$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: BeSo6SzgfMaD5gngHh5n7OkvmX2yABsbOF0Ao2fgGRE= Subject key identifier: 11:26:BE:BB:87:E5:C3:5B:B6:CA:2E:B9:FE:15:CB:04:6E:8F:1B:CB Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 66 Signing time: Wed 05 Nov 2025 07:12:39 +0000 Manifest this update: Wed 05 Nov 2025 07:12:39 +0000 Manifest next update: Wed 12 Nov 2025 07:12:39 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: VcP/OsG+Il+xAmXa2sgPjos9t631dO0Fnk0bM64f2Fs=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Nov 5 07:12:39 2025 GMT Not After : Nov 12 07:12:39 2025 GMT Subject: CN=690af8e7-a6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7c:c2:66:00:63:16:4c:4e:55:6e:50:41:98: bf:7c:53:a1:85:9a:69:a4:df:76:68:14:48:06:9b: 93:78:3c:9b:27:1e:8d:35:54:51:03:bf:b5:59:0c: f1:1b:68:fa:cc:38:1a:da:82:33:23:f8:8a:57:a1: 7e:30:dd:23:44:27:9b:a1:c3:4c:fe:57:a1:ee:59: 71:97:42:e3:66:b7:a6:ec:14:21:f3:1b:8a:f1:d1: 45:87:4c:74:99:a0:90:ce:03:91:27:aa:b6:65:81: aa:4f:74:47:26:2c:50:f0:8c:fe:b1:56:92:66:e8: 36:3e:46:08:d5:d6:3b:a6:60:65:a9:a5:1f:a6:ba: 9f:7e:43:d5:43:9d:66:1d:fc:69:39:4b:88:ef:b5: 92:9a:b7:16:e6:61:62:2a:0e:f3:a2:09:8f:ce:e1: 20:cf:72:28:46:4d:02:a3:cc:85:f2:5b:89:48:9e: 22:f9:6c:9a:6d:0e:f9:b8:6d:15:93:18:2f:90:d6: 54:8e:a4:bb:96:94:5e:95:87:34:bb:5d:42:dc:80: 1c:5c:90:df:d2:10:8d:b4:4d:8c:1c:5e:3e:65:38: 3c:e9:6f:50:83:57:c8:c4:71:00:1f:64:74:5d:00: 5b:37:65:4e:da:45:b3:59:38:a7:2e:68:00:a2:97: 98:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:26:BE:BB:87:E5:C3:5B:B6:CA:2E:B9:FE:15:CB:04:6E:8F:1B:CB X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:14:77:7c:54:7b:9c:8f:83:3d:14:76:17:91:78:a2:48: a1:4e:d2:61:0a:d2:1e:80:10:2e:e0:c4:7e:c5:0e:27:ba:d6: c3:cc:67:47:9b:f2:fd:44:20:bd:61:5b:b5:c2:55:d6:27:68: 5c:cd:85:ff:08:58:71:f3:c7:38:36:9b:fe:46:b3:ad:0d:f9: 24:58:f7:ac:2f:73:44:91:4a:af:a9:1e:0d:89:01:a4:d7:f1: f8:7f:0a:81:ff:d9:38:62:9e:3a:4c:7b:8a:73:72:4e:fc:26: 82:8b:65:af:18:0d:d8:ff:68:a5:02:ba:70:12:0b:d4:fa:ee: 8e:a9:db:07:8a:82:ca:20:f0:84:e9:06:84:dc:22:25:49:05: 7a:d8:ff:54:19:22:1d:3c:9c:c2:a2:0b:7d:a3:6d:35:fb:80: 93:7d:69:2c:af:a6:fc:fc:e3:2b:0e:36:9e:02:66:de:e9:18: 7b:35:a2:ac:98:8b:80:4c:df:6f:8b:47:54:d7:99:96:2b:22: a5:64:73:d1:4f:74:02:49:2b:0d:bc:2e:85:70:ca:eb:50:77: e9:36:46:f4:1b:97:7b:d1:4f:59:be:fb:51:74:6d:6f:8c:8d: c2:68:88:ee:c2:b0:2d:ac:e2:45:4f:55:7b:a6:c9:28:d1:f2: 69:fb:79:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTExMDUwNzEyMzlaFw0yNTExMTIwNzEyMzlaMBgxFjAUBgNV BAMTDTY5MGFmOGU3LWE2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDifMJmAGMWTE5VblBBmL98U6GFmmmk33ZoFEgGm5N4PJsnHo01VFEDv7VZDPEb aPrMOBragjMj+IpXoX4w3SNEJ5uhw0z+V6HuWXGXQuNmt6bsFCHzG4rx0UWHTHSZ oJDOA5EnqrZlgapPdEcmLFDwjP6xVpJm6DY+RgjV1jumYGWppR+mup9+Q9VDnWYd /Gk5S4jvtZKatxbmYWIqDvOiCY/O4SDPcihGTQKjzIXyW4lIniL5bJptDvm4bRWT GC+Q1lSOpLuWlF6VhzS7XULcgBxckN/SEI20TYwcXj5lODzpb1CDV8jEcQAfZHRd AFs3ZU7aRbNZOKcuaACil5iTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUESa+u4fl w1u2yi65/hXLBG6PG8swHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7BFHd8VHucj4M9FHYXkXiiSKFO0mEK0h6AEC7gxH7FDie61sPMZ0eb 8v1EIL1hW7XCVdYnaFzNhf8IWHHzxzg2m/5Gs60N+SRY96wvc0SRSq+pHg2JAaTX 8fh/CoH/2ThinjpMe4pzck78JoKLZa8YDdj/aKUCunASC9T67o6p2weKgsog8ITp BoTcIiVJBXrY/1QZIh08nMKiC32jbTX7gJN9aSyvpvz84ysONp4CZt7pGHs1oqyY i4BM32+LR1TXmZYrIqVkc9FPdAJJKw28LoVwyutQd+k2RvQbl3vRT1m++1F0bW+M jcJoiO7CsC2s4kVPVXumySjR8mn7eQI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:06 2025 by rpki-client