$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: uwhY5TmajQl2XnzeshOIlI17fSdO7Fkiwb736zr2D78= Subject key identifier: 80:D1:21:3C:54:73:49:42:85:73:2C:D0:A1:8F:EE:77:71:C3:53:F8 Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 5C Signing time: Sun 19 Oct 2025 10:39:23 +0000 Manifest this update: Sun 19 Oct 2025 10:39:22 +0000 Manifest next update: Sun 26 Oct 2025 10:39:22 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: 7ZGOl/rEBYIBtyPYcCfDOf0/i+rk80q/+y6T9fYXHvw=) 2: FAB0D026881F11F0AAA2086FC4F9AE02.roa (hash: p6QY5PVIvSx1qqEScHsp8RNr6LjcbKhzpMC+wNmfh+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Oct 19 10:39:22 2025 GMT Not After : Oct 26 10:39:22 2025 GMT Subject: CN=68f4bfda-4c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:8e:73:e5:49:6b:21:d0:4e:0a:fb:7e:8a: 77:d9:00:ad:58:48:d4:fc:a1:dd:f3:37:51:c2:ee: f8:ad:55:f7:47:06:2d:99:a6:36:e9:58:66:d8:27: 8f:17:93:11:4b:99:c4:94:fe:a0:c8:35:d4:d0:b2: fc:0b:a8:08:29:78:43:95:2b:ce:12:f0:95:77:b0: 27:99:ba:15:01:56:71:97:5e:cc:a4:d4:23:92:6d: 18:5e:30:ee:e1:c2:aa:0f:5a:c2:11:cb:6b:b3:c9: c2:2c:6f:b7:99:29:23:21:18:21:f1:e4:1b:b4:c0: 2b:3b:ab:77:17:96:fd:4b:48:bc:9d:75:b4:c6:dc: 50:38:96:db:7d:4f:39:1e:b9:44:3b:55:31:8b:e5: b3:8a:51:70:8c:86:af:54:18:a7:1f:ce:92:c3:e0: 72:be:c9:42:a8:a1:b7:7b:95:f3:02:9d:00:6e:95: 95:b7:6e:b0:eb:21:58:9a:62:19:d0:e9:e1:17:59: 5e:ff:04:82:61:0e:9e:5a:cc:28:f8:01:8a:fc:2c: 93:2b:20:70:18:ca:28:3c:78:13:3d:7a:b4:7f:7c: bc:6c:ca:7d:7d:75:52:b2:97:42:04:f2:4b:54:27: 73:59:0a:32:7f:7f:55:38:a8:72:70:24:dc:c2:15: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D1:21:3C:54:73:49:42:85:73:2C:D0:A1:8F:EE:77:71:C3:53:F8 X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:94:9d:b3:bb:bd:ae:1c:d0:6f:a0:ef:7e:5b:be:c8:25: 74:2d:f4:ce:9d:2b:e3:78:f7:cd:df:ee:7d:5e:85:53:64:29: 0a:1c:e4:16:dc:ad:22:3c:a9:d5:c0:54:6e:b9:cd:3c:44:d5: 74:06:e2:e6:75:cd:2a:5c:a9:2a:81:9a:56:13:57:a5:0e:ac: 1b:ac:ea:22:27:45:02:52:57:be:47:cf:1f:f5:e3:bc:0f:41: c8:a5:63:97:50:30:c1:b1:17:e9:27:15:db:a9:f6:1a:33:45: 86:f4:a4:d8:7a:73:3f:92:b5:8d:b6:ac:f5:88:30:7d:9f:13: 50:19:8c:8a:cd:88:23:66:a5:58:6d:f4:03:e3:9b:35:09:35: 76:d6:4f:68:fb:ed:77:3b:fc:9a:9d:54:e3:6e:4c:82:70:c2: 1e:13:43:fc:12:37:9f:56:37:2e:07:78:33:a6:4d:ee:a6:fb: ab:9d:1b:30:a7:cc:5f:ba:95:90:76:58:f4:15:76:5e:16:ce: 8d:82:01:df:33:f4:38:f0:55:de:98:22:ee:e4:57:1b:9b:e0: 25:12:4c:b1:c5:4d:d6:a1:45:94:f3:2e:b6:b9:fc:f3:fb:6b: b1:26:45:e2:bb:90:65:39:69:49:10:da:57:cc:84:35:c5:33: 88:5e:69:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTEwMTkxMDM5MjJaFw0yNTEwMjYxMDM5MjJaMBgxFjAUBgNV BAMTDTY4ZjRiZmRhLTRjMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbYI5z5UlrIdBOCvt+infZAK1YSNT8od3zN1HC7vitVfdHBi2ZpjbpWGbYJ48X kxFLmcSU/qDINdTQsvwLqAgpeEOVK84S8JV3sCeZuhUBVnGXXsyk1COSbRheMO7h wqoPWsIRy2uzycIsb7eZKSMhGCHx5Bu0wCs7q3cXlv1LSLyddbTG3FA4ltt9Tzke uUQ7VTGL5bOKUXCMhq9UGKcfzpLD4HK+yUKoobd7lfMCnQBulZW3brDrIViaYhnQ 6eEXWV7/BIJhDp5azCj4AYr8LJMrIHAYyig8eBM9erR/fLxsyn19dVKyl0IE8ktU J3NZCjJ/f1U4qHJwJNzCFZFfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgNEhPFRz SUKFcyzQoY/ud3HDU/gwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE3NlJ2zu72uHNBvoO9+W77IJXQt9M6dK+N4983f7n1ehVNkKQoc5Bbc rSI8qdXAVG65zTxE1XQG4uZ1zSpcqSqBmlYTV6UOrBus6iInRQJSV75Hzx/147wP QcilY5dQMMGxF+knFdup9hozRYb0pNh6cz+StY22rPWIMH2fE1AZjIrNiCNmpVht 9APjmzUJNXbWT2j77Xc7/JqdVONuTIJwwh4TQ/wSN59WNy4HeDOmTe6m+6udGzCn zF+6lZB2WPQVdl4Wzo2CAd8z9DjwVd6YIu7kVxub4CUSTLHFTdahRZTzLra5/PP7 a7EmReK7kGU5aUkQ2lfMhDXFM4heaX0= -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:12 2025 by rpki-client