$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: Oh2JzwAGiygc8WDlaso544dTGOc9BCaCC/yesyg0BJU= Subject key identifier: 99:7F:2E:7F:ED:2E:8D:03:7E:04:54:97:FB:06:66:8B:3A:F6:0C:4B Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34DE Signing time: Fri 24 Oct 2025 14:40:01 +0000 Manifest this update: Fri 24 Oct 2025 14:40:01 +0000 Manifest next update: Fri 31 Oct 2025 14:40:01 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: lx0OX1yhDbKnqzxaGb4P29f3KnRTGwgTqCdUKcpWZeA=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Oct 24 14:40:01 2025 GMT Not After : Oct 31 14:40:01 2025 GMT Subject: CN=68fb8fc1-e0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:f8:9e:7c:d2:02:9d:f2:f0:73:77:e3:05: 87:82:35:8b:92:95:4f:72:bd:68:f5:68:c1:23:12: 29:7c:27:5c:00:ee:f2:6d:a8:74:0c:aa:c4:7b:0d: 83:e1:a4:55:69:65:a7:f8:d5:c8:43:60:9b:5a:6c: 74:e3:8d:44:16:20:eb:be:ba:79:02:0a:4e:e0:a3: 11:02:f9:1c:04:37:e2:2f:b4:ed:44:d3:fe:e3:e4: 99:06:2e:48:0a:26:35:ab:19:28:82:4c:aa:c2:51: 20:96:a8:c2:e8:d6:e9:16:9e:b4:9d:be:20:a3:9e: f6:e8:00:75:93:98:54:de:05:b6:87:7a:da:5d:91: 3a:cc:33:d3:ea:2a:4b:91:63:64:a1:01:99:9e:08: 0b:03:35:46:42:e8:a6:47:b5:06:42:6b:9e:bb:76: 89:b0:08:6c:cb:82:ad:3c:de:d0:fc:45:75:00:30: ea:a5:86:44:a0:af:80:ec:ae:39:d4:89:a6:57:1d: 6d:56:b2:10:3b:42:9d:dd:18:2e:9e:4d:d3:22:cb: ad:cd:48:b1:5a:64:5b:b6:de:fe:e9:67:e5:51:e8: cd:90:26:96:f2:ff:55:68:cd:cd:09:5a:d5:7a:99: a7:3c:3d:89:c9:8c:7b:e2:93:14:ba:f5:cb:51:ef: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7F:2E:7F:ED:2E:8D:03:7E:04:54:97:FB:06:66:8B:3A:F6:0C:4B X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:84:e0:d1:80:f7:14:d5:ae:e1:c8:57:4c:fe:a0:92:27:2c: 79:59:a3:1f:94:87:97:b1:9e:c2:47:01:ff:fa:11:e6:ed:8e: e8:c4:a1:5f:e8:d1:47:88:2e:4b:43:64:09:66:b4:fb:8c:36: 2a:da:54:38:38:25:59:a3:de:d6:6a:24:1f:3b:39:79:0e:96: 32:be:6a:fd:bf:9c:71:7d:e4:48:5d:4b:cf:16:9c:73:f3:28: b1:23:0d:45:3c:73:dc:d0:6a:01:94:84:09:67:a6:ac:bb:b5: c5:c5:80:70:a5:a0:42:cc:fb:fd:f8:e3:3b:78:91:2f:86:95: b8:e0:99:19:d9:d5:e8:fc:53:32:32:83:34:92:7f:09:a1:20: c6:a0:5c:6c:17:be:6a:f7:47:88:34:b0:48:0d:9e:dd:0c:16: a3:53:0f:ff:3f:32:a2:05:44:d7:dd:fb:0c:bc:45:ae:68:1f: 4d:38:9f:4d:bb:a7:48:7e:97:26:3d:c4:7b:d9:5d:39:8e:cf: 75:ef:72:45:06:bf:c4:b4:18:fb:3f:8b:7d:7a:d6:bf:87:a1: 37:a7:35:85:a2:49:61:86:5a:4e:f2:c3:6a:92:06:8b:16:bf: 60:87:03:6c:bf:83:1d:56:a9:78:72:25:14:bd:c3:97:63:b1: 43:2a:c9:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUxMDI0MTQ0MDAxWhcNMjUxMDMxMTQ0MDAxWjAYMRYwFAYD VQQDEw02OGZiOGZjMS1lMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dP4nnzSAp3y8HN34wWHgjWLkpVPcr1o9WjBIxIpfCdcAO7ybah0DKrEew2D 4aRVaWWn+NXIQ2CbWmx0441EFiDrvrp5AgpO4KMRAvkcBDfiL7TtRNP+4+SZBi5I CiY1qxkogkyqwlEglqjC6NbpFp60nb4go5726AB1k5hU3gW2h3raXZE6zDPT6ipL kWNkoQGZnggLAzVGQuimR7UGQmueu3aJsAhsy4KtPN7Q/EV1ADDqpYZEoK+A7K45 1ImmVx1tVrIQO0Kd3Rgunk3TIsutzUixWmRbtt7+6WflUejNkCaW8v9VaM3NCVrV epmnPD2JyYx74pMUuvXLUe9FyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl/Ln/t Lo0DfgRUl/sGZos69gxLMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBehODRgPcU1a7hyFdM/qCSJyx5WaMflIeXsZ7CRwH/+hHm7Y7oxKFf 6NFHiC5LQ2QJZrT7jDYq2lQ4OCVZo97WaiQfOzl5DpYyvmr9v5xxfeRIXUvPFpxz 8yixIw1FPHPc0GoBlIQJZ6asu7XFxYBwpaBCzPv9+OM7eJEvhpW44JkZ2dXo/FMy MoM0kn8JoSDGoFxsF75q90eINLBIDZ7dDBajUw//PzKiBUTX3fsMvEWuaB9NOJ9N u6dIfpcmPcR72V05js9173JFBr/EtBj7P4t9eta/h6E3pzWFoklhhlpO8sNqkgaL Fr9ghwNsv4MdVql4ciUUvcOXY7FDKsmX -----END CERTIFICATE-----Generated at Sat Oct 25 17:18:57 2025 by rpki-client