$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json) Hash identifier: VC+r5NvQU5Xc5ulGezKx5JLWVQiaE9UAkCvOTeyhrog= Subject key identifier: E1:0D:06:53:51:88:65:0F:5C:71:BB:F0:13:5C:2F:68:72:D8:09:A6 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 2100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft Manifest number: 55BC Signing time: Mon 20 Oct 2025 14:58:41 +0000 Manifest this update: Mon 20 Oct 2025 14:58:40 +0000 Manifest next update: Mon 27 Oct 2025 14:58:40 +0000 Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: rzJ/xPA9a74ZcwPqmR8jUed5aLOCyr0Z3ux0md1y5PU=) 2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=) 3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8448 (0x2100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Validity Not Before: Oct 20 14:58:40 2025 GMT Not After : Oct 27 14:58:40 2025 GMT Subject: CN=68f64e20-96b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:5c:10:4c:82:0d:76:9b:4a:9f:30:45:65: 2a:59:97:e6:6c:12:1d:4a:51:21:fd:aa:4a:8d:48: 63:5d:2f:13:a8:c9:87:d8:a9:7d:82:64:85:a7:07: 2f:29:e1:49:72:a1:ef:76:e2:b9:2b:88:2a:4a:58: 39:0d:50:6b:67:53:75:0f:57:c3:af:59:82:d8:d0: 2c:3a:a9:c3:45:33:4a:7b:c3:c0:3a:12:34:b5:24: 21:10:9f:1a:d9:dc:6f:59:89:10:96:20:65:4f:60: 8b:94:74:0e:4d:be:8c:45:ac:d7:f6:53:6e:9e:6f: 46:e0:25:28:59:df:73:bd:05:d3:0b:05:c1:15:11: 48:8b:c4:de:c5:fb:67:47:a7:38:3a:d9:3b:2e:f2: 07:cc:4a:88:03:a5:05:e4:48:11:f3:b2:26:a5:b9: 88:78:33:cb:4e:a1:9a:2b:fd:20:5f:08:60:a8:e7: bc:74:f5:57:ee:30:6b:63:3c:a2:08:12:13:66:05: a1:57:37:3a:df:0d:2f:64:95:a4:6d:d4:bc:9b:5a: 2e:4c:bd:ab:c3:1f:36:67:60:6c:c8:90:17:f6:08: 73:7d:9d:70:8f:03:e8:6b:4a:23:3b:32:aa:2f:70: b8:c8:cb:b6:ba:56:cd:db:f2:7a:e5:b0:37:f9:24: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:06:53:51:88:65:0F:5C:71:BB:F0:13:5C:2F:68:72:D8:09:A6 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:81:b9:c7:d4:96:94:df:3a:c0:6d:52:78:e4:c4:99:97:02: 24:c5:f1:ad:af:51:72:c8:17:c8:b3:74:cd:9c:62:91:10:bb: 6c:16:b5:ed:7a:b8:ef:6b:e4:85:75:9d:c2:21:d2:59:be:45: 3e:a3:4b:5d:b9:ee:a3:0e:46:6a:70:f4:5c:19:bd:3c:26:32: 10:f2:f1:d8:c7:e7:ef:59:21:35:fc:9d:82:16:f6:6e:dd:e3: fd:78:d2:e3:31:90:18:8a:2a:ea:6c:98:fc:53:1b:95:29:9c: 1d:d6:05:1a:03:b6:67:b5:bb:b7:77:45:0e:aa:22:3f:0c:82: 6e:83:98:5a:c6:e1:ba:89:37:3b:9a:38:8a:b7:7a:39:f5:2e: f5:bd:73:36:13:d4:e4:ec:92:63:27:93:72:b4:b3:1f:c1:fa: d9:5c:1b:b2:74:bd:00:de:9f:11:5d:ef:a8:b0:7c:7d:38:2f: b4:e8:6f:cb:29:b6:33:06:83:51:ff:a5:e3:b0:7b:94:1b:ca: ab:d4:8b:27:eb:24:8e:14:26:44:6b:4c:33:3b:57:9c:33:3a: 82:cd:7e:31:a1:27:4c:76:9e:9a:f0:11:f2:f9:74:96:9a:2c: 98:70:e6:b0:57:95:9b:a4:28:dc:81:18:43:a2:97:f0:8d:d9: 52:b4:60:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjUxMDIwMTQ1ODQwWhcNMjUxMDI3MTQ1ODQwWjAYMRYwFAYD VQQDEw02OGY2NGUyMC05NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6JcEEyCDXabSp8wRWUqWZfmbBIdSlEh/apKjUhjXS8TqMmH2Kl9gmSFpwcv KeFJcqHvduK5K4gqSlg5DVBrZ1N1D1fDr1mC2NAsOqnDRTNKe8PAOhI0tSQhEJ8a 2dxvWYkQliBlT2CLlHQOTb6MRazX9lNunm9G4CUoWd9zvQXTCwXBFRFIi8Texftn R6c4Otk7LvIHzEqIA6UF5EgR87ImpbmIeDPLTqGaK/0gXwhgqOe8dPVX7jBrYzyi CBITZgWhVzc63w0vZJWkbdS8m1ouTL2rwx82Z2BsyJAX9ghzfZ1wjwPoa0ojOzKq L3C4yMu2ulbN2/J65bA3+SSM5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOENBlNR iGUPXHG78BNcL2hy2AmmMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMw dnh5WjRSM2c5Vy1FTHYyWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAegbnH1JaU3zrAbVJ45MSZlwIkxfGtr1FyyBfIs3TNnGKRELtsFrXt erjva+SFdZ3CIdJZvkU+o0tdue6jDkZqcPRcGb08JjIQ8vHYx+fvWSE1/J2CFvZu 3eP9eNLjMZAYiirqbJj8UxuVKZwd1gUaA7Zntbu3d0UOqiI/DIJug5haxuG6iTc7 mjiKt3o59S71vXM2E9Tk7JJjJ5NytLMfwfrZXBuydL0A3p8RXe+osHx9OC+06G/L KbYzBoNR/6XjsHuUG8qr1Isn6ySOFCZEa0wzO1ecMzqCzX4xoSdMdp6a8BHy+XSW miyYcOawV5WbpCjcgRhDopfwjdlStGDY -----END CERTIFICATE-----Generated at Tue Oct 21 04:55:20 2025 by rpki-client