$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json) Hash identifier: xaDy9GyqCwE2lSC28eogJA14JXc/G3pRACbcWSttf5U= Subject key identifier: D6:1F:9D:96:06:D6:40:39:FC:03:8C:87:A8:0C:D3:A8:4A:DC:4D:EF Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft Manifest number: 0202 Signing time: Thu 23 Oct 2025 03:58:01 +0000 Manifest this update: Thu 23 Oct 2025 03:58:01 +0000 Manifest next update: Thu 30 Oct 2025 03:58:01 +0000 Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: +oYoHkJstZP4xb47KI5zDFWjWohSvt/p4r3120bd0c4=) 2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: q4NWMO7W6lRpux2uN6ng9OrQyUZmWgx1UYeF7qqy2kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87 Validity Not Before: Oct 23 03:58:01 2025 GMT Not After : Oct 30 03:58:01 2025 GMT Subject: CN=68f9a7c9-d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:7e:47:f6:91:dd:e2:f2:fa:b6:b8:9e:08: f0:06:23:0d:9c:19:e7:a7:17:c8:a7:13:bf:e4:33: 92:d3:6a:54:4a:8f:89:f2:6c:0c:53:fd:5c:bd:5c: 65:92:a4:5d:79:33:da:e9:4a:45:ce:44:08:1f:90: 91:98:c5:b5:76:6f:6a:f6:90:6d:e3:fd:2e:9b:68: 9b:57:f7:6b:66:58:f3:16:f7:95:d7:b8:89:d1:b0: 83:ba:01:94:4b:f0:dc:19:e8:21:89:80:fa:74:9d: 9e:56:dc:01:cd:f9:bc:19:15:ec:0b:36:eb:0f:16: 08:85:c9:07:f2:d1:a9:b4:f9:d7:75:ed:95:84:5b: dc:8c:29:cc:60:06:b0:65:8c:e9:9f:cf:a4:98:5e: 49:bd:c3:dd:cf:5f:bc:1d:a1:d0:92:bc:c5:98:91: 76:b6:ba:04:41:b2:94:3d:0d:44:b5:cc:d0:6a:2a: 8c:4b:9f:f0:84:b1:7c:11:7c:f2:e4:1a:90:11:3b: 8f:be:52:c6:d3:2b:c2:3d:7f:1b:0a:28:78:e8:94: 3b:5f:5b:a1:24:8e:4f:db:de:f7:be:58:a6:f9:7c: 7f:0a:03:b3:cd:60:0c:13:51:d7:8f:02:16:ba:98: f5:a9:dd:41:86:b9:04:cb:2f:e1:55:45:dc:09:b1: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1F:9D:96:06:D6:40:39:FC:03:8C:87:A8:0C:D3:A8:4A:DC:4D:EF X509v3 Authority Key Identifier: keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:0f:81:ad:65:11:02:02:02:72:e5:8b:02:78:fc:6e:85:20: 1b:f2:a4:20:e3:dd:13:dd:c2:6c:57:2a:8a:bb:b4:a6:d1:db: 4a:ff:ec:92:f4:36:a4:52:73:a1:a9:9d:78:82:ea:2e:f9:85: 86:ca:bb:4d:f1:b2:9f:2a:3c:14:13:09:61:20:09:0b:79:04: 4a:f2:7d:aa:48:0f:fe:f3:83:3d:8c:25:2c:c4:a4:ec:62:fa: ca:3f:ac:b6:4f:f2:49:97:ce:c0:0f:eb:78:65:da:db:4e:90: f8:b0:40:f7:3b:73:27:57:27:24:33:e0:e0:18:2b:1d:92:17: b9:b8:1e:4b:94:87:6f:e5:e6:1b:c3:0d:b4:52:72:45:21:a7: d8:09:ea:76:eb:7a:69:e5:2c:3c:d1:c1:bb:63:62:1e:2b:b8: c9:65:0d:03:bc:6b:04:d3:d5:e4:fe:b0:51:57:6b:3a:e9:e7: bc:d5:5f:ff:18:cc:df:d5:95:a9:7f:31:b1:69:ef:57:96:5a: 96:64:03:a0:90:89:8c:a6:ca:62:2c:9d:ea:30:b3:b9:f2:21: ae:8e:24:73:d7:90:f4:3f:a4:e6:6c:3a:2f:6b:a5:30:19:95: e9:8a:2a:fa:e9:f0:bb:d1:5f:3e:ae:1a:bf:db:00:7f:a8:e1: 81:cc:46:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz Mzc0NkNFODcwHhcNMjUxMDIzMDM1ODAxWhcNMjUxMDMwMDM1ODAxWjAYMRYwFAYD VQQDEw02OGY5YTdjOS1kNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr99+R/aR3eLy+ra4ngjwBiMNnBnnpxfIpxO/5DOS02pUSo+J8mwMU/1cvVxl kqRdeTPa6UpFzkQIH5CRmMW1dm9q9pBt4/0um2ibV/drZljzFveV17iJ0bCDugGU S/DcGeghiYD6dJ2eVtwBzfm8GRXsCzbrDxYIhckH8tGptPnXde2VhFvcjCnMYAaw ZYzpn8+kmF5JvcPdz1+8HaHQkrzFmJF2troEQbKUPQ1EtczQaiqMS5/whLF8EXzy 5BqQETuPvlLG0yvCPX8bCih46JQ7X1uhJI5P2973vlim+Xx/CgOzzWAME1HXjwIW upj1qd1BhrkEyy/hVUXcCbFrRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYfnZYG 1kA5/AOMh6gM06hK3E3vMB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6 b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDD4GtZRECAgJy5YsCePxuhSAb8qQg490T3cJsVyqKu7Sm0dtK/+yS 9DakUnOhqZ14guou+YWGyrtN8bKfKjwUEwlhIAkLeQRK8n2qSA/+84M9jCUsxKTs YvrKP6y2T/JJl87AD+t4ZdrbTpD4sED3O3MnVyckM+DgGCsdkhe5uB5LlIdv5eYb ww20UnJFIafYCep263pp5Sw80cG7Y2IeK7jJZQ0DvGsE09Xk/rBRV2s66ee81V// GMzf1ZWpfzGxae9XllqWZAOgkImMpspiLJ3qMLO58iGujiRz15D0P6TmbDova6Uw GZXpiir66fC70V8+rhq/2wB/qOGBzEb9 -----END CERTIFICATE-----Generated at Thu Oct 23 20:15:37 2025 by rpki-client