$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: /lt+uv/oLksEiP5n2KIrVkXyt/9F4QdC4zYSGE6qrbs= Subject key identifier: 82:3E:32:87:A8:40:86:2F:6E:B2:74:FF:8F:50:C4:91:48:1D:BE:1C Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 03B6 Signing time: Sun 19 Oct 2025 02:41:21 +0000 Manifest this update: Sun 19 Oct 2025 02:41:20 +0000 Manifest next update: Sun 26 Oct 2025 02:41:20 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: +FtkmnH54sjxIC/MgUDXIbzwSrXrHbaiquWV/7rKXF8=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Oct 19 02:41:20 2025 GMT Not After : Oct 26 02:41:20 2025 GMT Subject: CN=68f44fd0-1314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:44:ce:88:8a:cd:35:5f:1a:9e:78:b8:5b: 8a:2c:91:27:45:e2:14:15:52:d1:f2:a8:08:05:9d: c7:49:b2:5e:02:d1:09:60:bc:ed:e2:4f:be:4c:ef: af:cf:bb:48:a4:9f:19:b4:a7:20:f8:56:2f:3f:ff: 95:72:27:19:ac:06:3b:66:8f:c1:76:64:c0:73:82: 7d:e6:03:07:04:4e:af:26:5f:44:7c:50:64:83:5a: ec:b4:36:9d:5e:e5:79:35:2a:74:f8:fa:46:e1:7c: 33:36:9b:5b:5f:55:9e:1c:a4:fa:59:09:3b:87:cb: 70:6a:03:20:db:57:de:86:d8:1e:b3:3e:d6:6c:62: 59:ef:d1:5d:eb:1b:8e:47:f6:b0:7b:d6:12:d1:63: 20:95:1f:dd:96:a2:52:b3:52:c0:7c:6a:3a:a6:39: 71:82:9f:2b:e0:74:77:4d:b1:64:fe:0c:66:8e:3d: 0a:e4:ea:0f:07:b2:45:c2:69:da:32:36:27:66:29: 78:87:a0:05:94:8e:00:e7:b7:d0:2d:c7:2a:cc:88: fb:7e:b5:c3:44:01:40:f2:cb:ee:5f:1b:19:bd:ab: ca:f0:ff:1b:c0:05:bd:ae:5d:b9:03:2f:69:82:20: b9:12:9c:78:5a:85:0e:9b:d0:6b:a7:3b:a3:93:d3: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3E:32:87:A8:40:86:2F:6E:B2:74:FF:8F:50:C4:91:48:1D:BE:1C X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:81:2b:f9:99:81:0f:66:5d:e4:14:72:8b:cb:dc:78:51:c7: 62:02:28:03:0f:5c:12:24:32:2c:f1:ab:8e:af:09:06:b5:49: 6d:ad:e3:09:6b:a7:ee:a8:ab:8e:50:5a:e3:40:c0:13:15:cf: cb:66:8f:6d:e7:90:cb:aa:9e:4e:5b:76:b4:c1:cd:77:6b:c3: 15:07:11:c0:d1:94:e2:2a:74:1d:2e:27:e0:14:fa:57:f5:b3: 90:1c:f6:04:54:f9:cf:e3:6e:36:5e:e2:a9:5f:b3:90:6d:f0: ed:50:f1:21:66:68:57:24:bb:74:85:47:fe:a8:30:31:a0:08: ca:d2:1b:2c:b6:d3:ce:39:ab:94:92:84:3b:e5:9e:1c:80:79: ac:6e:19:ac:c4:57:ce:47:ef:aa:f7:21:28:2d:b1:7a:4f:1b: 52:2d:66:af:57:eb:73:0a:d2:1f:eb:bd:30:a8:9a:8d:fd:67: 35:9e:66:8a:a6:28:73:3c:13:fd:fd:9f:51:c9:27:50:eb:e8: 49:47:8e:80:25:9c:aa:fb:07:10:f3:55:85:76:fd:3e:2e:5c: 9f:37:0d:ba:b1:b1:86:33:ec:5f:1a:8f:66:0f:13:6e:20:8c: cb:74:5f:05:9e:a8:ce:9c:89:9f:28:86:52:0c:92:d0:a8:a2: 75:3d:8f:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUxMDE5MDI0MTIwWhcNMjUxMDI2MDI0MTIwWjAYMRYwFAYD VQQDEw02OGY0NGZkMC0xMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkJEzoiKzTVfGp54uFuKLJEnReIUFVLR8qgIBZ3HSbJeAtEJYLzt4k++TO+v z7tIpJ8ZtKcg+FYvP/+VcicZrAY7Zo/BdmTAc4J95gMHBE6vJl9EfFBkg1rstDad XuV5NSp0+PpG4XwzNptbX1WeHKT6WQk7h8twagMg21fehtgesz7WbGJZ79Fd6xuO R/awe9YS0WMglR/dlqJSs1LAfGo6pjlxgp8r4HR3TbFk/gxmjj0K5OoPB7JFwmna MjYnZil4h6AFlI4A57fQLccqzIj7frXDRAFA8svuXxsZvavK8P8bwAW9rl25Ay9p giC5Epx4WoUOm9Brpzujk9PaYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII+Moeo QIYvbrJ0/49QxJFIHb4cMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdgSv5mYEPZl3kFHKLy9x4UcdiAigDD1wSJDIs8auOrwkGtUltreMJ a6fuqKuOUFrjQMATFc/LZo9t55DLqp5OW3a0wc13a8MVBxHA0ZTiKnQdLifgFPpX 9bOQHPYEVPnP4242XuKpX7OQbfDtUPEhZmhXJLt0hUf+qDAxoAjK0hssttPOOauU koQ75Z4cgHmsbhmsxFfOR++q9yEoLbF6TxtSLWavV+tzCtIf670wqJqN/Wc1nmaK pihzPBP9/Z9RySdQ6+hJR46AJZyq+wcQ81WFdv0+LlyfNw26sbGGM+xfGo9mDxNu IIzLdF8FnqjOnImfKIZSDJLQqKJ1PY93 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:07 2025 by rpki-client