$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: 0D/cnREGQ/IVpZf1pmFjAL3h6HyqnQxtHNb1UkzUqMk= Subject key identifier: E5:62:DE:54:DE:42:74:F0:64:0C:FC:8C:C5:D7:D3:DD:F3:C0:3E:C3 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 27FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 27EF Signing time: Mon 20 Oct 2025 15:48:29 +0000 Manifest this update: Mon 20 Oct 2025 15:48:28 +0000 Manifest next update: Mon 27 Oct 2025 15:48:28 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: GeBC5GhbY3WwJytGZt0mrVyhdVRj/wAGExLN6UnaOeQ=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10239 (0x27ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Oct 20 15:48:28 2025 GMT Not After : Oct 27 15:48:28 2025 GMT Subject: CN=68f659cc-1906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:6d:a8:f7:8a:9a:5d:a7:54:e8:48:40:6f: 29:79:fb:c5:e6:ce:e1:24:10:f9:64:1f:25:07:d2: 61:4f:00:47:e7:3b:7a:4e:4f:f0:14:f2:5a:fd:65: 8b:88:0c:71:0f:33:98:3b:3e:2b:fe:2d:f7:cf:32: 1c:95:f0:84:f6:9e:53:ee:c2:84:25:79:7f:2f:33: ad:43:09:f3:3e:58:3a:87:a1:14:38:3d:46:00:2b: 73:a8:3b:29:ed:b2:91:40:b2:9e:35:51:5d:3a:d6: 3c:d7:1f:00:03:c0:a1:96:0c:e1:99:4a:be:d7:91: 52:4d:8e:6f:3f:35:86:5c:91:c2:75:db:23:8f:da: f3:88:8b:b8:a9:0a:c8:24:92:1d:1c:b3:ab:1d:7e: e2:fc:3e:25:a4:d4:23:90:b0:e8:31:f0:53:cb:8e: 3e:b8:17:6a:ad:9e:d9:ea:5f:81:db:30:fd:57:29: 19:de:e8:b6:f2:69:2e:87:ed:55:88:7b:9c:09:3a: a7:b2:ba:0a:a1:77:c5:46:20:91:9a:d0:9c:e3:7d: 00:36:de:e6:0f:e9:3c:73:36:8e:84:a2:7a:77:09: 0b:62:d4:ef:8c:3c:f9:0d:30:77:bd:d7:24:1d:53: 2b:59:f7:3a:a2:62:82:3f:7d:52:7c:cb:88:d2:78: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:DE:54:DE:42:74:F0:64:0C:FC:8C:C5:D7:D3:DD:F3:C0:3E:C3 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:71:13:dd:31:f6:c8:55:86:6f:7a:76:47:49:e8:62:54:a4: d6:68:9f:60:05:a7:95:80:23:37:17:92:ca:5c:76:65:74:e9: e5:5d:b4:b1:50:04:13:ed:4a:b3:aa:9a:ed:67:81:99:3a:6b: 43:61:71:6f:ac:33:1e:7d:33:da:10:8b:36:be:b7:d0:9f:37: 43:f2:10:cf:cc:65:51:5c:72:ab:8c:f2:c4:2b:23:47:1d:e6: 90:8a:b2:af:4c:86:6e:da:79:1c:1c:45:c2:81:d8:b2:6b:22: da:04:64:df:fa:6f:8f:3e:6b:ea:8d:5a:be:5e:45:5e:55:c4: 90:55:5e:1f:a5:1b:8e:79:f4:7d:c4:80:b2:21:f0:8a:f1:ea: c8:91:b9:b6:65:93:90:c5:1a:40:96:85:0a:69:6e:66:35:bb: ac:23:37:e3:51:f5:f1:aa:a3:b3:63:92:f4:b7:6e:e3:d0:db: c6:51:f5:14:07:03:e4:e4:2d:e2:f4:63:b4:54:0e:62:8b:11: 02:3e:d5:66:47:56:cc:e2:9f:03:cf:27:a6:fc:6e:29:b4:b8: be:51:0b:d4:da:b9:d9:3b:30:63:61:63:d1:d5:16:67:28:4e: 1f:c3:fa:00:44:43:35:a2:53:04:d3:c8:82:d2:e0:2c:3b:75: e7:db:5b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjUxMDIwMTU0ODI4WhcNMjUxMDI3MTU0ODI4WjAYMRYwFAYD VQQDEw02OGY2NTljYy0xOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsltqPeKml2nVOhIQG8pefvF5s7hJBD5ZB8lB9JhTwBH5zt6Tk/wFPJa/WWL iAxxDzOYOz4r/i33zzIclfCE9p5T7sKEJXl/LzOtQwnzPlg6h6EUOD1GACtzqDsp 7bKRQLKeNVFdOtY81x8AA8ChlgzhmUq+15FSTY5vPzWGXJHCddsjj9rziIu4qQrI JJIdHLOrHX7i/D4lpNQjkLDoMfBTy44+uBdqrZ7Z6l+B2zD9VykZ3ui28mkuh+1V iHucCTqnsroKoXfFRiCRmtCc430ANt7mD+k8czaOhKJ6dwkLYtTvjDz5DTB3vdck HVMrWfc6omKCP31SfMuI0njsEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVi3lTe QnTwZAz8jMXX093zwD7DMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcRPdMfbIVYZvenZHSehiVKTWaJ9gBaeVgCM3F5LKXHZldOnlXbSx UAQT7UqzqprtZ4GZOmtDYXFvrDMefTPaEIs2vrfQnzdD8hDPzGVRXHKrjPLEKyNH HeaQirKvTIZu2nkcHEXCgdiyayLaBGTf+m+PPmvqjVq+XkVeVcSQVV4fpRuOefR9 xICyIfCK8erIkbm2ZZOQxRpAloUKaW5mNbusIzfjUfXxqqOzY5L0t27j0NvGUfUU BwPk5C3i9GO0VA5iixECPtVmR1bM4p8Dzyem/G4ptLi+UQvU2rnZOzBjYWPR1RZn KE4fw/oAREM1olME08iC0uAsO3Xn21t9 -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:44 2025 by rpki-client