$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json) Hash identifier: Z6ZA6AUK/Jc95NYiO5Bp4+dOEGlpw+3M1mAkzZXzSKY= Subject key identifier: 9E:FF:67:72:E3:A9:0E:9A:29:D9:0D:B7:52:E5:97:7A:DF:6E:2F:F3 Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0E1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft Manifest number: 0DFA Signing time: Sat 18 Oct 2025 18:31:55 +0000 Manifest this update: Sat 18 Oct 2025 18:31:55 +0000 Manifest next update: Sat 25 Oct 2025 18:31:55 +0000 Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: +IkQ6qkwV6Ps+LtW5XOWrLFbu5Q4Gu24VNuFSQlM/jU=) 2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: /hGH0Pm/VcL/t48Buv7bSF4xPC6xqGHOH5JeW2XnqTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3612 (0xe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: Oct 18 18:31:55 2025 GMT Not After : Oct 25 18:31:55 2025 GMT Subject: CN=68f3dd1b-b245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:df:de:25:ec:ff:8a:62:db:d7:a4:a9:fe: 04:70:b8:f4:2a:48:ee:cd:51:93:59:f3:af:63:d9: e0:79:aa:08:fd:49:ff:27:50:99:88:7d:e2:15:7a: 2d:dc:76:01:2a:ef:c5:5c:6f:8c:7c:e1:bc:62:d5: 11:86:15:53:6b:5b:42:5b:c9:be:70:4b:6e:06:b7: b4:6b:e3:a9:36:b8:4d:85:75:36:d9:bb:07:c9:a2: cd:f5:5f:17:af:84:3c:ea:5f:9f:b0:0f:e8:3e:a0: 4b:af:0f:b7:2b:0f:bf:5f:82:0a:67:4f:66:50:f2: a7:26:b3:7e:6a:ee:8e:c0:ca:4c:46:6a:94:65:03: 60:79:2d:c5:9b:15:14:62:f4:18:c9:bb:62:be:ab: ac:c1:e8:95:73:ee:fb:31:76:6b:56:c7:6f:55:4b: 91:19:fd:9d:6c:05:5e:0f:10:41:cd:6d:fc:48:02: 54:55:ef:ae:50:36:6e:39:06:fe:7b:2a:2f:75:74: 10:8e:17:1e:08:76:00:95:43:6c:d3:7d:c8:d7:c9: 2b:14:7c:40:a8:0a:5a:02:2f:38:77:e8:21:78:c6: 5e:56:0b:bd:4e:91:83:ab:4a:f2:a5:ac:45:fe:ff: a2:25:67:98:9b:6c:83:43:a3:bc:bf:c8:56:3a:af: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:67:72:E3:A9:0E:9A:29:D9:0D:B7:52:E5:97:7A:DF:6E:2F:F3 X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:26:ce:46:4a:b3:f4:d3:91:4b:94:f3:ba:da:17:38:47:5b: 08:f5:37:f8:22:79:5f:74:6e:ba:cf:c5:bb:71:c1:fd:0c:03: 0a:21:6b:7a:44:db:68:75:ba:a6:62:20:9d:84:79:0b:0d:10: a5:45:91:6d:ab:e1:cb:11:51:8c:8b:e4:87:97:6a:e1:22:9c: b6:c9:68:b0:75:35:82:d0:bf:9c:66:0d:51:7a:9f:43:58:e7: d1:62:c9:7f:13:cd:60:f3:eb:70:50:9a:c1:11:3a:10:85:24: 49:12:4b:23:a5:11:33:08:17:21:b3:3a:27:a0:3d:f3:cb:7e: d9:3e:e2:c5:e7:5c:5b:44:cd:bd:52:fa:ee:6a:99:a5:3d:c4: 27:f2:64:39:35:6d:33:45:8e:d3:2b:de:82:96:d5:84:da:58: 0a:13:7a:4c:07:31:55:95:3a:bf:b9:e4:b3:2c:bb:b3:ea:38: d4:ee:bc:33:38:b7:61:83:bf:78:d1:be:ef:6e:8d:39:8b:2f: c2:f0:f5:c5:2a:30:55:47:c4:f1:d3:77:f8:40:f5:26:7a:8f: a1:58:95:c8:d3:0f:3a:aa:39:ce:06:0e:26:a5:9a:9d:52:a7: 1a:00:6d:c4:5c:67:20:85:17:c7:75:c9:7d:31:cc:57:be:b0: 7d:fb:a8:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUxMDE4MTgzMTU1WhcNMjUxMDI1MTgzMTU1WjAYMRYwFAYD VQQDEw02OGYzZGQxYi1iMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupbf3iXs/4pi29ekqf4EcLj0KkjuzVGTWfOvY9ngeaoI/Un/J1CZiH3iFXot 3HYBKu/FXG+MfOG8YtURhhVTa1tCW8m+cEtuBre0a+OpNrhNhXU22bsHyaLN9V8X r4Q86l+fsA/oPqBLrw+3Kw+/X4IKZ09mUPKnJrN+au6OwMpMRmqUZQNgeS3FmxUU YvQYybtivqusweiVc+77MXZrVsdvVUuRGf2dbAVeDxBBzW38SAJUVe+uUDZuOQb+ eyovdXQQjhceCHYAlUNs033I18krFHxAqApaAi84d+gheMZeVgu9TpGDq0rypaxF /v+iJWeYm2yDQ6O8v8hWOq+HRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7/Z3Lj qQ6aKdkNt1Lll3rfbi/zMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH LVl1RGE4NlBiUUEyU0lISHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbJs5GSrP005FLlPO62hc4R1sI9Tf4InlfdG66z8W7ccH9DAMKIWt6 RNtodbqmYiCdhHkLDRClRZFtq+HLEVGMi+SHl2rhIpy2yWiwdTWC0L+cZg1Rep9D WOfRYsl/E81g8+twUJrBEToQhSRJEksjpREzCBchszonoD3zy37ZPuLF51xbRM29 UvruapmlPcQn8mQ5NW0zRY7TK96CltWE2lgKE3pMBzFVlTq/ueSzLLuz6jjU7rwz OLdhg7940b7vbo05iy/C8PXFKjBVR8Tx03f4QPUmeo+hWJXI0w86qjnOBg4mpZqd UqcaAG3EXGcghRfHdcl9McxXvrB9+6hF -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:04 2025 by rpki-client