$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft File: SQP-uXRPViXit-FaT4CyXtPdCfM.mft (raw, json) Hash identifier: ZH5tu1ZyLQbD7k3WxcUIlPbze+b9yZuv3nqE1G4ReCU= Subject key identifier: EB:A6:CE:4C:66:78:0F:D2:B3:96:FE:F8:10:60:F6:40:2E:82:36:6B Authority key identifier: 49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 Certificate issuer: /CN=A91D23D1/serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft Manifest number: 0686 Signing time: Sat 18 Oct 2025 23:56:09 +0000 Manifest this update: Sat 18 Oct 2025 23:56:09 +0000 Manifest next update: Sat 25 Oct 2025 23:56:09 +0000 Files and hashes: 1: SQP-uXRPViXit-FaT4CyXtPdCfM.crl (hash: 42EfjdQnAXRFYTdrUc37qpYwyEZJAUdHWRySAWBv/is=) 2: 32BA4EE0913311EB96A8E810C4F9AE02.roa (hash: +tVDBEUyvx+wiXhaQ43mL8NvF9ERpovp/kH/3l62E3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23D1, serialNumber=4903FEB9744F5625E2B7E15A4F80B25ED3DD09F3 Validity Not Before: Oct 18 23:56:09 2025 GMT Not After : Oct 25 23:56:09 2025 GMT Subject: CN=68f42919-95e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:eb:ff:10:be:b3:cd:a9:6a:b6:73:b6:95: e5:23:0a:ae:a4:11:75:e4:2c:e0:00:a4:3a:f2:93: 35:ff:ab:b8:ac:88:29:85:d4:02:66:31:77:44:f9: 02:59:c9:9b:df:ff:e6:a1:50:2b:ac:0a:e8:7e:f7: 55:2a:71:2e:0c:af:79:84:d5:86:f3:52:c6:87:64: b8:3e:5e:31:e9:07:3a:51:47:20:11:dc:e5:1c:57: e4:c8:72:7b:fb:2a:9b:2b:09:f6:40:a8:9e:cd:b1: 49:56:b2:32:08:25:eb:8f:ed:4d:d5:62:34:2b:ad: 9a:27:de:b8:44:6b:d0:1b:df:a5:03:20:a5:6d:9c: 12:ae:67:93:d4:b7:c5:f7:f2:57:e2:f2:c5:58:72: f3:aa:8d:d7:17:5f:4e:24:71:ee:69:af:54:c0:fc: b4:5b:f7:76:1f:3c:6d:66:75:c0:99:04:94:cc:69: ec:b0:c2:5b:34:0f:fa:db:c0:08:62:0a:34:fe:23: 0a:82:f2:1a:bb:19:d7:c7:dc:b5:0f:8d:be:68:47: bd:ab:8c:8b:6d:47:1b:a0:25:ba:f0:fd:33:45:5b: 25:a8:6f:74:be:7c:50:c9:98:58:35:e9:af:df:52: 13:af:5f:5e:34:62:56:f1:70:6a:79:cd:57:d3:b4: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A6:CE:4C:66:78:0F:D2:B3:96:FE:F8:10:60:F6:40:2E:82:36:6B X509v3 Authority Key Identifier: keyid:49:03:FE:B9:74:4F:56:25:E2:B7:E1:5A:4F:80:B2:5E:D3:DD:09:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQP-uXRPViXit-FaT4CyXtPdCfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23D1/1F338AC490CC11EBB1BE102DC4F9AE02/SQP-uXRPViXit-FaT4CyXtPdCfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6f:e1:4f:1d:9d:84:09:c0:31:00:50:f1:f1:96:5f:22:fb: 99:bb:cd:ca:d2:33:c7:fa:1c:47:c6:b3:0d:54:26:17:78:3a: 58:38:b4:db:11:70:5f:f4:14:55:fd:6a:53:00:8f:01:65:aa: 85:9c:6b:2a:8c:15:74:01:37:8c:fd:5e:59:df:d5:f4:e6:84: 58:04:e4:31:d6:f3:6f:44:b9:06:80:27:c2:d3:e1:48:45:55: 9f:79:a9:ae:80:5c:07:e8:6d:b6:68:59:3e:3f:bd:bd:28:72: b5:b0:e3:f7:fd:11:00:7e:9d:11:12:10:4c:99:57:db:a7:42: a1:f6:b2:b6:88:15:7f:61:b2:75:51:25:b2:53:40:ed:26:a7: 27:93:32:d7:1c:a6:85:38:5f:93:a6:a2:44:dd:28:7a:8f:f9: 1b:64:85:d2:94:18:00:45:08:6c:50:da:20:ed:02:67:c6:88: 9f:25:17:57:9c:e8:5e:cb:df:e5:58:96:d3:04:04:1b:a5:12: 9c:c2:6a:f0:93:a5:56:72:53:c1:22:bd:a7:6c:4d:8c:68:e4: b2:46:1f:41:ad:e9:d5:c7:30:e0:a2:ab:02:f4:86:99:9f:8c: 35:e1:9b:1c:20:08:e0:3a:ee:ff:00:5a:1b:a8:05:1f:31:98: 5f:e6:9a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzRDExMTAvBgNVBAUTKDQ5MDNGRUI5NzQ0RjU2MjVFMkI3RTE1QTRGODBCMjVF RDNERDA5RjMwHhcNMjUxMDE4MjM1NjA5WhcNMjUxMDI1MjM1NjA5WjAYMRYwFAYD VQQDEw02OGY0MjkxOS05NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Hjr/xC+s82parZztpXlIwqupBF15CzgAKQ68pM1/6u4rIgphdQCZjF3RPkC Wcmb3//moVArrArofvdVKnEuDK95hNWG81LGh2S4Pl4x6Qc6UUcgEdzlHFfkyHJ7 +yqbKwn2QKiezbFJVrIyCCXrj+1N1WI0K62aJ964RGvQG9+lAyClbZwSrmeT1LfF 9/JX4vLFWHLzqo3XF19OJHHuaa9UwPy0W/d2HzxtZnXAmQSUzGnssMJbNA/628AI Ygo0/iMKgvIauxnXx9y1D42+aEe9q4yLbUcboCW68P0zRVslqG90vnxQyZhYNemv 31ITr19eNGJW8XBqec1X07RJbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOumzkxm eA/Ss5b++BBg9kAugjZrMB8GA1UdIwQYMBaAFEkD/rl0T1Yl4rfhWk+Asl7T3Qnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNEMS8xRjMzOEFDNDkw Q0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZpWGl0LUZhVDRDeVh0UGRD Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NRUC11WFJQVmlYaXQtRmFUNEN5WHRQZENmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjNEMS8xRjMzOEFDNDkwQ0MxMUVCQjFCRTEwMkRDNEY5QUUwMi9TUVAtdVhSUFZp WGl0LUZhVDRDeVh0UGRDZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUb+FPHZ2ECcAxAFDx8ZZfIvuZu83K0jPH+hxHxrMNVCYXeDpYOLTb EXBf9BRV/WpTAI8BZaqFnGsqjBV0ATeM/V5Z39X05oRYBOQx1vNvRLkGgCfC0+FI RVWfeamugFwH6G22aFk+P729KHK1sOP3/REAfp0REhBMmVfbp0Kh9rK2iBV/YbJ1 USWyU0DtJqcnkzLXHKaFOF+TpqJE3Sh6j/kbZIXSlBgARQhsUNog7QJnxoifJRdX nOhey9/lWJbTBAQbpRKcwmrwk6VWclPBIr2nbE2MaOSyRh9BrenVxzDgoqsC9IaZ n4w14ZscIAjgOu7/AFobqAUfMZhf5pp/ -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:03 2025 by rpki-client