$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft File: qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json) Hash identifier: HhBc6Iqn2DU5yrbKNOX8UN8RFGfpqj3+aw8OStLoliM= Subject key identifier: 1F:9C:EF:58:27:7B:5E:F1:5B:5E:84:AB:23:A4:77:97:26:FD:2F:B0 Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 Certificate issuer: /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Certificate serial: 087A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft Manifest number: 086F Signing time: Tue 04 Nov 2025 20:41:46 +0000 Manifest this update: Tue 04 Nov 2025 20:41:46 +0000 Manifest next update: Tue 11 Nov 2025 20:41:46 +0000 Files and hashes: 1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: lh9Xw98riiEMwnFzM9rAVQk4fg30lC3VSOH8U9ZejnA=) 2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: l0ICGLwuaPDJO60DuHwg4w9v81ASlnFGPH6s06O+ZdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2170 (0x87a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0 Validity Not Before: Nov 4 20:41:46 2025 GMT Not After : Nov 11 20:41:46 2025 GMT Subject: CN=690a650a-dfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:a3:7b:ee:6c:03:7a:47:a5:d3:32:e9:7b: 9c:a7:c0:df:66:28:62:4a:fa:8d:5d:33:84:f8:7c: 71:7c:f4:01:a0:67:8e:67:e2:0f:11:ed:70:9e:ed: 5f:9c:00:ab:69:8f:8a:3f:c3:f1:76:24:6a:01:77: 5c:1e:a6:0b:89:59:2e:51:87:a7:18:78:d9:db:4f: e6:4c:91:9b:4d:61:44:4e:1d:5c:39:7c:4b:cf:c4: d5:db:66:da:ef:a1:41:13:1a:ad:49:73:ef:99:17: d2:b6:a7:ba:da:a8:88:55:ac:6c:af:b1:c9:a0:33: a8:7c:04:54:ab:33:ee:ad:89:16:8d:46:1d:06:d7: 7a:34:1f:f0:0e:b0:4e:4d:0f:18:4a:e7:91:e2:95: 72:a4:a8:bc:42:60:1f:7c:22:0f:fb:dd:33:12:a6: 3b:8f:24:12:cf:4f:96:3f:16:b5:66:15:d3:28:72: a5:50:dd:07:3e:78:80:78:7e:76:38:a0:b4:60:50: 8d:ec:71:19:3e:4b:e5:86:f8:15:2b:67:55:fa:83: 5e:5b:38:5e:11:bb:ec:12:8b:00:df:a6:fc:5c:27: 7b:2a:e5:e1:f3:0d:68:d3:50:5b:d6:11:8d:8b:60: 68:88:7f:89:a2:83:ef:02:1c:60:61:cc:da:07:09: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9C:EF:58:27:7B:5E:F1:5B:5E:84:AB:23:A4:77:97:26:FD:2F:B0 X509v3 Authority Key Identifier: keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:3c:cb:9a:3b:c6:dc:9a:c8:8d:3f:6d:4c:5c:91:60:3c:89: fa:70:9c:40:f2:47:b7:d2:9e:02:99:45:24:e7:c3:e1:fa:4c: 9a:c7:ba:ee:24:0b:23:f5:08:38:88:c5:7c:77:96:13:a6:2f: 33:cb:1f:21:a7:53:3d:8e:a8:bd:3a:7e:57:e3:e6:bd:ea:a0: 4d:b9:10:cc:89:37:ab:85:dd:ac:4c:6c:89:d0:a0:39:7b:61: 4e:43:c5:5b:de:13:4b:92:e1:9a:34:d4:9b:fc:65:5f:8f:a0: ea:b3:73:c4:3a:38:51:86:e6:2b:c4:7b:96:54:e4:6b:b8:6b: ea:92:05:71:48:19:b3:0e:a0:43:d2:e0:4d:29:c8:3f:ce:2d: f0:0a:fd:1e:94:86:ec:64:14:0d:c6:d5:34:bd:17:f2:52:42: bd:27:66:92:ca:2b:4d:c2:b4:39:5f:73:6f:a6:23:38:3f:35: 2b:e2:68:3f:c2:54:de:e4:18:e6:35:74:61:e5:0a:87:6f:78: d4:5b:39:ce:4b:de:e6:4d:62:3c:ae:62:9f:92:4d:89:09:a8: 36:39:59:0d:0b:cf:45:d9:5c:26:9c:2e:57:3a:31:96:0a:1e: 0d:23:92:a1:e4:67:c9:9a:d0:bc:f4:ea:28:fe:75:59:25:40: d6:b0:4c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5 NzNDNEFCQzAwHhcNMjUxMTA0MjA0MTQ2WhcNMjUxMTExMjA0MTQ2WjAYMRYwFAYD VQQDEw02OTBhNjUwYS1kZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJaje+5sA3pHpdMy6Xucp8DfZihiSvqNXTOE+HxxfPQBoGeOZ+IPEe1wnu1f nACraY+KP8PxdiRqAXdcHqYLiVkuUYenGHjZ20/mTJGbTWFETh1cOXxLz8TV22ba 76FBExqtSXPvmRfStqe62qiIVaxsr7HJoDOofARUqzPurYkWjUYdBtd6NB/wDrBO TQ8YSueR4pVypKi8QmAffCIP+90zEqY7jyQSz0+WPxa1ZhXTKHKlUN0HPniAeH52 OKC0YFCN7HEZPkvlhvgVK2dV+oNeWzheEbvsEosA36b8XCd7KuXh8w1o01Bb1hGN i2BoiH+JooPvAhxgYczaBwngDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+c71gn e17xW16EqyOkd5cm/S+wMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2 NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr amsyX2FrSUhib21YUEVxOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFPMuaO8bcmsiNP21MXJFgPIn6cJxA8ke30p4CmUUk58Ph+kyax7ru JAsj9Qg4iMV8d5YTpi8zyx8hp1M9jqi9On5X4+a96qBNuRDMiTerhd2sTGyJ0KA5 e2FOQ8Vb3hNLkuGaNNSb/GVfj6Dqs3PEOjhRhuYrxHuWVORruGvqkgVxSBmzDqBD 0uBNKcg/zi3wCv0elIbsZBQNxtU0vRfyUkK9J2aSyitNwrQ5X3NvpiM4PzUr4mg/ wlTe5BjmNXRh5QqHb3jUWznOS97mTWI8rmKfkk2JCag2OVkNC89F2VwmnC5XOjGW Ch4NI5Kh5GfJmtC89Ooo/nVZJUDWsEwl -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:20 2025 by rpki-client