$ rpki-client -vvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft File: qtrfI2_7nO0qpky3zl2Z1R066RM.mft (raw, json) Hash identifier: HMcMtISgPOAEd1kBS3P7iklZ2ItdvHKZWwm5e1PtvDo= Subject key identifier: 5D:4A:69:87:22:D7:B9:88:BB:95:7A:F2:61:C0:AC:91:11:F1:3C:DE Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 Certificate issuer: /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:00:54 +0000 Manifest this update: Mon 03 Nov 2025 08:00:53 +0000 Manifest next update: Mon 10 Nov 2025 08:00:53 +0000 Files and hashes: 1: qtrfI2_7nO0qpky3zl2Z1R066RM.crl (hash: aA+6mbRb//jPrbhSBcI6TJwocH+URfA77cJoJqt1dbQ=) 2: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (hash: zLyUWkmHMafCHisxFcoehncbjxPyFvw/TF9T6LP55tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913 Validity Not Before: Nov 3 08:00:53 2025 GMT Not After : Nov 10 08:00:53 2025 GMT Subject: CN=69086136-02b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:0c:7c:ea:45:8d:12:63:36:b3:30:5d:1a: 56:f9:a5:76:ee:f6:3e:64:7b:3a:ec:cb:6c:d0:db: 0a:67:a3:8e:18:a6:a0:82:91:73:6d:d0:d3:e2:87: 6a:2b:1a:58:e0:b0:87:70:e2:60:42:12:33:a4:89: 9a:fb:72:a9:13:ed:a5:a9:43:6d:3e:cb:c3:17:a7: fe:df:9a:3c:37:e8:83:4d:5c:90:db:f5:2f:01:db: 1b:f2:df:1e:e5:b2:fc:76:df:b7:ad:c7:ed:bd:d1: 88:2d:bc:7e:74:a1:86:b0:1a:c8:ee:ea:e5:3f:67: e6:ce:64:b5:08:a3:16:d3:28:12:3a:ee:8e:fd:f0: 0b:1f:da:4b:e9:35:5c:1b:88:59:95:6d:c6:15:38: 83:77:63:db:ed:11:5a:a1:3b:cb:79:f9:c0:48:d5: 06:ca:24:63:bf:21:0c:e2:c0:84:e0:c3:22:49:69: 24:b6:2e:3b:f2:8f:79:22:bd:99:c4:73:a0:c6:cb: f4:65:32:f5:36:e9:28:5d:2d:38:6a:c5:27:fb:53: ae:f5:2b:b3:1b:48:b0:a3:46:d2:25:08:44:f6:2e: 25:92:99:ff:cb:d1:59:65:3c:6c:e2:3a:30:8b:76: cf:dc:fc:83:9e:54:8c:78:2f:ea:8f:e8:da:dd:d6: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4A:69:87:22:D7:B9:88:BB:95:7A:F2:61:C0:AC:91:11:F1:3C:DE X509v3 Authority Key Identifier: keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:70:38:24:5a:f2:33:5e:9e:75:ff:2f:d4:6e:3d:31:c0:a8: f1:04:6e:6c:d7:1f:ef:67:98:ab:12:8a:32:70:79:9e:44:d6: d7:24:e4:7c:e6:ff:c6:38:6e:b2:ef:93:06:d8:54:5d:16:98: c7:d7:36:a5:80:29:b4:8a:62:d4:9f:87:00:ce:da:09:58:e4: 08:60:2a:6d:35:c9:81:7c:d0:eb:05:81:1d:40:7c:bb:e6:9e: d8:5b:e5:dd:db:55:de:56:27:71:7d:e7:57:75:b4:42:a7:0a: 42:62:08:94:28:57:1b:70:d2:63:5b:3d:48:39:c1:d6:e5:f3: 5a:f4:1e:18:a9:45:38:d3:d8:69:f4:6e:d9:30:b4:d7:15:e2: 9d:78:d7:55:92:53:ae:cc:f0:a5:38:13:e6:24:18:6d:c1:e7: 71:a3:6f:81:91:19:c3:d7:9f:f1:b3:8e:c9:48:9c:dd:df:93: 65:9c:f0:b4:8b:f4:9a:7d:ae:a3:4f:88:a0:5d:50:93:3d:0b: ac:58:7b:57:85:4d:4b:f4:70:39:be:73:2a:3e:ac:d9:7b:8b: fd:23:97:c7:dd:c2:2c:7e:08:15:23:a6:08:30:4a:c6:1c:ad: 8c:a0:97:c3:30:ac:7c:2c:55:cf:77:07:11:c4:33:7c:40:3a: da:d3:5c:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzY3MTExMC8GA1UEBRMoQUFEQURGMjM2RkZCOUNFRDJBQTY0Q0I3Q0U1RDk5RDUx RDNBRTkxMzAeFw0yNTExMDMwODAwNTNaFw0yNTExMTAwODAwNTNaMBgxFjAUBgNV BAMTDTY5MDg2MTM2LTAyYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVUgx86kWNEmM2szBdGlb5pXbu9j5kezrsy2zQ2wpno44YpqCCkXNt0NPih2or GljgsIdw4mBCEjOkiZr7cqkT7aWpQ20+y8MXp/7fmjw36INNXJDb9S8B2xvy3x7l svx237etx+290YgtvH50oYawGsju6uU/Z+bOZLUIoxbTKBI67o798Asf2kvpNVwb iFmVbcYVOIN3Y9vtEVqhO8t5+cBI1QbKJGO/IQziwITgwyJJaSS2Ljvyj3kivZnE c6DGy/RlMvU26ShdLThqxSf7U671K7MbSLCjRtIlCET2LiWSmf/L0VllPGziOjCL ds/c/IOeVIx4L+qP6Nrd1sRDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXUpphyLX uYi7lXryYcCskRHxPN4wHwYDVR0jBBgwFoAUqtrfI2/7nO0qpky3zl2Z1R066RMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NjcxLzZGMjg2QjEyQURG QTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8wcXBreTN6bDJaMVIwNjZS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXRyZkkyXzduTzBxcGt5M3psMloxUjA2NlJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NjcxLzZGMjg2QjEyQURGQTExRjBBQjkwODc4N0M0RjlBRTAyL3F0cmZJMl83bk8w cXBreTN6bDJaMVIwNjZSTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtwOCRa8jNennX/L9RuPTHAqPEEbmzXH+9nmKsSijJweZ5E1tck5Hzm /8Y4brLvkwbYVF0WmMfXNqWAKbSKYtSfhwDO2glY5AhgKm01yYF80OsFgR1AfLvm nthb5d3bVd5WJ3F951d1tEKnCkJiCJQoVxtw0mNbPUg5wdbl81r0HhipRTjT2Gn0 btkwtNcV4p1411WSU67M8KU4E+YkGG3B53Gjb4GRGcPXn/GzjslInN3fk2Wc8LSL 9Jp9rqNPiKBdUJM9C6xYe1eFTUv0cDm+cyo+rNl7i/0jl8fdwix+CBUjpggwSsYc rYygl8MwrHwsVc93BxHEM3xAOtrTXLM= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:45 2025 by rpki-client