$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json) Hash identifier: pGyQ3aVGg+uq1iqB0aTWEfFJ0oG9WrtB63ElsTSv3W4= Subject key identifier: 8E:EE:F2:FF:7B:F2:40:44:62:7D:8B:63:06:C6:82:26:67:E2:D9:E3 Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft Manifest number: 01AD Signing time: Mon 03 Nov 2025 03:11:00 +0000 Manifest this update: Mon 03 Nov 2025 03:11:00 +0000 Manifest next update: Mon 10 Nov 2025 03:11:00 +0000 Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: SJ3tvK28AO0E/gEYI0w9zlhK2FAMIzWn0XDM76hNHkI=) 2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: 1i3jxewXcc2DZR9rHs9xsLpB1uq+KSefHPQwMlW+krU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7 Validity Not Before: Nov 3 03:11:00 2025 GMT Not After : Nov 10 03:11:00 2025 GMT Subject: CN=69081d44-00d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:8a:99:a3:69:da:a3:28:5d:c8:82:40:e5: 5c:79:a1:92:30:98:5c:05:1b:88:e5:c2:9d:c6:5e: 48:20:aa:1d:04:20:0b:27:ee:35:2f:00:69:04:c1: e0:f7:94:54:80:c8:db:f3:53:ec:6a:c0:b0:98:b2: 1c:20:69:89:0b:03:f8:92:b8:3d:9d:c5:ba:4a:29: bf:8a:9f:e2:c8:5a:de:9e:46:62:72:f8:be:e5:f2: 48:dc:ae:52:60:72:cd:31:19:fd:3a:50:a0:6c:3d: 9d:0f:e2:52:8a:3a:d8:87:23:f6:21:a0:49:4a:69: 1b:e5:e2:24:ba:c9:15:69:d7:98:41:2c:58:b8:cc: 91:e4:e1:e3:71:0c:c6:d0:ac:d5:f8:f6:4d:ee:88: 6a:c9:4b:be:f9:f5:94:75:10:07:e7:df:eb:2c:43: 78:69:fa:1a:22:82:d7:ab:4c:12:ec:8d:78:12:aa: 18:e1:64:d3:27:54:8f:d4:27:e9:26:71:44:94:b4: 95:27:48:6c:b6:17:fc:36:f6:7d:40:8d:57:6f:20: 9c:d6:09:60:73:a4:db:b8:02:9a:59:8e:b5:e0:bc: 1a:b7:d1:3e:de:a9:a6:dc:21:df:48:35:d5:0e:31: e2:2c:15:88:4d:49:97:6e:46:30:1d:87:b1:87:68: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EE:F2:FF:7B:F2:40:44:62:7D:8B:63:06:C6:82:26:67:E2:D9:E3 X509v3 Authority Key Identifier: keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d9:5d:b5:01:71:55:25:bf:2f:ec:29:52:e7:1f:56:f1:1e: e0:d7:35:8c:ee:69:4e:35:1a:e5:15:70:2c:a7:30:48:18:86: 13:5b:01:b6:17:2e:05:b5:16:bd:77:bc:44:34:76:59:c5:c5: 38:be:ea:70:52:6a:51:28:bb:c5:3e:07:42:34:87:1b:53:07: ab:1b:fa:f9:2b:ad:ea:5a:d8:87:8b:3a:07:87:d5:45:b3:91: 6f:26:c5:13:9d:cf:0d:11:e6:b5:6f:d9:a0:65:91:ef:b9:9f: fc:db:5d:ef:fd:e1:f1:58:0e:30:4f:57:f5:c8:07:bc:9d:c8: f1:3f:9c:8b:6e:ab:e1:91:66:7c:51:d1:5d:b5:e1:49:d2:c1: e8:93:eb:fa:28:f8:24:8d:d9:5c:c8:a9:fd:6a:80:56:7f:11: 73:bb:83:17:3d:76:08:cc:f9:b6:9e:a1:46:61:8f:db:3e:46: e0:c2:92:2d:d9:de:76:6e:6f:ce:c1:60:68:bd:cc:0c:06:12: 16:c5:e9:2d:6b:bd:8b:87:a3:a3:4b:15:0c:28:59:b2:13:07: be:fd:7c:a1:03:19:87:6f:34:a5:fc:dd:89:fc:e0:57:85:71: 9d:71:13:76:30:2b:8c:7a:f1:31:74:72:9c:21:b3:6f:53:93: fb:82:79:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0ODAxMTAvBgNVBAUTKEE5MkY0Q0U0ODlDRDBFOTdEMTY3NjA0M0Y4QzM0Rjgz MDY3OUQ4RjcwHhcNMjUxMTAzMDMxMTAwWhcNMjUxMTEwMDMxMTAwWjAYMRYwFAYD VQQDEw02OTA4MWQ0NC0wMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugqKmaNp2qMoXciCQOVceaGSMJhcBRuI5cKdxl5IIKodBCALJ+41LwBpBMHg 95RUgMjb81PsasCwmLIcIGmJCwP4krg9ncW6Sim/ip/iyFrenkZicvi+5fJI3K5S YHLNMRn9OlCgbD2dD+JSijrYhyP2IaBJSmkb5eIkuskVadeYQSxYuMyR5OHjcQzG 0KzV+PZN7ohqyUu++fWUdRAH59/rLEN4afoaIoLXq0wS7I14EqoY4WTTJ1SP1Cfp JnFElLSVJ0hsthf8NvZ9QI1XbyCc1glgc6TbuAKaWY614Lwat9E+3qmm3CHfSDXV DjHiLBWITUmXbkYwHYexh2jGGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7u8v97 8kBEYn2LYwbGgiZn4tnjMB8GA1UdIwQYMBaAFKkvTOSJzQ6X0WdgQ/jDT4MGedj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ4MC80NURBM0ZFNjJC ODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRwZlJaMkJELU1OUGd3WjUy UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FTOU01SW5ORHBmUloyQkQtTU5QZ3daNTJQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ4MC80NURBM0ZFNjJCODAxMUVFOUZGMkY1NzZDNEY5QUUwMi9xUzlNNUluTkRw ZlJaMkJELU1OUGd3WjUyUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD2V21AXFVJb8v7ClS5x9W8R7g1zWM7mlONRrlFXAspzBIGIYTWwG2 Fy4FtRa9d7xENHZZxcU4vupwUmpRKLvFPgdCNIcbUwerG/r5K63qWtiHizoHh9VF s5FvJsUTnc8NEea1b9mgZZHvuZ/8213v/eHxWA4wT1f1yAe8ncjxP5yLbqvhkWZ8 UdFdteFJ0sHok+v6KPgkjdlcyKn9aoBWfxFzu4MXPXYIzPm2nqFGYY/bPkbgwpIt 2d52bm/OwWBovcwMBhIWxekta72Lh6OjSxUMKFmyEwe+/XyhAxmHbzSl/N2J/OBX hXGdcRN2MCuMevExdHKcIbNvU5P7gnlv -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:57 2025 by rpki-client