$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json) Hash identifier: iKVacmnptlx8hgbDR4smNFRBqYO9m/OkBEahftlUj9g= Subject key identifier: E6:3F:45:F2:0C:47:96:50:2D:13:51:EB:E0:66:CE:1D:AF:C7:7A:F7 Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft Manifest number: 07D2 Signing time: Sat 18 Oct 2025 22:29:09 +0000 Manifest this update: Sat 18 Oct 2025 22:29:08 +0000 Manifest next update: Sat 25 Oct 2025 22:29:08 +0000 Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: xCfaekmatQRxkcU7eSw1NJwHxvZHOJfnBpxDDoO90l4=) 2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: 5bBWhpUzFVVFApumie9XG8UpL1cOYbfpPDdsz7OV/tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Oct 18 22:29:08 2025 GMT Not After : Oct 25 22:29:08 2025 GMT Subject: CN=68f414b4-da82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:dc:11:49:8f:d1:37:89:4b:b9:53:40:29: e6:52:b1:8d:c7:47:2a:fc:ff:58:9f:89:da:27:99: fd:fc:c2:31:eb:85:b1:5f:02:9e:fc:ca:bd:7f:80: 09:22:34:17:0b:cb:31:2b:ac:b0:aa:33:e5:aa:e8: 70:fe:56:9f:b7:6f:44:65:67:86:bf:0f:97:d0:a2: cf:51:94:ae:f3:a0:c7:83:c3:62:7d:f1:86:17:62: 96:49:9f:d7:fa:4e:3e:94:e2:37:87:db:28:1b:69: 83:fb:f2:92:25:0c:62:76:18:62:f0:50:44:d8:c3: 24:03:3b:27:8c:0a:a6:36:c4:16:66:57:99:32:4f: e5:0d:c3:5c:eb:8d:8f:f0:20:88:3e:41:88:03:0a: a4:6b:47:58:53:84:a5:78:3e:aa:ae:f8:42:34:08: 11:5b:64:c4:ed:9d:e4:df:93:0b:9a:5e:30:a2:54: 18:62:2b:e0:ed:c5:7f:c2:3b:2a:5d:ac:89:13:bc: 60:c4:e6:92:f4:33:d3:95:86:44:28:98:8f:e0:70: 21:2d:2f:91:60:74:98:fd:31:a9:45:5b:70:eb:f1: 80:07:7e:1a:1f:47:c3:d0:84:a5:41:b5:f1:df:66: 9d:58:aa:fc:ac:be:f5:55:6b:4d:14:7e:32:57:51: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:45:F2:0C:47:96:50:2D:13:51:EB:E0:66:CE:1D:AF:C7:7A:F7 X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f5:6f:04:a7:e7:b7:a3:72:42:51:6f:22:4e:39:0b:60:be: b8:92:a7:d3:60:32:63:62:44:02:a2:4a:55:05:ae:55:37:2a: 2a:f5:4f:21:ca:f3:9b:81:a9:e3:24:ff:33:26:39:0d:f4:6c: 88:7d:cf:ff:0d:01:5e:2a:4a:dd:43:ec:f1:84:ff:38:f3:cc: 3b:77:47:8b:71:17:9d:78:50:64:2e:7f:97:86:b2:ba:b2:e8: eb:f9:e5:c9:50:b4:c5:90:df:3e:26:17:5f:be:2a:26:59:f3: 9d:c3:8a:8d:9e:86:04:90:a8:e8:f7:46:57:74:75:20:db:ec: 98:d5:16:f6:ee:4b:45:d2:32:ef:9c:36:6e:e4:5c:ed:8b:22: 9b:4e:44:3c:f4:a6:59:12:b8:c0:47:15:6e:c1:9e:f0:43:5c: 03:1f:e8:36:a9:b5:cc:94:df:ee:c0:7a:a9:fa:45:52:02:f4: f9:93:ea:f7:65:36:36:9b:84:44:04:56:b0:44:f4:ad:8f:29: cc:83:51:00:1c:36:02:23:98:10:fe:f5:0a:04:53:6b:30:86: a0:5f:21:45:15:82:1b:94:18:a5:ba:16:76:86:eb:5c:0d:62: 77:ee:e0:64:35:de:48:8e:96:6e:90:73:78:d9:55:83:47:45: 85:da:b5:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUxMDE4MjIyOTA4WhcNMjUxMDI1MjIyOTA4WjAYMRYwFAYD VQQDEw02OGY0MTRiNC1kYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CLcEUmP0TeJS7lTQCnmUrGNx0cq/P9Yn4naJ5n9/MIx64WxXwKe/Mq9f4AJ IjQXC8sxK6ywqjPlquhw/laft29EZWeGvw+X0KLPUZSu86DHg8NiffGGF2KWSZ/X +k4+lOI3h9soG2mD+/KSJQxidhhi8FBE2MMkAzsnjAqmNsQWZleZMk/lDcNc642P 8CCIPkGIAwqka0dYU4SleD6qrvhCNAgRW2TE7Z3k35MLml4wolQYYivg7cV/wjsq XayJE7xgxOaS9DPTlYZEKJiP4HAhLS+RYHSY/TGpRVtw6/GAB34aH0fD0ISlQbXx 32adWKr8rL71VWtNFH4yV1HthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY/RfIM R5ZQLRNR6+Bmzh2vx3r3MB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59W8Ep+e3o3JCUW8iTjkLYL64kqfTYDJjYkQCokpVBa5VNyoq9U8h yvObganjJP8zJjkN9GyIfc//DQFeKkrdQ+zxhP8488w7d0eLcRedeFBkLn+XhrK6 sujr+eXJULTFkN8+JhdfviomWfOdw4qNnoYEkKjo90ZXdHUg2+yY1Rb27ktF0jLv nDZu5FztiyKbTkQ89KZZErjARxVuwZ7wQ1wDH+g2qbXMlN/uwHqp+kVSAvT5k+r3 ZTY2m4REBFawRPStjynMg1EAHDYCI5gQ/vUKBFNrMIagXyFFFYIblBiluhZ2hutc DWJ37uBkNd5IjpZukHN42VWDR0WF2rUe -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:53 2025 by rpki-client