$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft File: sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json) Hash identifier: 4LWXH2UAL/Lid14YVPwB4++qcJM0VreCbWZ3ReVmn1E= Subject key identifier: DD:A1:D5:EF:DA:CE:55:FF:88:49:5C:35:25:30:F1:43:20:74:D1:F4 Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F Certificate issuer: /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft Manifest number: 021E Signing time: Sun 19 Oct 2025 04:24:19 +0000 Manifest this update: Sun 19 Oct 2025 04:24:18 +0000 Manifest next update: Sun 26 Oct 2025 04:24:18 +0000 Files and hashes: 1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: b4M/2qGqEvf0NLXI4kQz2UJbcmDeCgtut9D04WRX1Pk=) 2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: aXVsQ3eTDOFY8R9G8hcsnCxP/cyR26ThIRn0dDawEqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F Validity Not Before: Oct 19 04:24:18 2025 GMT Not After : Oct 26 04:24:18 2025 GMT Subject: CN=68f467f2-9210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:46:28:d8:95:f3:ec:da:36:d8:3b:28:14: 40:6f:3e:7b:47:dd:d4:ef:eb:f2:06:51:08:7d:0a: 1d:06:18:eb:8c:ca:f8:65:6e:16:ce:16:1f:60:5b: 39:a2:09:f7:04:2e:89:6c:61:a3:54:f6:a6:5a:67: 7d:e9:d0:4c:0d:5a:15:3d:45:20:30:0b:7a:89:95: 66:7b:80:b6:04:64:20:c4:50:d6:7f:59:42:2f:04: ae:a7:d6:dd:4b:10:f0:b7:71:ac:43:db:b6:38:e4: e7:b5:46:37:45:59:19:fb:eb:48:02:4f:7b:53:97: 9b:6f:42:13:2d:ec:90:c2:98:31:93:ac:8e:a6:bb: 58:e2:69:40:a2:ad:49:97:ff:56:ee:72:bb:25:a8: 67:2e:f1:bc:22:a0:63:17:32:64:fe:0f:7f:32:f7: 80:99:7c:79:ec:6e:b4:9a:ac:af:5a:1d:e0:3c:d0: 24:4a:a3:ed:51:2f:ff:79:d4:28:89:b6:8c:c3:20: 57:e3:6e:b1:18:8c:d9:fb:59:2e:d5:15:84:cd:77: e8:99:22:65:80:7f:5e:a0:5e:f3:58:98:05:a9:97: 3b:f3:32:84:f7:38:ef:04:6b:15:79:ae:b6:56:6c: f4:c5:9d:83:8e:43:c8:1a:11:7d:e2:08:6f:93:fa: dc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:D5:EF:DA:CE:55:FF:88:49:5C:35:25:30:F1:43:20:74:D1:F4 X509v3 Authority Key Identifier: keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:5f:fd:ec:a1:b5:f3:7d:e0:fc:90:81:48:8f:a0:d5:26:de: a1:ea:9e:b0:38:fd:8b:cd:1f:5f:c6:ce:a1:28:35:4e:ef:59: 80:a9:68:08:b3:54:bb:b1:0e:06:bd:72:5f:df:e6:ec:07:c2: 32:94:23:81:c2:ad:78:ac:10:12:93:ca:01:84:4e:09:58:27: 8c:c5:fd:95:cf:73:c7:14:f9:57:d3:e0:b9:c6:6f:ed:d6:2d: 09:a2:0f:1b:b8:a7:3c:04:d7:97:5d:9a:91:5e:e4:04:a6:e5: 07:2a:4b:0b:48:f8:b1:ad:c7:1c:60:e8:05:12:52:5a:21:f9: b1:c8:c1:0b:07:67:e3:9d:be:af:3f:58:18:21:41:50:23:5d: ee:f1:74:51:f5:63:fb:b1:fd:9a:c4:96:ce:8a:ff:73:9b:f4: 0a:13:3a:27:f8:18:4f:d0:34:00:67:7d:b5:36:9c:9f:9c:d3: be:1d:f8:43:5b:0f:84:d8:57:7c:98:ce:e5:30:98:2b:4a:0a: 28:e1:95:4a:fb:ec:44:04:54:fa:3d:b1:c2:0d:ee:95:2d:76: 57:8a:1d:20:75:a0:69:d9:ea:89:1d:90:07:49:fb:9a:72:29: 64:64:9f:f0:64:b7:f1:06:9c:e6:16:53:88:1e:2b:84:1b:98: bc:5e:ff:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNFMkYxMTAvBgNVBAUTKEIxMEI0RjQzNDNGQUFFMkIyQzREM0RENjYwNjRCRTky NkVDNzRDOUYwHhcNMjUxMDE5MDQyNDE4WhcNMjUxMDI2MDQyNDE4WjAYMRYwFAYD VQQDEw02OGY0NjdmMi05MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pFGKNiV8+zaNtg7KBRAbz57R93U7+vyBlEIfQodBhjrjMr4ZW4WzhYfYFs5 ogn3BC6JbGGjVPamWmd96dBMDVoVPUUgMAt6iZVme4C2BGQgxFDWf1lCLwSup9bd SxDwt3GsQ9u2OOTntUY3RVkZ++tIAk97U5ebb0ITLeyQwpgxk6yOprtY4mlAoq1J l/9W7nK7JahnLvG8IqBjFzJk/g9/MveAmXx57G60mqyvWh3gPNAkSqPtUS//edQo ibaMwyBX426xGIzZ+1ku1RWEzXfomSJlgH9eoF7zWJgFqZc78zKE9zjvBGsVea62 Vmz0xZ2DjkPIGhF94ghvk/rcRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2h1e/a zlX/iElcNSUw8UMgdNH0MB8GA1UdIwQYMBaAFLELT0ND+q4rLE091mBkvpJux0yf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0UyRi8wQkRFQTUyODcw RTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJpc3NUVDNXWUdTLWttN0hU SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NRdFBRMFA2cmlzc1RUM1dZR1Mta203SFRKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0UyRi8wQkRFQTUyODcwRTMxMUVEQjU3NzA0M0ZDNEY5QUUwMi9zUXRQUTBQNnJp c3NUVDNXWUdTLWttN0hUSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApX/3sobXzfeD8kIFIj6DVJt6h6p6wOP2LzR9fxs6hKDVO71mAqWgI s1S7sQ4GvXJf3+bsB8IylCOBwq14rBASk8oBhE4JWCeMxf2Vz3PHFPlX0+C5xm/t 1i0Jog8buKc8BNeXXZqRXuQEpuUHKksLSPixrcccYOgFElJaIfmxyMELB2fjnb6v P1gYIUFQI13u8XRR9WP7sf2axJbOiv9zm/QKEzon+BhP0DQAZ321NpyfnNO+HfhD Ww+E2Fd8mM7lMJgrSgoo4ZVK++xEBFT6PbHCDe6VLXZXih0gdaBp2eqJHZAHSfua cilkZJ/wZLfxBpzmFlOIHiuEG5i8Xv/+ -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:39 2025 by rpki-client