$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: X7qvzMnyDdsSAp3VFRahR8T8J/CnH0tmdinGZA4MIuA= Subject key identifier: F6:7F:04:14:D3:BD:E3:F2:21:DE:5D:BF:FA:BF:50:8C:68:92:D7:D7 Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: 33 Signing time: Thu 09 Oct 2025 08:52:49 +0000 Manifest this update: Thu 09 Oct 2025 08:52:49 +0000 Manifest next update: Thu 16 Oct 2025 08:52:48 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: uS5JevOXT7rv4ceRP2q5aWWP9gb/DYS2QFFKCQjg+Xk=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Oct 2025 08:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Oct 9 08:52:49 2025 GMT Not After : Oct 16 08:52:48 2025 GMT Subject: CN=68e777e1-e33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:38:47:76:8d:16:a2:4f:58:a3:17:4d:06: 04:d5:04:a3:99:7f:0e:99:b2:29:f5:b8:b7:5e:47: c8:17:d4:8b:0a:7f:b5:4f:7a:40:62:db:cd:dd:82: e7:8f:bb:ec:1a:2f:8c:61:8f:49:96:8a:94:d8:86: 8f:10:47:b2:d6:2d:a0:5d:26:7c:95:25:eb:b3:df: 7a:fc:76:19:20:cb:2f:92:e8:98:7c:b4:3e:0b:74: c2:e0:32:32:2a:c7:b1:7e:b5:86:a8:66:7d:e3:4f: 25:9f:f8:a2:b3:03:a2:a0:58:64:de:03:ec:88:91: 7c:eb:51:79:05:22:95:e2:ed:f5:65:3c:02:64:db: 5e:93:22:7d:69:58:00:df:0f:6a:2a:e4:3b:a3:da: 32:9a:97:23:91:c6:cb:77:27:2c:03:8e:fc:52:ad: 21:f4:c8:9a:2a:d5:73:d0:97:c0:85:4e:ec:5c:ce: 48:cd:50:d8:e7:79:75:f4:92:2d:7e:1e:e6:0e:41: f5:01:fb:00:7b:58:d2:58:68:5c:aa:a0:a4:75:7c: 4c:73:18:68:44:dd:6d:6f:59:2a:77:52:dc:88:26: eb:a9:71:03:2f:f1:aa:29:d5:59:e5:62:23:19:d4: 6b:3e:69:2a:96:ab:b3:e4:83:0a:af:94:31:76:9c: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7F:04:14:D3:BD:E3:F2:21:DE:5D:BF:FA:BF:50:8C:68:92:D7:D7 X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c6:9f:ac:16:bf:5b:bd:4d:f4:9e:64:1c:8a:f1:aa:e0:47: d0:a5:92:92:b9:ed:56:92:24:77:c4:37:c3:eb:cf:d2:9f:b4: 0a:3f:6e:2e:87:b8:a1:b6:8a:14:c6:b9:dd:bf:b8:1a:ea:d5: 49:3d:6a:57:f1:e6:7a:28:6c:83:84:28:b7:24:a3:ef:fa:47: dc:9c:04:db:97:c7:80:b8:b8:31:12:e0:a8:bb:f1:71:de:3f: 7e:ff:d9:b3:51:c8:c8:7b:2f:86:9b:d6:33:81:52:e9:31:ab: c1:36:4a:4d:ae:d0:5f:a4:e0:81:1f:2a:0e:6f:13:e2:56:e2: 5f:4c:7b:ac:44:f0:6d:55:50:1b:28:00:81:22:6b:61:db:b4: af:69:11:78:aa:68:05:76:8c:21:06:23:40:e3:25:91:ea:d7: e7:26:48:f6:e0:7d:ba:2c:1d:54:1c:9f:c9:7d:a0:b0:f4:2b: 4d:a1:f5:ca:fe:fd:e1:5f:1f:fe:e9:6d:76:08:53:f3:ff:5c: a6:24:76:29:1c:f3:94:96:e6:29:3f:0a:81:9a:da:fc:e7:34: 94:c4:16:29:16:64:cd:c1:5b:26:1e:0f:0b:a9:11:5b:61:56: e8:4f:ef:fe:09:70:7b:67:45:af:3b:bf:51:07:b3:6a:5b:16: 27:cd:19:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0 NTJDQ0JGNDAeFw0yNTEwMDkwODUyNDlaFw0yNTEwMTYwODUyNDhaMBgxFjAUBgNV BAMTDTY4ZTc3N2UxLWUzM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCobThHdo0Wok9YoxdNBgTVBKOZfw6Zsin1uLdeR8gX1IsKf7VPekBi283dgueP u+waL4xhj0mWipTYho8QR7LWLaBdJnyVJeuz33r8dhkgyy+S6Jh8tD4LdMLgMjIq x7F+tYaoZn3jTyWf+KKzA6KgWGTeA+yIkXzrUXkFIpXi7fVlPAJk216TIn1pWADf D2oq5Duj2jKalyORxst3JywDjvxSrSH0yJoq1XPQl8CFTuxczkjNUNjneXX0ki1+ HuYOQfUB+wB7WNJYaFyqoKR1fExzGGhE3W1vWSp3UtyIJuupcQMv8aop1VnlYiMZ 1Gs+aSqWq7PkgwqvlDF2nHnFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9n8EFNO9 4/Ih3l2/+r9QjGiS19cwHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2 OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTGn6wWv1u9TfSeZByK8argR9ClkpK57VaSJHfEN8Prz9KftAo/bi6H uKG2ihTGud2/uBrq1Uk9alfx5noobIOEKLcko+/6R9ycBNuXx4C4uDES4Ki78XHe P37/2bNRyMh7L4ab1jOBUukxq8E2Sk2u0F+k4IEfKg5vE+JW4l9Me6xE8G1VUBso AIEia2HbtK9pEXiqaAV2jCEGI0DjJZHq1+cmSPbgfbosHVQcn8l9oLD0K02h9cr+ /eFfH/7pbXYIU/P/XKYkdikc85SW5ik/CoGa2vznNJTEFikWZM3BWyYeDwupEVth VuhP7/4JcHtnRa87v1EHs2pbFifNGZo= -----END CERTIFICATE-----Generated at Sat Oct 11 06:26:40 2025 by rpki-client