$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: DPO2xX8QXrPoAM7Z+KXPe3bKYoVkXOGhsTnV5ismYXM= Subject key identifier: 09:A5:97:E2:93:4E:8C:DD:59:A1:C6:FC:04:15:A4:B7:30:D4:99:79 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: EA Signing time: Sun 19 Oct 2025 08:23:20 +0000 Manifest this update: Sun 19 Oct 2025 08:23:19 +0000 Manifest next update: Sun 26 Oct 2025 08:23:19 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: MdUXmPmQlQ4qQ0RlM5/hogU6OUjmralFO/XhNE8pgns=) 2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: 6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=) 3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Oct 19 08:23:19 2025 GMT Not After : Oct 26 08:23:19 2025 GMT Subject: CN=68f49ff7-2777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:bd:b8:65:de:eb:c7:01:40:97:ee:7d:ba: 8b:07:6f:19:48:00:08:74:6a:60:da:cd:c6:bf:27: 9c:51:62:4b:e3:de:0d:75:52:df:02:5b:4b:db:d2: 37:17:40:e3:54:51:ee:aa:03:79:69:97:08:62:b8: 45:5d:49:05:6f:d0:71:be:c9:36:4f:10:af:d9:fc: b0:39:c0:9a:13:96:9f:84:71:cc:02:cb:60:48:3a: f7:1e:d7:19:b5:fe:e4:59:7a:04:44:83:86:9b:60: d9:c0:a1:fb:97:c1:22:cb:1a:44:c0:ad:a7:b5:6c: 2f:5f:d0:4e:06:45:18:92:1f:09:cb:d1:9c:f4:a4: 21:b0:86:14:66:ed:b9:ee:92:5f:2a:6b:e3:4b:1a: 13:de:c6:01:a1:37:39:e5:a0:23:62:9a:6e:33:a1: cf:3a:15:f1:45:43:f8:b0:45:31:10:f3:01:b3:6b: ee:d0:57:8f:88:e4:42:d6:b1:90:ac:1a:37:ce:8c: e9:18:2c:55:fa:81:63:76:bc:5d:d3:d0:cf:a1:68: f6:c0:b7:42:ba:44:b0:60:87:69:a5:7d:60:99:6e: 0b:c6:b6:0f:46:dc:e7:d4:3a:7c:92:80:b7:dc:e1: 51:cd:3f:f4:e8:1e:dc:49:04:d8:42:af:88:71:f1: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:97:E2:93:4E:8C:DD:59:A1:C6:FC:04:15:A4:B7:30:D4:99:79 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:eb:43:4e:73:81:55:b9:09:96:0e:17:b6:72:ae:c8:ab:56: d3:f0:0a:b2:f9:08:eb:8c:02:82:a7:1e:ff:a8:b1:60:b2:53: e8:2a:d1:8a:19:86:b6:e0:c7:43:90:19:98:28:ac:ca:3a:f3: 0c:54:b2:4c:ad:89:3f:39:df:88:20:50:7c:66:6c:3c:d5:a9: 41:96:4b:fc:7e:ee:af:b9:3a:b4:40:d9:92:52:c3:f9:95:52: b8:97:99:b5:a9:be:10:56:be:0c:c1:3d:35:46:65:07:4a:e0: 02:f5:b0:eb:d6:de:4e:20:2c:0f:48:ad:c7:eb:8a:6f:f7:4d: c2:dd:82:8e:5a:3c:5e:95:9a:6e:58:4b:87:7a:76:5e:02:de: fc:ef:27:39:27:db:05:37:fa:0b:9f:25:8f:19:9b:63:e7:89: 03:cd:51:5f:a6:0f:cd:ed:26:d2:8a:7a:0f:6b:81:a3:f9:9f: 3f:cc:51:39:85:5c:72:a3:fb:a0:cd:bf:8a:04:9c:97:03:48: 8c:63:d4:45:7e:60:b0:57:12:75:55:ff:15:4a:c1:8d:6d:81: 9d:07:1e:a9:80:51:b8:28:4e:a6:97:7a:2c:f5:80:bc:87:a5: f9:05:b8:fb:42:11:2c:42:f0:1b:55:74:2a:4e:74:84:28:16: 25:a3:f6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjUxMDE5MDgyMzE5WhcNMjUxMDI2MDgyMzE5WjAYMRYwFAYD VQQDEw02OGY0OWZmNy0yNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJO9uGXe68cBQJfufbqLB28ZSAAIdGpg2s3GvyecUWJL494NdVLfAltL29I3 F0DjVFHuqgN5aZcIYrhFXUkFb9Bxvsk2TxCv2fywOcCaE5afhHHMAstgSDr3HtcZ tf7kWXoERIOGm2DZwKH7l8EiyxpEwK2ntWwvX9BOBkUYkh8Jy9Gc9KQhsIYUZu25 7pJfKmvjSxoT3sYBoTc55aAjYppuM6HPOhXxRUP4sEUxEPMBs2vu0FePiORC1rGQ rBo3zozpGCxV+oFjdrxd09DPoWj2wLdCukSwYIdppX1gmW4LxrYPRtzn1Dp8koC3 3OFRzT/06B7cSQTYQq+IcfGvRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmll+KT TozdWaHG/AQVpLcw1Jl5MB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh60NOc4FVuQmWDhe2cq7Iq1bT8Aqy+QjrjAKCpx7/qLFgslPoKtGK GYa24MdDkBmYKKzKOvMMVLJMrYk/Od+IIFB8Zmw81alBlkv8fu6vuTq0QNmSUsP5 lVK4l5m1qb4QVr4MwT01RmUHSuAC9bDr1t5OICwPSK3H64pv903C3YKOWjxelZpu WEuHenZeAt787yc5J9sFN/oLnyWPGZtj54kDzVFfpg/N7SbSinoPa4Gj+Z8/zFE5 hVxyo/ugzb+KBJyXA0iMY9RFfmCwVxJ1Vf8VSsGNbYGdBx6pgFG4KE6ml3os9YC8 h6X5Bbj7QhEsQvAbVXQqTnSEKBYlo/Za -----END CERTIFICATE-----Generated at Wed Oct 22 11:03:00 2025 by rpki-client