$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft File: qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json) Hash identifier: FqIZ4rt/d8vPFElGCQtI8gCOuQYpbZRyDpppoKYaUzw= Subject key identifier: BC:2B:22:E4:36:25:4F:07:C9:99:BC:71:BE:6D:DF:97:D2:30:EE:9B Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 Certificate issuer: /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft Manifest number: 0159 Signing time: Wed 05 Nov 2025 04:14:22 +0000 Manifest this update: Wed 05 Nov 2025 04:14:21 +0000 Manifest next update: Wed 12 Nov 2025 04:14:21 +0000 Files and hashes: 1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: XfUOUji5sHFPHEorBd5G3FFMP5RScDgz65olpBLrqqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689 Validity Not Before: Nov 5 04:14:21 2025 GMT Not After : Nov 12 04:14:21 2025 GMT Subject: CN=690acf1d-1abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:98:f3:e7:63:5a:e8:63:95:e1:5c:52:25: c3:77:78:e9:80:b2:ae:e0:19:97:c2:8f:4d:fb:5b: cc:8e:06:41:fa:27:87:b6:60:89:27:cc:ee:fa:77: 4d:b2:e8:42:59:00:9b:5f:b0:f3:42:7b:06:4e:23: fd:da:8c:c0:83:98:9a:24:9b:d2:b4:94:e0:82:be: 15:73:65:2c:5e:93:3b:2e:a7:95:2e:3d:c8:d9:91: 85:dc:6f:74:07:ae:b4:6a:38:59:78:c7:8b:16:02: 21:77:b7:96:47:be:83:c8:ff:b0:08:03:5c:79:d3: 23:99:4b:f0:da:c0:89:f6:c6:b9:a5:b8:a4:1d:63: c6:ab:94:8f:e4:c8:56:90:52:d2:ae:72:1e:d4:6f: c0:58:4e:6e:9e:c5:94:92:6f:1a:4e:01:12:7f:4e: 54:76:f0:09:fa:f7:92:cd:7f:02:f3:71:01:c6:f4: 14:27:f4:7c:34:a7:bc:a2:e4:0f:62:0f:ca:a6:83: b2:eb:9b:d9:b3:c5:98:47:34:ff:94:a7:72:17:dd: d4:16:26:9b:49:be:35:f1:65:05:88:c5:ec:4b:b6: ca:ca:20:f8:b1:1f:93:79:c0:46:aa:f1:78:d5:a4: 00:9b:0f:07:b5:fd:b8:64:16:27:75:77:a6:98:2c: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2B:22:E4:36:25:4F:07:C9:99:BC:71:BE:6D:DF:97:D2:30:EE:9B X509v3 Authority Key Identifier: keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:32:5b:fb:fc:aa:1d:4b:6a:8d:8e:0e:47:dc:4e:a8:74:87: 63:12:a3:f1:a2:83:38:a1:c0:35:86:81:0e:3f:4c:0e:47:7f: ad:4b:9c:6d:58:ed:68:f3:b6:87:6c:f9:7b:3b:52:cb:23:9a: 03:1a:e0:d5:11:a3:1e:69:aa:0d:5d:01:e3:69:a7:f1:c3:29: b1:09:ad:ca:35:6f:9e:a9:f3:42:f6:e4:78:cb:83:86:87:5b: 0c:89:38:13:f1:00:9c:96:a9:c2:19:bd:39:97:5f:ac:a1:b4: c7:85:b0:d3:82:a6:a5:09:d9:89:95:a5:d3:26:82:3b:97:d0: 87:8a:e0:62:a5:91:2a:a9:b8:a9:67:57:ee:59:83:33:fd:7c: b1:fc:cf:7e:d5:09:25:b2:f0:60:7f:c7:92:4f:e4:32:4b:a9: 82:b5:79:d4:90:6f:42:a8:a9:75:da:e6:18:fa:93:86:e8:f3: b2:18:50:f2:f5:db:15:f6:fb:1b:50:af:0b:7c:02:76:c7:41: d7:79:e1:ac:f1:56:0f:b4:0a:4d:08:e0:22:81:f3:12:4d:fe: 79:6e:ac:95:f0:2d:69:60:2f:ef:d1:cf:83:98:d3:57:76:aa: ef:e5:f1:ba:c7:66:37:6c:04:f5:df:78:3a:48:65:67:8a:59: ac:32:ce:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy RkRFMUQ2ODkwHhcNMjUxMTA1MDQxNDIxWhcNMjUxMTEyMDQxNDIxWjAYMRYwFAYD VQQDEw02OTBhY2YxZC0xYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6eY8+djWuhjleFcUiXDd3jpgLKu4BmXwo9N+1vMjgZB+ieHtmCJJ8zu+ndN suhCWQCbX7DzQnsGTiP92ozAg5iaJJvStJTggr4Vc2UsXpM7LqeVLj3I2ZGF3G90 B660ajhZeMeLFgIhd7eWR76DyP+wCANcedMjmUvw2sCJ9sa5pbikHWPGq5SP5MhW kFLSrnIe1G/AWE5unsWUkm8aTgESf05UdvAJ+veSzX8C83EBxvQUJ/R8NKe8ouQP Yg/KpoOy65vZs8WYRzT/lKdyF93UFiabSb418WUFiMXsS7bKyiD4sR+TecBGqvF4 1aQAmw8Htf24ZBYndXemmCyprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwrIuQ2 JU8HyZm8cb5t35fSMO6bMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD QkVFRVdBMVZ1VFV2M2gxb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpMlv7/KodS2qNjg5H3E6odIdjEqPxooM4ocA1hoEOP0wOR3+tS5xt WO1o87aHbPl7O1LLI5oDGuDVEaMeaaoNXQHjaafxwymxCa3KNW+eqfNC9uR4y4OG h1sMiTgT8QCclqnCGb05l1+sobTHhbDTgqalCdmJlaXTJoI7l9CHiuBipZEqqbip Z1fuWYMz/Xyx/M9+1QklsvBgf8eST+QyS6mCtXnUkG9CqKl12uYY+pOG6POyGFDy 9dsV9vsbUK8LfAJ2x0HXeeGs8VYPtApNCOAigfMSTf55bqyV8C1pYC/v0c+DmNNX dqrv5fG6x2Y3bAT133g6SGVnilmsMs5t -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:00 2025 by rpki-client