$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json) Hash identifier: MbAjM5fCby/X6H0TTGz06pNqIjDCdJMDJy+PXhNhAFE= Subject key identifier: F2:52:70:08:C5:16:55:AA:89:68:97:95:FA:A0:F7:F7:1F:88:56:83 Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Certificate serial: 1914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft Manifest number: 18FB Signing time: Sat 18 Oct 2025 16:50:59 +0000 Manifest this update: Sat 18 Oct 2025 16:50:58 +0000 Manifest next update: Sat 25 Oct 2025 16:50:58 +0000 Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: eSEhokMKhsi7tzbrfsADaduwNU9kYgXta9bi+Nh2vTg=) 2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6420 (0x1914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE Validity Not Before: Oct 18 16:50:58 2025 GMT Not After : Oct 25 16:50:58 2025 GMT Subject: CN=68f3c572-993a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:77:de:cc:be:bf:1c:08:5c:f0:e3:61:73: d8:c2:89:d8:fb:b2:d6:d7:b3:b9:fc:d2:01:92:f1: 56:67:a1:74:86:4c:9b:39:96:3a:4d:4d:23:94:3b: d2:47:db:26:09:14:42:50:3f:32:6f:2b:ff:5f:2f: d4:c2:c1:5e:af:c0:92:ac:59:3c:58:c5:82:0f:ce: a2:66:c3:32:80:8b:a1:93:b0:b0:f1:7b:ea:b5:31: ec:97:2a:cd:ee:f7:b9:b2:74:56:61:83:68:6a:6b: e4:46:8f:76:2e:9a:dd:ef:61:c7:d6:cd:7a:eb:ae: 82:4a:47:be:fd:47:54:c8:64:85:08:2c:fe:a2:b6: 91:1f:7f:d4:9a:99:d3:3c:cb:1b:95:b5:4a:98:d9: 33:f0:9b:23:88:49:9e:7e:a8:a9:0d:de:26:c0:93: 30:bb:d2:4c:7d:10:6d:73:e4:6a:43:a8:0b:fe:ce: 9e:ae:69:c6:05:c4:3d:04:e5:d0:34:71:06:f5:3f: 34:1e:da:16:45:28:6b:d8:b9:0c:e5:cb:48:df:30: 69:ec:a9:a3:9d:7e:21:46:07:40:35:de:87:42:76: b2:e8:31:5e:4f:ec:1a:82:dd:44:f4:65:df:1f:59: 55:d8:c6:03:db:7a:43:c0:ae:11:9c:c6:ba:e8:46: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:70:08:C5:16:55:AA:89:68:97:95:FA:A0:F7:F7:1F:88:56:83 X509v3 Authority Key Identifier: keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e0:21:62:d3:8e:03:a3:80:c9:ad:c7:89:b3:56:2c:a4:ed: 4f:72:d1:bf:fd:37:e8:b6:55:c4:66:45:42:17:b0:6f:fe:d0: 31:a4:62:08:9f:41:e3:b7:4a:5f:44:91:96:e7:3b:c4:d8:df: d7:f9:11:2e:d7:d3:49:82:48:4e:db:f1:27:6c:78:af:0c:1e: ac:70:e1:13:1d:64:0a:d0:ef:93:6e:d4:4d:b0:2f:d2:67:0e: aa:73:30:da:43:5d:29:15:ad:23:de:12:10:86:9b:cf:28:9d: f9:7f:a9:03:a6:fe:18:02:7a:73:f8:13:d0:6e:6b:e6:94:89: d8:52:7a:b4:32:20:69:e5:96:df:7b:19:86:50:47:73:00:52: ea:50:10:64:73:0e:f9:c5:30:5b:bb:41:d7:f7:c1:cc:92:29: 75:22:d3:c6:bf:a6:ce:17:43:a5:72:66:0e:46:37:58:06:f9: 7a:5a:bc:d7:a6:e3:cc:1d:e9:21:b7:7e:a3:91:8d:37:bd:73: 0b:3d:4e:6b:81:db:cb:81:e5:3e:91:99:e0:34:15:e3:78:26: e4:a2:7b:b2:92:8e:ec:04:d0:f0:4a:58:c7:53:76:4e:58:d8: d0:10:d4:32:e5:0d:f0:34:82:52:dd:00:7a:f0:9a:3e:26:d2: 54:79:42:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG OTc3Rjc4Q0UwHhcNMjUxMDE4MTY1MDU4WhcNMjUxMDI1MTY1MDU4WjAYMRYwFAYD VQQDEw02OGYzYzU3Mi05OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fd33sy+vxwIXPDjYXPYwonY+7LW17O5/NIBkvFWZ6F0hkybOZY6TU0jlDvS R9smCRRCUD8ybyv/Xy/UwsFer8CSrFk8WMWCD86iZsMygIuhk7Cw8XvqtTHslyrN 7ve5snRWYYNoamvkRo92Lprd72HH1s16666CSke+/UdUyGSFCCz+oraRH3/UmpnT PMsblbVKmNkz8JsjiEmefqipDd4mwJMwu9JMfRBtc+RqQ6gL/s6ermnGBcQ9BOXQ NHEG9T80HtoWRShr2LkM5ctI3zBp7KmjnX4hRgdANd6HQnay6DFeT+wagt1E9GXf H1lV2MYD23pDwK4RnMa66EZ+vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJScAjF FlWqiWiXlfqg9/cfiFaDMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5 M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl NHZITmFXdUNtNjc1ZF9lTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs4CFi044Do4DJrceJs1YspO1PctG//TfotlXEZkVCF7Bv/tAxpGII n0Hjt0pfRJGW5zvE2N/X+REu19NJgkhO2/EnbHivDB6scOETHWQK0O+TbtRNsC/S Zw6qczDaQ10pFa0j3hIQhpvPKJ35f6kDpv4YAnpz+BPQbmvmlInYUnq0MiBp5Zbf exmGUEdzAFLqUBBkcw75xTBbu0HX98HMkil1ItPGv6bOF0OlcmYORjdYBvl6WrzX puPMHekht36jkY03vXMLPU5rgdvLgeU+kZngNBXjeCbkonuyko7sBNDwSljHU3ZO WNjQENQy5Q3wNIJS3QB68Jo+JtJUeUIz -----END CERTIFICATE-----Generated at Mon Oct 20 09:34:46 2025 by rpki-client