$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: LmYH8Y5K2iOPebPT9nY5A8mgY7zGMVt6C6SNnIhwJH8= Subject key identifier: 4B:9A:52:EC:1A:C2:B1:86:93:39:44:14:C4:10:BA:D0:DE:28:F2:BA Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: 65 Signing time: Mon 03 Nov 2025 07:01:23 +0000 Manifest this update: Mon 03 Nov 2025 07:01:23 +0000 Manifest next update: Mon 10 Nov 2025 07:01:23 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: KiM9dg1x6cvgIBPL0zTBjRRiY1urVjRDoDeq3R/zy8o=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Nov 3 07:01:23 2025 GMT Not After : Nov 10 07:01:23 2025 GMT Subject: CN=69085343-a7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:e0:5b:99:69:31:b4:35:7c:1b:2e:d7:2f: c4:4a:de:37:1d:db:d6:dd:2b:f8:78:0b:9b:7a:bb: 7a:88:81:41:e4:9b:3a:59:a5:b1:04:cc:68:5f:cb: 84:6d:e1:c5:42:02:57:88:9c:56:03:0c:8f:ee:ea: 8a:c1:e4:90:05:93:a1:5e:1b:d5:ee:45:c9:06:cf: 13:41:78:2c:96:7a:82:4c:41:59:f1:97:19:87:52: c3:32:6d:57:ab:6e:76:1c:7a:06:70:f0:12:05:cf: 59:87:d7:99:5b:af:0b:73:66:83:c7:fc:ea:2e:09: 75:0f:42:30:93:29:43:34:f0:b3:04:31:57:9c:7b: a4:fa:22:6c:1b:3b:38:44:5a:81:3f:7c:56:5e:49: f9:17:60:fd:7b:9b:63:25:3e:a2:e9:4f:4a:4e:5f: 31:47:89:b1:09:97:e0:6e:00:e4:62:3d:b8:e8:c4: 35:7d:40:68:ab:fb:37:8d:ff:2f:33:fe:bb:f8:c6: b7:1c:0f:98:1f:ea:57:17:91:28:82:02:38:f5:83: d0:cf:c7:3e:c5:e5:32:89:6c:41:0d:97:6a:d1:82: 86:23:1a:c8:8f:e1:4f:ab:72:8b:c8:b8:67:23:71: c5:10:4d:f8:55:85:e7:1c:ea:84:2d:71:b6:20:de: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:52:EC:1A:C2:B1:86:93:39:44:14:C4:10:BA:D0:DE:28:F2:BA X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:1a:07:39:3a:54:3e:f3:79:f5:d6:9c:30:e4:3b:c8:66: 9e:ed:e6:8c:78:95:99:e6:8a:7b:9f:0e:36:ec:cc:ed:7a:a7: 1c:d4:51:7b:78:26:a1:ae:81:73:9c:72:48:f7:33:fa:90:f5: c3:bc:69:12:75:fd:36:1f:51:8a:24:af:31:04:dc:63:36:96: 55:9b:7c:ed:c0:44:88:8b:01:41:10:5a:a7:2f:4e:9f:fa:49: 1c:77:3c:dd:e2:4c:38:a9:df:62:24:37:6a:fc:59:ec:74:f7: 14:f6:38:bc:08:7c:08:8e:89:5e:04:1f:f6:66:44:f1:84:c8: 46:18:5a:cf:a3:ea:7d:92:d4:95:92:66:2d:54:33:86:a5:48: c2:f2:a9:11:04:4e:be:b3:24:9e:7b:99:53:29:a1:1b:dc:15: a3:40:f0:11:60:c6:bd:5e:d3:f4:7b:19:38:7a:a3:53:f7:22: df:94:3e:d3:41:db:e3:28:44:a3:10:34:3d:8c:30:88:ea:55: 1f:54:0f:d8:d5:33:63:ba:14:c0:b9:44:82:c1:67:9a:22:60: cb:ef:05:8e:4a:7d:2a:25:49:eb:34:31:87:08:79:6a:7a:26: d9:8c:54:33:b0:b6:44:4b:7e:05:ff:aa:80:cc:ad:c5:67:40: f7:ec:9e:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjZEOTExMC8GA1UEBRMoQUI2MkQ5NjM5MDhDQzBFM0E4MDE5OUE0M0QzMTJBMzRB MDQ4ODFGMDAeFw0yNTExMDMwNzAxMjNaFw0yNTExMTAwNzAxMjNaMBgxFjAUBgNV BAMTDTY5MDg1MzQzLWE3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtQ+BbmWkxtDV8Gy7XL8RK3jcd29bdK/h4C5t6u3qIgUHkmzpZpbEEzGhfy4Rt 4cVCAleInFYDDI/u6orB5JAFk6FeG9XuRckGzxNBeCyWeoJMQVnxlxmHUsMybVer bnYcegZw8BIFz1mH15lbrwtzZoPH/OouCXUPQjCTKUM08LMEMVece6T6ImwbOzhE WoE/fFZeSfkXYP17m2MlPqLpT0pOXzFHibEJl+BuAORiPbjoxDV9QGir+zeN/y8z /rv4xrccD5gf6lcXkSiCAjj1g9DPxz7F5TKJbEENl2rRgoYjGsiP4U+rcovIuGcj ccUQTfhVhecc6oQtcbYg3sQBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS5pS7BrC sYaTOUQUxBC60N4o8rowHwYDVR0jBBgwFoAUq2LZY5CMwOOoAZmkPTEqNKBIgfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNkQ5Lzc3NDNENTFFMUU1 RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdm QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJMWlk1Q013T09vQVpta1BURXFOS0JJZ2ZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC NkQ5Lzc3NDNENTFFMUU1RjExRjBCQTM4OUE0RUM0RjlBRTAyL3EyTFpZNUNNd09P b0FabWtQVEVxTktCSWdmQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExpGgc5OlQ+83n11pww5DvIZp7t5ox4lZnminufDjbszO16pxzUUXt4 JqGugXOcckj3M/qQ9cO8aRJ1/TYfUYokrzEE3GM2llWbfO3ARIiLAUEQWqcvTp/6 SRx3PN3iTDip32IkN2r8Wex09xT2OLwIfAiOiV4EH/ZmRPGEyEYYWs+j6n2S1JWS Zi1UM4alSMLyqREETr6zJJ57mVMpoRvcFaNA8BFgxr1e0/R7GTh6o1P3It+UPtNB 2+MoRKMQND2MMIjqVR9UD9jVM2O6FMC5RILBZ5oiYMvvBY5KfSolSes0MYcIeWp6 JtmMVDOwtkRLfgX/qoDMrcVnQPfsnk4= -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:36 2025 by rpki-client