$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json) Hash identifier: lRiyJMXaaCDbLn78XUylufRdSJN/JQVe8/AOdxSM43o= Subject key identifier: 4D:C3:FA:F3:D4:A0:39:D4:98:44:4A:63:95:3A:7F:92:3C:07:11:25 Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft Manifest number: 0477 Signing time: Mon 03 Nov 2025 00:07:07 +0000 Manifest this update: Mon 03 Nov 2025 00:07:06 +0000 Manifest next update: Mon 10 Nov 2025 00:07:06 +0000 Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: c90kOufvmbCYtwTDCHE9gwTnDfdNrQlDW6ywi5jp+xA=) 2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B Validity Not Before: Nov 3 00:07:06 2025 GMT Not After : Nov 10 00:07:06 2025 GMT Subject: CN=6907f22a-62c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:1a:5e:73:14:de:2e:71:50:6c:48:ed:52: e8:ae:4e:1d:06:f9:b8:b0:0b:d5:ac:05:91:64:15: 47:9b:de:95:fb:a1:fa:16:22:f0:ca:5c:af:44:2d: 5a:c6:af:1d:7f:39:0b:7a:c5:f5:5f:1b:3f:ac:4a: 22:57:d7:f5:37:0a:de:ea:52:4b:e4:8c:a6:6e:1d: 58:4b:e2:90:92:f6:3b:93:be:40:1e:2e:f8:db:6f: bb:5e:eb:51:a9:e3:80:0f:bc:86:59:16:70:c3:ce: f8:14:06:17:50:ef:c6:65:3f:42:a2:29:e8:90:e2: 41:25:1d:81:a1:ff:9c:1f:fa:83:52:b4:80:f4:1a: b3:fd:3f:44:25:94:00:9c:47:39:51:7a:fd:a5:2c: 71:3c:71:ce:39:f3:6c:ea:3b:4c:56:4f:86:6b:8d: 05:92:fc:58:80:bf:0b:03:2f:61:aa:89:1e:e2:8b: 35:15:8f:06:c1:c2:52:59:5a:54:bb:71:3f:b3:1f: c2:3e:15:38:3a:30:c3:4e:c1:fe:0c:1e:49:64:4f: 91:90:87:0e:cf:03:15:a3:e7:90:87:88:57:ad:04: bf:e4:07:15:6b:1e:06:14:43:ce:64:48:dd:54:ad: 09:7b:0a:23:99:e9:6c:09:2f:fe:bc:97:e2:14:75: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C3:FA:F3:D4:A0:39:D4:98:44:4A:63:95:3A:7F:92:3C:07:11:25 X509v3 Authority Key Identifier: keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8a:37:3c:ab:7f:da:a6:95:6d:81:27:a6:99:ec:9d:22:56: 86:da:55:99:10:71:e9:6f:b5:35:5a:0d:97:b4:11:cc:0a:85: 6a:ed:8a:e3:55:7b:8d:99:27:53:32:56:bc:49:e3:38:44:9a: e8:e3:93:97:21:67:53:0e:ce:23:08:88:82:8c:00:67:64:29: bb:5b:a7:b2:59:65:76:7d:01:51:89:fe:11:8f:69:f8:b7:12: f4:33:43:8c:49:79:04:ca:0e:e4:4c:05:d7:90:fc:14:31:14: 63:c6:3c:d3:da:be:22:e3:f2:2d:db:ef:55:68:b2:77:f2:fd: 2d:05:f0:cc:73:2b:87:57:f9:54:bf:c7:e1:6a:2e:e2:a9:59: 98:bd:f7:a3:9c:0a:a3:a0:de:26:2a:35:47:3f:09:44:5c:6e: 67:7f:de:eb:af:1a:bf:99:39:36:3b:bb:29:96:b1:84:7d:b6: c9:ff:25:12:0b:51:7e:27:35:c5:b4:e4:87:6e:1b:40:85:53: f5:79:47:bf:19:a6:90:02:6f:96:b7:93:46:37:cb:ad:3b:45: c9:4e:74:9b:e6:39:b7:a6:62:d5:e2:7d:f8:c0:51:12:06:9a: 7c:c7:4d:9a:1e:5d:f9:57:12:19:32:b2:6e:98:57:e6:83:90: 5e:02:6f:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGNDkxMTAvBgNVBAUTKEE4NzFGNEU2QzM3MkRCMTBCNjRERjM5OTVGQTE1MUVG QjM5Rjk5OEIwHhcNMjUxMTAzMDAwNzA2WhcNMjUxMTEwMDAwNzA2WjAYMRYwFAYD VQQDEw02OTA3ZjIyYS02MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynEaXnMU3i5xUGxI7VLork4dBvm4sAvVrAWRZBVHm96V+6H6FiLwylyvRC1a xq8dfzkLesX1Xxs/rEoiV9f1Nwre6lJL5Iymbh1YS+KQkvY7k75AHi7422+7XutR qeOAD7yGWRZww874FAYXUO/GZT9CoinokOJBJR2Bof+cH/qDUrSA9Bqz/T9EJZQA nEc5UXr9pSxxPHHOOfNs6jtMVk+Ga40FkvxYgL8LAy9hqoke4os1FY8GwcJSWVpU u3E/sx/CPhU4OjDDTsH+DB5JZE+RkIcOzwMVo+eQh4hXrQS/5AcVax4GFEPOZEjd VK0JewojmelsCS/+vJfiFHX7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3D+vPU oDnUmERKY5U6f5I8BxElMB8GA1UdIwQYMBaAFKhx9ObDctsQtk3zmV+hUe+zn5mL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY0OS85RDNDNzQ5MjY2 QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4QzJUZk9aWDZGUjc3T2Zt WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FISDA1c055MnhDMlRmT1pYNkZSNzdPZm1Zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY0OS85RDNDNzQ5MjY2QTIxMUVDQkI3QTBBM0NDNEY5QUUwMi9xSEgwNXNOeTJ4 QzJUZk9aWDZGUjc3T2ZtWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUijc8q3/appVtgSemmeydIlaG2lWZEHHpb7U1Wg2XtBHMCoVq7Yrj VXuNmSdTMla8SeM4RJro45OXIWdTDs4jCIiCjABnZCm7W6eyWWV2fQFRif4Rj2n4 txL0M0OMSXkEyg7kTAXXkPwUMRRjxjzT2r4i4/It2+9VaLJ38v0tBfDMcyuHV/lU v8fhai7iqVmYvfejnAqjoN4mKjVHPwlEXG5nf97rrxq/mTk2O7splrGEfbbJ/yUS C1F+JzXFtOSHbhtAhVP1eUe/GaaQAm+Wt5NGN8utO0XJTnSb5jm3pmLV4n34wFES Bpp8x02aHl35VxIZMrJumFfmg5BeAm/R -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:01 2025 by rpki-client