$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: MiEJtxs/8701kMFtr68Xk8fXHeZITSMgIZr8GQzOK8o= Subject key identifier: A7:C7:C9:DB:7B:6C:16:DC:1D:8F:53:CE:64:22:0C:F7:B1:39:AB:0E Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: 0118 Signing time: Sun 19 Oct 2025 07:42:42 +0000 Manifest this update: Sun 19 Oct 2025 07:42:41 +0000 Manifest next update: Sun 26 Oct 2025 07:42:41 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: O5jf0dzNuyXsbmWOZrKT4jsTlmFDSERRdNkbbCeFq/Q=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: OrAHJTjZ/RqHAwIjIMccBjE+JqFUpBNrVGrdl3fQy10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Oct 19 07:42:41 2025 GMT Not After : Oct 26 07:42:41 2025 GMT Subject: CN=68f49671-1cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:1b:73:92:b1:10:b7:f1:0a:d0:47:85:1b: 4b:26:e5:f0:34:92:68:dc:f8:99:75:58:e5:c5:26: 43:71:60:50:88:1a:b9:69:a6:0f:cc:53:7e:c2:c0: 1d:4e:16:f0:87:51:f3:08:4e:79:34:83:f2:b1:a7: b7:7f:c7:fe:32:9a:a8:7e:2b:29:79:ca:b8:10:b7: 1d:d6:c9:b2:c5:87:60:39:e1:80:a4:f8:32:61:7e: ec:a5:a5:e5:4f:9f:02:f1:95:1b:5f:cc:e2:40:cd: 4f:92:e2:61:bb:6e:86:f9:43:37:9f:5f:23:f2:14: 9f:e3:ae:37:db:5a:4c:cc:80:bc:37:e8:3a:3b:3a: 85:88:ee:18:e7:ff:de:cf:ed:4a:82:b1:b4:52:09: 0f:59:2a:74:29:eb:f0:60:22:21:f6:d1:ab:4a:8a: 01:c6:25:16:ff:b6:dc:74:ac:e2:8d:aa:4a:98:05: cb:91:a3:bd:b4:18:ca:e6:85:1d:68:d8:74:a0:08: 2c:f4:f7:ef:50:77:6b:86:93:21:46:56:dd:86:5b: 07:4d:52:ae:1b:4d:d6:06:92:c0:1a:c1:1d:75:59: ae:c0:e5:09:d0:43:94:26:f8:36:02:ef:52:c6:6e: 52:bd:ac:41:df:6e:64:b2:72:14:c1:2f:df:0a:a7: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:C9:DB:7B:6C:16:DC:1D:8F:53:CE:64:22:0C:F7:B1:39:AB:0E X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:dc:6d:aa:b7:53:ee:1a:b2:83:9c:f1:9f:e6:7f:dd:52:17: 07:b1:cb:fb:86:d3:50:33:ea:6f:45:20:58:08:c0:f8:c1:8d: 60:cc:39:8d:b2:2f:6d:54:a3:06:e2:f4:84:e4:9b:b5:87:20: fe:f7:0f:2e:5b:55:1c:e3:1a:ec:4b:b7:8b:46:a6:12:6f:95: 21:11:14:29:85:81:d6:2c:2b:88:47:aa:ee:29:cc:63:26:2b: 64:5e:ae:51:13:f8:1f:05:6f:68:e8:51:09:aa:9f:6a:27:52: 53:37:eb:ba:c7:76:62:8a:14:97:78:e6:56:b6:bc:fb:35:86: 1e:61:1b:64:9e:d1:64:75:d7:31:b2:e6:24:e1:9f:e7:f8:90: b5:80:e9:70:6b:52:6c:55:45:02:13:2d:d9:24:2c:f8:a2:7c: 88:0c:e8:9f:f7:e2:82:72:fe:ee:9a:ae:8d:b5:4f:08:b1:7b: a0:92:90:1d:a3:4b:c7:ca:d4:d9:0a:90:5c:35:e3:48:32:45: a0:b2:db:bc:06:83:66:d3:11:12:a7:c5:11:a5:8d:5a:5f:79: 23:4c:56:f0:db:cf:d5:50:b3:2c:7b:44:1d:9b:65:0b:63:34: 5f:c5:62:fb:e6:8b:e1:8d:74:01:e1:84:f8:12:c4:f7:67:f3: b2:0b:d4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUxMDE5MDc0MjQxWhcNMjUxMDI2MDc0MjQxWjAYMRYwFAYD VQQDEw02OGY0OTY3MS0xY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20sbc5KxELfxCtBHhRtLJuXwNJJo3PiZdVjlxSZDcWBQiBq5aaYPzFN+wsAd Thbwh1HzCE55NIPysae3f8f+Mpqofispecq4ELcd1smyxYdgOeGApPgyYX7spaXl T58C8ZUbX8ziQM1PkuJhu26G+UM3n18j8hSf464321pMzIC8N+g6OzqFiO4Y5//e z+1KgrG0UgkPWSp0KevwYCIh9tGrSooBxiUW/7bcdKzijapKmAXLkaO9tBjK5oUd aNh0oAgs9PfvUHdrhpMhRlbdhlsHTVKuG03WBpLAGsEddVmuwOUJ0EOUJvg2Au9S xm5SvaxB325ksnIUwS/fCqfJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfHydt7 bBbcHY9TzmQiDPexOasOMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC23G2qt1PuGrKDnPGf5n/dUhcHscv7htNQM+pvRSBYCMD4wY1gzDmN si9tVKMG4vSE5Ju1hyD+9w8uW1Uc4xrsS7eLRqYSb5UhERQphYHWLCuIR6ruKcxj JitkXq5RE/gfBW9o6FEJqp9qJ1JTN+u6x3ZiihSXeOZWtrz7NYYeYRtkntFkddcx suYk4Z/n+JC1gOlwa1JsVUUCEy3ZJCz4onyIDOif9+KCcv7umq6NtU8IsXugkpAd o0vHytTZCpBcNeNIMkWgstu8BoNm0xESp8URpY1aX3kjTFbw28/VULMse0Qdm2UL YzRfxWL75ovhjXQB4YT4EsT3Z/OyC9R4 -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:28 2025 by rpki-client