$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: eL1edmBkQua+m+AwdSNuWbDXNvWEMN8ZyU8vnSC8L4c= Subject key identifier: A1:4B:C0:B8:CD:D8:13:4D:2D:16:24:15:FC:6D:6A:DD:0E:5F:D5:29 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 06:56:20 +0000 Manifest this update: Sun 19 Oct 2025 06:56:19 +0000 Manifest next update: Sun 26 Oct 2025 06:56:19 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: DMLFiXRholvPnQR2oPRoEdH+uqp36jJqIMJPiHTu/bo=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Oct 19 06:56:19 2025 GMT Not After : Oct 26 06:56:19 2025 GMT Subject: CN=68f48b93-8a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:c4:58:1c:d8:90:3a:7e:d9:6a:e8:9d:06: 6e:41:59:4f:62:91:b8:94:61:71:88:c2:8c:69:bd: 02:f2:e0:ec:41:12:93:5f:02:60:45:32:3d:2c:80: d4:ea:bc:1a:f3:4f:2e:56:5a:4c:52:90:2d:ad:ff: f8:59:c7:d9:e5:c9:e8:f4:79:0b:a7:d1:3f:5f:79: 69:ee:5c:96:6e:18:74:36:ee:ce:6a:cd:95:be:41: d0:88:91:84:b1:dd:93:97:50:be:60:9f:08:a3:f3: f0:d2:5a:32:db:85:63:71:5a:60:82:fc:15:5e:a4: a0:c5:31:32:d3:c7:16:92:63:9f:1a:c7:e5:cf:3d: 86:53:93:20:ff:c9:29:af:3b:ea:d0:34:78:9a:1c: cc:04:00:0d:b4:3f:c9:fa:34:bf:39:61:83:bc:74: c0:b6:ba:ed:ca:59:75:70:63:fe:71:49:67:30:72: f3:5a:4c:7d:a4:be:e2:2b:42:a5:53:95:8f:28:9d: b2:da:c0:89:a7:9a:79:8c:a1:27:2e:f4:7d:20:51: ed:aa:91:97:dc:8e:d3:5c:a0:8e:a9:24:af:87:a0: 30:81:b2:15:66:8d:1a:a2:b6:d8:c0:34:c8:f5:d2: 0a:6c:5e:22:46:cb:fd:1e:3b:a7:79:ce:75:54:60: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4B:C0:B8:CD:D8:13:4D:2D:16:24:15:FC:6D:6A:DD:0E:5F:D5:29 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:48:2f:18:6b:59:9a:a7:58:c7:9d:47:52:7f:94:57:62:b2: 51:f0:ee:a9:c0:88:55:17:21:0a:f9:93:8c:05:b6:1b:a1:53: 2a:50:1c:b2:2c:f5:95:6a:21:f7:c0:7f:19:d8:64:fe:31:bd: ca:6f:1e:29:bd:ed:75:6f:ec:20:41:05:aa:c2:68:88:5f:4b: dd:ce:34:06:77:ed:f2:5b:b3:67:16:dd:14:dc:70:0b:85:c5: 89:52:78:43:11:d0:24:aa:24:b8:20:63:c2:c0:24:fb:ca:05: 07:f0:d5:95:ca:9c:74:81:02:41:05:f4:5e:d1:f1:08:6b:37: 3a:05:21:b5:60:de:c1:43:45:57:79:16:17:f4:d0:3f:ef:22: eb:82:f7:a3:eb:b1:31:6f:44:6b:26:ab:a9:ba:4a:28:48:57: e2:1d:ac:ca:08:85:cf:e6:27:49:92:90:ee:f3:75:70:c0:61: ae:03:88:ad:f8:24:7b:b2:c5:7e:9c:06:0c:31:4f:cb:d1:09: 32:b3:29:71:71:6f:85:b1:ff:f6:0d:da:81:cb:cc:c4:cc:c4: 63:1a:e2:63:83:b9:ea:49:96:79:06:53:60:ad:26:10:8b:b3: 15:18:97:4c:9d:4b:0e:89:65:3a:74:6d:85:00:a6:bf:0a:4d: 64:9c:74:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUxMDE5MDY1NjE5WhcNMjUxMDI2MDY1NjE5WjAYMRYwFAYD VQQDEw02OGY0OGI5My04YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysLEWBzYkDp+2WronQZuQVlPYpG4lGFxiMKMab0C8uDsQRKTXwJgRTI9LIDU 6rwa808uVlpMUpAtrf/4WcfZ5cno9HkLp9E/X3lp7lyWbhh0Nu7Oas2VvkHQiJGE sd2Tl1C+YJ8Io/Pw0loy24VjcVpggvwVXqSgxTEy08cWkmOfGsflzz2GU5Mg/8kp rzvq0DR4mhzMBAANtD/J+jS/OWGDvHTAtrrtyll1cGP+cUlnMHLzWkx9pL7iK0Kl U5WPKJ2y2sCJp5p5jKEnLvR9IFHtqpGX3I7TXKCOqSSvh6AwgbIVZo0aorbYwDTI 9dIKbF4iRsv9Hjunec51VGDZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFLwLjN 2BNNLRYkFfxtat0OX9UpMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSC8Ya1map1jHnUdSf5RXYrJR8O6pwIhVFyEK+ZOMBbYboVMqUByy LPWVaiH3wH8Z2GT+Mb3Kbx4pve11b+wgQQWqwmiIX0vdzjQGd+3yW7NnFt0U3HAL hcWJUnhDEdAkqiS4IGPCwCT7ygUH8NWVypx0gQJBBfRe0fEIazc6BSG1YN7BQ0VX eRYX9NA/7yLrgvej67Exb0RrJqupukooSFfiHazKCIXP5idJkpDu83VwwGGuA4it +CR7ssV+nAYMMU/L0QkysylxcW+Fsf/2DdqBy8zEzMRjGuJjg7nqSZZ5BlNgrSYQ i7MVGJdMnUsOiWU6dG2FAKa/Ck1knHQs -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:06 2025 by rpki-client