$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json) Hash identifier: U6dFqA2S3xJkCOPpPlcRkCpZ1pkNHbqrT4ZamzHpwwY= Subject key identifier: EC:23:0B:A6:76:94:70:CB:B2:C5:AA:B8:FA:F5:B6:A0:61:F6:98:B0 Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft Manifest number: 0754 Signing time: Fri 24 Oct 2025 22:41:10 +0000 Manifest this update: Fri 24 Oct 2025 22:41:10 +0000 Manifest next update: Fri 31 Oct 2025 22:41:10 +0000 Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: /nEFzIGRS+SyQjFlyR8jyYCr2upApkW8aw1xV049bJ0=) 2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=) 3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7 Validity Not Before: Oct 24 22:41:10 2025 GMT Not After : Oct 31 22:41:10 2025 GMT Subject: CN=68fc0086-d8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:c7:9a:ae:73:66:6f:1e:19:46:3e:e1:27: 9e:a1:92:ac:b7:13:ec:b3:16:73:f0:8d:52:bc:e8: 7e:b1:23:09:e5:85:2c:a5:74:42:8b:f5:b0:25:f0: c1:b5:7e:7e:ff:b0:0a:4d:89:41:cb:68:81:81:9d: 80:7b:af:6d:7f:f0:24:66:c1:f8:cb:50:43:a1:25: 6d:d4:f2:88:66:97:6f:a2:94:b2:0a:20:e6:c0:2a: 4a:bf:5a:92:28:84:01:03:49:a0:ce:5c:32:a3:2c: 83:36:83:7a:3c:8c:6c:2c:c2:10:d1:43:5a:c3:13: 39:85:b8:3a:e3:56:5e:a2:41:b6:fc:55:41:95:f2: f9:f9:b5:cc:de:f9:53:8b:e5:f7:1a:4e:6c:2e:4c: 0b:05:cd:d1:ac:84:64:05:83:ac:8f:45:df:91:91: f8:21:b2:d7:17:ff:d8:89:c0:37:63:79:cc:0b:81: b5:d9:ed:11:9e:d3:d7:01:fc:c8:3a:46:9d:ac:53: 08:e2:ab:b3:4a:a7:54:66:ef:74:ca:39:62:0e:2b: cd:d8:1d:fe:39:8b:37:fd:2c:6e:3d:82:f7:69:a6: c6:24:61:03:d7:b0:7c:8c:4c:82:68:e8:de:fe:bf: c3:d9:1e:41:93:4c:ed:b5:a8:99:14:05:f1:e8:88: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:23:0B:A6:76:94:70:CB:B2:C5:AA:B8:FA:F5:B6:A0:61:F6:98:B0 X509v3 Authority Key Identifier: keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:18:89:5f:95:37:3e:12:f4:4b:c8:26:d4:fe:6e:06:78:55: 49:ae:e8:99:1a:7f:42:f5:4b:e8:ce:a1:69:fd:d5:67:9b:f9: 6f:ef:cd:b4:4e:42:b2:b7:1c:0f:ed:1e:9e:2c:1d:30:3f:c6: 72:7d:cf:90:f5:7e:f5:9c:35:de:c0:ce:97:1f:bc:03:9e:ac: b0:6e:57:f6:02:55:12:51:4a:c3:85:15:87:59:57:49:1d:7f: 90:47:15:98:19:9f:21:b2:0c:fa:14:f2:1a:f1:07:55:8d:b4: 74:2b:1b:9e:47:ee:35:f7:fe:a8:54:88:76:e8:2b:77:71:4a: e6:f8:6f:4c:68:59:f6:07:0c:f5:52:2b:20:76:d0:9a:b6:dc: e5:39:31:f5:94:31:03:0d:c2:20:49:44:f6:79:36:41:81:9a: 2e:44:d6:29:fa:de:4e:05:b2:46:fe:6f:b3:7a:d0:73:ed:38: 21:f0:95:31:82:60:27:b1:78:4c:1a:67:da:9c:30:02:15:3d: bb:81:b6:c1:b9:ec:be:96:9b:a0:2f:84:20:ec:50:8b:27:ef: 69:43:d9:bd:4a:94:0c:d9:bb:d4:15:73:58:68:e3:1b:68:5c: 3f:3c:0a:86:11:94:2c:00:48:3c:df:d9:76:83:b7:a8:81:6f: 49:26:1b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG RTcwRDg5RDcwHhcNMjUxMDI0MjI0MTEwWhcNMjUxMDMxMjI0MTEwWjAYMRYwFAYD VQQDEw02OGZjMDA4Ni1kOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCzHmq5zZm8eGUY+4SeeoZKstxPssxZz8I1SvOh+sSMJ5YUspXRCi/WwJfDB tX5+/7AKTYlBy2iBgZ2Ae69tf/AkZsH4y1BDoSVt1PKIZpdvopSyCiDmwCpKv1qS KIQBA0mgzlwyoyyDNoN6PIxsLMIQ0UNawxM5hbg641ZeokG2/FVBlfL5+bXM3vlT i+X3Gk5sLkwLBc3RrIRkBYOsj0XfkZH4IbLXF//YicA3Y3nMC4G12e0RntPXAfzI OkadrFMI4quzSqdUZu90yjliDivN2B3+OYs3/SxuPYL3aabGJGED17B8jEyCaOje /r/D2R5Bk0zttaiZFAXx6IgECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwjC6Z2 lHDLssWquPr1tqBh9piwMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1 OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChGIlflTc+EvRLyCbU/m4GeFVJruiZGn9C9UvozqFp/dVnm/lv7820 TkKytxwP7R6eLB0wP8Zyfc+Q9X71nDXewM6XH7wDnqywblf2AlUSUUrDhRWHWVdJ HX+QRxWYGZ8hsgz6FPIa8QdVjbR0KxueR+419/6oVIh26Ct3cUrm+G9MaFn2Bwz1 UisgdtCattzlOTH1lDEDDcIgSUT2eTZBgZouRNYp+t5OBbJG/m+zetBz7Tgh8JUx gmAnsXhMGmfanDACFT27gbbBuey+lpugL4Qg7FCLJ+9pQ9m9SpQM2bvUFXNYaOMb aFw/PAqGEZQsAEg839l2g7eogW9JJhvK -----END CERTIFICATE-----Generated at Sat Oct 25 18:29:08 2025 by rpki-client