$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json) Hash identifier: YFUWh/0xN9dXOs8yzgSAxIMtQ+YoKhxT/ngOLYNultw= Subject key identifier: 40:28:EC:95:BC:39:C9:94:A2:E1:D4:9E:65:1F:C7:21:7B:64:00:96 Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft Manifest number: 82 Signing time: Sun 19 Oct 2025 09:57:12 +0000 Manifest this update: Sun 19 Oct 2025 09:57:12 +0000 Manifest next update: Sun 26 Oct 2025 09:57:12 +0000 Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: AsD19/tOv02EmNMDSGD0XH9pgtFxvFmxH+SQxOCc4w0=) 2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7 Validity Not Before: Oct 19 09:57:12 2025 GMT Not After : Oct 26 09:57:12 2025 GMT Subject: CN=68f4b5f8-0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:77:36:59:63:a8:c3:33:0a:92:14:af:7d: 1d:47:f2:91:01:af:09:a2:ab:3c:40:5b:b7:f5:70: b6:c0:d4:cc:2a:5f:73:f1:2f:4a:58:c1:45:33:11: 09:c1:a1:3e:c8:ab:28:c6:4b:72:10:dd:47:8e:2c: a4:22:a2:bc:32:13:13:d5:bb:35:b3:42:87:c6:4d: cf:e3:d2:d2:a9:a8:03:4e:dd:1e:5c:da:ce:26:31: 4c:56:97:cf:5a:d4:67:76:92:b1:21:fa:2e:d1:f6: 30:c5:7e:a8:79:09:7f:29:b7:a2:66:c4:68:d0:45: 23:44:41:f1:3d:90:2f:8b:6e:5e:f9:f8:f8:1c:3a: ff:66:81:60:fa:d2:b0:e2:f0:8e:bb:86:31:82:cb: 8e:94:3f:cf:5b:5c:c7:71:52:7b:8e:9d:8f:2d:03: f9:ae:51:4c:55:0d:84:99:85:63:a5:5c:a5:4f:89: c9:4c:82:75:f0:51:94:74:34:38:fd:84:bd:73:f4: 56:32:61:1b:5a:0b:31:57:a8:15:fc:0f:b0:e7:c8: 24:bf:8b:54:75:f3:7b:b9:52:e2:99:b3:db:28:3d: a5:b9:19:79:e3:cf:cf:31:97:58:e0:e1:9c:51:dd: 13:1d:57:c4:44:14:0f:a4:1b:5f:d1:e3:39:e6:81: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:EC:95:BC:39:C9:94:A2:E1:D4:9E:65:1F:C7:21:7B:64:00:96 X509v3 Authority Key Identifier: keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c3:0b:33:1c:52:b0:03:40:f1:eb:8c:ca:ae:1d:f7:dc:1d: 74:76:25:ff:7d:26:9d:0c:e2:f1:8f:7d:42:73:dc:11:e7:7a: 03:82:32:57:7a:e0:40:55:c7:31:28:89:32:3c:eb:03:fe:5a: 21:01:79:61:31:44:54:63:7d:56:fd:7f:65:15:a7:55:79:78: 71:48:93:b4:59:6f:a3:48:6d:13:98:f0:be:04:a8:c9:c2:30: b0:c7:58:a3:d8:c3:74:82:09:d0:7a:d4:3f:43:85:a7:75:2a: 7e:2f:28:8b:34:87:24:29:db:2d:84:c4:ad:69:fd:72:41:fd: 05:b9:14:c9:18:12:7b:08:cc:9c:ee:22:e5:db:2d:56:55:05: dc:59:d6:f2:a9:c4:61:4d:f0:18:e4:11:97:b0:04:4e:61:7e: 13:6c:03:26:ab:f9:f8:91:7e:03:a3:81:f7:e9:bf:7e:b6:f9: 55:ae:d3:aa:a0:97:c5:1e:af:f3:b3:d9:e2:39:57:38:d6:f4: c3:9c:50:9e:96:11:69:54:3c:f1:27:f1:49:b8:1a:79:a5:f2: 75:a2:69:ae:13:7b:6a:2b:99:f3:1e:2b:09:06:de:0f:64:f2: b4:ba:41:5d:23:b6:be:1b:d1:41:4e:2f:be:79:cf:85:d8:a4: ab:c9:ab:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKDA5MDY3ODgyQ0RDMDIwMzQ5MTYxRTA5M0JGMzQ3MzFC M0Y4MjJCRDcwHhcNMjUxMDE5MDk1NzEyWhcNMjUxMDI2MDk1NzEyWjAYMRYwFAYD VQQDEw02OGY0YjVmOC0wZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvh3NlljqMMzCpIUr30dR/KRAa8Joqs8QFu39XC2wNTMKl9z8S9KWMFFMxEJ waE+yKsoxktyEN1HjiykIqK8MhMT1bs1s0KHxk3P49LSqagDTt0eXNrOJjFMVpfP WtRndpKxIfou0fYwxX6oeQl/KbeiZsRo0EUjREHxPZAvi25e+fj4HDr/ZoFg+tKw 4vCOu4YxgsuOlD/PW1zHcVJ7jp2PLQP5rlFMVQ2EmYVjpVylT4nJTIJ18FGUdDQ4 /YS9c/RWMmEbWgsxV6gV/A+w58gkv4tUdfN7uVLimbPbKD2luRl548/PMZdY4OGc Ud0THVfERBQPpBtf0eM55oF2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAo7JW8 OcmUouHUnmUfxyF7ZACWMB8GA1UdIwQYMBaAFAkGeILNwCA0kWHgk780cxs/givX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GM0QyMkMyQ0U3 NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlEU1JZZUNUdnpSekd6LUNL OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GM0QyMkMyQ0U3NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlE U1JZZUNUdnpSekd6LUNLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgwwszHFKwA0Dx64zKrh333B10diX/fSadDOLxj31Cc9wR53oDgjJX euBAVccxKIkyPOsD/lohAXlhMURUY31W/X9lFadVeXhxSJO0WW+jSG0TmPC+BKjJ wjCwx1ij2MN0ggnQetQ/Q4WndSp+LyiLNIckKdsthMStaf1yQf0FuRTJGBJ7CMyc 7iLl2y1WVQXcWdbyqcRhTfAY5BGXsAROYX4TbAMmq/n4kX4Do4H36b9+tvlVrtOq oJfFHq/zs9niOVc41vTDnFCelhFpVDzxJ/FJuBp5pfJ1ommuE3tqK5nzHisJBt4P ZPK0ukFdI7a+G9FBTi++ec+F2KSryaun -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:27 2025 by rpki-client