$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: WXH2qAJgRWknVO8roQOG63tqHH/o96sz64i1288TN5Y= Subject key identifier: B5:F2:00:4B:4B:C3:39:A9:64:24:AF:AA:52:09:49:D2:30:49:E3:EF Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0158 Signing time: Mon 03 Nov 2025 04:05:46 +0000 Manifest this update: Mon 03 Nov 2025 04:05:46 +0000 Manifest next update: Mon 10 Nov 2025 04:05:46 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: 8t9jhVq6Y+7Y6I+QPVEUJ9OviXeWRzWFl+FbE0nytVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Nov 3 04:05:46 2025 GMT Not After : Nov 10 04:05:46 2025 GMT Subject: CN=69082a1a-e30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:08:a2:a2:bf:07:fa:c2:bd:e5:87:fe:34: 43:fe:72:e9:31:63:f9:33:bc:20:c3:e4:01:14:28: 0a:6b:d1:a9:43:a6:99:d9:34:fc:0a:83:9f:ad:95: 89:68:65:07:83:e9:05:4a:04:6d:66:77:9c:9a:ba: 16:01:f8:ed:91:3c:4d:2f:6c:da:c2:fb:f6:c1:fd: 6e:eb:94:d7:22:28:80:b6:a8:95:09:46:6f:64:cd: 31:57:1d:ec:f8:83:42:a8:15:a0:d3:a6:1f:ba:b9: 3d:f4:d6:22:ab:af:f7:1a:0d:bc:22:b6:f9:7e:5b: fd:fa:34:94:61:a8:9f:24:92:8b:5f:48:74:c6:69: 04:df:f9:a8:4d:68:66:fa:7f:81:9e:ce:64:28:60: 5d:f9:91:0d:17:29:8a:0d:cd:45:07:66:76:23:0e: 66:f8:a8:7c:d6:a9:32:02:1c:8c:d9:f9:24:ff:8e: 23:2d:f3:cd:fd:7c:d0:59:ad:0d:e5:34:96:78:6c: 2e:e2:5a:8b:32:9b:2d:bb:ad:bc:c5:2a:85:f0:af: 4b:f8:09:cf:85:6d:3c:b2:d5:cc:91:5c:d4:ee:ea: 70:ff:18:5b:21:f1:66:2f:b7:cf:c7:99:75:f5:4e: e4:a9:13:a1:e9:59:b1:45:f6:e4:4f:e8:46:c4:8c: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:00:4B:4B:C3:39:A9:64:24:AF:AA:52:09:49:D2:30:49:E3:EF X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d1:bb:ef:99:07:24:fa:70:bb:1a:49:8c:66:63:29:86:70: 25:1b:32:e9:3e:3f:7c:06:8d:cb:2e:f8:20:57:70:97:87:13: ca:49:23:db:e6:ba:95:a1:3d:df:a5:1a:e7:38:19:fc:07:94: 3b:eb:41:59:79:e2:b1:83:fc:f3:b5:c3:26:a5:b2:33:8b:40: 5a:3e:9e:62:bd:ee:c6:49:d0:7d:9c:86:3d:cc:1f:b5:3d:c6: 3f:1c:5b:8c:7b:eb:8d:7c:3e:5d:9b:2c:19:ce:43:4c:7d:fe: b1:c6:f1:57:0b:c0:36:34:c8:b0:b3:de:b7:83:27:e9:a8:3b: 4a:d3:e6:73:d2:65:86:b7:5f:65:02:b7:cf:e1:f6:01:2d:e2: b8:11:06:4c:56:30:1d:48:7d:cd:54:e7:63:d2:dd:b6:ca:83: c0:4f:e9:c6:f6:d6:03:37:a3:b2:b1:5b:37:55:9d:d9:03:94: b3:fc:f4:dd:cd:1d:47:22:5d:99:0f:f6:3f:84:7e:fa:14:1b: 36:27:f6:33:71:b4:33:97:33:87:e1:46:cb:ce:be:23:a1:3e: 5f:1e:1e:38:ab:bc:d3:0b:d5:13:88:26:35:36:c8:3d:8f:c3: 4d:da:ae:71:05:1b:2d:d3:cb:8d:37:35:1a:a2:e6:be:d4:d1: 7a:4a:b0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUxMTAzMDQwNTQ2WhcNMjUxMTEwMDQwNTQ2WjAYMRYwFAYD VQQDEw02OTA4MmExYS1lMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoIIoqK/B/rCveWH/jRD/nLpMWP5M7wgw+QBFCgKa9GpQ6aZ2TT8CoOfrZWJ aGUHg+kFSgRtZnecmroWAfjtkTxNL2zawvv2wf1u65TXIiiAtqiVCUZvZM0xVx3s +INCqBWg06Yfurk99NYiq6/3Gg28Irb5flv9+jSUYaifJJKLX0h0xmkE3/moTWhm +n+Bns5kKGBd+ZENFymKDc1FB2Z2Iw5m+Kh81qkyAhyM2fkk/44jLfPN/XzQWa0N 5TSWeGwu4lqLMpstu628xSqF8K9L+AnPhW08stXMkVzU7upw/xhbIfFmL7fPx5l1 9U7kqROh6VmxRfbkT+hGxIw3LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXyAEtL wzmpZCSvqlIJSdIwSePvMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA70bvvmQck+nC7GkmMZmMphnAlGzLpPj98Bo3LLvggV3CXhxPKSSPb 5rqVoT3fpRrnOBn8B5Q760FZeeKxg/zztcMmpbIzi0BaPp5ive7GSdB9nIY9zB+1 PcY/HFuMe+uNfD5dmywZzkNMff6xxvFXC8A2NMiws963gyfpqDtK0+Zz0mWGt19l ArfP4fYBLeK4EQZMVjAdSH3NVOdj0t22yoPAT+nG9tYDN6OysVs3VZ3ZA5Sz/PTd zR1HIl2ZD/Y/hH76FBs2J/YzcbQzlzOH4UbLzr4joT5fHh44q7zTC9UTiCY1Nsg9 j8NN2q5xBRst08uNNzUaoua+1NF6SrDc -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:59 2025 by rpki-client