$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json) Hash identifier: gpDELXw+GPwpYIhJun1Pzu7x/6c+HuatBQkgHrOQ1Ag= Subject key identifier: 61:AB:71:F9:99:88:EF:1F:D1:DF:DD:67:45:16:EE:E0:91:BC:FA:75 Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft Manifest number: 3B Signing time: Sun 19 Oct 2025 10:57:31 +0000 Manifest this update: Sun 19 Oct 2025 10:57:30 +0000 Manifest next update: Sun 26 Oct 2025 10:57:30 +0000 Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: Wpzi6gd8Imq3s/5AZ10xp9ncl5NPI0K+jRxw1mBPhvI=) 2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0 Validity Not Before: Oct 19 10:57:30 2025 GMT Not After : Oct 26 10:57:30 2025 GMT Subject: CN=68f4c41b-fb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:91:4b:bf:a7:7b:ed:6b:88:8d:df:4a:56: 38:ff:88:1e:0e:1e:47:91:32:4f:2e:98:17:3f:99: 94:6e:00:31:60:4b:86:3a:73:e7:f6:29:7b:ae:68: ca:56:a0:15:60:82:be:d5:1b:17:eb:3a:71:a3:01: 3f:31:73:db:4a:8e:87:0b:39:d8:70:75:26:28:e4: 71:44:ba:6e:98:7c:2a:79:af:2c:56:fb:73:27:ce: 33:56:91:8a:94:0b:ce:c2:22:03:f1:30:43:70:51: 60:30:a7:f7:f5:05:0b:bb:6f:31:1b:63:3d:52:1b: cb:41:b5:44:2b:62:54:db:16:b3:20:bc:8c:17:fa: 0b:e4:ec:e5:ae:5b:ab:34:a5:65:3a:12:62:4c:f4: 92:1c:56:95:42:69:4b:a2:b2:fc:d4:5d:b0:a0:01: 18:7e:5d:1e:b5:b2:28:19:f3:74:69:46:03:db:fc: 8c:d9:57:08:38:fe:f2:fe:3b:86:b3:12:2d:bc:82: 42:fa:00:37:44:79:b8:a2:f5:32:bc:e7:c3:01:70: d1:e3:6f:19:65:fa:f0:3a:fd:b5:37:0c:bf:6e:f1: 2a:ce:11:df:66:82:ad:dc:77:8c:38:fb:d7:e3:27: 53:bb:e8:17:07:27:ae:de:ac:76:18:ba:45:8d:ee: 42:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AB:71:F9:99:88:EF:1F:D1:DF:DD:67:45:16:EE:E0:91:BC:FA:75 X509v3 Authority Key Identifier: keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:37:a4:2b:01:bf:59:c7:ed:be:f4:17:27:a1:a9:12:31:a1: 99:19:5e:ab:13:2e:90:1f:ed:e9:f9:12:22:9c:16:8e:38:82: 43:64:aa:cd:8c:4a:b6:af:6a:a9:5d:ee:0f:85:25:7d:40:eb: 4e:e8:f8:97:91:4c:3a:4b:8f:4c:56:15:fc:0d:c7:b6:2c:09: b4:6c:9e:bc:99:f0:53:cf:d7:87:5c:63:f2:26:87:b1:f5:b6: 2b:b1:9f:a7:2b:05:64:34:7c:a4:da:50:ff:32:c5:6d:a4:45: 5b:c7:3e:98:48:64:96:7e:a0:19:e3:6f:4f:79:30:f8:4e:2e: 7f:48:cd:9a:f3:02:d0:dc:ef:1a:17:8e:27:4c:04:2e:2e:31: 91:27:e4:e7:64:dc:73:5f:79:d4:ed:f1:59:36:9f:78:de:b5: cf:a7:81:e8:4c:fc:d0:2d:de:8c:a4:2b:d4:ec:d4:bf:e4:3d: 13:c9:3f:90:03:f5:0c:5b:b4:a1:b7:0c:c0:7e:1e:84:9e:13: 7d:f4:6c:31:bd:53:4b:53:51:73:5b:d4:03:77:38:5a:7b:12: 80:44:83:4e:d1:e4:2e:08:5e:f8:72:08:65:d9:d0:ad:df:af: 3f:5f:70:64:81:e8:10:a4:2c:50:41:3e:52:3b:61:8a:3a:0d: e6:75:dc:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Nzk5QzExMC8GA1UEBRMoQUQwNzAyNDAyOTNBQ0RDNTI0Q0ExMzM2NTgyRDcwQzIx OUZDQzdFMDAeFw0yNTEwMTkxMDU3MzBaFw0yNTEwMjYxMDU3MzBaMBgxFjAUBgNV BAMTDTY4ZjRjNDFiLWZiMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXBpFLv6d77WuIjd9KVjj/iB4OHkeRMk8umBc/mZRuADFgS4Y6c+f2KXuuaMpW oBVggr7VGxfrOnGjAT8xc9tKjocLOdhwdSYo5HFEum6YfCp5ryxW+3MnzjNWkYqU C87CIgPxMENwUWAwp/f1BQu7bzEbYz1SG8tBtUQrYlTbFrMgvIwX+gvk7OWuW6s0 pWU6EmJM9JIcVpVCaUuisvzUXbCgARh+XR61sigZ83RpRgPb/IzZVwg4/vL+O4az Ei28gkL6ADdEebii9TK858MBcNHjbxll+vA6/bU3DL9u8SrOEd9mgq3cd4w4+9fj J1O76BcHJ67erHYYukWN7kJtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYatx+ZmI 7x/R391nRRbu4JG8+nUwHwYDVR0jBBgwFoAUrQcCQCk6zcUkyhM2WC1wwhn8x+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzJEMzM1RTZBNTU0 NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFjQ1FDazZ6Y1VreWhNMldDMXd3aG44eC1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 OTlDLzJEMzM1RTZBNTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNV a3loTTJXQzF3d2huOHgtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQ3pCsBv1nH7b70FyehqRIxoZkZXqsTLpAf7en5EiKcFo44gkNkqs2M Sravaqld7g+FJX1A607o+JeRTDpLj0xWFfwNx7YsCbRsnryZ8FPP14dcY/Imh7H1 tiuxn6crBWQ0fKTaUP8yxW2kRVvHPphIZJZ+oBnjb095MPhOLn9IzZrzAtDc7xoX jidMBC4uMZEn5Odk3HNfedTt8Vk2n3jetc+ngehM/NAt3oykK9Ts1L/kPRPJP5AD 9QxbtKG3DMB+HoSeE330bDG9U0tTUXNb1AN3OFp7EoBEg07R5C4IXvhyCGXZ0K3f rz9fcGSB6BCkLFBBPlI7YYo6DeZ13AU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:39 2025 by rpki-client