$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft File: 1qn8yzagJxy8XxErtyBaV7n0hPc.mft (raw, json) Hash identifier: Ku1gvYUuzLppi74B3mluF8I+higkbg0b2PUP+Qu0rm4= Subject key identifier: E2:1A:8E:97:9B:46:47:E3:CD:69:52:00:66:31:B2:BE:AD:AA:DD:10 Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft Manifest number: 043B Signing time: Wed 29 Oct 2025 00:05:48 +0000 Manifest this update: Wed 29 Oct 2025 00:05:47 +0000 Manifest next update: Wed 05 Nov 2025 00:05:47 +0000 Files and hashes: 1: 1qn8yzagJxy8XxErtyBaV7n0hPc.crl (hash: k+8NxZAsdD3yoee30ojRpVuzgXqbS6LXIwlEkdevBm4=) 2: A34E20703F3411EF9DF9274AC4F9AE02.roa (hash: mj7Quo5wKTbG3d5ij/IP0EyOkfhXPi1COcacV2q2awg=) 3: 819150603F3411EF85BAC749C4F9AE02.roa (hash: W4tDaOtoueXLJGV231Xq5px334ORbAFdGWpLgfvtl8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 00:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168126, serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7 Validity Not Before: Oct 29 00:05:47 2025 GMT Not After : Nov 5 00:05:47 2025 GMT Subject: CN=69015a5b-cc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:4d:5e:95:0d:8a:01:e9:ab:af:b4:67:dc: 17:1b:ab:06:62:74:fb:e5:0b:c6:4e:32:8a:a9:ca: ca:98:56:bb:8a:3c:c3:4d:52:e9:10:1c:d8:a1:08: 01:ea:c7:b2:11:d8:a9:3f:b8:56:1c:c4:a1:ff:93: f4:b9:c4:ea:e7:9b:4c:26:28:8f:bd:7b:9d:64:66: 3e:b0:cf:5e:d3:30:10:48:18:40:70:9e:86:17:bc: 2a:75:e0:bc:ec:1a:41:c9:fd:32:0b:ac:0c:18:01: 01:e1:31:00:7d:02:f1:e1:f6:7d:32:27:fe:71:5e: 77:8c:a4:78:d0:90:4c:6a:b9:ef:ce:e0:aa:88:56: 12:5c:0d:7c:da:3e:e5:ef:9b:ed:92:f8:37:c3:fb: c0:a3:79:16:39:63:28:11:be:ff:58:ca:a4:f2:4d: 5a:4c:5e:a2:3e:19:20:38:e9:ee:89:06:17:e7:c3: 22:a9:68:fd:25:98:af:58:6a:5f:5f:ac:8d:0f:6d: b0:2a:20:f3:8c:fa:eb:54:d0:30:0c:31:b5:42:12: 6d:d1:15:cd:1f:04:da:46:96:b8:95:59:f5:5f:3e: 96:ef:0c:39:54:03:b2:2f:80:7a:b6:60:54:3e:f3: e2:f0:ee:57:e6:c7:d1:54:45:f3:e2:c8:e3:78:1a: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:8E:97:9B:46:47:E3:CD:69:52:00:66:31:B2:BE:AD:AA:DD:10 X509v3 Authority Key Identifier: keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:ac:1d:73:69:9c:89:53:1e:b4:69:bc:a4:68:61:23:c7: 71:a9:5f:59:49:66:83:42:69:9e:61:90:9a:79:da:da:c8:20: e9:a3:1e:1c:ab:ee:dc:3b:af:7a:ed:bb:e7:49:ec:99:31:64: 70:54:ad:19:cc:46:9e:c7:d6:9e:8c:70:75:86:46:d1:3d:e4: b8:14:23:97:7d:96:29:5e:11:7f:b0:4a:e0:49:6d:b2:ec:14: 8d:2f:9b:ec:4f:4f:32:aa:07:2a:15:9a:d7:32:2a:61:c4:84: 0b:b7:e1:83:ef:a8:c4:ff:da:ca:98:15:8a:16:13:39:2c:ff: a8:f6:5f:ac:99:b1:4f:13:49:01:50:9b:32:58:92:6b:58:3b: 4e:58:b6:ad:00:76:53:75:b6:35:f0:96:1b:2b:e9:4b:c8:61: c5:3b:9d:13:d3:47:20:9e:07:20:ab:b5:4c:68:3d:7d:c3:8f: 25:25:a0:00:92:30:94:02:4a:09:4b:37:9f:e9:fa:8e:3d:66: 3b:03:96:54:1d:ed:e0:10:e0:13:78:a1:82:79:08:1a:3e:a4: d2:fa:ee:b8:c6:c7:ba:63:f3:7b:ea:82:e8:3e:04:91:5e:41: 2d:61:6a:48:2d:9a:ad:9d:2f:60:85:a2:3d:80:7f:9e:62:dd: b5:90:bc:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxMjYxMTAvBgNVBAUTKEQ2QTlGQ0NCMzZBMDI3MUNCQzVGMTEyQkI3MjA1QTU3 QjlGNDg0RjcwHhcNMjUxMDI5MDAwNTQ3WhcNMjUxMTA1MDAwNTQ3WjAYMRYwFAYD VQQDEw02OTAxNWE1Yi1jYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V5NXpUNigHpq6+0Z9wXG6sGYnT75QvGTjKKqcrKmFa7ijzDTVLpEBzYoQgB 6seyEdipP7hWHMSh/5P0ucTq55tMJiiPvXudZGY+sM9e0zAQSBhAcJ6GF7wqdeC8 7BpByf0yC6wMGAEB4TEAfQLx4fZ9Mif+cV53jKR40JBMarnvzuCqiFYSXA182j7l 75vtkvg3w/vAo3kWOWMoEb7/WMqk8k1aTF6iPhkgOOnuiQYX58MiqWj9JZivWGpf X6yND22wKiDzjPrrVNAwDDG1QhJt0RXNHwTaRpa4lVn1Xz6W7ww5VAOyL4B6tmBU PvPi8O5X5sfRVEXz4sjjeBre4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIajpeb RkfjzWlSAGYxsr6tqt0QMB8GA1UdIwQYMBaAFNap/Ms2oCccvF8RK7cgWle59IT3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODEyNi8xNTdGNjZFQTgw MDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4eThYeEVydHlCYVY3bjBo UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi8xcW44eXphZ0p4 eThYeEVydHlCYVY3bjBoUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1uqwdc2mciVMetGm8pGhhI8dxqV9ZSWaDQmmeYZCaedrayCDpox4c q+7cO6967bvnSeyZMWRwVK0ZzEaex9aejHB1hkbRPeS4FCOXfZYpXhF/sErgSW2y 7BSNL5vsT08yqgcqFZrXMiphxIQLt+GD76jE/9rKmBWKFhM5LP+o9l+smbFPE0kB UJsyWJJrWDtOWLatAHZTdbY18JYbK+lLyGHFO50T00cgngcgq7VMaD19w48lJaAA kjCUAkoJSzef6fqOPWY7A5ZUHe3gEOATeKGCeQgaPqTS+u64xse6Y/N76oLoPgSR XkEtYWpILZqtnS9ghaI9gH+eYt21kLxx -----END CERTIFICATE-----Generated at Thu Oct 30 03:59:21 2025 by rpki-client