$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json) Hash identifier: 7/E/riWrf2kxpOHntSGvc1dVbOJLZ44QTUSFvBccs+k= Subject key identifier: 7F:49:CE:47:2F:5E:1F:E2:3C:63:1F:87:22:C5:17:41:37:DA:F8:DD Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft Manifest number: 0122 Signing time: Wed 05 Nov 2025 05:19:48 +0000 Manifest this update: Wed 05 Nov 2025 05:19:47 +0000 Manifest next update: Wed 12 Nov 2025 05:19:47 +0000 Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: WTPnSbpH3+T1RUoZEeoWgR+jtbWkRhY4wC9QV7s/OZg=) 2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: ewrjscJpS/Xz/iKI0GqdO+oPSijzuVXsC0vnRwXLRmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414 Validity Not Before: Nov 5 05:19:47 2025 GMT Not After : Nov 12 05:19:47 2025 GMT Subject: CN=690ade74-721e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:0b:5f:a5:12:b1:e0:67:e4:a4:c3:1e:15: 33:e4:0e:b5:5f:23:c4:b4:9d:d3:4f:cf:7a:f2:aa: 0e:ec:76:f8:95:9c:18:d2:7a:e2:89:95:79:5b:39: 62:75:e2:a9:a3:14:4b:84:1c:27:81:29:c1:36:d6: 1b:1d:00:42:18:b9:b1:f4:f4:80:f4:b7:37:2e:b9: 56:57:35:87:03:76:07:80:d6:76:7b:2b:55:da:7f: c9:4f:b1:50:ab:3a:92:cd:12:0c:11:dc:35:9c:41: c8:1c:d6:26:59:4b:64:1b:9b:de:84:5b:ed:fb:8d: 97:3c:87:52:79:bd:1f:5b:68:f5:31:db:f5:f5:9a: 6f:05:96:33:70:25:a2:43:de:c5:33:62:1e:25:6f: 65:20:20:75:64:ab:39:c0:ed:6a:dd:ad:84:23:cf: 63:e3:35:ed:7e:3c:f2:e9:31:d0:e1:7b:c5:59:dd: 04:f8:00:08:7a:f9:ac:fe:38:a5:ff:25:6e:de:6a: 3e:49:24:b1:60:0f:28:c3:a2:fe:9f:45:7a:91:8c: 9f:5a:8a:f3:a4:ea:32:ca:d6:6e:58:a4:64:1e:be: be:15:20:16:e2:3b:dd:e3:b9:14:b2:86:16:ca:ea: 87:b4:31:dc:06:18:82:cc:44:89:86:01:89:51:bd: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:49:CE:47:2F:5E:1F:E2:3C:63:1F:87:22:C5:17:41:37:DA:F8:DD X509v3 Authority Key Identifier: keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5c:b7:9d:6b:c4:83:b0:ad:d9:83:d6:05:9b:bd:6d:e3:4a: 65:12:16:5b:5a:6d:d5:a9:bd:9f:17:34:51:77:28:dc:f4:58: 75:00:f3:c7:73:c2:12:cc:ab:73:fd:30:ad:ae:cb:5f:e3:ef: 74:8e:bf:f8:9f:d8:bb:2d:4a:e8:c6:82:40:10:4e:97:a5:dc: c2:a1:5f:92:8a:f7:9b:ca:2b:63:a3:cb:df:da:7d:41:55:de: 4f:15:fe:3c:c3:dc:b6:c0:6a:88:bd:1e:91:b1:a2:f2:6d:97: 93:cd:31:04:72:37:4f:c8:17:a5:bd:c9:3c:2b:81:c9:8e:30: a4:84:6c:b9:47:cb:c5:3e:1a:8c:23:43:57:6f:2a:d4:9a:55: 0a:89:f7:ee:cb:06:6d:8c:75:df:d8:f9:b0:34:b1:3b:6d:d6: 65:fb:85:24:9d:00:92:b7:97:2f:c8:6b:f1:02:5e:35:1b:f8: 75:ad:8b:86:c6:66:43:25:55:69:0c:21:01:1a:14:d5:a8:11: 40:5e:ba:c2:03:b3:f4:2d:24:52:ef:f8:d7:8b:bb:30:f9:75: af:f2:0c:31:14:b5:9b:d8:ab:df:54:2e:a5:f9:fa:54:0f:d1: de:d5:3a:61:17:41:8b:93:a8:0b:f9:f2:1d:e5:49:8d:82:13: 5c:34:fc:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0OUIxMTAvBgNVBAUTKEQ1MDM3QUY5NjlDOEFDRUEwMUI1NzBGQzY0QURENDgy OEFDMDY0MTQwHhcNMjUxMTA1MDUxOTQ3WhcNMjUxMTEyMDUxOTQ3WjAYMRYwFAYD VQQDEw02OTBhZGU3NC03MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0wLX6USseBn5KTDHhUz5A61XyPEtJ3TT8968qoO7Hb4lZwY0nriiZV5Wzli deKpoxRLhBwngSnBNtYbHQBCGLmx9PSA9Lc3LrlWVzWHA3YHgNZ2eytV2n/JT7FQ qzqSzRIMEdw1nEHIHNYmWUtkG5vehFvt+42XPIdSeb0fW2j1Mdv19ZpvBZYzcCWi Q97FM2IeJW9lICB1ZKs5wO1q3a2EI89j4zXtfjzy6THQ4XvFWd0E+AAIevms/jil /yVu3mo+SSSxYA8ow6L+n0V6kYyfWorzpOoyytZuWKRkHr6+FSAW4jvd47kUsoYW yuqHtDHcBhiCzESJhgGJUb33SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9Jzkcv Xh/iPGMfhyLFF0E32vjdMB8GA1UdIwQYMBaAFNUDevlpyKzqAbVw/GSt1IKKwGQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ5Qi9COTRGNjkzNjAx NTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJPb0J0WEQ4WkszVWdvckFa QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRTjYtV25Jck9vQnRYRDhaSzNVZ29yQVpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ5Qi9COTRGNjkzNjAxNTExMUVGOTg1N0MwMUVDNEY5QUUwMi8xUU42LVduSXJP b0J0WEQ4WkszVWdvckFaQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUXLeda8SDsK3Zg9YFm71t40plEhZbWm3Vqb2fFzRRdyjc9Fh1APPH c8ISzKtz/TCtrstf4+90jr/4n9i7LUroxoJAEE6XpdzCoV+Sivebyitjo8vf2n1B Vd5PFf48w9y2wGqIvR6RsaLybZeTzTEEcjdPyBelvck8K4HJjjCkhGy5R8vFPhqM I0NXbyrUmlUKiffuywZtjHXf2PmwNLE7bdZl+4UknQCSt5cvyGvxAl41G/h1rYuG xmZDJVVpDCEBGhTVqBFAXrrCA7P0LSRS7/jXi7sw+XWv8gwxFLWb2KvfVC6l+fpU D9He1TphF0GLk6gL+fId5UmNghNcNPz2 -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:28 2025 by rpki-client