$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json) Hash identifier: Jk7COPe5/EgqA5W/Rmhu8pn8WgyJYZklAuXCCveQVmo= Subject key identifier: 81:F8:3B:28:47:72:F8:27:BD:D8:A4:2D:08:C2:DF:FD:E1:E0:F0:C6 Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft Manifest number: AF Signing time: Mon 03 Nov 2025 06:05:59 +0000 Manifest this update: Mon 03 Nov 2025 06:05:58 +0000 Manifest next update: Mon 10 Nov 2025 06:05:58 +0000 Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: N8hiObaCz1Qq8sZLDDC9eEtDlb1HMY2j39UEn+lzK6o=) 2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8 Validity Not Before: Nov 3 06:05:58 2025 GMT Not After : Nov 10 06:05:58 2025 GMT Subject: CN=69084647-2fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7d:4a:80:dd:f9:aa:9f:4f:95:4c:f6:3e:dc: c7:bf:1e:b4:49:9a:2d:c1:12:2f:f4:e2:45:5c:44: 2b:fb:e6:71:af:f1:37:f5:39:e9:2a:24:28:0e:ee: 40:1e:6b:e2:19:c3:e5:62:95:34:e3:ce:18:9a:59: 3e:ab:a2:65:ff:97:de:eb:66:b1:d2:1d:80:12:76: 1f:ec:68:c4:e8:10:ce:96:39:59:42:cc:cb:4c:96: 3d:1b:08:62:b3:30:54:7e:b9:d2:40:80:d9:49:a8: db:8b:73:c1:29:42:95:7b:38:f2:3c:b3:81:76:6f: bf:7b:cc:75:b8:c0:c5:da:d2:07:06:b7:79:c6:4b: 85:83:52:48:80:34:98:d1:77:7d:5a:6f:5f:99:2a: 01:9b:dd:4a:ac:e6:de:5f:ee:16:8d:6c:b3:20:ff: 3c:4a:e4:14:bb:67:97:ac:e4:6c:bf:c1:3d:d6:60: 32:3b:0f:4c:03:ab:e3:b7:c1:eb:ea:56:61:b2:86: 68:be:d2:d1:6f:23:83:ce:1b:6c:aa:31:cb:49:6d: 56:85:1d:de:83:11:3d:9c:da:f7:ed:34:2f:44:5a: 56:70:79:3c:96:1f:65:86:c7:45:54:17:00:a4:ee: f2:7d:36:cc:8d:9b:5d:e2:78:06:dc:1f:d2:e3:c6: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F8:3B:28:47:72:F8:27:BD:D8:A4:2D:08:C2:DF:FD:E1:E0:F0:C6 X509v3 Authority Key Identifier: keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4b:f6:9c:00:a9:67:30:22:d3:93:12:15:07:05:b0:f7:41: fb:58:ff:bd:4c:22:85:03:8f:06:70:74:53:68:59:4b:fa:8d: 60:a8:95:10:9f:61:5e:66:fc:c5:24:7b:2f:42:7a:88:dd:ea: a3:02:09:91:89:ce:8c:22:57:6b:b8:f5:28:60:dc:71:ad:87: 4c:9b:9e:25:f8:ee:77:ed:3a:04:4f:48:f2:7b:94:e4:7f:59: ba:2f:b1:0d:57:fc:ad:a8:5e:ef:5a:c9:77:a7:78:83:ac:b4: b4:ae:ed:a1:c4:6a:99:d0:b2:90:fb:1e:47:43:33:87:4f:df: 59:d8:74:53:12:86:4f:58:8d:03:92:9b:d9:0f:13:f2:5a:26: 3a:56:06:35:db:13:db:5f:21:05:6e:fe:6a:2e:da:c5:63:44: 2e:cf:51:33:89:25:44:db:e4:56:ca:bc:10:ed:6c:fa:b3:4d: 5c:0e:31:ed:7d:bb:07:2a:e2:6a:37:89:aa:6f:b8:34:aa:de: 5a:7d:30:23:37:36:5b:d7:e6:3a:bf:5b:53:6a:66:52:09:05: 3c:bd:40:86:02:cb:3a:5c:16:e3:b8:dc:f3:59:0f:7a:b1:08: 99:e4:f1:a3:9a:d0:e2:04:e5:19:bd:f6:af:21:71:d4:35:ed: 01:85:c7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYxNzkxMTAvBgNVBAUTKDQwNTAyQTRCMEMxRkY0NjgyRjUyRTM0MDY0MDQ0NDQ1 Mjg3RDRCQjgwHhcNMjUxMTAzMDYwNTU4WhcNMjUxMTEwMDYwNTU4WjAYMRYwFAYD VQQDEw02OTA4NDY0Ny0yZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA131KgN35qp9PlUz2PtzHvx60SZotwRIv9OJFXEQr++Zxr/E39TnpKiQoDu5A HmviGcPlYpU0484Ymlk+q6Jl/5fe62ax0h2AEnYf7GjE6BDOljlZQszLTJY9Gwhi szBUfrnSQIDZSajbi3PBKUKVezjyPLOBdm+/e8x1uMDF2tIHBrd5xkuFg1JIgDSY 0Xd9Wm9fmSoBm91KrObeX+4WjWyzIP88SuQUu2eXrORsv8E91mAyOw9MA6vjt8Hr 6lZhsoZovtLRbyODzhtsqjHLSW1WhR3egxE9nNr37TQvRFpWcHk8lh9lhsdFVBcA pO7yfTbMjZtd4ngG3B/S48ZO1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH4OyhH cvgnvdikLQjC3/3h4PDGMB8GA1UdIwQYMBaAFEBQKksMH/RoL1LjQGQEREUofUu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS81NEUwNDcxNkFB N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlHZ3ZVdU5BWkFSRVJTaDlT N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjE3OS81NEUwNDcxNkFBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlH Z3ZVdU5BWkFSRVJTaDlTN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByS/acAKlnMCLTkxIVBwWw90H7WP+9TCKFA48GcHRTaFlL+o1gqJUQ n2FeZvzFJHsvQnqI3eqjAgmRic6MIldruPUoYNxxrYdMm54l+O537ToET0jye5Tk f1m6L7ENV/ytqF7vWsl3p3iDrLS0ru2hxGqZ0LKQ+x5HQzOHT99Z2HRTEoZPWI0D kpvZDxPyWiY6VgY12xPbXyEFbv5qLtrFY0Quz1EziSVE2+RWyrwQ7Wz6s01cDjHt fbsHKuJqN4mqb7g0qt5afTAjNzZb1+Y6v1tTamZSCQU8vUCGAss6XBbjuNzzWQ96 sQiZ5PGjmtDiBOUZvfavIXHUNe0Bhces -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:32 2025 by rpki-client