$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: 0tCCUK6dnRvX70G4E+9kwmidWHXRDHcAzp7vXXHbfXc= Subject key identifier: 2D:C4:09:01:A1:7D:FE:A6:42:05:E0:9E:31:DB:8B:BB:4A:96:C3:9D Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 05C6 Signing time: Thu 18 Sep 2025 23:24:12 +0000 Manifest this update: Thu 18 Sep 2025 23:24:11 +0000 Manifest next update: Thu 25 Sep 2025 23:24:11 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: qIl3nnZ2ywYb7b31Dle8brDLjDuzOqdiOahDNN9yFVU=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Sep 18 23:24:11 2025 GMT Not After : Sep 25 23:24:11 2025 GMT Subject: CN=68cc949c-d262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:94:2a:7f:0a:63:8a:93:93:ce:28:49:b4: bf:5d:25:56:70:c4:b3:31:e9:bb:32:14:48:92:0d: 32:22:1e:60:35:37:cb:0c:ff:1e:91:b4:01:fd:5b: 17:13:1c:04:61:c8:ed:5e:da:73:02:75:35:4c:43: ba:d3:39:15:67:28:50:8c:f9:6c:d4:fb:05:37:dd: 38:fe:d8:9e:82:ec:66:1e:97:52:ca:ba:89:b1:5d: e7:7c:7e:5e:87:f4:a8:b8:c0:02:cd:c5:9a:4d:0c: 83:5a:a6:f3:48:b3:61:79:db:45:66:a3:ce:b6:d2: fa:b3:16:86:fc:0d:1a:d4:4d:a3:09:17:58:6f:a7: d1:5e:ac:64:96:39:07:a6:27:5d:2c:a3:f2:c1:7c: 50:8c:a4:37:7f:2f:4a:9c:89:c6:ad:56:a9:0c:d1: 73:0d:7e:51:93:6e:0c:11:de:a9:01:88:ba:d3:ad: 3f:2d:13:2a:11:c3:e6:1f:1c:d5:48:ac:9d:19:c0: 50:84:2b:43:50:47:6e:9f:97:ad:ef:0c:2b:23:d4: e0:fb:98:e9:da:0e:19:12:dc:72:0e:63:eb:99:aa: 9c:66:00:5a:ea:a0:db:61:ab:3c:1b:1e:09:a2:43: f1:49:67:7c:15:cd:7c:97:fe:17:a6:b1:fb:e7:51: 7b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:09:01:A1:7D:FE:A6:42:05:E0:9E:31:DB:8B:BB:4A:96:C3:9D X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5e:2d:a2:63:24:2e:63:f6:85:7b:94:af:71:90:65:2f:d0: 59:65:c0:f3:af:67:33:17:77:f7:2b:58:e5:ae:14:2f:e1:34: 61:00:bb:37:66:0e:ba:15:36:4b:bb:95:f7:8b:eb:c2:b2:a3: 9c:51:d5:af:1c:25:51:7b:2c:00:3e:66:ac:7a:15:01:67:ab: 8b:da:0f:2f:5c:e7:f6:8e:91:21:f9:d7:e4:e5:9d:1e:8d:59: 86:23:72:6a:93:96:53:b9:1d:bc:0e:60:31:cb:a3:8e:a0:0b: e8:7c:78:a0:59:e6:0f:f6:dc:45:fe:6d:e3:5c:f3:0e:6a:bf: b3:e8:d1:c3:e3:2d:31:9f:7f:a9:bf:b6:5f:0a:f1:ad:3f:9b: 54:f0:a5:a6:ec:bd:10:49:21:98:fd:1c:d6:1a:91:94:e1:5e: 55:3b:c2:f5:bc:a8:76:62:de:08:84:97:9a:11:a1:de:0d:3b: bc:b5:22:61:39:d5:8f:5b:8c:f2:4c:57:0d:10:96:8e:3a:7b: e3:72:6f:2d:a3:79:43:9c:25:83:1a:1d:29:4e:87:46:29:44: 16:48:ce:df:8f:a6:4b:e6:dd:ad:ee:09:d0:b8:52:5d:87:67: 36:b4:16:19:44:31:1d:47:a1:60:1a:ab:55:ca:6a:9d:d5:97: 44:1b:b1:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUwOTE4MjMyNDExWhcNMjUwOTI1MjMyNDExWjAYMRYwFAYD VQQDEw02OGNjOTQ5Yy1kMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKeUKn8KY4qTk84oSbS/XSVWcMSzMem7MhRIkg0yIh5gNTfLDP8ekbQB/VsX ExwEYcjtXtpzAnU1TEO60zkVZyhQjPls1PsFN904/tieguxmHpdSyrqJsV3nfH5e h/SouMACzcWaTQyDWqbzSLNhedtFZqPOttL6sxaG/A0a1E2jCRdYb6fRXqxkljkH piddLKPywXxQjKQ3fy9KnInGrVapDNFzDX5Rk24MEd6pAYi6060/LRMqEcPmHxzV SKydGcBQhCtDUEdun5et7wwrI9Tg+5jp2g4ZEtxyDmPrmaqcZgBa6qDbYas8Gx4J okPxSWd8Fc18l/4XprH751F7owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3ECQGh ff6mQgXgnjHbi7tKlsOdMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Xi2iYyQuY/aFe5SvcZBlL9BZZcDzr2czF3f3K1jlrhQv4TRhALs3 Zg66FTZLu5X3i+vCsqOcUdWvHCVReywAPmasehUBZ6uL2g8vXOf2jpEh+dfk5Z0e jVmGI3Jqk5ZTuR28DmAxy6OOoAvofHigWeYP9txF/m3jXPMOar+z6NHD4y0xn3+p v7ZfCvGtP5tU8KWm7L0QSSGY/RzWGpGU4V5VO8L1vKh2Yt4IhJeaEaHeDTu8tSJh OdWPW4zyTFcNEJaOOnvjcm8to3lDnCWDGh0pTodGKUQWSM7fj6ZL5t2t7gnQuFJd h2c2tBYZRDEdR6FgGqtVymqd1ZdEG7EO -----END CERTIFICATE-----Generated at Fri Sep 19 07:35:14 2025 by rpki-client