$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json) Hash identifier: +SRQ1ZtgeT8pEYReEmBz5Sdo2qMIys7hjj6+2REZvcA= Subject key identifier: 85:B6:46:19:3A:AE:E4:B8:2B:7B:4A:07:E1:82:12:0E:0D:C7:C9:59 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft Manifest number: D5 Signing time: Mon 03 Nov 2025 05:40:38 +0000 Manifest this update: Mon 03 Nov 2025 05:40:37 +0000 Manifest next update: Mon 10 Nov 2025 05:40:37 +0000 Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: 7mpJ0i4BiiXRKNosElnlj+3BA5iFf3q9CvaXLqPUiIc=) 2: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (hash: cK3qZ0WbmEjnc5MEuUycpoBiFZhSbR9pAa+lxxTpapw=) 3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: RfcMIG1IXwx6pF5vk+cVTv0c/fwzJvqDiir11C+zzpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Nov 3 05:40:37 2025 GMT Not After : Nov 10 05:40:37 2025 GMT Subject: CN=69084056-33dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:d7:ab:d8:c9:48:eb:1f:22:18:44:b1:bd: ca:f4:fc:3e:77:64:bc:d6:18:2d:96:f5:49:8e:de: 91:f6:51:52:e4:c9:53:6e:15:ad:50:3b:b3:5d:83: 42:9e:17:99:3f:8b:18:61:2b:60:72:cf:31:d7:0c: ba:6e:5c:26:cc:27:d7:e2:53:ac:30:97:7a:c7:b8: 54:30:e1:08:3b:ec:22:66:69:28:a2:e9:3f:a1:2d: 53:14:79:88:0b:f1:4b:c1:b1:0f:93:ef:a3:90:08: 56:4a:59:d8:b6:57:ea:d2:4c:5d:84:80:86:d8:11: 88:eb:dd:55:f7:a0:09:60:46:48:b5:09:c1:a5:b6: e8:fc:c7:0b:83:7f:80:e6:db:a3:46:ff:0a:84:cf: 3f:bf:ce:92:82:c3:57:97:0e:c9:b6:59:dc:52:7f: 41:dc:2a:e9:52:b5:e3:92:41:6c:22:6d:e6:45:7e: fb:40:17:a5:f1:19:a9:66:d6:ca:95:bd:85:a6:66: 78:72:c0:75:8f:73:94:1f:f4:8b:dd:d5:36:7f:29: a5:4f:e8:99:d5:6a:74:8d:74:7a:44:b6:30:04:bb: b1:84:27:3d:0b:8c:cc:11:27:1c:59:45:7a:3e:50: 01:d5:c8:68:e6:66:ca:46:60:75:74:6c:9d:03:b1: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B6:46:19:3A:AE:E4:B8:2B:7B:4A:07:E1:82:12:0E:0D:C7:C9:59 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:22:48:98:97:cc:eb:f1:d5:02:d3:d9:b8:a1:ac:a7:d1:ee: 4b:b5:40:95:fd:f9:a8:5c:ee:61:68:ca:53:b2:b8:dd:ac:64: bc:0d:a3:d9:fc:15:81:af:5c:26:2b:7d:0f:e5:a4:47:40:18: d3:21:15:8e:5f:a6:0a:f8:8d:f5:6e:6c:36:1b:7b:ec:c9:0e: 2e:d1:0f:74:30:cc:e4:ee:35:b9:39:2e:e7:f7:aa:72:5f:3d: f5:e7:8c:4b:c7:5b:2f:f7:57:73:a4:53:91:a0:7c:d3:ca:1a: d6:c7:0f:b7:d0:0a:1e:29:a5:c3:66:5a:9c:95:31:ce:18:74: b4:0c:91:24:23:e5:43:1b:26:f8:6c:5b:49:38:5a:25:9d:b4: 3d:5e:fd:16:bf:30:df:ce:b5:86:a9:ac:d2:1c:93:da:f3:73: 64:aa:db:69:d0:ce:83:5a:27:a2:71:af:4b:57:71:6d:df:fb: 40:97:ff:80:79:71:76:3a:e0:59:c3:e5:56:35:10:e0:c5:c6: 3c:b3:8e:f6:c9:c6:20:07:17:58:30:b5:72:9a:0c:d0:fd:a2: 86:e1:70:ca:c6:0a:01:72:87:c0:02:fe:27:c4:a1:64:69:ba: b3:d1:ec:9c:d6:65:ce:e5:10:12:13:83:24:3e:25:a2:44:54: 9b:30:2e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw QjE4OTcwRjgwHhcNMjUxMTAzMDU0MDM3WhcNMjUxMTEwMDU0MDM3WjAYMRYwFAYD VQQDEw02OTA4NDA1Ni0zM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKzXq9jJSOsfIhhEsb3K9Pw+d2S81hgtlvVJjt6R9lFS5MlTbhWtUDuzXYNC nheZP4sYYStgcs8x1wy6blwmzCfX4lOsMJd6x7hUMOEIO+wiZmkoouk/oS1TFHmI C/FLwbEPk++jkAhWSlnYtlfq0kxdhICG2BGI691V96AJYEZItQnBpbbo/McLg3+A 5tujRv8KhM8/v86SgsNXlw7JtlncUn9B3CrpUrXjkkFsIm3mRX77QBel8RmpZtbK lb2FpmZ4csB1j3OUH/SL3dU2fymlT+iZ1Wp0jXR6RLYwBLuxhCc9C4zMESccWUV6 PlAB1cho5mbKRmB1dGydA7HHfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW2Rhk6 ruS4K3tKB+GCEg4Nx8lZMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw aFhoUXhQTHRPSzRMR0pjUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJIkiYl8zr8dUC09m4oayn0e5LtUCV/fmoXO5haMpTsrjdrGS8DaPZ /BWBr1wmK30P5aRHQBjTIRWOX6YK+I31bmw2G3vsyQ4u0Q90MMzk7jW5OS7n96py Xz3154xLx1sv91dzpFORoHzTyhrWxw+30AoeKaXDZlqclTHOGHS0DJEkI+VDGyb4 bFtJOFolnbQ9Xv0WvzDfzrWGqazSHJPa83Nkqttp0M6DWieica9LV3Ft3/tAl/+A eXF2OuBZw+VWNRDgxcY8s472ycYgBxdYMLVymgzQ/aKG4XDKxgoBcofAAv4nxKFk abqz0eyc1mXO5RASE4MkPiWiRFSbMC7I -----END CERTIFICATE-----Generated at Tue Nov 4 13:18:37 2025 by rpki-client