$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft File: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json) Hash identifier: F0rC+WPMSsvhLGa3+ScnJvlgygTi4Piwv5tB71U/S1s= Subject key identifier: 16:E1:F9:A6:BA:60:5F:6B:7E:AF:E5:42:A4:71:AE:90:FA:5D:07:3E Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 Certificate issuer: /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft Manifest number: 42 Signing time: Sun 19 Oct 2025 10:53:01 +0000 Manifest this update: Sun 19 Oct 2025 10:53:00 +0000 Manifest next update: Sun 26 Oct 2025 10:53:00 +0000 Files and hashes: 1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: 3gpttxE7Hau0FkEtHxzyqjlqFh6BxwNJeYyZ6yD1idA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Validity Not Before: Oct 19 10:53:00 2025 GMT Not After : Oct 26 10:53:00 2025 GMT Subject: CN=68f4c30c-df76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:66:50:ce:43:70:9f:81:28:b7:80:86:ca: d7:53:eb:84:8e:39:ba:93:cc:05:a9:e7:c9:27:95: 2a:a2:e1:59:c3:d0:55:2a:fb:73:b5:2f:0e:a3:08: 80:e4:84:a3:30:7a:03:bf:6a:aa:78:de:cd:fe:43: 53:e5:15:24:41:5d:1d:86:88:53:4c:89:ab:22:3c: bc:01:7e:6c:27:bf:1b:94:5f:69:4c:21:b1:cc:43: a5:e6:1f:1c:97:5d:55:94:53:cd:e1:cd:49:50:8a: cd:b3:19:8d:35:10:4e:fe:53:1a:70:92:d6:ec:3c: a7:65:37:d6:01:4e:c7:d8:2d:a4:41:13:d4:3b:e0: 12:a3:6e:bc:9b:a0:d2:35:16:42:00:36:b2:40:cd: 4a:c4:6f:1c:28:43:f6:71:5f:89:30:31:0c:bf:5a: 40:da:4c:62:07:33:0f:10:59:79:d3:ea:58:ad:24: 5a:32:49:d5:8c:81:d6:2e:81:37:fa:ef:80:7a:72: b6:aa:55:df:23:f0:52:3f:5c:3b:d8:93:af:5a:2d: 2d:c8:25:d3:11:ee:9c:cf:08:85:7d:1a:0e:91:71: 90:45:a3:b8:44:fd:07:1a:21:e7:74:33:a4:06:67: dc:ac:2a:a8:21:57:d5:8b:b3:3e:ab:0d:7f:19:08: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:F9:A6:BA:60:5F:6B:7E:AF:E5:42:A4:71:AE:90:FA:5D:07:3E X509v3 Authority Key Identifier: keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e4:70:78:1f:41:62:12:97:40:4e:0c:29:fb:4d:ec:03:7b: b8:77:e2:57:41:82:50:54:0c:71:2b:48:fc:12:1f:a6:51:4e: e5:87:f9:51:54:29:f9:fb:45:d1:0e:ca:08:90:36:88:82:45: 11:ec:e6:ef:ba:2d:48:64:24:62:4d:e9:51:6c:7c:70:3d:89: 3e:0a:9b:20:33:e7:ca:55:8c:cd:a8:d0:eb:ee:c5:24:3d:c6: 31:4d:d3:ae:f1:5a:38:04:77:75:e4:a3:ac:78:77:7a:3f:0d: 75:3f:e3:4d:6a:fd:fd:27:be:b1:e3:6a:5d:7b:a6:82:74:4a: a1:f4:f5:a4:d1:06:a3:3e:8a:da:61:18:47:72:bd:68:3a:5e: 66:d6:78:1d:e1:f9:86:9f:bd:af:0d:1f:ab:2f:32:82:79:ea: 3f:05:a6:f7:5b:c7:41:52:a6:09:0d:1c:3e:a9:89:f7:d8:5f: 0d:c7:fe:bc:aa:0b:4c:f3:07:c9:64:eb:70:13:12:73:8f:c2: bb:5c:1c:81:94:ff:18:10:73:38:61:1d:55:d0:a9:53:d5:0f: e9:cb:0a:3f:39:f9:3c:64:12:6b:6f:fc:92:39:08:49:63:6a: 50:56:27:44:b3:1c:91:c3:d4:9a:42:e1:fa:0e:82:56:fe:84: ef:e2:2d:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoQUEyQ0FGNEU0RjE2QUJCMzM5QzFFNUQwRjA1OUY0MTNB RTVDRTg4NDAeFw0yNTEwMTkxMDUzMDBaFw0yNTEwMjYxMDUzMDBaMBgxFjAUBgNV BAMTDTY4ZjRjMzBjLWRmNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCovmZQzkNwn4Eot4CGytdT64SOObqTzAWp58knlSqi4VnD0FUq+3O1Lw6jCIDk hKMwegO/aqp43s3+Q1PlFSRBXR2GiFNMiasiPLwBfmwnvxuUX2lMIbHMQ6XmHxyX XVWUU83hzUlQis2zGY01EE7+UxpwktbsPKdlN9YBTsfYLaRBE9Q74BKjbryboNI1 FkIANrJAzUrEbxwoQ/ZxX4kwMQy/WkDaTGIHMw8QWXnT6litJFoySdWMgdYugTf6 74B6craqVd8j8FI/XDvYk69aLS3IJdMR7pzPCIV9Gg6RcZBFo7hE/QcaIed0M6QG Z9ysKqghV9WLsz6rDX8ZCL0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFuH5prpg X2t+r+VCpHGukPpdBz4wHwYDVR0jBBgwFoAUqiyvTk8Wq7M5weXQ8Fn0E65c6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkREL0EwRDQyQTJBNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdNNXdlWFE4Rm4wRTY1YzZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWl5dlRrOFdxN001d2VYUThGbjBFNjVjNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkREL0EwRDQyQTJBNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdN NXdlWFE4Rm4wRTY1YzZJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPkcHgfQWISl0BODCn7TewDe7h34ldBglBUDHErSPwSH6ZRTuWH+VFU Kfn7RdEOygiQNoiCRRHs5u+6LUhkJGJN6VFsfHA9iT4KmyAz58pVjM2o0OvuxSQ9 xjFN067xWjgEd3Xko6x4d3o/DXU/401q/f0nvrHjal17poJ0SqH09aTRBqM+itph GEdyvWg6XmbWeB3h+Yafva8NH6svMoJ56j8Fpvdbx0FSpgkNHD6piffYXw3H/ryq C0zzB8lk63ATEnOPwrtcHIGU/xgQczhhHVXQqVPVD+nLCj85+TxkEmtv/JI5CElj alBWJ0SzHJHD1JpC4foOglb+hO/iLY4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:04 2025 by rpki-client