$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json) Hash identifier: DOeUe9pGyzy5GkAb8P+2Mc6wKw3SVVN9hfg5zmOxcrw= Subject key identifier: E8:A3:38:00:F0:2B:48:62:2F:42:6F:16:D6:DD:8F:46:C1:D9:6C:63 Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft Manifest number: 0740 Signing time: Sat 18 Oct 2025 23:08:09 +0000 Manifest this update: Sat 18 Oct 2025 23:08:08 +0000 Manifest next update: Sat 25 Oct 2025 23:08:08 +0000 Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: 3TMg+uHDE+R1XL+U8ppnwC+UI9EdqfY2VFqlVu1RZvs=) 2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78 Validity Not Before: Oct 18 23:08:08 2025 GMT Not After : Oct 25 23:08:08 2025 GMT Subject: CN=68f41dd8-1e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:e0:26:d1:6d:79:15:d5:0e:22:ea:e1:f7: 21:c9:87:05:cf:b0:be:f1:4c:2d:b4:ac:98:c2:0d: 6d:5d:5f:5e:5c:dd:75:a1:ae:5a:23:1c:fb:41:7e: 2a:d2:e3:39:2b:a3:a8:f7:16:30:9e:a1:6e:09:57: 78:ed:58:bc:cb:6e:47:4b:51:c4:85:2e:89:7d:a5: c0:f9:9c:2f:74:c4:4f:b9:f5:d7:48:ed:3e:48:f8: 55:6c:4e:d6:8b:b3:7e:4f:69:6f:1d:bf:54:f5:4b: 22:a5:79:a6:5e:87:10:25:1e:1e:21:32:ce:c7:2f: 4b:12:61:12:de:0b:cd:ba:86:43:56:e8:e7:f4:4b: bf:d1:cb:2f:0b:90:d6:09:76:f9:dd:a9:98:17:aa: 13:57:d4:cb:f9:d6:c1:61:c7:0a:69:5f:7d:35:32: a2:73:a9:62:10:29:49:99:c2:47:64:6a:14:fe:21: ff:e1:e3:4c:78:00:92:a0:3c:1a:9d:87:f1:de:a9: 81:fb:41:c3:97:c6:29:1e:f7:41:ca:e3:8b:f9:97: 43:b1:0e:90:4e:45:6c:ed:7e:cf:82:e8:af:94:04: 23:f4:9e:0f:9b:db:49:6c:f0:77:7f:fd:97:aa:d4: cf:ab:ac:e9:41:1d:65:7b:df:b6:74:25:e1:ef:44: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A3:38:00:F0:2B:48:62:2F:42:6F:16:D6:DD:8F:46:C1:D9:6C:63 X509v3 Authority Key Identifier: keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:68:78:1a:99:54:85:5c:c8:40:67:63:d1:77:18:fc:ad:99: 8f:24:96:59:77:6f:14:8a:2f:87:74:6e:54:b6:48:24:c3:a2: 73:51:31:2b:bc:b3:09:1f:3f:fd:43:3a:52:1b:03:51:d1:f9: e1:5f:87:76:14:1b:86:82:7e:c9:50:55:b1:0c:75:9d:b9:4a: be:53:4a:d4:78:41:f8:96:5a:6e:aa:9e:d2:68:1b:80:56:ef: 3b:67:c1:c4:45:60:fc:dc:52:bf:74:2b:fd:4f:9f:ff:d3:f7: 2a:73:e5:40:7a:dc:6a:0b:9c:19:01:e1:90:b7:6a:3e:2f:84: f5:49:b8:e9:13:29:8f:3e:63:4f:45:58:0e:9b:c0:08:57:7d: 0c:bd:3a:42:f4:cd:5a:f3:3e:af:0b:b5:b5:d2:e5:51:31:44: ad:56:bf:14:ac:f1:cc:ea:54:34:9a:3f:7a:2d:ca:1f:5c:96: 90:80:cc:c2:96:43:b7:3e:2b:7e:52:d5:29:31:33:28:95:71: a8:3c:76:a6:7c:8c:90:46:03:c9:33:23:3e:3c:e2:35:2d:af: 4d:48:0b:2f:97:52:5e:50:48:13:37:4c:dc:b3:41:79:26:5e: ae:f3:d4:96:de:59:59:c2:6c:a1:f0:4b:10:2d:44:68:6e:ac: e4:3f:65:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE3MDMxMTAvBgNVBAUTKDcyQTE5RjZCQUZBNkVFRUU2NkRDM0IxQTZDNjc4MjJF NTMzMENGNzgwHhcNMjUxMDE4MjMwODA4WhcNMjUxMDI1MjMwODA4WjAYMRYwFAYD VQQDEw02OGY0MWRkOC0xZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAbgJtFteRXVDiLq4fchyYcFz7C+8UwttKyYwg1tXV9eXN11oa5aIxz7QX4q 0uM5K6Oo9xYwnqFuCVd47Vi8y25HS1HEhS6JfaXA+ZwvdMRPufXXSO0+SPhVbE7W i7N+T2lvHb9U9UsipXmmXocQJR4eITLOxy9LEmES3gvNuoZDVujn9Eu/0csvC5DW CXb53amYF6oTV9TL+dbBYccKaV99NTKic6liEClJmcJHZGoU/iH/4eNMeACSoDwa nYfx3qmB+0HDl8YpHvdByuOL+ZdDsQ6QTkVs7X7PguivlAQj9J4Pm9tJbPB3f/2X qtTPq6zpQR1le9+2dCXh70QKeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOijOADw K0hiL0JvFtbdj0bB2WxjMB8GA1UdIwQYMBaAFHKhn2uvpu7uZtw7Gmxngi5TMM94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTcwMy83QzgzQkRFQTQ5 MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1NW0zRHNhYkdlQ0xsTXd6 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxR2ZhNi1tN3U1bTNEc2FiR2VDTGxNd3ozZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTcwMy83QzgzQkRFQTQ5MDMxMUVCODQ0N0IyNkJDNEY5QUUwMi9jcUdmYTYtbTd1 NW0zRHNhYkdlQ0xsTXd6M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHaHgamVSFXMhAZ2PRdxj8rZmPJJZZd28Uii+HdG5Utkgkw6JzUTEr vLMJHz/9QzpSGwNR0fnhX4d2FBuGgn7JUFWxDHWduUq+U0rUeEH4llpuqp7SaBuA Vu87Z8HERWD83FK/dCv9T5//0/cqc+VAetxqC5wZAeGQt2o+L4T1SbjpEymPPmNP RVgOm8AIV30MvTpC9M1a8z6vC7W10uVRMUStVr8UrPHM6lQ0mj96LcofXJaQgMzC lkO3Pit+UtUpMTMolXGoPHamfIyQRgPJMyM+POI1La9NSAsvl1JeUEgTN0zcs0F5 Jl6u89SW3llZwmyh8EsQLURobqzkP2WM -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:48 2025 by rpki-client