$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: mVVJ4g8y2JV7+21G6dyAfrfGiyTN8nsFddpGqm0TpWg= Subject key identifier: B5:71:E8:C0:3F:B6:CA:F6:1C:45:42:E7:77:5F:63:B8:26:E5:5C:E5 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 076D Signing time: Tue 21 Oct 2025 02:48:55 +0000 Manifest this update: Tue 21 Oct 2025 02:48:55 +0000 Manifest next update: Tue 28 Oct 2025 02:48:55 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: +jc0qH3D1mqoRjPz3K2JNfAOEfmNM2hC9omIfGpoJhE=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Oct 21 02:48:55 2025 GMT Not After : Oct 28 02:48:55 2025 GMT Subject: CN=68f6f497-b7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:cb:6d:54:c5:d4:b1:03:ca:0a:8b:c4:c2: f8:a9:bc:6e:b2:d7:13:44:25:21:76:ee:51:94:7c: 0e:5d:16:f1:62:bd:e4:68:86:4b:d3:f4:61:63:7c: ef:c7:cc:b9:fc:e4:51:b2:30:aa:36:4f:2d:c4:10: d4:b1:14:53:55:52:a1:59:c8:76:df:8c:16:0c:83: 6a:30:b1:95:db:32:7d:c7:ee:f4:4d:9f:b2:ce:07: 07:56:93:37:b6:68:08:b8:30:d7:33:30:56:4e:b9: cf:8e:53:cb:88:36:c9:0f:e7:de:fb:05:e2:c6:c5: 3e:f9:13:f8:63:0b:ea:e4:73:d3:4a:e6:21:f4:57: e9:cc:75:ae:3d:e4:53:7f:78:82:83:14:85:59:e0: bc:14:ff:93:b0:20:9f:1a:f5:ca:68:f8:42:e5:a2: 8e:ae:7e:4e:b2:97:40:01:ee:64:d2:19:b0:6e:02: 68:cc:a8:0f:4a:02:1f:b0:8f:3f:26:8d:03:60:52: a2:0e:9e:cf:4e:55:7b:6f:ae:df:31:74:66:49:97: 07:2d:b7:ea:92:62:a8:56:f0:e9:42:d1:ed:81:e6: 28:35:14:a3:78:bc:5b:a3:cc:9e:70:bc:b7:2c:33: dd:32:80:80:3f:42:44:b9:fe:7a:f8:25:75:f5:11: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:E8:C0:3F:B6:CA:F6:1C:45:42:E7:77:5F:63:B8:26:E5:5C:E5 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:15:06:9d:b5:a2:d4:67:f4:97:56:44:b5:0a:f6:25:9f: d9:df:31:44:ab:77:1d:74:d4:21:f1:88:f3:fe:eb:b6:65:71: 16:4b:76:76:5b:ef:ac:e6:69:a5:31:2f:3c:f9:70:47:46:10: 19:1c:70:ff:38:2d:a9:77:6c:bf:12:35:f6:44:27:54:5f:ba: 58:f2:de:df:33:b6:9b:15:14:23:70:98:6b:ff:c5:a0:07:e7: ec:b7:3c:29:11:cf:04:f2:cb:8a:58:eb:a2:ca:a8:94:d7:4a: 3f:18:37:d9:29:ba:42:80:9a:03:8a:81:3a:b7:76:eb:4d:7f: 45:3d:f0:cf:a1:03:71:4e:85:b7:47:e1:52:36:c6:a0:8f:d2: e6:73:9e:51:07:76:54:0d:58:a9:62:04:f9:83:ca:dc:0b:9d: b7:38:9f:20:68:fe:0d:11:44:65:f9:b5:90:4f:34:de:d2:d0: 35:be:ff:d1:dc:c7:7f:f6:40:be:b4:92:89:dc:8b:bd:c9:7c: fb:4f:5a:ef:12:1c:81:29:7a:41:c7:2b:08:1d:8f:27:7b:7b: f3:9d:d4:42:53:6e:8a:68:47:e2:62:13:58:dc:bd:24:5d:b5: 8d:e2:4a:95:19:d4:b2:f0:d0:46:6b:1e:82:c7:14:24:1b:2d: 5b:b5:bf:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjUxMDIxMDI0ODU1WhcNMjUxMDI4MDI0ODU1WjAYMRYwFAYD VQQDEw02OGY2ZjQ5Ny1iN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprbLbVTF1LEDygqLxML4qbxustcTRCUhdu5RlHwOXRbxYr3kaIZL0/RhY3zv x8y5/ORRsjCqNk8txBDUsRRTVVKhWch234wWDINqMLGV2zJ9x+70TZ+yzgcHVpM3 tmgIuDDXMzBWTrnPjlPLiDbJD+fe+wXixsU++RP4Ywvq5HPTSuYh9FfpzHWuPeRT f3iCgxSFWeC8FP+TsCCfGvXKaPhC5aKOrn5OspdAAe5k0hmwbgJozKgPSgIfsI8/ Jo0DYFKiDp7PTlV7b67fMXRmSZcHLbfqkmKoVvDpQtHtgeYoNRSjeLxbo8yecLy3 LDPdMoCAP0JEuf56+CV19RF6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVx6MA/ tsr2HEVC53dfY7gm5VzlMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBteBUGnbWi1Gf0l1ZEtQr2JZ/Z3zFEq3cddNQh8Yjz/uu2ZXEWS3Z2 W++s5mmlMS88+XBHRhAZHHD/OC2pd2y/EjX2RCdUX7pY8t7fM7abFRQjcJhr/8Wg B+fstzwpEc8E8suKWOuiyqiU10o/GDfZKbpCgJoDioE6t3brTX9FPfDPoQNxToW3 R+FSNsagj9Lmc55RB3ZUDVipYgT5g8rcC523OJ8gaP4NEURl+bWQTzTe0tA1vv/R 3Md/9kC+tJKJ3Iu9yXz7T1rvEhyBKXpBxysIHY8ne3vzndRCU26KaEfiYhNY3L0k XbWN4kqVGdSy8NBGax6CxxQkGy1btb8a -----END CERTIFICATE-----Generated at Wed Oct 22 06:15:53 2025 by rpki-client