$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json) Hash identifier: ydA6NnGEgWVa4/eKgD9H9iAuTAgqjwQCv0RHQuD0uCo= Subject key identifier: C4:74:91:54:8B:61:F2:94:B3:3A:42:6C:D0:F9:DD:C7:C7:10:B6:B5 Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Certificate serial: 177D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft Manifest number: 1774 Signing time: Wed 22 Oct 2025 16:54:02 +0000 Manifest this update: Wed 22 Oct 2025 16:54:01 +0000 Manifest next update: Wed 29 Oct 2025 16:54:01 +0000 Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: mPaXlLoRBOIGcUhUkbGSQ934A7ZC2184QwxeLeg+Eto=) 2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4 Validity Not Before: Oct 22 16:54:01 2025 GMT Not After : Oct 29 16:54:01 2025 GMT Subject: CN=68f90c29-0b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c8:d2:52:7e:cb:ab:ed:27:53:c2:d3:9b:5c: 55:d9:e8:85:d9:01:7c:9a:31:39:9c:5b:6a:6f:7c: bf:6c:fe:12:05:03:c4:3f:41:c7:fa:f9:58:a1:57: 87:8f:f6:84:af:d5:58:88:47:8b:43:6e:62:a7:2a: 57:21:84:e4:62:71:e0:ae:3a:39:be:d0:00:5a:39: 11:66:2e:c5:31:8e:8c:8d:44:a0:bb:f0:41:7b:6f: c8:93:d2:06:82:7d:56:58:5c:0e:90:de:49:8c:bd: 31:0a:6d:12:87:e3:2b:3e:7d:b4:21:49:d2:db:15: 1b:86:4b:f0:ad:9f:17:91:5b:4a:e2:f2:49:f6:dc: 43:a3:1c:cf:cc:90:6b:9a:74:22:76:c3:f1:c6:af: 1f:cf:71:f4:9a:b8:98:84:d4:ad:7b:b3:90:7b:5e: 3c:db:35:b9:e6:46:4a:5c:20:30:10:aa:cb:a1:59: 06:c9:ea:4d:41:f6:20:04:30:86:e6:c0:7f:71:ad: 6d:02:06:58:78:4f:bd:cd:1d:49:8b:2f:5c:8b:ec: 48:e1:3f:4c:24:ed:b1:b7:6f:07:3b:2c:29:54:e5: b7:d7:53:5f:7b:af:7b:ea:18:f1:69:4b:40:40:48: 8a:ea:47:6f:61:3e:dd:45:e9:3f:5a:33:63:b8:cf: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:74:91:54:8B:61:F2:94:B3:3A:42:6C:D0:F9:DD:C7:C7:10:B6:B5 X509v3 Authority Key Identifier: keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d1:9f:5e:84:ad:4e:da:e1:d4:ae:4a:4e:2a:0b:d6:8c:67: 34:68:08:49:1b:3e:35:81:65:74:e8:5f:93:4b:e4:ee:83:47: ed:8c:bc:45:4d:00:93:95:6e:02:ea:b4:c2:75:ed:a9:4a:1f: 18:75:7f:93:61:0e:c9:b8:97:1f:c6:b9:74:45:d9:7b:f7:3c: 23:10:85:1b:bb:3b:07:cf:74:08:bf:eb:74:fd:e0:c8:ec:30: dd:03:8b:39:5b:07:11:9e:ba:38:06:8a:24:2e:ab:dd:f1:b6: 4f:20:46:e0:40:47:8a:2f:09:95:b4:c1:1c:91:06:e6:4b:99: b3:90:c9:d1:14:1e:8e:69:95:8f:35:a1:18:92:68:34:96:80: 0b:7c:3e:2f:64:ed:a1:c7:bf:9a:bf:90:16:f7:71:af:12:e8: c0:59:22:54:0b:a8:ba:1d:ef:03:c9:1d:a0:68:8c:23:36:b0: 47:8c:54:b4:a5:24:9a:e7:e5:31:c5:1c:99:83:d4:78:1a:0f: f3:0a:40:08:08:e2:1c:69:14:08:d2:f7:3d:1a:87:f4:2d:06: 06:74:85:fe:3c:01:90:58:77:13:88:dd:34:0d:f0:c0:14:76: c2:20:9f:98:89:d3:81:d2:45:e4:43:b1:68:91:5e:1e:16:4e: 80:e1:74:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1 QkUyNUIxQjQwHhcNMjUxMDIyMTY1NDAxWhcNMjUxMDI5MTY1NDAxWjAYMRYwFAYD VQQDEw02OGY5MGMyOS0wYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sjSUn7Lq+0nU8LTm1xV2eiF2QF8mjE5nFtqb3y/bP4SBQPEP0HH+vlYoVeH j/aEr9VYiEeLQ25ipypXIYTkYnHgrjo5vtAAWjkRZi7FMY6MjUSgu/BBe2/Ik9IG gn1WWFwOkN5JjL0xCm0Sh+MrPn20IUnS2xUbhkvwrZ8XkVtK4vJJ9txDoxzPzJBr mnQidsPxxq8fz3H0mriYhNSte7OQe1482zW55kZKXCAwEKrLoVkGyepNQfYgBDCG 5sB/ca1tAgZYeE+9zR1Jiy9ci+xI4T9MJO2xt28HOywpVOW311Nfe6976hjxaUtA QEiK6kdvYT7dRek/WjNjuM/qywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR0kVSL YfKUszpCbND53cfHELa1MB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ0Z9ehK1O2uHUrkpOKgvWjGc0aAhJGz41gWV06F+TS+Tug0ftjLxF TQCTlW4C6rTCde2pSh8YdX+TYQ7JuJcfxrl0Rdl79zwjEIUbuzsHz3QIv+t0/eDI 7DDdA4s5WwcRnro4BookLqvd8bZPIEbgQEeKLwmVtMEckQbmS5mzkMnRFB6OaZWP NaEYkmg0loALfD4vZO2hx7+av5AW93GvEujAWSJUC6i6He8DyR2gaIwjNrBHjFS0 pSSa5+UxxRyZg9R4Gg/zCkAICOIcaRQI0vc9Gof0LQYGdIX+PAGQWHcTiN00DfDA FHbCIJ+YidOB0kXkQ7FokV4eFk6A4XQf -----END CERTIFICATE-----Generated at Wed Oct 22 22:35:44 2025 by rpki-client