$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: CRTej7su6loO3okAjzXZ5PtwIqtfLdlft+e3ofdhiRw= Subject key identifier: 2B:A7:11:E0:65:C5:FB:4A:36:C1:2D:35:F3:C0:9A:BE:31:83:FF:0E Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:29:37 +0000 Manifest this update: Sun 19 Oct 2025 11:29:36 +0000 Manifest next update: Sun 26 Oct 2025 11:29:36 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: r1lEejK8I+1umC66S+j7Hs2dPU+SI2Ukb3Kn/BqZG20=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Oct 19 11:29:36 2025 GMT Not After : Oct 26 11:29:36 2025 GMT Subject: CN=68f4cba0-8ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:f9:15:68:24:90:74:fc:57:16:09:b3:fc: 36:49:4c:09:97:7f:bc:76:c8:dd:d5:81:09:94:fd: 29:8b:0b:33:6c:7c:ed:90:47:3c:42:30:65:1b:41: 33:4e:14:7e:ef:4c:d2:87:d2:e7:f7:7a:d5:f8:76: 6f:a9:9d:57:c3:d6:fc:18:fb:4e:c7:3c:ea:0b:d6: b5:03:4c:d4:a7:e1:bf:8f:00:91:27:5c:24:bf:3c: c7:c6:69:2a:be:fa:f7:0f:a9:12:c0:3c:13:ab:46: f0:ca:75:dc:c3:6f:55:3e:1f:ef:2a:20:36:ec:25: 4d:a1:52:46:a7:f4:18:69:5f:12:00:ce:68:fd:43: ec:d1:99:a3:af:99:13:bf:80:b2:6c:f0:c2:9c:2d: 92:4d:5a:86:04:fc:54:25:ef:1d:5d:16:4b:69:83: 52:e0:5a:8d:af:d8:42:d7:c8:83:70:f4:59:5c:37: 9d:9e:5f:37:fd:a9:af:a4:22:e3:bc:3d:06:f2:a3: eb:ff:77:59:e7:80:1a:7f:e4:78:24:0f:d7:12:c7: dd:f5:2e:67:b2:f1:e2:60:ff:cc:ce:ae:9a:8b:2f: ae:2b:e5:d1:83:d8:90:58:8e:a7:f8:80:b6:03:d8: 4d:05:cb:b5:e3:59:0f:71:be:e6:05:d9:9b:0e:60: 11:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:11:E0:65:C5:FB:4A:36:C1:2D:35:F3:C0:9A:BE:31:83:FF:0E X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3c:14:3f:44:15:88:e6:86:d4:5c:3d:06:5d:50:c2:32:a2: e3:3f:71:4c:04:6a:06:95:b6:54:c2:33:f6:c4:95:11:93:e1: 13:a5:3e:45:ac:66:90:64:2a:47:29:d0:3a:d7:ec:15:04:d1: fe:98:be:3f:bb:94:23:1b:24:f6:28:ed:e7:d1:32:13:29:e1: 3f:72:43:45:06:40:99:a2:22:35:2e:cb:63:b4:dc:4e:97:4b: 7a:09:e3:b7:49:2f:c2:3b:c0:8f:20:81:94:14:1c:69:31:21: bd:b5:02:10:f6:bf:8f:f5:11:4e:30:47:ed:b7:9a:d2:61:ff: 78:c1:c3:b0:ff:5b:05:79:3c:29:e4:85:3c:e4:ec:64:b5:5b: 25:46:5f:a6:a0:19:4d:93:d5:b1:ac:2e:d7:9e:7b:52:28:a5: 99:3d:16:14:7e:40:5a:47:d6:0f:86:8f:59:db:61:a5:55:ff: 32:d8:f2:96:32:9a:af:ba:c0:d1:57:57:65:95:61:71:d8:9d: b6:61:98:d5:36:c8:70:0d:0a:58:6b:1d:87:90:a5:74:b9:b9: 8a:c0:1e:72:75:a9:60:35:d8:97:32:f9:46:c4:b6:f8:b5:d7: 18:3c:22:d0:11:50:41:7d:0e:0e:3a:dc:db:17:5e:7a:95:5c: 10:67:a8:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNTEwMTkxMTI5MzZaFw0yNTEwMjYxMTI5MzZaMBgxFjAUBgNV BAMTDTY4ZjRjYmEwLThlZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEUfkVaCSQdPxXFgmz/DZJTAmXf7x2yN3VgQmU/SmLCzNsfO2QRzxCMGUbQTNO FH7vTNKH0uf3etX4dm+pnVfD1vwY+07HPOoL1rUDTNSn4b+PAJEnXCS/PMfGaSq+ +vcPqRLAPBOrRvDKddzDb1U+H+8qIDbsJU2hUkan9BhpXxIAzmj9Q+zRmaOvmRO/ gLJs8MKcLZJNWoYE/FQl7x1dFktpg1LgWo2v2ELXyINw9FlcN52eXzf9qa+kIuO8 PQbyo+v/d1nngBp/5HgkD9cSx931Lmey8eJg/8zOrpqLL64r5dGD2JBYjqf4gLYD 2E0Fy7XjWQ9xvuYF2ZsOYBHlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK6cR4GXF +0o2wS0188CavjGD/w4wHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAo8FD9EFYjmhtRcPQZdUMIyouM/cUwEagaVtlTCM/bElRGT4ROlPkWs ZpBkKkcp0DrX7BUE0f6Yvj+7lCMbJPYo7efRMhMp4T9yQ0UGQJmiIjUuy2O03E6X S3oJ47dJL8I7wI8ggZQUHGkxIb21AhD2v4/1EU4wR+23mtJh/3jBw7D/WwV5PCnk hTzk7GS1WyVGX6agGU2T1bGsLteee1IopZk9FhR+QFpH1g+Gj1nbYaVV/zLY8pYy mq+6wNFXV2WVYXHYnbZhmNU2yHANClhrHYeQpXS5uYrAHnJ1qWA12Jcy+UbEtvi1 1xg8ItARUEF9Dg463NsXXnqVXBBnqMU= -----END CERTIFICATE-----Generated at Tue Oct 21 01:30:38 2025 by rpki-client