$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json) Hash identifier: fMKMla0gJ0WebqVO5nAfhQ/RXT01LrIy2KNop8qRZAg= Subject key identifier: 42:4A:50:9C:18:E7:A9:7B:67:4B:2F:DF:E2:51:A4:70:90:B8:35:23 Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft Manifest number: 0CC0 Signing time: Tue 04 Nov 2025 18:17:44 +0000 Manifest this update: Tue 04 Nov 2025 18:17:44 +0000 Manifest next update: Tue 11 Nov 2025 18:17:44 +0000 Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: DgsbqvzeHM6bx6ToYF7eREjiR75ChPIA787z0f0moxM=) 2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: CJEgaP8KqXDJxOZP2RnxuUbrLWDCGR55rSwKPSomEHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B Validity Not Before: Nov 4 18:17:44 2025 GMT Not After : Nov 11 18:17:44 2025 GMT Subject: CN=690a4348-2467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b2:60:b2:73:b0:01:41:8c:68:d4:be:1f:47: 57:bd:fc:c0:e0:39:75:f4:e2:74:e8:bc:5a:b0:11: b1:f8:00:7f:46:c2:45:28:95:48:dc:b2:71:1e:e2: 7e:6c:fd:77:cd:cf:27:df:3b:55:3f:8a:eb:e7:64: a3:70:27:94:d4:7a:30:39:23:2f:78:08:83:e5:98: 17:7e:26:50:39:56:5a:8b:43:b2:cb:37:85:5a:1a: 6d:53:7b:99:39:09:95:6c:76:5c:94:63:10:db:f7: 63:70:2b:0a:ec:3d:64:03:cb:4e:69:a0:43:a2:75: 87:fd:d2:85:da:4c:aa:be:14:a9:c2:4a:8c:4d:8a: 4b:11:3a:b2:01:c1:09:38:c0:96:b2:60:2d:e4:2c: 5b:15:53:9a:b8:8e:84:ac:94:43:07:52:55:fb:97: cb:b9:3f:94:99:a1:6b:a2:3d:98:d0:05:30:bd:4d: 76:da:33:4a:87:cc:8c:54:f0:39:0b:8a:aa:1a:b3: 3f:77:2a:76:30:f4:bc:e7:cd:37:29:35:a5:85:58: 63:02:87:ec:d2:6d:95:05:0e:1e:91:fd:a5:f3:08: b9:1d:bc:d1:c7:f2:b7:f1:66:3f:ee:be:84:9b:25: 40:ce:b7:56:58:02:41:78:a3:91:aa:70:58:30:d3: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4A:50:9C:18:E7:A9:7B:67:4B:2F:DF:E2:51:A4:70:90:B8:35:23 X509v3 Authority Key Identifier: keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:07:67:8a:66:f4:9e:f8:40:03:a0:ea:6f:ef:63:60:9d:6d: 56:f9:7e:c1:4f:f8:b1:9c:f0:0d:82:94:6f:63:d3:45:dd:69: b1:9f:fe:c4:06:d6:c0:69:ef:c8:3d:3c:fc:3b:36:56:91:ed: c9:81:dc:e1:46:a4:bc:05:05:29:de:62:a9:6e:8a:84:28:8f: 8d:52:55:a8:e6:ff:ae:25:94:a3:92:7c:f6:1f:97:04:e8:1b: b2:44:a6:6e:9c:cc:9d:50:e0:f9:ee:96:99:de:87:a0:a3:67: 6b:6f:55:c2:59:b1:da:fc:1d:76:8f:77:7b:ab:87:25:d1:60: 8e:34:c6:db:35:fa:89:fa:4a:74:09:8c:d0:bc:6a:66:e0:8a: a2:62:f6:32:c0:2e:95:25:fc:94:c3:1b:b7:27:a4:18:87:ff: a5:14:e0:ec:25:85:47:fd:d7:66:7d:18:2c:75:07:fd:b5:51: 87:e4:79:37:0b:87:78:e6:84:b9:33:e2:2d:3c:45:3f:e4:ba: 1e:82:25:37:79:35:93:e4:95:8e:25:9f:ae:cc:ec:43:4e:63: b5:11:3a:5f:7e:dd:97:98:bf:bf:6d:a7:99:e1:06:02:95:a3: 6e:dd:17:bf:78:39:4d:ea:b4:3c:7a:77:95:1a:fb:48:fc:aa: be:4a:3f:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVDNjQxMTAvBgNVBAUTKDQwRUJDMjVBMDhCQTVFNzU0MUNFMTQyRDJCQzI4QUU0 RjgyODhBNEIwHhcNMjUxMTA0MTgxNzQ0WhcNMjUxMTExMTgxNzQ0WjAYMRYwFAYD VQQDEw02OTBhNDM0OC0yNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLJgsnOwAUGMaNS+H0dXvfzA4Dl19OJ06LxasBGx+AB/RsJFKJVI3LJxHuJ+ bP13zc8n3ztVP4rr52SjcCeU1HowOSMveAiD5ZgXfiZQOVZai0OyyzeFWhptU3uZ OQmVbHZclGMQ2/djcCsK7D1kA8tOaaBDonWH/dKF2kyqvhSpwkqMTYpLETqyAcEJ OMCWsmAt5CxbFVOauI6ErJRDB1JV+5fLuT+UmaFroj2Y0AUwvU122jNKh8yMVPA5 C4qqGrM/dyp2MPS85803KTWlhVhjAofs0m2VBQ4ekf2l8wi5HbzRx/K38WY/7r6E myVAzrdWWAJBeKORqnBYMNOCrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJKUJwY 56l7Z0sv3+JRpHCQuDUjMB8GA1UdIwQYMBaAFEDrwloIul51Qc4ULSvCiuT4KIpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUM2NC80MjVCNDIzQ0ZG QTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhuVkJ6aFF0SzhLSzVQZ29p a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPdkNXZ2k2WG5WQnpoUXRLOEtLNVBnb2lrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUM2NC80MjVCNDIzQ0ZGQTMxMUU5ODczNUE2ODVDNEY5QUUwMi9RT3ZDV2dpNlhu VkJ6aFF0SzhLSzVQZ29pa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsB2eKZvSe+EADoOpv72NgnW1W+X7BT/ixnPANgpRvY9NF3Wmxn/7E BtbAae/IPTz8OzZWke3JgdzhRqS8BQUp3mKpboqEKI+NUlWo5v+uJZSjknz2H5cE 6BuyRKZunMydUOD57paZ3oego2drb1XCWbHa/B12j3d7q4cl0WCONMbbNfqJ+kp0 CYzQvGpm4IqiYvYywC6VJfyUwxu3J6QYh/+lFODsJYVH/ddmfRgsdQf9tVGH5Hk3 C4d45oS5M+ItPEU/5LoegiU3eTWT5JWOJZ+uzOxDTmO1ETpfft2XmL+/baeZ4QYC laNu3Re/eDlN6rQ8eneVGvtI/Kq+Sj95 -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:23 2025 by rpki-client