$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: hfMVUndh8IiWdAeQoHRMhYKBAQKv6iIDAFnTMVndrdQ= Subject key identifier: FA:0B:D3:D8:7B:2B:6B:5D:39:95:39:AA:1B:FA:C3:71:10:25:06:2C Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: 0117 Signing time: Wed 05 Nov 2025 05:01:35 +0000 Manifest this update: Wed 05 Nov 2025 05:01:34 +0000 Manifest next update: Wed 12 Nov 2025 05:01:34 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: LpWCmknuIvNyd8fBK9yP7uly4U9QVaOU1Q3v/BKKNSU=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: 1KiFLWub5BHrSO0tUJ2uOHpJ+a6PoNSbEd3Z8qezbIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Nov 5 05:01:34 2025 GMT Not After : Nov 12 05:01:34 2025 GMT Subject: CN=690ada2f-54e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:6e:99:63:0c:8f:b4:84:19:6f:45:37:d0: c3:a4:a7:37:8f:c9:80:f9:7a:d8:ac:99:48:d9:00: 1a:2d:5c:3e:95:a6:e8:3f:07:f5:1b:ab:f2:bf:14: 90:11:0b:00:44:5b:84:11:60:27:d7:07:b3:c9:7f: d3:1a:3d:77:6e:f0:75:61:d6:0d:cf:ef:7a:8b:57: cf:1d:bd:b7:28:3b:3a:fa:3e:fa:40:84:3e:2f:e2: dd:05:c1:86:f2:26:bf:7f:14:e3:c7:50:3e:22:23: 82:40:53:8d:cd:b1:9a:58:31:22:ce:78:75:a8:d1: 0e:65:01:d5:f7:5f:b0:fa:a5:bb:7e:7f:c3:52:e4: aa:65:b7:b4:23:94:29:7f:1a:f0:f3:a1:93:d2:cd: 7a:a9:c9:9c:24:89:56:8d:23:ea:34:c2:11:7f:02: 04:67:81:6c:ed:eb:ec:af:2d:38:35:77:f9:53:79: 5d:9e:57:10:69:58:b1:88:6b:c4:5a:6c:54:da:28: cf:9d:bb:a3:87:46:91:59:23:38:64:29:61:66:66: bf:6a:73:5d:b8:0b:04:85:c0:b3:88:12:80:80:b8: e7:2d:8b:97:d0:2b:56:f0:e3:cd:80:01:d8:6a:b7: 01:8c:6a:9c:51:26:93:27:e4:bb:ed:5b:29:9c:8f: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0B:D3:D8:7B:2B:6B:5D:39:95:39:AA:1B:FA:C3:71:10:25:06:2C X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:60:c6:83:81:cb:bb:52:2e:9b:8b:bd:5d:9a:ff:af:bb:ae: 62:f3:ef:ea:b6:f8:ff:fc:e8:69:72:35:92:a9:02:74:4e:9a: 15:d3:2a:64:e6:50:7c:7c:b8:b5:ca:cb:b6:6d:29:d7:72:4a: 57:0e:f2:02:32:e1:f9:80:66:84:74:f1:14:d2:15:fd:41:93: d9:b3:43:e9:33:7e:cc:12:12:ec:95:d6:52:8a:6f:79:79:99: 84:24:85:ff:c7:3b:8e:f6:be:5b:97:50:77:71:ce:b3:f0:7b: c3:1a:c5:6f:34:15:bc:22:c1:ac:88:64:78:ea:1d:0d:a9:d1: 65:91:dc:10:af:3d:c8:13:6f:88:36:30:a5:93:a8:71:fe:5b: b9:c6:59:49:7d:a7:14:0b:1e:e7:21:91:85:cc:1c:c3:72:4d: e6:7a:21:b3:e1:22:79:b9:b1:87:b7:ea:d6:22:1a:41:19:5f: 62:43:0d:f2:12:d4:da:8b:1d:d0:60:4c:12:e7:2a:11:ec:25: fb:8d:e4:9d:ea:41:6e:17:22:fd:f7:23:26:bd:98:8e:bc:94: 82:4f:25:40:43:3a:44:9c:a3:80:ef:4f:7c:38:e7:bb:9d:6b: d3:6b:c0:7e:35:2d:a6:0f:97:9c:4e:87:cb:52:7e:d8:b0:fa: c7:3e:c2:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjUxMTA1MDUwMTM0WhcNMjUxMTEyMDUwMTM0WjAYMRYwFAYD VQQDEw02OTBhZGEyZi01NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqahumWMMj7SEGW9FN9DDpKc3j8mA+XrYrJlI2QAaLVw+laboPwf1G6vyvxSQ EQsARFuEEWAn1wezyX/TGj13bvB1YdYNz+96i1fPHb23KDs6+j76QIQ+L+LdBcGG 8ia/fxTjx1A+IiOCQFONzbGaWDEiznh1qNEOZQHV91+w+qW7fn/DUuSqZbe0I5Qp fxrw86GT0s16qcmcJIlWjSPqNMIRfwIEZ4Fs7evsry04NXf5U3ldnlcQaVixiGvE WmxU2ijPnbujh0aRWSM4ZClhZma/anNduAsEhcCziBKAgLjnLYuX0CtW8OPNgAHY arcBjGqcUSaTJ+S77VspnI8SowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoL09h7 K2tdOZU5qhv6w3EQJQYsMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYYMaDgcu7Ui6bi71dmv+vu65i8+/qtvj//OhpcjWSqQJ0TpoV0ypk 5lB8fLi1ysu2bSnXckpXDvICMuH5gGaEdPEU0hX9QZPZs0PpM37MEhLsldZSim95 eZmEJIX/xzuO9r5bl1B3cc6z8HvDGsVvNBW8IsGsiGR46h0NqdFlkdwQrz3IE2+I NjClk6hx/lu5xllJfacUCx7nIZGFzBzDck3meiGz4SJ5ubGHt+rWIhpBGV9iQw3y EtTaix3QYEwS5yoR7CX7jeSd6kFuFyL99yMmvZiOvJSCTyVAQzpEnKOA7098OOe7 nWvTa8B+NS2mD5ecTofLUn7YsPrHPsK0 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client