$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: 5ZWs1vdwDs3Je4El/7wGaEdUWGTReJVKDjh2qHqp1HI= Subject key identifier: EC:92:22:BB:4B:B8:FF:F4:98:A7:C9:BB:E3:30:77:C7:C9:D3:00:66 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0456 Signing time: Sun 19 Oct 2025 02:05:16 +0000 Manifest this update: Sun 19 Oct 2025 02:05:16 +0000 Manifest next update: Sun 26 Oct 2025 02:05:16 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: adgknpasJDia5lSfu76Ro6JxcmgIlAKNdnnFL3mdfR4=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: Oct 19 02:05:16 2025 GMT Not After : Oct 26 02:05:16 2025 GMT Subject: CN=68f4475c-1576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:c5:be:5e:cd:20:17:3d:dc:e2:ce:a2:22: 99:30:90:82:44:9d:ed:04:91:cd:6f:dd:60:56:8f: 03:3f:8a:38:06:9f:ef:21:f6:aa:ed:d9:6a:e8:3e: 59:ec:06:fb:e4:8c:69:24:fd:4f:58:06:6b:17:9a: 63:5f:69:3e:14:18:74:b7:3e:55:45:ef:be:71:33: a8:4a:dc:91:68:48:a8:78:37:fd:c6:ef:5e:12:13: ec:c4:aa:06:c4:d3:32:d4:90:8e:96:89:4e:cc:6a: 06:35:82:b0:ab:57:a1:0c:49:a8:cb:e3:4b:03:9b: 63:ab:3e:20:91:9d:43:23:13:a9:bc:be:27:99:c9: 17:af:48:ed:5b:d5:25:e4:41:59:34:18:47:e5:c2: 04:84:36:07:26:cd:30:1f:f3:bb:bd:38:1a:15:30: da:be:af:0d:e2:0f:23:c2:28:19:9d:b8:9e:01:9f: 20:ab:12:36:82:be:38:a8:5b:fe:db:60:8a:92:a6: 7f:38:a5:69:d3:9c:18:67:0c:5b:ca:fc:c4:cc:f3: 54:96:95:24:52:2c:2a:4f:2d:9b:6b:72:8c:15:d2: bd:41:1d:38:c3:ce:83:ee:79:a2:3d:ad:00:63:96: ae:88:5b:b7:d2:98:c8:31:62:e8:90:36:75:a6:6c: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:92:22:BB:4B:B8:FF:F4:98:A7:C9:BB:E3:30:77:C7:C9:D3:00:66 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:88:b1:3a:5d:ce:ba:3e:b8:c2:6f:01:1c:de:51:e2:7d: f0:61:11:b9:a8:b4:2f:6a:a2:74:e2:95:89:30:ae:1c:f8:84: 07:44:3b:75:3a:b4:9b:4a:4a:c2:71:6e:64:40:35:d7:49:dd: 10:cb:29:54:98:a4:70:f7:da:b3:ce:c4:7c:be:2e:60:b6:7d: ab:9e:91:d3:40:2a:4d:db:43:65:fc:2e:38:f6:c0:68:a3:35: bf:88:21:1f:b1:d7:bf:a9:38:37:32:30:af:87:9b:d1:58:a6: 05:9f:f1:4c:ed:54:a4:fd:28:cc:47:bc:3a:34:b5:67:4d:fe: e2:ed:cc:ce:70:3e:e1:e8:5b:e6:f6:67:b2:db:81:d2:d3:20: 19:1f:e1:d4:55:85:f9:cf:da:2e:ed:6d:42:ad:04:b1:02:e4: fc:42:e2:c7:05:2a:cc:f8:fd:fc:61:53:60:19:78:da:9a:23: 0a:b7:9c:49:c2:13:94:c1:3c:15:c2:b4:1b:0b:8e:e5:60:ec: 38:85:64:27:33:4f:0b:aa:d1:1e:56:35:f3:aa:b9:1e:90:f5: 61:58:e7:14:c0:fd:87:4a:6b:23:2a:3e:fc:fc:d9:68:76:15: f3:93:c7:49:93:f6:e1:fb:81:43:c2:99:34:0b:07:1f:9d:e3: f7:59:b0:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUxMDE5MDIwNTE2WhcNMjUxMDI2MDIwNTE2WjAYMRYwFAYD VQQDEw02OGY0NDc1Yy0xNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0grFvl7NIBc93OLOoiKZMJCCRJ3tBJHNb91gVo8DP4o4Bp/vIfaq7dlq6D5Z 7Ab75IxpJP1PWAZrF5pjX2k+FBh0tz5VRe++cTOoStyRaEioeDf9xu9eEhPsxKoG xNMy1JCOlolOzGoGNYKwq1ehDEmoy+NLA5tjqz4gkZ1DIxOpvL4nmckXr0jtW9Ul 5EFZNBhH5cIEhDYHJs0wH/O7vTgaFTDavq8N4g8jwigZnbieAZ8gqxI2gr44qFv+ 22CKkqZ/OKVp05wYZwxbyvzEzPNUlpUkUiwqTy2ba3KMFdK9QR04w86D7nmiPa0A Y5auiFu30pjIMWLokDZ1pmxixQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOySIrtL uP/0mKfJu+Mwd8fJ0wBmMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0hoixOl3Ouj64wm8BHN5R4n3wYRG5qLQvaqJ04pWJMK4c+IQHRDt1 OrSbSkrCcW5kQDXXSd0QyylUmKRw99qzzsR8vi5gtn2rnpHTQCpN20Nl/C449sBo ozW/iCEfsde/qTg3MjCvh5vRWKYFn/FM7VSk/SjMR7w6NLVnTf7i7czOcD7h6Fvm 9mey24HS0yAZH+HUVYX5z9ou7W1CrQSxAuT8QuLHBSrM+P38YVNgGXjamiMKt5xJ whOUwTwVwrQbC47lYOw4hWQnM08LqtEeVjXzqrkekPVhWOcUwP2HSmsjKj78/Nlo dhXzk8dJk/bh+4FDwpk0CwcfneP3WbB8 -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:05 2025 by rpki-client