$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json) Hash identifier: 1CcPBgtLt8jFhV8Yhn2c1nVV3MLbW/67nGY+cCVAkfs= Subject key identifier: 0A:F6:1C:4B:A1:1D:13:7D:C9:BB:58:10:29:CD:83:4F:EF:57:51:E7 Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft Manifest number: 0796 Signing time: Sun 02 Nov 2025 21:32:12 +0000 Manifest this update: Sun 02 Nov 2025 21:32:12 +0000 Manifest next update: Sun 09 Nov 2025 21:32:12 +0000 Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: QxX+YM5Lwtdm07E10oDTdoIknfxlrybcLUe/LfiJQ60=) 2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: y5tNXSHIFMDA3JaGsuJYxDUjZjMTH1QaHVdqSkt/Cu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB Validity Not Before: Nov 2 21:32:12 2025 GMT Not After : Nov 9 21:32:12 2025 GMT Subject: CN=6907cddc-92f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:8a:50:b0:fb:c6:63:85:6a:9b:be:08:a6: b2:ea:dc:59:e5:96:0a:a6:18:78:f3:c8:aa:1b:f5: e8:7a:fa:83:53:da:1f:8a:7c:23:45:62:63:71:5b: 18:81:4f:07:dd:40:9a:3b:4d:f1:c0:c3:b1:21:4c: ff:64:dd:0d:d5:8e:81:99:5e:f8:93:62:66:a2:48: 3e:db:64:a4:2d:00:9d:e2:64:38:45:3c:a8:ec:8d: 2b:1a:45:fa:4f:58:78:bb:22:14:7e:79:ff:0c:da: 7d:6a:4d:24:da:e2:41:c4:f0:66:41:ea:1f:15:0b: 6d:7e:38:b8:70:5f:85:4a:31:2d:d9:1d:31:64:9c: d4:1b:74:58:c0:c2:c3:4b:cd:f8:5a:9d:5b:78:19: b6:77:d0:92:e1:1c:14:1b:9d:b7:cf:e6:f5:66:d3: ab:14:d3:e5:c2:d6:14:b5:5e:c3:67:06:31:90:0f: e3:0b:b5:f9:95:cd:b9:70:60:9d:09:e4:cd:30:cb: 83:19:f3:a6:0e:dc:a8:ec:17:cf:0e:bb:e3:19:91: e6:48:37:94:35:91:84:5c:19:d3:25:4c:01:4a:4a: 8f:3a:34:28:7d:0c:bb:8a:b0:a3:99:d5:0a:c1:13: a9:cc:ad:46:b3:00:75:97:13:34:72:a9:e4:8b:aa: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F6:1C:4B:A1:1D:13:7D:C9:BB:58:10:29:CD:83:4F:EF:57:51:E7 X509v3 Authority Key Identifier: keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4c:99:fe:19:33:8c:b5:7e:ef:d2:50:da:00:03:a4:93:f0: bc:03:ec:f6:2e:1e:08:1c:fb:a3:9a:36:b4:29:79:bc:7d:56: ba:13:0b:04:b3:b0:ef:4b:d4:ed:9c:00:ca:5f:67:8e:ec:45: 14:05:61:ee:ca:c2:28:4c:d9:f6:b4:04:f3:dd:5d:46:e3:eb: e3:f0:f4:df:8b:f9:bf:ea:74:ed:90:8d:bd:53:9d:c0:b7:95: 12:cc:f6:4d:8a:50:e4:cb:49:eb:f1:a8:b5:54:8d:ea:78:24: ff:04:be:83:6a:22:f6:76:35:ce:23:f5:3a:96:b3:d9:bf:00: d9:12:b9:4f:25:97:2e:9e:d4:35:2e:62:5e:03:14:9c:ec:39: 1e:5f:44:cd:09:b5:c6:f1:02:09:e7:2a:68:0f:d2:be:96:fe: e2:b8:91:63:55:f3:d0:cc:2f:89:be:f9:05:8d:08:d9:84:23: cd:5d:5b:86:bb:56:48:d3:e8:e0:a8:de:a3:03:9c:9c:75:8e: 1d:d6:96:bd:d7:2e:8d:31:47:d1:c4:a4:d8:ba:34:18:6e:81: d0:e4:9d:49:1b:45:9a:d7:c1:6d:80:94:d3:0f:a2:1c:86:76: 57:83:50:39:05:24:7f:af:b3:ff:a0:a7:28:93:86:59:40:0b: 45:fe:d0:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx OUZFMUI4RkIwHhcNMjUxMTAyMjEzMjEyWhcNMjUxMTA5MjEzMjEyWjAYMRYwFAYD VQQDEw02OTA3Y2RkYy05MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCuKULD7xmOFapu+CKay6txZ5ZYKphh488iqG/XoevqDU9ofinwjRWJjcVsY gU8H3UCaO03xwMOxIUz/ZN0N1Y6BmV74k2Jmokg+22SkLQCd4mQ4RTyo7I0rGkX6 T1h4uyIUfnn/DNp9ak0k2uJBxPBmQeofFQttfji4cF+FSjEt2R0xZJzUG3RYwMLD S834Wp1beBm2d9CS4RwUG523z+b1ZtOrFNPlwtYUtV7DZwYxkA/jC7X5lc25cGCd CeTNMMuDGfOmDtyo7BfPDrvjGZHmSDeUNZGEXBnTJUwBSkqPOjQofQy7irCjmdUK wROpzK1GswB1lxM0cqnki6o/KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr2HEuh HRN9ybtYECnNg0/vV1HnMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1 UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM QWdPNWppRDlaLUFaX2h1UHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpTJn+GTOMtX7v0lDaAAOkk/C8A+z2Lh4IHPujmja0KXm8fVa6EwsE s7DvS9TtnADKX2eO7EUUBWHuysIoTNn2tATz3V1G4+vj8PTfi/m/6nTtkI29U53A t5USzPZNilDky0nr8ai1VI3qeCT/BL6DaiL2djXOI/U6lrPZvwDZErlPJZcuntQ1 LmJeAxSc7DkeX0TNCbXG8QIJ5ypoD9K+lv7iuJFjVfPQzC+JvvkFjQjZhCPNXVuG u1ZI0+jgqN6jA5ycdY4d1pa91y6NMUfRxKTYujQYboHQ5J1JG0Wa18FtgJTTD6Ic hnZXg1A5BSR/r7P/oKcok4ZZQAtF/tAj -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:21 2025 by rpki-client