4e:f2:c6:cc:f4:77:ae: 82:0d:e5:e7:eb:d3:a9:d1:f1:0c:77:86:c1:fa:08:f7:c5:b4: c6:a1:f4:d4:93:b3:0f:ee:57:af:33:61:19:2b:fe:b0:27:97: 48:5d:31:a4:bd:5f:4f:84:35:75:a7:b6:34:a1:7e:0a:62:94: fd:56:8a:26:5d:4d:a2:da:40:b9:8b:4e:01:b0:a1:4b:91:e1: 4a:46:d7:40:b5:e7:a2:ec:0d:1f:35:b8:a5:46:66:c5:8c:e5: fc:8c:62:7e:07:2d:13:36:fe:ce:49:03:4b:be:3d:b3:94:47: d8:71:f4:6e:5f:95:6d:c1:66:10:65:8d:2a:28:e7:cb:70:5f: 77:30:da:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZDNjAxMTAvBgNVBAUTKDQzOUY1QTlBNDBFMTk5Njc5QTdCQzA5QkUyMDdGRDFG NjBBMDQ4NTcwHhcNMjUxMTAyMTUyOTQ1WhcNMjUxMTA5MTUyOTQ1WjAYMRYwFAYD VQQDEw02OTA3NzhlOS1hYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVEFToOVQst1pVCfNdxPtdPAPMnxNDYj8jrJmWPP2Zy6ZqBouht/jyQwdrDt MkhI0U8C+LzosLDIYG/JCc33/BP5CPJRpF/aA2+7QbDc48bStmktN77XtFpi2K90 CxoU7IJ5fTIDWOmID9OPkCPGa5cTzSZBfD7x4VaBpASXU6+eGARZqWz7fCaUwCE4 ftHrVMWzuN6RbKTOR9d654yQiYrw7nW6bq4Q/y05OJsncdmeOzSjAgkxbt9UTjY7 OQLMglS2gz8ZRQB2DPv8ibSo4BCbmkA7yEzR9BuCB3woMykE2IP6QZTZzdVPiUlM Fi6b5rAXMELndnJHkmcwYqh9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRkpyfj wDd4Ps73puAUG222pYnTMB8GA1UdIwQYMBaAFEOfWppA4ZlnmnvAm+IH/R9goEhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkM2MC9CRjYzMjNFNjg5 NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1XZWFlOENiNGdmOUgyQ2dT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E1OWFta0RobVdlYWU4Q2I0Z2Y5SDJDZ1NGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkM2MC9CRjYzMjNFNjg5NEIxMUUzODdDNDlFNjc1OTExRUEzMi9RNTlhbWtEaG1X ZWFlOENiNGdmOUgyQ2dTRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbV+4LDwfLjHINWzUwLV76ipsFNVON6i1g0LrVAjrDML/A+mmao4yu 6QATMcI06pZqJQ/8U8nNnLS/o/wSTWsh5eRfeEo7OxgyR3pRdxcktKg0UydP+z3C 97ZorA0jHCWTYwvDa9TTk6v0wziakhGgLZPDq6m3Ok7yxsz0d66CDeXn69Op0fEM d4bB+gj3xbTGofTUk7MP7levM2EZK/6wJ5dIXTGkvV9PhDV1p7Y0oX4KYpT9Voom XU2i2kC5i04BsKFLkeFKRtdAteei7A0fNbilRmbFjOX8jGJ+By0TNv7OSQNLvj2z lEfYcfRuX5VtwWYQZY0qKOfLcF93MNqK -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:16 2025 by rpki-client