$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json) Hash identifier: +Yn8BnsXrBzr0Q8zTOBLbrpH458I0yaI3yQwgUGYZOg= Subject key identifier: D2:44:30:A4:59:8E:21:57:CC:58:63:39:92:1C:AD:07:A2:B9:D9:B4 Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:55:09 +0000 Manifest this update: Sun 19 Oct 2025 10:55:09 +0000 Manifest next update: Sun 26 Oct 2025 10:55:09 +0000 Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: 3Njzm4Qu8p0wAZY/8kVRpp6v8aJq//4JNSIkG29EmX8=) 2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: Dtb6Fb2JpEd/Zi2+qi9cOHLUquodmN8UKkbWls/zEtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Validity Not Before: Oct 19 10:55:09 2025 GMT Not After : Oct 26 10:55:09 2025 GMT Subject: CN=68f4c38d-30ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:09:41:0e:5d:68:7c:87:10:c6:bc:a7:bf: 7d:4d:64:13:a2:95:b8:97:54:a4:61:c1:c2:db:d7: a4:c9:d3:f5:b9:4e:ac:29:f8:31:35:7f:a4:ac:62: 17:4f:7d:e8:09:13:b6:97:80:6d:01:39:49:f8:23: 51:1e:14:ab:fc:df:74:35:52:01:39:75:80:3c:e2: 97:0f:97:43:66:34:d7:45:6a:82:79:0c:52:1b:a1: 14:5b:d3:ce:65:19:4a:5b:2b:f3:7a:c6:f8:53:53: c9:24:92:db:85:83:cc:e0:3e:98:6c:0f:45:ed:ee: 20:05:3d:a6:c4:e8:c6:4f:59:7c:2b:9c:03:3a:3e: 02:52:0b:18:dd:38:81:32:da:1f:f2:1a:cc:82:3c: 32:2a:41:00:10:09:cf:72:c9:10:25:a9:16:52:15: af:4d:99:f7:a4:9b:36:e2:fb:b8:de:3d:59:cc:39: 65:91:cc:8f:c8:80:77:d6:f2:ea:11:11:b9:35:3e: 4d:87:64:43:f6:07:e2:72:16:88:51:87:ec:ff:00: 0e:00:27:31:60:f1:d9:75:9a:c4:cf:f6:d7:6d:c4: 3a:a2:de:45:48:0f:f4:c8:08:ee:9b:7b:69:4b:69: 9f:77:6e:c9:e6:08:d2:22:dc:ee:e4:0e:c3:ce:9a: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:44:30:A4:59:8E:21:57:CC:58:63:39:92:1C:AD:07:A2:B9:D9:B4 X509v3 Authority Key Identifier: keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:14:7b:ac:6d:8e:2a:ad:9e:3b:51:e3:cf:83:64:d7:66: 7f:cd:f5:53:5d:53:b5:d1:7b:64:44:fb:1d:3e:19:80:30:e5: b8:ce:99:f9:ab:19:29:89:86:5f:86:53:37:2d:7c:b2:18:06: 32:6d:11:14:a7:15:75:d4:85:63:b6:82:9c:6e:bf:0d:fe:5c: 21:92:2f:04:79:7e:63:88:27:a4:a8:93:55:c4:8c:15:b5:84: 33:6c:33:b2:ab:e8:fb:10:cc:e8:14:33:13:34:de:38:90:2b: 11:1b:2f:a4:4c:c7:c6:f2:ab:5a:6b:3b:fe:0a:ae:48:f8:ca: d8:a5:da:b0:de:5d:f2:b5:f2:e3:31:9b:c3:4f:0e:69:1b:3e: 94:ed:f1:18:b3:91:b0:9e:45:34:a8:f8:9f:5a:b8:de:5c:75: e7:09:24:07:c3:e9:89:06:c6:c2:30:65:92:59:b3:5c:64:a0: 7a:1c:88:d2:36:6d:f6:b8:2d:65:e3:03:de:18:82:2d:2c:73: 53:f7:a5:37:6a:1b:dd:ea:46:ca:36:17:cd:2c:90:ba:2c:bb: 8a:01:05:87:ba:66:97:6c:33:7b:17:c7:46:5d:7f:0c:db:aa: aa:03:3d:2a:58:80:63:af:f8:04:9f:4b:9e:a9:70:39:14:df: bb:91:31:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNEU3RkVBNzFBNDQ3QTZBMTYxNzlDMjY5N0VCRUU1NTUx OTlEQjA5ODAeFw0yNTEwMTkxMDU1MDlaFw0yNTEwMjYxMDU1MDlaMBgxFjAUBgNV BAMTDTY4ZjRjMzhkLTMwYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAcQlBDl1ofIcQxrynv31NZBOilbiXVKRhwcLb16TJ0/W5Tqwp+DE1f6SsYhdP fegJE7aXgG0BOUn4I1EeFKv833Q1UgE5dYA84pcPl0NmNNdFaoJ5DFIboRRb085l GUpbK/N6xvhTU8kkktuFg8zgPphsD0Xt7iAFPabE6MZPWXwrnAM6PgJSCxjdOIEy 2h/yGsyCPDIqQQAQCc9yyRAlqRZSFa9Nmfekmzbi+7jePVnMOWWRzI/IgHfW8uoR Ebk1Pk2HZEP2B+JyFohRh+z/AA4AJzFg8dl1msTP9tdtxDqi3kVID/TICO6be2lL aZ93bsnmCNIi3O7kDsPOmp6zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0kQwpFmO IVfMWGM5khytB6K52bQwHwYDVR0jBBgwFoAUTn/qcaRHpqFhecJpfr7lVRmdsJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzhCMjE5MDlDNEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFGaGVjSnBmcjdsVlJtZHNK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG5fcWNhUkhwcUZoZWNKcGZyN2xWUm1kc0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzhCMjE5MDlDNEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFG aGVjSnBmcjdsVlJtZHNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGbFHusbY4qrZ47UePPg2TXZn/N9VNdU7XRe2RE+x0+GYAw5bjOmfmr GSmJhl+GUzctfLIYBjJtERSnFXXUhWO2gpxuvw3+XCGSLwR5fmOIJ6Sok1XEjBW1 hDNsM7Kr6PsQzOgUMxM03jiQKxEbL6RMx8byq1prO/4Krkj4ytil2rDeXfK18uMx m8NPDmkbPpTt8RizkbCeRTSo+J9auN5cdecJJAfD6YkGxsIwZZJZs1xkoHociNI2 bfa4LWXjA94Ygi0sc1P3pTdqG93qRso2F80skLosu4oBBYe6ZpdsM3sXx0Zdfwzb qqoDPSpYgGOv+ASfS56pcDkU37uRMSs= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:09 2025 by rpki-client