$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json) Hash identifier: Az9WsRVTuqV6rLd04DZUsMuK/BaLyyOQXUooFkCBKE0= Subject key identifier: CA:A6:30:96:99:7C:0C:DD:6D:77:63:9C:CB:A6:AD:A8:8A:FA:17:EA Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft Manifest number: 73 Signing time: Mon 03 Nov 2025 06:56:44 +0000 Manifest this update: Mon 03 Nov 2025 06:56:43 +0000 Manifest next update: Mon 10 Nov 2025 06:56:43 +0000 Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: q3BywOH3J6xafODvUv9MtwNEdY/vmPliAdVebgLzDew=) 2: D423FF3255D411F0A743B457C4F9AE02.roa (hash: TmIFji4F6gSBEIt2ug9Vn112Y33/SCr07BGe7XPN52k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867 Validity Not Before: Nov 3 06:56:43 2025 GMT Not After : Nov 10 06:56:43 2025 GMT Subject: CN=6908522b-bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:f1:46:07:84:e7:96:83:e4:4a:1a:1a:d0: 65:11:be:e6:94:2c:1d:6f:b9:6a:84:1d:09:97:4d: 86:e9:04:eb:46:9c:b5:93:41:59:80:b3:01:3f:61: 08:e5:0f:e6:01:cb:08:60:a3:7a:16:95:ee:ce:68: ea:42:27:60:d0:b6:32:f2:ab:61:51:bf:62:fc:6c: 23:fc:63:60:cb:ed:0f:c0:72:61:3a:78:50:15:85: 4d:9e:90:77:0a:ad:26:ea:b7:3c:d2:b6:af:5d:f0: b3:e2:d4:0f:6c:b8:13:10:b2:d5:00:d6:f7:6a:86: a5:77:d6:56:8a:c0:09:98:1a:26:f8:b6:ce:37:92: 9c:aa:92:31:a2:f5:48:29:91:f4:fc:8c:b6:2a:de: 7d:68:46:6b:a2:89:80:71:03:6c:95:6f:de:9c:3c: 7c:05:d8:a4:a3:b5:01:12:36:f7:ae:13:03:c8:d1: 6e:c4:b6:31:41:b0:33:c0:51:cd:f7:7a:4b:92:07: e5:4b:22:be:50:d6:79:20:61:19:f0:ab:77:ee:7f: bf:c8:52:91:b6:3c:26:62:be:b8:c3:38:bf:95:9d: b0:3e:e9:0f:35:59:5a:13:f7:eb:89:13:38:41:39: d1:ba:64:56:82:59:1b:18:ad:26:fa:55:38:b9:2b: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:30:96:99:7C:0C:DD:6D:77:63:9C:CB:A6:AD:A8:8A:FA:17:EA X509v3 Authority Key Identifier: keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:54:39:c1:8e:be:20:26:5c:6a:0f:7c:df:85:9b:6e:45:ce: ee:f7:ff:20:40:9f:a4:76:59:0b:c0:c5:ad:c9:9a:2e:1f:4a: 56:97:c6:8d:a4:9c:60:f7:c8:e7:d9:d5:dc:ff:06:3e:bc:79: 62:ef:f5:7a:da:08:cc:ca:56:e5:6a:09:84:7f:6b:5a:e7:c3: 6a:e5:4d:14:ef:66:bc:04:82:63:77:66:80:a8:12:1d:40:3f: 01:80:25:b8:d7:54:cf:ad:bb:b7:ee:e6:60:33:b5:24:b9:4a: 1a:0c:c3:b2:bb:99:1f:04:4b:54:1e:4a:bf:5c:b0:c2:d5:8a: f1:80:3a:e3:4a:58:b7:2b:0f:c7:1f:5d:3f:93:ac:38:4d:ad: 3a:0e:27:1c:07:f3:62:20:7d:99:45:33:53:5b:ad:8b:bd:c0: bb:c3:53:75:8f:6b:d4:ab:ff:0f:ac:01:e2:08:65:7f:92:6c: fc:34:04:d6:c6:0a:7b:22:54:a5:9f:9b:4e:27:81:d0:02:56: 8d:82:c2:34:d3:f6:23:e9:af:bd:5f:0b:28:c9:d1:6b:e5:50: 8a:09:1b:84:18:c2:99:1f:4d:d7:f0:98:a8:ff:bd:da:47:ba: 27:0c:df:ef:6f:1d:e9:b9:c4:c9:23:3b:bb:61:b2:13:0c:1d: d2:12:fa:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0Y5NTExMC8GA1UEBRMoQTgzQkNGNkRCMjg4RTk2NDcwRDM0RDE4QUZCM0U0QTgx Mjc5MTg2NzAeFw0yNTExMDMwNjU2NDNaFw0yNTExMTAwNjU2NDNaMBgxFjAUBgNV BAMTDTY5MDg1MjJiLWJjNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCk/FGB4TnloPkShoa0GURvuaULB1vuWqEHQmXTYbpBOtGnLWTQVmAswE/YQjl D+YBywhgo3oWle7OaOpCJ2DQtjLyq2FRv2L8bCP8Y2DL7Q/AcmE6eFAVhU2ekHcK rSbqtzzStq9d8LPi1A9suBMQstUA1vdqhqV31laKwAmYGib4ts43kpyqkjGi9Ugp kfT8jLYq3n1oRmuiiYBxA2yVb96cPHwF2KSjtQESNveuEwPI0W7EtjFBsDPAUc33 ekuSB+VLIr5Q1nkgYRnwq3fuf7/IUpG2PCZivrjDOL+VnbA+6Q81WVoT9+uJEzhB OdG6ZFaCWRsYrSb6VTi5KzwFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyqYwlpl8 DN1td2Ocy6atqIr6F+owHwYDVR0jBBgwFoAUqDvPbbKI6WRw000Yr7PkqBJ5GGcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3Rjk1LzdEMzNGRDM4MTJF NzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldSdzAwMFlyN1BrcUJKNUdH Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUR2UGJiS0k2V1J3MDAwWXI3UGtxQko1R0djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 Rjk1LzdEMzNGRDM4MTJFNzExRjBCREI5NDU0REM0RjlBRTAyL3FEdlBiYktJNldS dzAwMFlyN1BrcUJKNUdHYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIlUOcGOviAmXGoPfN+Fm25Fzu73/yBAn6R2WQvAxa3Jmi4fSlaXxo2k nGD3yOfZ1dz/Bj68eWLv9XraCMzKVuVqCYR/a1rnw2rlTRTvZrwEgmN3ZoCoEh1A PwGAJbjXVM+tu7fu5mAztSS5ShoMw7K7mR8ES1QeSr9csMLVivGAOuNKWLcrD8cf XT+TrDhNrToOJxwH82IgfZlFM1NbrYu9wLvDU3WPa9Sr/w+sAeIIZX+SbPw0BNbG CnsiVKWfm04ngdACVo2CwjTT9iPpr71fCyjJ0WvlUIoJG4QYwpkfTdfwmKj/vdpH uicM3+9vHem5xMkjO7thshMMHdIS+j4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:14 2025 by rpki-client