$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: 8TxGprCol+3IGGiktEVwbjRx8SuwknT9GKL7YNn1B2s= Subject key identifier: 4A:25:8F:9F:F7:A3:AE:CF:39:0A:80:8B:9C:7A:D2:F1:E9:6B:4C:A0 Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: 38 Signing time: Sun 19 Oct 2025 11:02:32 +0000 Manifest this update: Sun 19 Oct 2025 11:02:31 +0000 Manifest next update: Sun 26 Oct 2025 11:02:31 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: KAVhwVoRNPz6o6trH2DS5TtsCMmVnXMk5vgsaw08EbI=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Oct 19 11:02:31 2025 GMT Not After : Oct 26 11:02:31 2025 GMT Subject: CN=68f4c548-971d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:d7:23:57:86:4a:5d:d6:df:bc:d7:72:47: e7:a6:5a:cb:f0:d1:e9:83:3d:74:f0:a7:e5:b6:48: d4:39:35:35:fb:6d:29:fe:2c:23:9f:19:4b:69:38: e8:0a:00:93:e8:32:92:99:a9:11:b3:f6:08:1c:07: 1d:45:32:a0:11:d2:f8:16:08:b1:6f:22:af:6a:53: 93:4b:00:36:f5:3b:96:4c:45:eb:34:03:ab:a2:45: d0:f1:5b:76:93:50:2a:51:f4:49:4d:d2:6b:43:74: 32:da:2b:a6:18:ab:c9:ff:10:0a:22:ff:4e:41:99: ab:0c:e3:6d:57:86:27:15:37:f8:ed:04:19:a4:bb: d8:fa:79:2a:c5:90:81:ef:2a:7c:4d:d7:7f:95:3d: 1a:fb:c3:62:24:52:22:aa:00:c6:42:a9:3e:67:17: b8:69:67:ea:dd:5a:96:9a:73:cb:7b:5c:9f:17:7c: 57:00:cb:60:90:63:47:09:ae:1a:3b:b8:84:63:53: 51:cf:f0:b2:bb:24:03:97:eb:9a:1d:6f:45:98:2d: ff:9a:4b:c1:6e:d2:6b:20:44:15:70:71:3e:d8:f8: 74:d1:e9:ed:44:bb:b7:5f:7c:42:58:c5:4b:5e:ef: 15:3a:20:8a:8c:5e:d1:6d:07:30:49:0e:dd:e7:02: 51:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:8F:9F:F7:A3:AE:CF:39:0A:80:8B:9C:7A:D2:F1:E9:6B:4C:A0 X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:2a:d8:03:8e:16:20:15:bd:99:35:ba:1e:f5:0d:7a:3f:2c: 44:d2:5f:3c:3d:98:39:76:7c:79:0f:04:d2:83:23:95:7c:99: bb:b6:b3:3a:8f:8f:bf:bd:41:12:8f:55:3a:c9:56:3c:7b:2e: ed:85:d7:6f:9e:5d:12:f0:3d:70:90:92:9f:14:c5:3a:6a:e1: ca:08:6f:f2:0b:48:96:3f:c1:36:4c:b4:f2:5f:64:df:80:5a: 3f:c0:7d:46:9d:3f:94:8e:ad:a4:0d:8f:d2:db:66:5f:4c:ec: c9:a3:d9:c6:7c:2e:8b:11:17:92:c6:e0:42:a9:de:ae:b8:8e: e4:39:1f:37:3c:5a:01:6b:3b:f3:46:9c:92:69:ae:7c:f7:3c: 1c:89:95:76:bc:e2:be:5c:91:da:04:c1:99:56:15:17:41:3d: 63:47:8c:79:aa:91:9c:45:10:cb:74:51:23:87:9f:c1:7c:5a: 79:70:31:c0:8c:e3:bd:77:31:da:81:9a:6b:bb:53:08:80:f1: f1:65:65:90:d1:9c:7d:d6:8d:d2:63:26:d2:f6:e4:78:28:54: 28:4d:ef:10:57:a3:88:82:c0:63:95:2f:fb:6f:d4:48:3c:ea: 3f:ec:69:9e:ae:a0:e9:35:05:58:33:61:2d:2c:1b:51:65:9a: 98:a9:5c:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0 NTJDQ0JGNDAeFw0yNTEwMTkxMTAyMzFaFw0yNTEwMjYxMTAyMzFaMBgxFjAUBgNV BAMTDTY4ZjRjNTQ4LTk3MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5YtcjV4ZKXdbfvNdyR+emWsvw0emDPXTwp+W2SNQ5NTX7bSn+LCOfGUtpOOgK AJPoMpKZqRGz9ggcBx1FMqAR0vgWCLFvIq9qU5NLADb1O5ZMRes0A6uiRdDxW3aT UCpR9ElN0mtDdDLaK6YYq8n/EAoi/05BmasM421XhicVN/jtBBmku9j6eSrFkIHv KnxN13+VPRr7w2IkUiKqAMZCqT5nF7hpZ+rdWpaac8t7XJ8XfFcAy2CQY0cJrho7 uIRjU1HP8LK7JAOX65odb0WYLf+aS8Fu0msgRBVwcT7Y+HTR6e1Eu7dffEJYxUte 7xU6IIqMXtFtBzBJDt3nAlG7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSiWPn/ej rs85CoCLnHrS8elrTKAwHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2 OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGAq2AOOFiAVvZk1uh71DXo/LETSXzw9mDl2fHkPBNKDI5V8mbu2szqP j7+9QRKPVTrJVjx7Lu2F12+eXRLwPXCQkp8UxTpq4coIb/ILSJY/wTZMtPJfZN+A Wj/AfUadP5SOraQNj9LbZl9M7Mmj2cZ8LosRF5LG4EKp3q64juQ5Hzc8WgFrO/NG nJJprnz3PByJlXa84r5ckdoEwZlWFRdBPWNHjHmqkZxFEMt0USOHn8F8WnlwMcCM 4713MdqBmmu7UwiA8fFlZZDRnH3WjdJjJtL25HgoVChN7xBXo4iCwGOVL/tv1Eg8 6j/saZ6uoOk1BVgzYS0sG1FlmpipXCM= -----END CERTIFICATE-----Generated at Tue Oct 21 00:44:23 2025 by rpki-client