$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json) Hash identifier: jKbVcubPFtLSIRN6pm0QayAVoH06ojuYNIv6+R/tDa8= Subject key identifier: D6:3F:4B:E0:96:2E:1A:92:7F:34:EB:54:4B:6A:61:83:29:01:E4:AC Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft Manifest number: 0D2E Signing time: Sun 26 Oct 2025 18:30:17 +0000 Manifest this update: Sun 26 Oct 2025 18:30:17 +0000 Manifest next update: Sun 02 Nov 2025 18:30:17 +0000 Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: oRd8ysrdkYtyotLg3A+sNG8tiUOh8EUJ92kFca/Urg4=) 2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: FgvpUN85rtr+i1GuoDsaGwxZYbJ7H8djnKwJKhetLt8=) 3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: Z4p5IL2wEtdYmX76by5DzgGIGhxAsMyvBXYRGxm6vYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B Validity Not Before: Oct 26 18:30:17 2025 GMT Not After : Nov 2 18:30:17 2025 GMT Subject: CN=68fe68b9-10d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ba:f7:aa:11:e8:4c:13:7b:30:7d:5b:8c:ad: e0:e8:9c:73:97:ab:36:09:34:bd:5b:8c:19:43:70: be:8d:72:d5:7b:52:6f:80:2e:57:ba:17:fe:e5:14: e4:25:df:ae:36:59:b4:df:62:00:39:eb:bc:77:1e: ce:f2:1e:c3:b1:30:71:7f:f9:a2:7b:bd:29:f4:da: 49:de:cb:ed:5c:38:02:fc:04:33:90:ae:c4:89:0c: 80:2b:66:84:c9:b3:e6:43:1f:56:ae:9b:05:33:37: 21:59:4c:ed:3a:31:99:29:93:8f:27:a8:47:21:76: b9:23:da:aa:6e:f5:1e:e6:9f:77:c2:6f:8c:8d:2f: 15:47:30:98:70:80:fa:7e:a1:6b:6d:32:26:ba:27: d2:c2:9c:98:eb:07:d1:aa:8f:95:60:05:df:8a:00: 6b:4f:bb:8a:1f:dd:1a:d2:a3:e1:21:da:c9:40:a9: 1a:70:e1:5a:0d:0f:db:eb:d6:c0:6f:39:93:cb:e8: 5b:5d:67:32:29:67:da:26:cf:58:43:b6:32:00:c7: 34:2c:7d:f9:1a:f7:d7:56:5e:e0:cb:b9:0f:a5:82: 9d:7d:76:ec:9c:33:1b:0e:58:94:e7:c5:0a:e8:4d: df:2b:70:8d:f9:21:73:fd:36:48:43:c2:bc:d5:2c: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3F:4B:E0:96:2E:1A:92:7F:34:EB:54:4B:6A:61:83:29:01:E4:AC X509v3 Authority Key Identifier: keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:08:9f:3c:73:09:ea:85:bb:89:67:22:c5:55:74:55:84: 5d:24:6b:87:fc:6e:8d:e4:03:01:ff:6d:5d:df:af:60:30:2e: c0:4d:81:1c:c0:b8:5c:a4:cc:eb:7f:15:3f:15:a7:e0:8b:1b: 98:ee:eb:3d:78:42:63:29:0d:73:06:4a:cc:08:6d:02:bc:28: 28:ee:f1:61:fd:3c:47:d6:9e:ad:e4:ca:4e:76:d6:f5:28:37: ad:a0:20:5c:44:8a:cb:6d:19:2f:f0:c7:89:ce:5b:a6:6a:3b: 8f:1b:25:2d:a4:40:63:be:39:22:4a:17:6e:6e:d3:ad:af:63: 60:4f:d1:32:51:2b:be:f1:30:d6:ce:68:7b:d9:f3:e7:4f:a1: 6b:1c:dc:ea:d7:11:d8:30:77:c3:c4:47:3f:a5:94:17:bc:a4: 98:66:3c:4f:58:15:32:78:62:03:eb:e4:f1:fd:63:91:e8:95: 69:31:6d:42:f3:dc:fc:d9:e6:d3:4a:c5:b1:b1:44:50:24:02: d8:f7:10:a4:ec:32:17:d6:50:fa:fe:36:dd:2f:1c:f7:07:5a: 10:43:c4:22:37:c3:1f:ec:23:46:80:7a:4d:9d:31:5c:23:8a: 70:e0:87:f8:d8:94:99:a5:8a:ab:0f:51:38:0f:2a:4a:69:10: f7:b0:03:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE MDc1REQxOUIwHhcNMjUxMDI2MTgzMDE3WhcNMjUxMTAyMTgzMDE3WjAYMRYwFAYD VQQDEw02OGZlNjhiOS0xMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rr3qhHoTBN7MH1bjK3g6Jxzl6s2CTS9W4wZQ3C+jXLVe1JvgC5Xuhf+5RTk Jd+uNlm032IAOeu8dx7O8h7DsTBxf/mie70p9NpJ3svtXDgC/AQzkK7EiQyAK2aE ybPmQx9WrpsFMzchWUztOjGZKZOPJ6hHIXa5I9qqbvUe5p93wm+MjS8VRzCYcID6 fqFrbTImuifSwpyY6wfRqo+VYAXfigBrT7uKH90a0qPhIdrJQKkacOFaDQ/b69bA bzmTy+hbXWcyKWfaJs9YQ7YyAMc0LH35GvfXVl7gy7kPpYKdfXbsnDMbDliU58UK 6E3fK3CN+SFz/TZIQ8K81SyDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNY/S+CW LhqSfzTrVEtqYYMpAeSsMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2 NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls OW96TG84SUQ3S3JRZGQwWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa9gifPHMJ6oW7iWcixVV0VYRdJGuH/G6N5AMB/21d369gMC7ATYEc wLhcpMzrfxU/FafgixuY7us9eEJjKQ1zBkrMCG0CvCgo7vFh/TxH1p6t5MpOdtb1 KDetoCBcRIrLbRkv8MeJzlumajuPGyUtpEBjvjkiShdubtOtr2NgT9EyUSu+8TDW zmh72fPnT6FrHNzq1xHYMHfDxEc/pZQXvKSYZjxPWBUyeGID6+Tx/WOR6JVpMW1C 89z82ebTSsWxsURQJALY9xCk7DIX1lD6/jbdLxz3B1oQQ8QiN8Mf7CNGgHpNnTFc I4pw4If42JSZpYqrD1E4DypKaRD3sAMv -----END CERTIFICATE-----Generated at Tue Oct 28 18:43:00 2025 by rpki-client