$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json) Hash identifier: wtVe8ESt6ni1Ze3wCwSESx3HHPikjx7zPW7H+i3XrLM= Subject key identifier: 90:51:1D:13:65:9E:D2:2D:0E:A9:E7:A3:D4:C4:8F:E9:66:95:03:D8 Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft Manifest number: 018C Signing time: Fri 17 Oct 2025 06:21:59 +0000 Manifest this update: Fri 17 Oct 2025 06:21:58 +0000 Manifest next update: Fri 24 Oct 2025 06:21:58 +0000 Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: uN5nxHjol2VapZEGHdfQoUAlXv6IZ7+4arusV/3t/Kg=) 2: B210BF28D1BF11EF95281B83C4F9AE02.roa (hash: bRdR3wfNnHC1rku2OvmduQD8mvL6hcKjWYIdu2kzO40=) 3: 20DA8B7E571D11EEAA430244C4F9AE02.roa (hash: Q5v08K+SDa0gE1PId5DYOFya6dBCiJ5+nRdhgtaQrKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 06:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA Validity Not Before: Oct 17 06:21:58 2025 GMT Not After : Oct 24 06:21:58 2025 GMT Subject: CN=68f1e087-36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:14:83:cf:7f:62:6d:8e:49:b9:29:75:68: 2b:7f:67:77:e7:01:99:0d:ca:52:8d:d3:58:41:7d: dc:7e:74:12:16:07:99:f9:d3:d8:7e:28:d8:ae:23: ee:9d:8d:aa:59:2a:91:d1:b2:6e:0d:f9:39:83:5e: 13:1d:5a:38:da:d1:21:87:7a:80:93:dd:f6:a5:df: c0:36:b7:23:2a:82:1c:65:de:21:3d:03:75:3d:93: 2a:97:4a:79:8f:62:b3:fc:e1:13:86:de:42:24:22: 7e:2a:dc:45:80:c3:9a:ce:48:89:b8:da:5f:f9:42: c9:49:db:66:2f:9c:3d:57:3f:47:af:bd:27:b9:6c: a6:eb:54:20:26:4e:e5:cf:2f:22:9f:29:00:c5:7f: 1d:bb:ec:25:c5:c2:13:70:de:a6:a1:c9:a4:46:c5: 8c:d7:e4:04:ba:e1:2c:49:8f:4b:3d:8c:2b:11:33: 1b:a1:fa:03:94:b8:ed:e1:7f:ce:e1:65:0f:ba:4a: cd:2f:49:e1:dc:b8:de:e2:c4:8e:0f:26:39:4b:f7: 3d:0e:e6:3a:45:c1:a7:49:04:88:e6:35:99:bf:29: 35:fc:59:e1:5c:08:ba:dd:b7:e6:28:fc:ce:23:25: 90:c1:d4:10:a5:14:33:a6:89:5c:69:18:e4:af:8a: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:51:1D:13:65:9E:D2:2D:0E:A9:E7:A3:D4:C4:8F:E9:66:95:03:D8 X509v3 Authority Key Identifier: keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:95:f8:3c:62:cc:39:0f:b5:fb:7e:bd:3f:7c:c7:88:5a: d5:34:1d:93:36:d0:ff:a9:f5:6e:38:6d:1f:0e:4e:61:7e:50: ae:de:f5:38:73:32:ad:ac:15:f8:5e:6c:38:fa:2b:ca:57:22: ba:a5:86:61:cc:6b:5c:98:3d:74:9f:26:cc:ba:72:47:59:fa: de:8b:d5:39:23:1d:5a:52:ff:75:54:53:0a:98:88:74:4a:57: dd:a5:10:4e:60:c2:76:09:4f:cd:a5:97:d8:33:50:f4:0c:73: 84:e1:27:0d:08:e6:20:2e:53:38:e7:bf:ec:04:6c:a8:ed:81: 97:a3:8c:9b:f2:9f:3f:ae:55:df:14:c3:fe:d4:12:c2:1f:32: ba:6f:ee:ff:78:68:54:82:6e:e9:62:0e:be:96:1c:96:a7:10: 06:3f:bb:30:da:cc:cc:19:53:25:aa:b9:c4:0a:ee:6b:64:f5: b1:75:c8:7d:77:bc:54:4e:ab:a3:91:e7:cc:f9:6a:49:65:f7: e7:cc:55:72:19:f0:6d:ce:b1:0a:3e:e4:f2:d0:d1:57:2a:60: aa:f1:ab:32:f2:b2:52:3d:41:27:57:11:73:a4:27:56:32:cd: 0c:2e:19:7c:36:c3:53:57:fe:f5:3d:14:24:b9:a1:dd:a1:5a: 75:cd:9c:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC MzIzNTBBREEwHhcNMjUxMDE3MDYyMTU4WhcNMjUxMDI0MDYyMTU4WjAYMRYwFAYD VQQDEw02OGYxZTA4Ny0zNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcgUg89/Ym2OSbkpdWgrf2d35wGZDcpSjdNYQX3cfnQSFgeZ+dPYfijYriPu nY2qWSqR0bJuDfk5g14THVo42tEhh3qAk932pd/ANrcjKoIcZd4hPQN1PZMql0p5 j2Kz/OETht5CJCJ+KtxFgMOazkiJuNpf+ULJSdtmL5w9Vz9Hr70nuWym61QgJk7l zy8inykAxX8du+wlxcITcN6mocmkRsWM1+QEuuEsSY9LPYwrETMbofoDlLjt4X/O 4WUPukrNL0nh3Lje4sSODyY5S/c9DuY6RcGnSQSI5jWZvyk1/FnhXAi63bfmKPzO IyWQwdQQpRQzpolcaRjkr4rdBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBRHRNl ntItDqnno9TEj+lmlQPYMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3 MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5 ZkpuODlBbzVzNGF6STFDdG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd45X4PGLMOQ+1+369P3zHiFrVNB2TNtD/qfVuOG0fDk5hflCu3vU4 czKtrBX4Xmw4+ivKVyK6pYZhzGtcmD10nybMunJHWfrei9U5Ix1aUv91VFMKmIh0 SlfdpRBOYMJ2CU/NpZfYM1D0DHOE4ScNCOYgLlM457/sBGyo7YGXo4yb8p8/rlXf FMP+1BLCHzK6b+7/eGhUgm7pYg6+lhyWpxAGP7sw2szMGVMlqrnECu5rZPWxdch9 d7xUTqujkefM+WpJZffnzFVyGfBtzrEKPuTy0NFXKmCq8asy8rJSPUEnVxFzpCdW Ms0MLhl8NsNTV/71PRQkuaHdoVp1zZzS -----END CERTIFICATE-----Generated at Sat Oct 18 14:18:51 2025 by rpki-client