$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: 62LLMKEw/4Kj4D5gWkeiy5Cv81PXcduchWUD8ICYlKA= Subject key identifier: D2:C5:4D:3D:D7:A0:00:FF:4F:0F:12:38:1E:62:8B:C2:7C:79:92:59 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 04A2 Signing time: Sat 25 Oct 2025 02:58:54 +0000 Manifest this update: Sat 25 Oct 2025 02:58:53 +0000 Manifest next update: Sat 01 Nov 2025 02:58:53 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: kAHHDPq3vmep0J5dnbrty7YWbnS4xJVFTd3TPoMbBnE=) 2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: xz+NY0PKDA1h31JonPA24zzAghWJ7xvhqwh0rxa8hB0=) 3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: XeoWUyV8cBersz5ERZwPilXowKBP6ZkIQoJiUYARqzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Oct 25 02:58:53 2025 GMT Not After : Nov 1 02:58:53 2025 GMT Subject: CN=68fc3cee-54af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8b:16:7e:b3:8f:0c:fd:3a:b9:98:e0:06:be: ae:e0:64:29:0c:f8:8b:11:f7:a2:18:52:ef:3b:86: 92:6f:55:4d:69:19:38:7f:99:ea:1a:f0:89:53:63: ea:44:d9:2a:e0:ba:79:49:bf:cc:d1:16:08:59:dd: 37:bd:33:ef:ea:70:f1:7f:46:11:dd:04:8f:9a:be: c0:64:df:ae:ca:b9:23:1a:96:24:4f:75:16:41:29: 45:c7:98:04:c8:df:8f:b6:0e:88:78:da:07:d2:cd: 21:ee:02:9c:44:9d:a6:ea:83:8e:ec:87:0a:29:e7: f2:e4:3e:82:27:81:87:6b:9c:99:f2:cd:69:f0:d2: 9e:0b:ad:41:df:0d:25:20:78:e0:46:f5:c5:7f:2b: 9d:3d:9a:d2:f2:30:47:6e:f7:c1:c2:e4:7f:ce:c8: 62:e6:3f:b8:ae:bc:ef:00:12:30:09:c6:af:65:df: 94:a6:3c:90:79:18:57:d1:22:ee:d5:2a:9e:d5:f5: f5:08:34:1c:6d:fe:3d:e2:dd:74:48:8d:3d:85:3b: 54:53:dd:0f:80:5c:0b:10:17:c0:39:ae:38:6c:c2: 6d:db:90:bb:12:40:fc:9b:18:eb:56:e8:70:24:fd: b5:03:3b:be:8f:5f:b4:8f:85:7e:e1:3c:ae:93:42: d4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C5:4D:3D:D7:A0:00:FF:4F:0F:12:38:1E:62:8B:C2:7C:79:92:59 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:49:ad:fc:29:ce:b8:5f:8b:93:49:6e:9b:bf:c0:27:dd:56: fd:99:dc:97:8c:28:68:1d:c3:d9:00:8d:51:e4:e6:ad:da:8a: 9f:65:39:16:81:58:69:78:c4:2e:34:20:95:50:9e:7c:a6:f1: d6:1d:83:c3:83:0f:9d:73:d1:c8:a3:e6:62:3c:6c:ba:c8:b2: e5:a5:4c:53:63:b6:4f:5a:f3:09:e2:5c:a6:0f:6f:8b:47:df: 65:a4:c0:52:da:ae:09:54:d3:a7:97:14:67:ed:16:40:e2:a3: d6:ed:d9:2f:6d:18:1e:e1:7d:55:fd:20:3f:a1:53:44:25:cd: 32:56:4e:3a:cb:b8:68:51:b4:cf:29:4c:6f:89:a5:a4:8b:d8: b3:c8:9e:11:ea:71:ec:c0:36:8a:bf:50:16:4a:e8:0e:af:24: c1:15:b3:59:11:8e:53:ba:49:c4:8f:bd:b1:c6:ea:49:d8:46: c7:cc:a7:3f:5d:7b:f7:25:c1:51:2a:d5:17:12:dc:a6:a8:22: 9f:98:10:05:34:16:37:7e:25:d5:b5:cf:7a:d8:2e:ec:c7:60: 00:12:05:36:3f:dd:b7:e2:8e:6f:94:0c:5e:a0:1d:0f:33:75: 6c:e5:0e:0a:59:bc:a2:f4:0e:c5:4b:58:03:1c:dc:ad:80:15: 59:6b:6e:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjUxMDI1MDI1ODUzWhcNMjUxMTAxMDI1ODUzWjAYMRYwFAYD VQQDEw02OGZjM2NlZS01NGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IsWfrOPDP06uZjgBr6u4GQpDPiLEfeiGFLvO4aSb1VNaRk4f5nqGvCJU2Pq RNkq4Lp5Sb/M0RYIWd03vTPv6nDxf0YR3QSPmr7AZN+uyrkjGpYkT3UWQSlFx5gE yN+Ptg6IeNoH0s0h7gKcRJ2m6oOO7IcKKefy5D6CJ4GHa5yZ8s1p8NKeC61B3w0l IHjgRvXFfyudPZrS8jBHbvfBwuR/zshi5j+4rrzvABIwCcavZd+UpjyQeRhX0SLu 1Sqe1fX1CDQcbf494t10SI09hTtUU90PgFwLEBfAOa44bMJt25C7EkD8mxjrVuhw JP21Azu+j1+0j4V+4Tyuk0LUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLFTT3X oAD/Tw8SOB5ii8J8eZJZMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzSa38Kc64X4uTSW6bv8An3Vb9mdyXjChoHcPZAI1R5Oat2oqfZTkW gVhpeMQuNCCVUJ58pvHWHYPDgw+dc9HIo+ZiPGy6yLLlpUxTY7ZPWvMJ4lymD2+L R99lpMBS2q4JVNOnlxRn7RZA4qPW7dkvbRge4X1V/SA/oVNEJc0yVk46y7hoUbTP KUxviaWki9izyJ4R6nHswDaKv1AWSugOryTBFbNZEY5TuknEj72xxupJ2EbHzKc/ XXv3JcFRKtUXEtymqCKfmBAFNBY3fiXVtc962C7sx2AAEgU2P9234o5vlAxeoB0P M3Vs5Q4KWbyi9A7FS1gDHNytgBVZa24K -----END CERTIFICATE-----Generated at Sat Oct 25 17:35:27 2025 by rpki-client