$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft File: qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json) Hash identifier: t3WhCnTHxFi3WLfV8o3TBcAW67duZMmSt/o6KBjMaJY= Subject key identifier: D3:B7:C7:F0:CB:AC:DF:F5:9C:1D:A5:86:AA:EB:51:13:5E:CA:24:09 Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft Manifest number: 0243 Signing time: Sun 19 Oct 2025 04:02:50 +0000 Manifest this update: Sun 19 Oct 2025 04:02:50 +0000 Manifest next update: Sun 26 Oct 2025 04:02:50 +0000 Files and hashes: 1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: 0gmzcBEwhFVuXTI3J0BpBBKYatP3qL3AQi9zEzRp65M=) 2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: H0AJqEiGAywgjMNh/B1Rg0QqAknxodzCmkcexEm/7aU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2 Validity Not Before: Oct 19 04:02:50 2025 GMT Not After : Oct 26 04:02:50 2025 GMT Subject: CN=68f462ea-cbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:da:5d:a5:73:a4:20:3a:cc:b3:98:fb:66: e8:85:fd:45:f2:39:bc:aa:d4:9e:8a:b6:1e:ff:fc: ec:8a:01:e8:bb:27:82:e3:17:3c:19:d3:bf:59:62: 35:91:3f:cf:42:48:36:47:aa:d1:2b:31:c0:44:91: a9:ac:5f:72:55:2e:21:a6:d7:5c:9c:3a:90:4f:a2: 5d:cc:fa:ab:f1:df:a2:da:97:32:c0:59:48:bf:90: 63:3f:1d:4c:50:82:e3:3f:56:a7:a5:cd:0d:06:a9: 4d:60:19:ab:2e:e3:22:be:c1:5c:49:65:a3:8c:00: f6:14:58:82:26:2f:94:5d:d1:96:63:2d:a9:23:89: 38:bc:a4:8f:d6:03:ef:a3:82:78:ce:3a:39:29:fa: b6:a9:ac:5c:a7:a6:c6:52:09:e4:19:69:81:ba:21: 78:37:8d:76:bb:0e:eb:a3:44:75:fb:86:ec:97:03: 45:03:ec:03:5e:43:05:7e:32:a7:1b:6c:ca:e8:41: 8b:b0:fc:89:f2:8b:8e:1b:7f:23:7c:01:e2:c4:2c: ef:f0:77:8e:7c:a0:7c:ed:5f:34:05:6f:76:7e:1c: b0:40:5d:cd:68:1c:7b:a7:46:de:7f:89:47:7a:3b: 4f:c1:b5:97:54:84:e8:18:bf:da:08:36:7b:26:df: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:C7:F0:CB:AC:DF:F5:9C:1D:A5:86:AA:EB:51:13:5E:CA:24:09 X509v3 Authority Key Identifier: keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b4:90:6d:30:17:f7:5d:b1:fc:f4:91:29:47:63:c7:65:22: cc:2c:b2:42:75:4c:03:5b:9c:38:a7:aa:41:e0:46:0a:a1:38: 56:7a:b4:dd:0d:45:5b:4e:4a:f0:e6:12:83:38:1d:47:e9:a2: d0:d3:09:2c:52:7d:de:71:1d:16:84:fd:30:37:3a:8e:40:d2: 86:37:0c:d0:51:eb:60:66:07:17:c0:b7:f0:6a:46:b3:ea:b5: 34:54:de:ce:35:9a:77:f3:cd:05:ec:11:a8:3d:74:a1:24:60: 14:d7:29:f9:e2:bf:2d:42:f5:7f:52:5c:01:7b:20:7c:b3:89: e5:c7:84:09:c8:f0:ec:74:6c:06:dd:12:3e:96:ff:69:2a:4d: f4:db:86:13:93:66:00:6e:4d:86:22:1f:94:c1:b3:15:90:d8: 2d:85:45:79:7d:e2:70:ef:22:55:86:c3:ff:93:14:f1:90:86: 6f:3b:fa:e6:1a:09:8f:0a:73:5c:f3:8e:cd:79:fc:c6:10:24: f8:f6:c5:39:8f:66:9e:dd:79:3a:c5:d6:79:11:4f:55:9d:36: ad:fd:8e:97:d7:5d:b4:ff:a3:c0:0f:b4:df:77:b1:c5:6d:1c: 34:0a:bb:18:ef:32:65:e0:60:02:7b:02:f4:a1:b6:7f:c5:b8: 33:5a:53:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQ2RkMxMTAvBgNVBAUTKEE4QkY1NEY2MDgxOTY3MjIxOTM1Q0IxN0NDMTNFQkZC ODQxQTYwQzIwHhcNMjUxMDE5MDQwMjUwWhcNMjUxMDI2MDQwMjUwWjAYMRYwFAYD VQQDEw02OGY0NjJlYS1jYmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsPaXaVzpCA6zLOY+2bohf1F8jm8qtSeirYe//zsigHouyeC4xc8GdO/WWI1 kT/PQkg2R6rRKzHARJGprF9yVS4hptdcnDqQT6JdzPqr8d+i2pcywFlIv5BjPx1M UILjP1anpc0NBqlNYBmrLuMivsFcSWWjjAD2FFiCJi+UXdGWYy2pI4k4vKSP1gPv o4J4zjo5Kfq2qaxcp6bGUgnkGWmBuiF4N412uw7ro0R1+4bslwNFA+wDXkMFfjKn G2zK6EGLsPyJ8ouOG38jfAHixCzv8HeOfKB87V80BW92fhywQF3NaBx7p0bef4lH ejtPwbWXVIToGL/aCDZ7Jt8dGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO3x/DL rN/1nB2lhqrrURNeyiQJMB8GA1UdIwQYMBaAFKi/VPYIGWciGTXLF8wT6/uEGmDC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDZGQy84ODc1OTE4MjQz MkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5SVpOY3NYekJQci00UWFZ TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FMOVU5Z2daWnlJWk5jc1h6QlByLTRRYVlNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDZGQy84ODc1OTE4MjQzMkYxMUVEQkJEOThGNUNDNEY5QUUwMi9xTDlVOWdnWlp5 SVpOY3NYekJQci00UWFZTUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAtJBtMBf3XbH89JEpR2PHZSLMLLJCdUwDW5w4p6pB4EYKoThWerTd DUVbTkrw5hKDOB1H6aLQ0wksUn3ecR0WhP0wNzqOQNKGNwzQUetgZgcXwLfwakaz 6rU0VN7ONZp3880F7BGoPXShJGAU1yn54r8tQvV/UlwBeyB8s4nlx4QJyPDsdGwG 3RI+lv9pKk3024YTk2YAbk2GIh+UwbMVkNgthUV5feJw7yJVhsP/kxTxkIZvO/rm GgmPCnNc847NefzGECT49sU5j2ae3Xk6xdZ5EU9VnTat/Y6X1120/6PAD7Tfd7HF bRw0CrsY7zJl4GACewL0obZ/xbgzWlOH -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:27 2025 by rpki-client