$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: 0T+yZkYjTIcUmXHHtE/VRY9gn3C/sboRfjRachvEsdA= Subject key identifier: 6D:5A:DD:10:8F:07:A0:D1:DB:25:4D:10:8B:9D:B9:1F:EA:D9:2F:0B Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: 010F Signing time: Sun 19 Oct 2025 07:51:50 +0000 Manifest this update: Sun 19 Oct 2025 07:51:49 +0000 Manifest next update: Sun 26 Oct 2025 07:51:49 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: vxJgJc61z2Zk3u1INhqnbYukHCiiIN6dvJR21iR6XSM=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: 1KiFLWub5BHrSO0tUJ2uOHpJ+a6PoNSbEd3Z8qezbIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Oct 19 07:51:49 2025 GMT Not After : Oct 26 07:51:49 2025 GMT Subject: CN=68f49896-7e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:84:cb:bc:18:e9:5b:5d:29:96:65:36:65: 66:28:68:90:ca:67:07:34:69:1c:e6:e9:c6:3a:b8: 3d:99:6d:9f:52:62:8c:0e:64:64:fc:c5:a0:ab:49: f6:6e:32:ce:41:9d:e4:ae:e0:3a:da:94:c9:23:5c: 32:89:ca:60:0a:01:4a:88:58:2c:02:dc:96:84:49: 7c:01:03:94:b2:24:d7:70:fe:e2:08:f8:3a:0b:c4: b4:22:60:a3:af:47:a7:94:3f:7a:d2:fb:01:45:c0: a9:28:ad:fd:ca:6f:35:dc:1a:84:b9:7d:9e:da:12: 84:09:01:20:f6:33:1d:22:0f:ee:0b:1c:b4:66:7b: f6:76:af:f5:49:d4:10:21:41:db:f2:74:b2:7a:3a: f9:a9:45:13:ee:14:d3:c3:b3:b4:be:95:3a:9a:ee: 50:1d:df:d0:d0:33:a5:90:4c:23:2e:7f:a6:92:dc: 6a:be:6b:e8:ba:84:9b:6e:59:a4:72:e9:18:51:85: 92:71:be:e6:2b:4e:a5:a2:23:a7:2a:27:0b:0c:a2: f7:9a:75:fd:94:f8:05:12:4d:af:8b:b5:b7:44:38: e2:0a:d0:43:34:16:fa:93:56:e8:81:da:28:84:c8: 6e:8a:7a:7e:fe:2e:de:e9:a6:73:7d:2d:c2:02:2f: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:DD:10:8F:07:A0:D1:DB:25:4D:10:8B:9D:B9:1F:EA:D9:2F:0B X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:79:f6:0f:f4:73:bc:fb:40:2e:cc:9d:59:fa:98:1f:0a:20: 5f:1e:89:21:cf:74:55:e3:fc:60:ef:31:75:8c:78:9d:11:96: 7e:08:b9:8d:f8:66:fe:89:9f:3a:ff:b7:8f:13:09:32:09:90: 0e:84:7f:a7:b2:37:90:86:a9:b2:01:22:31:9b:ca:62:93:42: c2:8a:17:97:13:b5:3b:b8:31:a1:bb:27:2c:53:ff:d7:a1:df: 15:cc:df:87:94:8a:9d:c5:e1:ae:15:55:c2:4e:af:78:ae:99: 98:62:f3:b8:89:f4:94:c8:91:5c:1c:7d:dc:15:c0:23:2f:36: 08:d5:0a:95:ee:75:45:ac:00:92:a7:fa:23:79:fc:92:c5:06: 42:e6:a7:d3:fb:84:8d:06:28:d9:7d:95:1c:4d:48:84:66:f0: cb:2a:c5:13:b6:ee:63:eb:ff:e4:67:14:51:fc:07:33:0f:d3: f8:10:95:95:1a:dd:68:ff:2b:c1:1c:d4:ff:94:31:a8:f0:52: c0:a3:f4:ca:91:21:6c:b2:a5:68:69:c6:e4:35:94:b3:1b:09: 7b:20:86:ff:c7:c0:5b:fa:d8:6f:23:ac:06:c2:02:a7:11:b8: 77:27:6c:34:d1:e7:7e:f5:9c:ad:8c:e3:a2:d3:04:56:48:e1: 20:f2:e0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUxMDE5MDc1MTQ5WhcNMjUxMDI2MDc1MTQ5WjAYMRYwFAYD VQQDEw02OGY0OTg5Ni03ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVSEy7wY6VtdKZZlNmVmKGiQymcHNGkc5unGOrg9mW2fUmKMDmRk/MWgq0n2 bjLOQZ3kruA62pTJI1wyicpgCgFKiFgsAtyWhEl8AQOUsiTXcP7iCPg6C8S0ImCj r0enlD960vsBRcCpKK39ym813BqEuX2e2hKECQEg9jMdIg/uCxy0Znv2dq/1SdQQ IUHb8nSyejr5qUUT7hTTw7O0vpU6mu5QHd/Q0DOlkEwjLn+mktxqvmvouoSbblmk cukYUYWScb7mK06loiOnKicLDKL3mnX9lPgFEk2vi7W3RDjiCtBDNBb6k1bogdoo hMhuinp+/i7e6aZzfS3CAi/IWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1a3RCP B6DR2yVNEIuduR/q2S8LMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqefYP9HO8+0AuzJ1Z+pgfCiBfHokhz3RV4/xg7zF1jHidEZZ+CLmN +Gb+iZ86/7ePEwkyCZAOhH+nsjeQhqmyASIxm8pik0LCiheXE7U7uDGhuycsU//X od8VzN+HlIqdxeGuFVXCTq94rpmYYvO4ifSUyJFcHH3cFcAjLzYI1QqV7nVFrACS p/ojefySxQZC5qfT+4SNBijZfZUcTUiEZvDLKsUTtu5j6//kZxRR/AczD9P4EJWV Gt1o/yvBHNT/lDGo8FLAo/TKkSFssqVoacbkNZSzGwl7IIb/x8Bb+thvI6wGwgKn Ebh3J2w00ed+9ZytjOOi0wRWSOEg8uAY -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:15 2025 by rpki-client