$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json) Hash identifier: is+N14FHNlS12Lchx2AAQKR3JbXm2mAeDfedxB0Osjc= Subject key identifier: C4:EA:14:D4:26:C8:16:F3:4D:48:70:89:C2:44:D7:41:6B:0D:F9:58 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 12FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft Manifest number: 12F5 Signing time: Mon 20 Oct 2025 17:27:30 +0000 Manifest this update: Mon 20 Oct 2025 17:27:29 +0000 Manifest next update: Mon 27 Oct 2025 17:27:29 +0000 Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: UYTT+2ceFkwIXodHIqkhq46m8NwW5DNi50HvbZ0GEEE=) 2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4863 (0x12ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Oct 20 17:27:29 2025 GMT Not After : Oct 27 17:27:29 2025 GMT Subject: CN=68f67101-07ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:87:af:bb:00:8e:79:5b:80:b1:5e:82:48: 90:05:ea:01:eb:3d:b1:a2:da:84:5d:e7:3d:f0:79: 5f:01:46:71:79:d8:8f:9e:64:3e:14:07:93:89:93: f3:cd:16:86:3a:b3:06:81:dd:f5:1d:e5:3d:8e:16: 67:1c:fb:ce:e9:ec:52:0b:49:2d:f3:87:43:42:01: d4:68:3e:aa:3f:b2:19:06:88:30:82:4e:c0:45:62: dd:f5:3c:b2:05:16:d2:f8:36:da:16:b6:f2:1c:16: 49:c2:a6:3d:43:cd:2e:13:56:cf:9f:02:23:62:46: fa:dd:10:fe:87:13:4f:1c:50:9f:91:8d:bc:96:eb: b9:b7:e9:4c:88:c4:2e:bb:d8:9f:b3:9b:22:38:ef: ac:90:c3:7b:3c:b5:d6:66:06:13:91:fa:cb:69:ba: e6:1a:75:06:4d:bf:ed:cd:bf:92:0d:63:d0:9b:5a: 53:8c:67:09:f0:c2:68:fa:04:8e:dd:dc:f2:1a:7e: da:04:4c:b4:76:bb:51:b9:db:a3:41:3c:90:6f:a3: 00:03:24:e3:a9:21:12:81:75:96:01:38:45:ed:67: 0e:5c:dd:92:a9:da:a6:6a:78:35:c8:92:06:c8:c9: 40:62:00:45:7d:88:ae:57:91:b5:b0:b5:db:1e:c9: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:14:D4:26:C8:16:F3:4D:48:70:89:C2:44:D7:41:6B:0D:F9:58 X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0d:82:4a:ba:7b:dc:42:c4:f1:b9:6b:37:6f:19:47:06:ce: b8:6e:fc:c1:86:68:4f:c6:77:54:be:de:8d:ce:ba:b6:31:b8: bc:e3:dd:fa:ff:4c:4d:1d:9c:8d:d2:ba:7d:3e:89:42:f7:78: 99:cb:75:b1:1c:db:a8:ac:cb:ba:75:ff:94:d8:33:f0:3e:75: 72:51:2a:ab:af:8b:8f:1c:9d:71:40:89:6c:cb:3d:94:8b:32: 73:3f:83:18:0e:3e:f4:32:2d:5a:c6:77:fd:f3:01:3c:ac:58: 7b:b4:78:b4:a0:a2:5a:70:ea:f7:b3:e4:17:22:9a:aa:8e:7e: ea:85:ec:ce:96:cb:48:61:df:93:6d:e4:ad:5f:9c:6e:c5:91: 26:c3:21:8c:2f:82:6e:04:e6:f7:c8:63:12:d3:79:31:ce:68: ff:13:b6:dc:fa:17:af:cb:cc:04:2a:82:18:b4:ea:71:e0:a7: 2f:0f:4a:b6:0b:c6:cb:98:30:b8:03:9c:67:dd:8c:68:13:86: 4b:ab:6b:24:78:dd:4d:7a:51:01:62:b2:b1:a3:d9:bf:24:e4: 73:f0:48:dd:6c:f0:a8:52:d6:b6:c1:8c:03:5a:d9:e4:36:75: 39:ff:94:1a:f0:cc:57:3b:d0:42:6b:e1:20:47:d1:bd:e7:94: c3:84:26:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUxMDIwMTcyNzI5WhcNMjUxMDI3MTcyNzI5WjAYMRYwFAYD VQQDEw02OGY2NzEwMS0wN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfeHr7sAjnlbgLFegkiQBeoB6z2xotqEXec98HlfAUZxediPnmQ+FAeTiZPz zRaGOrMGgd31HeU9jhZnHPvO6exSC0kt84dDQgHUaD6qP7IZBogwgk7ARWLd9Tyy BRbS+DbaFrbyHBZJwqY9Q80uE1bPnwIjYkb63RD+hxNPHFCfkY28luu5t+lMiMQu u9ifs5siOO+skMN7PLXWZgYTkfrLabrmGnUGTb/tzb+SDWPQm1pTjGcJ8MJo+gSO 3dzyGn7aBEy0drtRudujQTyQb6MAAyTjqSESgXWWAThF7WcOXN2Sqdqmang1yJIG yMlAYgBFfYiuV5G1sLXbHskkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTqFNQm yBbzTUhwicJE10FrDflYMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N akIzcl85QkJXUVdFZ2d4dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnDYJKunvcQsTxuWs3bxlHBs64bvzBhmhPxndUvt6Nzrq2Mbi84936 /0xNHZyN0rp9PolC93iZy3WxHNuorMu6df+U2DPwPnVyUSqrr4uPHJ1xQIlsyz2U izJzP4MYDj70Mi1axnf98wE8rFh7tHi0oKJacOr3s+QXIpqqjn7qhezOlstIYd+T beStX5xuxZEmwyGML4JuBOb3yGMS03kxzmj/E7bc+hevy8wEKoIYtOpx4KcvD0q2 C8bLmDC4A5xn3YxoE4ZLq2skeN1NelEBYrKxo9m/JORz8EjdbPCoUta2wYwDWtnk NnU5/5Qa8MxXO9BCa+EgR9G955TDhCbz -----END CERTIFICATE-----Generated at Mon Oct 20 19:10:51 2025 by rpki-client