$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft File: quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json) Hash identifier: 8bYYYRZIxET9Ql1N8V5M6vUGkF4+c8nFXpd1RH0EotQ= Subject key identifier: 60:6E:25:2A:31:92:9A:F4:BF:E6:6E:71:3F:B6:A8:DC:82:FD:30:7F Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 Certificate issuer: /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft Manifest number: BB Signing time: Mon 03 Nov 2025 05:57:45 +0000 Manifest this update: Mon 03 Nov 2025 05:57:44 +0000 Manifest next update: Mon 10 Nov 2025 05:57:44 +0000 Files and hashes: 1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: 6PEJMlmdIEALf/6G2ANbzWWU7QmX7LfxUAHcBvbLccE=) 2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: XzXF/8xfpuOMbcKhBzvfBK+CZWCno4sqp+r1zL1L1bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5 Validity Not Before: Nov 3 05:57:44 2025 GMT Not After : Nov 10 05:57:44 2025 GMT Subject: CN=69084458-c84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:df:9f:7e:ba:c4:f2:0a:e8:5c:ef:28:11:9a: 06:ab:35:ed:f1:74:99:c1:61:4f:95:f6:df:d8:7b: 89:d1:91:04:d9:16:c6:cb:45:19:6b:e9:14:e3:1e: 25:ab:d1:6b:a0:42:5a:6f:91:5f:1f:19:d4:7d:39: df:cd:e9:46:39:a6:5b:7e:39:e2:c4:10:5d:b7:de: aa:4e:2b:6b:b7:19:00:07:5f:5d:70:11:46:9e:11: 53:88:48:59:08:b4:a6:e3:25:0c:90:ee:b2:aa:a6: cc:3e:4b:18:ba:1f:9a:de:ce:da:cc:38:26:fb:8b: 1b:bd:13:35:2a:cd:e4:07:a6:89:a3:6f:45:c2:45: 55:ce:6d:e9:4d:75:94:90:72:6b:3b:a3:0f:fb:1f: 4b:1f:e4:2f:46:d5:5d:0f:fd:92:6a:2d:f8:42:66: 14:e6:87:12:1f:be:e6:9b:2b:fd:c5:80:73:71:ad: 6a:99:6b:56:51:30:34:41:4c:13:2b:1d:35:25:13: df:23:0f:0c:1c:31:9e:1c:e0:8f:19:12:81:8d:23: 58:b1:fb:16:a6:e5:41:f3:8f:7f:a1:a2:98:34:fb: df:41:b1:40:aa:d4:d5:98:f0:75:0a:a2:02:0d:36: c3:0a:58:b8:47:e6:82:40:67:9f:f4:fb:51:a5:b3: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6E:25:2A:31:92:9A:F4:BF:E6:6E:71:3F:B6:A8:DC:82:FD:30:7F X509v3 Authority Key Identifier: keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d5:e3:3e:91:9c:02:61:2c:a1:fd:f8:97:7b:c7:89:1b:5e: cb:ee:29:47:12:a6:30:55:59:bc:b9:7d:d3:af:c1:bc:1b:80: b7:fc:57:6d:b1:52:89:3c:68:54:9c:b8:b8:fd:d0:ef:6b:63: 7c:8b:48:f1:f9:82:57:26:dc:c8:38:a5:ca:3e:48:85:5e:a5: 47:02:84:3d:a5:8f:c9:83:ff:51:96:26:56:cb:08:20:3f:18: 42:d6:94:92:18:5e:49:03:27:61:c7:d8:9b:27:de:f3:ee:8f: bd:88:b6:2d:30:17:53:c6:fa:25:e6:b3:65:09:36:8e:97:0f: 0c:1c:46:a8:53:a2:47:93:b9:e6:ba:bc:86:21:67:61:9a:e8: 47:d0:ad:d7:dd:0a:a4:45:7d:2f:f2:fc:11:a4:8a:04:9f:d9: 44:ad:4d:89:49:8b:32:45:95:8f:9d:fd:9c:b0:67:ed:2e:fa: c0:17:11:52:68:02:06:ed:8a:e0:1e:6d:23:61:e2:f0:ab:6c: 78:03:39:ff:ae:63:4e:f5:8c:d9:f9:08:98:0d:cd:3d:32:51: 82:9b:ca:68:ba:75:db:6b:10:34:e3:d9:7e:66:53:1e:54:aa: 9e:6c:f0:c6:83:b7:85:fc:63:cc:2f:b8:6f:fb:e8:8e:62:15: 48:62:a6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0ODkxMTAvBgNVBAUTKEFBRTU3NTlBN0U5OEFBNzQ1ODU5OERFM0MxOUFBMTc5 N0YwMEY1RjUwHhcNMjUxMTAzMDU1NzQ0WhcNMjUxMTEwMDU1NzQ0WjAYMRYwFAYD VQQDEw02OTA4NDQ1OC1jODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnN+ffrrE8groXO8oEZoGqzXt8XSZwWFPlfbf2HuJ0ZEE2RbGy0UZa+kU4x4l q9FroEJab5FfHxnUfTnfzelGOaZbfjnixBBdt96qTitrtxkAB19dcBFGnhFTiEhZ CLSm4yUMkO6yqqbMPksYuh+a3s7azDgm+4sbvRM1Ks3kB6aJo29FwkVVzm3pTXWU kHJrO6MP+x9LH+QvRtVdD/2Sai34QmYU5ocSH77mmyv9xYBzca1qmWtWUTA0QUwT Kx01JRPfIw8MHDGeHOCPGRKBjSNYsfsWpuVB849/oaKYNPvfQbFAqtTVmPB1CqIC DTbDCli4R+aCQGef9PtRpbNM+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBuJSox kpr0v+ZucT+2qNyC/TB/MB8GA1UdIwQYMBaAFKrldZp+mKp0WFmN48GaoXl/APX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zQTNGMjgzNjlC RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFuUllXWTNqd1pxaGVYOEE5 ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1VjFtbjZZcW5SWVdZM2p3WnFoZVg4QTlmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ4OS8zQTNGMjgzNjlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9xdVYxbW42WXFu UllXWTNqd1pxaGVYOEE5ZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl1eM+kZwCYSyh/fiXe8eJG17L7ilHEqYwVVm8uX3Tr8G8G4C3/Fdt sVKJPGhUnLi4/dDva2N8i0jx+YJXJtzIOKXKPkiFXqVHAoQ9pY/Jg/9RliZWywgg PxhC1pSSGF5JAydhx9ibJ97z7o+9iLYtMBdTxvol5rNlCTaOlw8MHEaoU6JHk7nm uryGIWdhmuhH0K3X3QqkRX0v8vwRpIoEn9lErU2JSYsyRZWPnf2csGftLvrAFxFS aAIG7YrgHm0jYeLwq2x4Azn/rmNO9YzZ+QiYDc09MlGCm8pounXbaxA049l+ZlMe VKqebPDGg7eF/GPML7hv++iOYhVIYqbg -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:31 2025 by rpki-client