$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: J5QloLX+/XtHwHJjGOIG+Iq0wBKESeRiZ8iNvP97sHI= Subject key identifier: 0C:70:56:3C:AD:D2:4B:FC:D7:06:E8:73:81:E2:F6:A2:1C:A8:30:35 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: 01FE Signing time: Sun 19 Oct 2025 04:54:27 +0000 Manifest this update: Sun 19 Oct 2025 04:54:27 +0000 Manifest next update: Sun 26 Oct 2025 04:54:27 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: LqmhOeF2s4qzRcSE9D5SrYYfZUS1y+t7F9hkCBMTUbY=) 2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=) 3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: Oct 19 04:54:27 2025 GMT Not After : Oct 26 04:54:27 2025 GMT Subject: CN=68f46f03-d30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:91:c9:e1:23:33:bd:9e:cb:40:20:60:e4: 66:37:db:46:52:2b:9e:66:f4:b1:15:ec:f3:de:51: 3d:cd:41:b0:ff:50:0b:b8:45:6a:f8:bd:98:40:59: b9:5c:fd:c3:1f:be:a9:fe:d1:34:05:bb:f2:d4:b2: 85:78:38:46:61:07:38:79:ed:2b:24:2b:11:f8:e7: 70:a3:88:e1:44:bf:f6:27:25:f7:43:13:37:c2:ac: 16:a3:56:50:91:93:29:74:bf:47:8f:d8:8a:30:14: be:fc:1b:76:5b:ae:97:c5:87:e4:6d:38:26:ac:34: c0:eb:9f:47:50:c2:12:49:a8:e3:90:27:0b:cd:4a: 0d:43:66:ed:82:5b:12:92:b2:7d:26:1d:99:c6:51: 12:fe:ca:7c:1e:de:a3:3e:1a:47:b9:37:42:96:78: 33:e7:e5:11:95:c9:b6:b2:e1:d4:5a:41:53:ef:30: a0:0f:cf:7f:70:63:32:9e:6a:bf:a8:fc:bd:b5:d3: ca:39:31:19:87:e3:0b:f4:1a:04:39:71:61:a6:8d: 95:13:3c:7b:90:29:36:88:aa:d7:42:93:dd:ec:a7: 22:1c:93:08:47:ff:f5:3f:d6:24:73:be:ad:03:2b: c2:67:f9:ee:62:15:71:89:ac:fb:c6:25:8d:63:ec: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:56:3C:AD:D2:4B:FC:D7:06:E8:73:81:E2:F6:A2:1C:A8:30:35 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:6b:10:8f:6a:1c:cb:52:ce:bc:2e:f8:85:cd:d2:d2:d1:a9: 47:0b:b9:cd:b1:e1:a5:7e:76:7c:ba:62:3d:a3:77:67:d5:ae: b0:6b:70:eb:25:b8:0f:38:1f:c7:64:11:4a:9f:01:b4:5f:06: 28:47:5a:06:6a:f4:43:ca:06:30:63:a3:ff:02:d6:3e:19:e6: ec:92:65:89:84:61:d5:8c:7c:43:e9:a6:7b:f9:76:68:46:ce: 0f:15:b2:8e:de:4a:bd:7a:a3:46:b7:73:60:ca:83:96:1e:18: 9c:9b:75:9d:3b:c9:b7:46:97:10:26:26:be:2e:fa:65:2f:85: 26:7b:6f:fb:20:42:b0:06:cd:fc:76:07:e3:23:c7:03:aa:60: 7d:54:38:7b:2d:f8:b7:a1:1d:8b:de:87:87:47:a9:1d:24:21: 40:9e:5f:55:43:23:38:8d:66:17:a3:82:fe:9e:49:c4:a0:4c: 15:33:e5:bc:c3:70:d8:9e:96:11:bc:23:85:90:81:6a:d8:ac: ad:60:ee:f8:2c:02:79:14:18:85:2c:da:23:2a:4f:0e:d7:36: 44:cf:50:fe:5f:40:29:8b:5f:48:8e:a5:c8:25:e6:83:f4:bc: 5f:1c:2b:da:8a:eb:7f:ad:63:eb:57:d1:47:4b:6b:34:c0:51: 27:4f:15:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjUxMDE5MDQ1NDI3WhcNMjUxMDI2MDQ1NDI3WjAYMRYwFAYD VQQDEw02OGY0NmYwMy1kMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlO6RyeEjM72ey0AgYORmN9tGUiueZvSxFezz3lE9zUGw/1ALuEVq+L2YQFm5 XP3DH76p/tE0Bbvy1LKFeDhGYQc4ee0rJCsR+Odwo4jhRL/2JyX3QxM3wqwWo1ZQ kZMpdL9Hj9iKMBS+/Bt2W66XxYfkbTgmrDTA659HUMISSajjkCcLzUoNQ2btglsS krJ9Jh2ZxlES/sp8Ht6jPhpHuTdClngz5+URlcm2suHUWkFT7zCgD89/cGMynmq/ qPy9tdPKOTEZh+ML9BoEOXFhpo2VEzx7kCk2iKrXQpPd7KciHJMIR//1P9Ykc76t AyvCZ/nuYhVxiaz7xiWNY+wCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxwVjyt 0kv81wboc4Hi9qIcqDA1MB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpaxCPahzLUs68LviFzdLS0alHC7nNseGlfnZ8umI9o3dn1a6wa3Dr JbgPOB/HZBFKnwG0XwYoR1oGavRDygYwY6P/AtY+GebskmWJhGHVjHxD6aZ7+XZo Rs4PFbKO3kq9eqNGt3NgyoOWHhicm3WdO8m3RpcQJia+LvplL4Ume2/7IEKwBs38 dgfjI8cDqmB9VDh7Lfi3oR2L3oeHR6kdJCFAnl9VQyM4jWYXo4L+nknEoEwVM+W8 w3DYnpYRvCOFkIFq2KytYO74LAJ5FBiFLNojKk8O1zZEz1D+X0Api19IjqXIJeaD 9LxfHCvaiut/rWPrV9FHS2s0wFEnTxUz -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:59 2025 by rpki-client