$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: FjDRO2kguu2aSDQzbhJKsMEJkMC+7LyGV1o1FSbCiLw= Subject key identifier: 2B:50:78:A3:99:69:68:21:6A:DB:93:D8:EC:E7:CE:0A:B7:44:28:DE Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 10E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 10C8 Signing time: Tue 04 Nov 2025 17:23:31 +0000 Manifest this update: Tue 04 Nov 2025 17:23:31 +0000 Manifest next update: Tue 11 Nov 2025 17:23:31 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: xKLQWlEj9iYnEjZ578OKqSh9JN26XAsrJwENQmcPyIc=) 2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=) 3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=) 4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4321 (0x10e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Nov 4 17:23:31 2025 GMT Not After : Nov 11 17:23:31 2025 GMT Subject: CN=690a3693-2825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:05:71:59:05:47:3f:bb:2e:ea:38:e6:cc: 20:a4:fa:4b:a4:29:9a:eb:11:d4:de:e6:7e:06:ef: f9:aa:c9:29:b5:77:ae:e5:11:1b:a0:7e:31:c7:40: c8:ea:a3:d0:57:2f:e1:0e:69:25:24:83:97:38:4a: 04:ed:21:25:dd:78:c5:14:01:3d:1b:29:b4:e1:5b: 70:db:b8:9b:2d:aa:81:88:1f:b6:7f:e2:ca:0e:85: 9b:35:5a:97:e6:b5:ba:8c:0b:e8:5f:30:aa:61:9c: 05:42:61:c7:04:2f:70:65:11:f6:18:a0:71:6d:05: b7:a0:81:e2:1a:cb:86:04:81:18:f3:dc:80:cc:95: a5:95:13:fd:ed:05:15:57:47:cd:a6:5b:46:1c:28: 91:28:55:69:d2:ac:a5:8b:56:47:12:b3:90:fc:a8: d7:87:db:5b:99:41:f1:c4:00:35:43:8f:00:39:8c: 08:98:02:15:f6:92:2c:7f:20:b6:29:75:09:cb:70: d2:57:bf:ed:dd:87:92:ae:61:70:b5:1d:de:88:fc: 0c:6b:7e:0a:c3:bb:d9:e3:d0:8b:c9:ae:eb:bd:da: 84:33:2f:7b:6b:0f:e7:fc:7c:bc:f3:57:3e:75:57: fb:53:61:b7:a5:47:8e:67:90:9b:f9:53:65:24:b5: 4b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:50:78:A3:99:69:68:21:6A:DB:93:D8:EC:E7:CE:0A:B7:44:28:DE X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:eb:16:b5:c2:f7:fd:be:29:69:f3:66:67:bd:f2:81:a5:bf: 86:d4:36:8f:46:23:59:09:9c:30:d2:db:71:ae:0d:86:12:a3: 65:c5:41:52:c4:94:4c:17:29:f4:8c:9b:44:ba:03:14:bd:98: e2:e3:55:01:07:b3:46:b0:b1:50:3e:be:b9:cb:62:20:ad:af: 2f:61:f8:c5:c7:df:89:89:fc:7b:81:08:bf:2c:53:5d:7a:69: e3:4b:5b:39:1e:1a:a9:ca:72:ef:91:da:95:13:91:f1:6a:ad: d5:99:53:3b:4a:01:50:29:f1:2a:0e:c8:44:0d:a0:ab:49:70: 40:7c:a1:ff:65:9b:1d:88:f9:f6:85:5f:ef:08:23:1a:ea:c3: 31:4f:61:f8:14:41:b3:11:a2:3c:7e:8b:78:ee:e8:be:91:1d: d1:ab:13:e9:22:1f:a2:0c:ae:11:5a:60:78:5a:b4:1e:a3:3f: e8:29:bc:c6:b2:04:59:0c:ff:93:76:2a:eb:11:60:5b:01:45: 55:06:bd:0e:cb:78:4f:ac:8e:5d:77:93:d1:60:0a:c6:5e:1b: 9d:74:ef:95:78:b1:d7:67:d1:07:83:71:82:a8:4b:0b:14:29: df:40:f6:41:e0:f0:c1:63:96:f9:f8:37:27:ca:3a:54:c7:d4: 76:5e:19:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUxMTA0MTcyMzMxWhcNMjUxMTExMTcyMzMxWjAYMRYwFAYD VQQDEw02OTBhMzY5My0yODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U8FcVkFRz+7Luo45swgpPpLpCma6xHU3uZ+Bu/5qskptXeu5REboH4xx0DI 6qPQVy/hDmklJIOXOEoE7SEl3XjFFAE9Gym04Vtw27ibLaqBiB+2f+LKDoWbNVqX 5rW6jAvoXzCqYZwFQmHHBC9wZRH2GKBxbQW3oIHiGsuGBIEY89yAzJWllRP97QUV V0fNpltGHCiRKFVp0qyli1ZHErOQ/KjXh9tbmUHxxAA1Q48AOYwImAIV9pIsfyC2 KXUJy3DSV7/t3YeSrmFwtR3eiPwMa34Kw7vZ49CLya7rvdqEMy97aw/n/Hy881c+ dVf7U2G3pUeOZ5Cb+VNlJLVLVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtQeKOZ aWghatuT2Oznzgq3RCjeMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK6xa1wvf9vilp82ZnvfKBpb+G1DaPRiNZCZww0ttxrg2GEqNlxUFS xJRMFyn0jJtEugMUvZji41UBB7NGsLFQPr65y2Igra8vYfjFx9+Jifx7gQi/LFNd emnjS1s5HhqpynLvkdqVE5Hxaq3VmVM7SgFQKfEqDshEDaCrSXBAfKH/ZZsdiPn2 hV/vCCMa6sMxT2H4FEGzEaI8fot47ui+kR3RqxPpIh+iDK4RWmB4WrQeoz/oKbzG sgRZDP+TdirrEWBbAUVVBr0Oy3hPrI5dd5PRYArGXhuddO+VeLHXZ9EHg3GCqEsL FCnfQPZB4PDBY5b5+DcnyjpUx9R2Xhmf -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:37 2025 by rpki-client