$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: 428k9M/jFYgSwpo2jid9bBmYsPsANLzYL7a9Z0jK7qA= Subject key identifier: 24:EA:C7:54:28:E1:00:D6:31:6C:36:5C:D2:FC:25:E7:DB:DA:89:5F Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0C39 Signing time: Sat 18 Oct 2025 19:32:58 +0000 Manifest this update: Sat 18 Oct 2025 19:32:57 +0000 Manifest next update: Sat 25 Oct 2025 19:32:57 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: j/GXm7sXuz3NTnijrZ3gPGa4KU6rlrEAnfBhGkauagE=) 2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: vd/2YU/fZHY0X+88OePyC1GrfRf3guoIzxWdo48FOwA=) 3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 9WFKUJqUOgDB07wt9CN3L8jHFMm+Bp2TRv/IY0cRCLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Oct 18 19:32:57 2025 GMT Not After : Oct 25 19:32:57 2025 GMT Subject: CN=68f3eb6a-2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:2f:84:3b:fd:c9:28:bd:b8:f5:3f:4c:05: 1c:37:07:2b:a0:15:3b:74:22:34:57:56:67:b6:92: 4a:6e:3d:a5:c6:15:df:b6:5b:d3:15:f4:d3:a2:67: 50:3f:ef:84:ff:93:bd:f8:e9:ac:7e:b4:33:95:22: c5:8c:f4:9e:ef:8f:28:9d:89:7a:55:3a:60:2a:a6: d8:b2:35:e1:31:ee:eb:87:e3:d6:71:7e:2a:fb:6f: be:de:1d:81:e5:6a:6a:3e:5b:67:21:53:be:8b:74: 5a:f4:e9:28:2d:5e:52:07:26:d4:ca:e2:06:46:d9: 6e:57:a3:22:47:ee:7a:17:74:69:84:70:f5:6e:c4: 21:92:c8:a6:20:89:4d:6e:b0:50:f4:1d:97:31:cd: 53:86:75:29:1e:e5:fe:d5:69:e4:7a:d3:63:70:25: 77:42:82:75:c8:c9:cf:3b:97:5b:49:3a:4d:ce:05: f0:1a:b6:f4:1d:82:c1:92:48:b3:a1:d1:3d:3b:37: 8f:0b:a7:63:65:56:68:da:e5:12:3d:44:d2:f8:eb: 1e:7c:ce:80:b1:98:39:71:e3:88:fd:a7:38:00:bc: 5c:60:3b:d0:e5:29:eb:f9:c9:5b:16:04:cc:78:57: 8d:18:f2:c5:f2:f8:8e:52:d3:4f:03:93:2e:d8:d8: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:C7:54:28:E1:00:D6:31:6C:36:5C:D2:FC:25:E7:DB:DA:89:5F X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:95:22:15:7f:41:98:1b:41:85:ea:2c:98:09:98:6b:ab:87: 7c:a7:2b:52:d7:e5:07:20:93:9d:e7:5d:62:2c:77:7b:55:b9: c7:8e:a7:ff:50:c4:49:d5:2d:34:14:47:62:8c:22:c9:51:05: ab:36:f8:ff:a4:13:aa:bd:6c:63:25:39:85:14:a2:5f:52:2f: 42:23:e2:a1:b5:7c:44:93:65:f9:6b:dc:6a:a4:ca:df:3e:ea: 1e:26:08:98:e7:41:15:4d:2c:da:60:71:28:34:cf:19:4d:44: aa:39:3b:1f:85:bc:ea:fc:a9:9c:26:9d:00:ae:19:36:a8:27: ec:12:e0:a0:b3:6d:65:93:e4:70:70:06:42:46:18:27:3a:35: 25:4f:7d:6b:9b:dd:d2:a9:8a:7d:a6:5c:3b:eb:ae:9d:08:11: fa:6c:e7:b9:af:fd:b0:25:ca:0a:46:89:c0:6a:82:4c:3e:0d: ee:c1:69:16:cd:e5:2b:70:57:78:48:84:61:62:7a:d3:81:7a: 4e:26:8a:10:3e:84:f2:bb:dd:f4:22:21:19:29:11:6c:24:1e: 87:c6:82:e8:e8:3b:7b:c5:cc:72:92:f2:59:90:1a:23:24:81: 16:b3:a0:e8:e6:c1:31:25:ea:27:c6:b9:7b:1e:44:b6:31:b8: 4a:e1:57:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjUxMDE4MTkzMjU3WhcNMjUxMDI1MTkzMjU3WjAYMRYwFAYD VQQDEw02OGYzZWI2YS0yYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqAvhDv9ySi9uPU/TAUcNwcroBU7dCI0V1ZntpJKbj2lxhXftlvTFfTTomdQ P++E/5O9+OmsfrQzlSLFjPSe748onYl6VTpgKqbYsjXhMe7rh+PWcX4q+2++3h2B 5WpqPltnIVO+i3Ra9OkoLV5SBybUyuIGRtluV6MiR+56F3RphHD1bsQhksimIIlN brBQ9B2XMc1ThnUpHuX+1WnketNjcCV3QoJ1yMnPO5dbSTpNzgXwGrb0HYLBkkiz odE9OzePC6djZVZo2uUSPUTS+OsefM6AsZg5ceOI/ac4ALxcYDvQ5Snr+clbFgTM eFeNGPLF8viOUtNPA5Mu2NgGMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTqx1Qo 4QDWMWw2XNL8Jefb2olfMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqlSIVf0GYG0GF6iyYCZhrq4d8pytS1+UHIJOd511iLHd7VbnHjqf/ UMRJ1S00FEdijCLJUQWrNvj/pBOqvWxjJTmFFKJfUi9CI+KhtXxEk2X5a9xqpMrf PuoeJgiY50EVTSzaYHEoNM8ZTUSqOTsfhbzq/KmcJp0Arhk2qCfsEuCgs21lk+Rw cAZCRhgnOjUlT31rm93SqYp9plw7666dCBH6bOe5r/2wJcoKRonAaoJMPg3uwWkW zeUrcFd4SIRhYnrTgXpOJooQPoTyu930IiEZKRFsJB6HxoLo6Dt7xcxykvJZkBoj JIEWs6Do5sExJeonxrl7HkS2MbhK4Ves -----END CERTIFICATE-----Generated at Mon Oct 20 08:59:00 2025 by rpki-client