$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json) Hash identifier: Mjgyxu/zkknWa3LL0C6cWbpq+FTUXIENpDohBmvrAj0= Subject key identifier: A8:CE:C7:86:D3:47:3E:95:B8:FE:CE:84:F2:CF:16:F4:E0:40:9B:C4 Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Certificate serial: 0EE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft Manifest number: 0EC0 Signing time: Mon 20 Oct 2025 18:09:50 +0000 Manifest this update: Mon 20 Oct 2025 18:09:49 +0000 Manifest next update: Mon 27 Oct 2025 18:09:49 +0000 Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: SXU593xDo1m6Y5RgHpTkPb8cvdQO41hBe5402357mMw=) 2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=) 3: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=) 4: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=) 5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3812 (0xee4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8 Validity Not Before: Oct 20 18:09:49 2025 GMT Not After : Oct 27 18:09:49 2025 GMT Subject: CN=68f67aed-45e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:d9:85:44:f4:59:64:6a:07:ba:41:e7:5e: ab:f3:5e:57:5a:8f:20:e1:9b:58:bc:4c:fc:23:44: d8:c9:f1:92:f3:eb:b0:6d:fa:cd:d6:49:52:ab:11: 1e:de:af:22:55:11:45:3f:24:62:18:af:a0:d3:37: 1b:65:04:08:42:d2:32:cf:f4:72:49:f9:7f:9f:25: ac:85:63:1b:02:21:2e:33:01:15:93:0b:e4:de:d1: e1:1e:76:5f:ab:22:12:ac:62:06:cc:ef:0b:1f:c4: 0f:4a:e1:95:d1:f9:91:77:5c:0f:5b:20:7e:c3:3e: 92:71:94:11:bf:58:d9:01:64:eb:ea:26:32:f4:a6: 73:e3:ec:f1:77:bf:1f:1a:0d:11:53:20:c1:b7:76: e4:c5:e4:ab:97:bd:b4:be:4b:2b:90:b8:06:6b:40: 49:4d:6b:6b:73:87:b4:ae:49:10:14:41:4c:bc:2a: 64:3c:2f:c5:1e:31:9e:e7:5d:35:2e:31:b4:19:15: 72:53:cf:78:77:74:19:b4:49:f3:9b:16:cb:6e:0f: 15:7c:3f:24:3d:1b:b1:c5:cd:2f:76:6e:7f:2d:11: c3:b2:69:f5:3b:e2:d3:68:0b:71:66:e9:70:0a:a9: 48:c8:ce:14:09:c1:cc:b2:81:79:79:4f:2e:2e:33: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:C7:86:D3:47:3E:95:B8:FE:CE:84:F2:CF:16:F4:E0:40:9B:C4 X509v3 Authority Key Identifier: keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:db:5b:40:55:a7:77:c5:96:25:d4:6e:0a:af:ca:a7:db:c8: 25:78:f0:b2:00:3a:4d:60:97:36:c4:01:61:d6:0d:5d:31:bc: 5e:a5:88:7f:03:5d:30:fd:11:65:6e:56:0a:d9:68:72:cb:d5: 47:99:c4:29:cd:27:c0:32:d9:fb:92:28:b8:05:e2:b1:d7:0b: dd:ef:dd:4f:6e:f8:36:e7:fe:d1:b5:6b:b7:d4:8b:9e:25:19: e4:de:8d:28:66:18:b7:b1:8b:43:34:6c:a6:23:61:05:68:4f: 2b:7a:67:66:9c:dc:7f:47:62:a4:f4:b9:6b:67:79:dc:6e:53: 09:8c:a5:dc:44:30:31:dd:f1:47:cb:be:1d:17:bd:84:39:34: 96:f4:ca:c7:cb:77:e0:0b:05:25:da:74:3b:7e:e6:96:a8:e9: 12:bd:9c:4f:f3:a8:0d:ac:52:02:aa:78:c0:a4:f0:91:ed:ad: 47:6d:c6:d6:db:6e:ac:5b:2e:87:36:34:fd:6f:ef:94:54:f2: f7:12:49:8a:f0:78:c6:fc:eb:74:bb:35:b5:6c:b4:09:bd:dc: c0:fa:ce:74:c9:4e:25:28:b0:10:b2:40:ad:d3:d4:20:9a:23: bd:3a:18:1d:a7:98:0d:6b:de:06:d0:3e:0d:c7:b2:1b:a2:61: 42:3e:2e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyOUYxMTAvBgNVBAUTKEFBODVDQ0QyREQzRTFDMDAzQkY3MkZGNTNFNThDNzIw MEU3Q0YwQTgwHhcNMjUxMDIwMTgwOTQ5WhcNMjUxMDI3MTgwOTQ5WjAYMRYwFAYD VQQDEw02OGY2N2FlZC00NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvnZhUT0WWRqB7pB516r815XWo8g4ZtYvEz8I0TYyfGS8+uwbfrN1klSqxEe 3q8iVRFFPyRiGK+g0zcbZQQIQtIyz/RySfl/nyWshWMbAiEuMwEVkwvk3tHhHnZf qyISrGIGzO8LH8QPSuGV0fmRd1wPWyB+wz6ScZQRv1jZAWTr6iYy9KZz4+zxd78f Gg0RUyDBt3bkxeSrl720vksrkLgGa0BJTWtrc4e0rkkQFEFMvCpkPC/FHjGe5101 LjG0GRVyU894d3QZtEnzmxbLbg8VfD8kPRuxxc0vdm5/LRHDsmn1O+LTaAtxZulw CqlIyM4UCcHMsoF5eU8uLjP8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjOx4bT Rz6VuP7OhPLPFvTgQJvEMB8GA1UdIwQYMBaAFKqFzNLdPhwAO/cv9T5YxyAOfPCo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDI5Ri82OTFGNzRDNDk4 ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhBQTc5eV8xUGxqSElBNTg4 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvWE0wdDAtSEFBNzl5XzFQbGpISUE1ODhLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDI5Ri82OTFGNzRDNDk4ODgxMUU5OTFBRjY2MzZDNEY5QUUwMi9xb1hNMHQwLUhB QTc5eV8xUGxqSElBNTg4S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr21tAVad3xZYl1G4Kr8qn28glePCyADpNYJc2xAFh1g1dMbxepYh/ A10w/RFlblYK2Whyy9VHmcQpzSfAMtn7kii4BeKx1wvd791Pbvg25/7RtWu31Iue JRnk3o0oZhi3sYtDNGymI2EFaE8remdmnNx/R2Kk9LlrZ3ncblMJjKXcRDAx3fFH y74dF72EOTSW9MrHy3fgCwUl2nQ7fuaWqOkSvZxP86gNrFICqnjApPCR7a1HbcbW 226sWy6HNjT9b++UVPL3EkmK8HjG/Ot0uzW1bLQJvdzA+s50yU4lKLAQskCt09Qg miO9Ohgdp5gNa94G0D4Nx7IbomFCPi44 -----END CERTIFICATE-----Generated at Tue Oct 21 17:25:20 2025 by rpki-client