$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft File: QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json) Hash identifier: oThNwpylkmW5mRW61Q6aTeKCv94e7/Zuq0XeOGmv7B4= Subject key identifier: 46:CC:9E:D1:D9:26:74:98:13:48:CB:C0:8F:07:E4:BF:EB:28:33:33 Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft Manifest number: B6 Signing time: Mon 03 Nov 2025 06:04:05 +0000 Manifest this update: Mon 03 Nov 2025 06:04:04 +0000 Manifest next update: Mon 10 Nov 2025 06:04:04 +0000 Files and hashes: 1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: x4WjgVTgcw1ZAgBMZYDAdraRCi3EYPRUcZkro5DxE5Q=) 2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: j5rVzYxmjqZEY8FEsWt1qRbBmnhP9Qi2T1I55K8uP3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Validity Not Before: Nov 3 06:04:04 2025 GMT Not After : Nov 10 06:04:04 2025 GMT Subject: CN=690845d5-58a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3b:af:40:12:d3:5c:27:de:fe:67:1a:77:0a: 11:21:57:59:56:dd:ad:4d:e5:aa:28:23:f2:89:4a: dd:84:14:c5:11:a9:34:25:88:7d:72:9c:5e:10:26: 53:05:e6:54:82:9d:68:1a:7a:00:b4:83:78:ff:b3: a6:c3:8e:4a:40:16:90:0d:7e:73:04:e8:79:17:1a: 62:c6:be:9f:47:15:32:53:13:38:0d:d5:46:25:37: f3:9d:85:8a:88:9d:a9:88:1d:cb:1a:a6:42:95:88: 08:d0:a6:04:2c:c6:83:f0:3e:d9:7b:35:7f:56:94: 6d:ff:c3:8b:be:33:71:45:d6:55:b9:b6:84:9b:14: 29:29:46:75:ad:bc:e6:1f:a5:9c:32:2d:8e:25:f0: 44:40:44:7f:b7:41:4d:66:ba:5c:54:4b:30:ff:38: d9:86:e7:19:f9:b0:24:66:67:60:23:e6:ed:ff:23: 75:74:95:77:5e:e4:24:6b:6a:b0:ff:75:4a:6e:85: 71:94:d7:eb:9d:7a:5b:ca:8c:02:c9:36:df:46:90: bf:9a:43:b2:7a:1f:75:b6:f4:dc:39:f9:e8:f7:66: f6:be:6b:49:d3:e3:53:bf:bc:ba:6c:54:1a:f3:37: f8:a7:49:83:ff:23:98:68:60:4b:65:45:bd:c9:5f: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:9E:D1:D9:26:74:98:13:48:CB:C0:8F:07:E4:BF:EB:28:33:33 X509v3 Authority Key Identifier: keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7f:0d:23:f0:d4:2c:a8:65:26:52:93:ef:d0:90:b3:60:a1: 21:19:06:1d:0b:33:70:56:1f:b1:ca:1b:70:58:25:d0:a5:66: c3:38:01:f4:d9:80:61:27:3a:b2:b3:94:c5:73:d1:b9:66:74: a7:88:4b:e5:e2:d0:7a:06:6d:c8:8f:b8:9a:10:c3:4c:e1:a5: a9:ef:9b:ea:40:8d:b4:30:b9:aa:92:33:96:94:2e:c5:be:dc: 07:70:47:b7:4a:67:c6:d6:f9:40:99:cc:43:44:d3:96:89:c8: 87:a3:3d:62:03:26:2f:54:05:51:f7:59:a2:6a:ba:d7:ad:38: 8f:64:13:f0:c1:cd:7f:f3:b2:a7:7b:6b:19:0f:81:89:1f:75: 0c:56:92:72:fa:df:66:e8:16:8c:80:4c:ff:1a:8c:2b:fd:5d: 92:d3:4f:db:cd:ae:c1:73:f2:23:dd:46:44:e9:81:4f:11:b0: a1:bf:f3:03:44:83:53:cf:54:0c:22:de:21:ff:33:dc:55:90: 91:c8:0e:00:c0:55:66:54:61:6e:b8:68:ab:ca:16:b0:6e:73: 42:32:5b:03:6b:08:b4:04:04:68:d3:7d:d3:0a:84:17:00:81: 27:22:9b:de:d2:61:4c:b5:c8:fe:23:0c:59:42:b5:68:7a:fb: df:ee:f4:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMzMUMxMTAvBgNVBAUTKDQwRkFBNzBGOEEyM0EwM0QxNkExMTA4NkRCRTUwMkU4 NjIxNjQ5NjcwHhcNMjUxMTAzMDYwNDA0WhcNMjUxMTEwMDYwNDA0WjAYMRYwFAYD VQQDEw02OTA4NDVkNS01OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDuvQBLTXCfe/mcadwoRIVdZVt2tTeWqKCPyiUrdhBTFEak0JYh9cpxeECZT BeZUgp1oGnoAtIN4/7Omw45KQBaQDX5zBOh5Fxpixr6fRxUyUxM4DdVGJTfznYWK iJ2piB3LGqZClYgI0KYELMaD8D7ZezV/VpRt/8OLvjNxRdZVubaEmxQpKUZ1rbzm H6WcMi2OJfBEQER/t0FNZrpcVEsw/zjZhucZ+bAkZmdgI+bt/yN1dJV3XuQka2qw /3VKboVxlNfrnXpbyowCyTbfRpC/mkOyeh91tvTcOfno92b2vmtJ0+NTv7y6bFQa 8zf4p0mD/yOYaGBLZUW9yV/sLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbMntHZ JnSYE0jLwI8H5L/rKDMzMB8GA1UdIwQYMBaAFED6pw+KI6A9FqEQhtvlAuhiFkln MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzMxQy9GMTA3REExMEE2 Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9EMFdvUkNHMi1VQzZHSVdT V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzMxQy9GMTA3REExMEE2Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9E MFdvUkNHMi1VQzZHSVdTV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKfw0j8NQsqGUmUpPv0JCzYKEhGQYdCzNwVh+xyhtwWCXQpWbDOAH0 2YBhJzqys5TFc9G5ZnSniEvl4tB6Bm3Ij7iaEMNM4aWp75vqQI20MLmqkjOWlC7F vtwHcEe3SmfG1vlAmcxDRNOWiciHoz1iAyYvVAVR91miarrXrTiPZBPwwc1/87Kn e2sZD4GJH3UMVpJy+t9m6BaMgEz/Gowr/V2S00/bza7Bc/Ij3UZE6YFPEbChv/MD RINTz1QMIt4h/zPcVZCRyA4AwFVmVGFuuGiryhawbnNCMlsDawi0BARo033TCoQX AIEnIpve0mFMtcj+IwxZQrVoevvf7vRp -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:16 2025 by rpki-client