$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: 9/uoZZk1KHoa7k3uZvKEw+/J/mF/CpYEcC6SLOomYrk= Subject key identifier: 05:61:51:9F:61:E0:E4:EF:CA:27:39:E6:50:4E:2D:55:92:77:50:B6 Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0151 Signing time: Sun 19 Oct 2025 06:53:54 +0000 Manifest this update: Sun 19 Oct 2025 06:53:53 +0000 Manifest next update: Sun 26 Oct 2025 06:53:53 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: BeuRLmzXIlcyDXm8r4iT8jZTVPAwwknFSnshLZLQ9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Oct 19 06:53:53 2025 GMT Not After : Oct 26 06:53:53 2025 GMT Subject: CN=68f48b01-6783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:f5:8d:09:4b:e7:83:8f:6f:75:3f:12:2d: 67:b2:ce:5f:39:27:c3:e8:6d:e1:d3:bb:0a:7a:42: 97:06:31:d8:0d:f6:32:11:99:dc:bb:a1:42:8b:8b: 36:68:6f:3f:e8:93:9e:3b:63:ee:f9:d4:72:5e:ef: e4:c9:f4:7a:36:bf:74:23:34:43:81:c3:03:9a:8c: 4b:0d:75:00:b7:e6:7c:1c:09:4a:0a:3c:a4:48:a4: 9f:6c:c0:70:c6:91:18:87:93:27:f0:53:4e:88:c0: f2:04:f6:c9:44:eb:ee:3c:71:71:f9:4b:bd:db:fb: 52:a5:c6:dc:4a:86:48:33:8d:59:73:0f:04:57:4d: 05:b2:d4:d8:03:d0:d4:b8:e1:a0:f6:84:9f:84:7a: af:d1:42:cd:61:12:6c:6c:fb:90:e5:ec:32:64:be: 91:d6:1c:74:8e:b8:c4:07:86:63:86:ba:0b:a4:87: 6d:5d:75:83:b1:42:2a:29:19:97:aa:5d:45:41:75: 92:c0:64:f0:cb:5d:79:c2:d6:d9:aa:d6:4a:43:40: 1a:f0:8f:a5:b2:d4:d9:ca:25:c9:69:27:ed:bd:d7: 72:80:64:70:20:f4:39:d8:b6:6b:0d:24:a5:bc:51: e1:6c:fe:11:4d:f5:a7:6d:1e:9a:23:91:e3:61:49: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:61:51:9F:61:E0:E4:EF:CA:27:39:E6:50:4E:2D:55:92:77:50:B6 X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a4:4b:f6:75:d7:37:f1:19:28:53:a6:6f:e5:3e:bd:c4:23: 61:a5:c8:7a:bf:33:3c:56:81:74:fe:69:ae:3d:17:42:1d:64: bf:79:b9:ea:3e:ce:ef:96:87:8c:51:da:fa:92:a2:8f:3e:a8: 3f:c2:34:4a:76:95:6f:4c:45:1f:2a:0a:8d:a3:1e:1a:82:da: 62:ef:78:94:0f:1d:03:ec:cd:e7:7f:9b:7e:e9:bf:26:cb:08: 72:fb:dc:35:10:63:df:52:c7:71:bf:5a:e8:45:bd:fc:c9:fd: fe:08:eb:1d:c8:65:c9:ee:43:a0:13:95:ab:ac:a3:9f:57:2c: 81:aa:8b:b8:b8:28:02:63:7c:77:e2:3d:4c:37:6d:38:42:b5: 59:9f:8c:3a:49:8d:d0:83:69:e0:87:c8:84:45:20:1f:58:c6: ea:3b:12:5b:f1:ba:0d:8a:64:71:ac:38:21:e1:16:77:86:5f: 1f:58:5d:bd:81:2e:c4:a9:da:a5:74:d6:71:97:03:56:64:83: 8f:d5:64:c1:c4:8d:bd:fb:e1:05:d3:97:4a:67:6d:e0:95:c7: bc:a3:3b:b2:37:23:20:01:05:78:cf:f7:76:14:5d:4b:dd:68: a3:65:00:5b:58:9a:f3:3d:b2:1e:75:79:2f:80:23:6b:80:c1: 98:37:0a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUxMDE5MDY1MzUzWhcNMjUxMDI2MDY1MzUzWjAYMRYwFAYD VQQDEw02OGY0OGIwMS02NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/r1jQlL54OPb3U/Ei1nss5fOSfD6G3h07sKekKXBjHYDfYyEZncu6FCi4s2 aG8/6JOeO2Pu+dRyXu/kyfR6Nr90IzRDgcMDmoxLDXUAt+Z8HAlKCjykSKSfbMBw xpEYh5Mn8FNOiMDyBPbJROvuPHFx+Uu92/tSpcbcSoZIM41Zcw8EV00FstTYA9DU uOGg9oSfhHqv0ULNYRJsbPuQ5ewyZL6R1hx0jrjEB4ZjhroLpIdtXXWDsUIqKRmX ql1FQXWSwGTwy115wtbZqtZKQ0Aa8I+lstTZyiXJaSftvddygGRwIPQ52LZrDSSl vFHhbP4RTfWnbR6aI5HjYUnfJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVhUZ9h 4OTvyic55lBOLVWSd1C2MB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjpEv2ddc38RkoU6Zv5T69xCNhpch6vzM8VoF0/mmuPRdCHWS/ebnq Ps7vloeMUdr6kqKPPqg/wjRKdpVvTEUfKgqNox4agtpi73iUDx0D7M3nf5t+6b8m ywhy+9w1EGPfUsdxv1roRb38yf3+COsdyGXJ7kOgE5WrrKOfVyyBqou4uCgCY3x3 4j1MN204QrVZn4w6SY3Qg2ngh8iERSAfWMbqOxJb8boNimRxrDgh4RZ3hl8fWF29 gS7EqdqldNZxlwNWZIOP1WTBxI29++EF05dKZ23glce8ozuyNyMgAQV4z/d2FF1L 3WijZQBbWJrzPbIedXkvgCNrgMGYNwqI -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:09 2025 by rpki-client