$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json) Hash identifier: /vnx9o6o5D+kIjYKA18xvxiU/mF0fmLqwCPJu5X2EZo= Subject key identifier: AB:C3:88:9E:D2:67:CA:63:BA:A9:60:3F:E7:22:11:C8:63:89:3B:8B Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft Manifest number: 07DC Signing time: Tue 04 Nov 2025 21:16:57 +0000 Manifest this update: Tue 04 Nov 2025 21:16:56 +0000 Manifest next update: Tue 11 Nov 2025 21:16:56 +0000 Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: eeppq8oZKZLl756cqbCo24rwq2IAnvfKeaPoTpT1Yzg=) 2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Nov 4 21:16:56 2025 GMT Not After : Nov 11 21:16:56 2025 GMT Subject: CN=690a6d49-3beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:e4:d1:fb:33:08:94:23:2e:6d:ff:ca:af: 30:21:0d:f6:e4:eb:bd:e9:40:70:c1:31:57:e3:24: 48:e3:61:68:32:5b:72:5c:22:c0:30:59:02:23:02: 91:78:ac:4c:d5:1a:74:50:db:87:d9:75:f4:b7:e8: dc:67:82:ea:59:ca:fc:bd:49:29:cf:a8:b9:a3:db: 05:b9:59:16:22:30:fb:b6:87:9e:72:d5:e7:b4:e0: 4f:f6:68:ca:4e:e5:f1:08:d5:14:f5:e5:1c:d0:be: c8:bb:2b:b8:a0:3a:69:23:4d:c7:8c:de:80:68:ff: 78:8f:b2:33:58:96:9f:5b:d8:f3:7b:fb:06:d0:ca: 6e:3f:17:d5:55:5b:c1:f6:2d:9d:be:92:ad:e0:81: b9:c6:80:a0:50:d9:6b:1e:b0:a5:b9:af:8d:bb:fc: f7:01:2e:d0:f2:54:53:24:f8:88:ad:b2:7a:93:76: c3:55:ba:30:4f:6b:73:af:a1:a3:a5:0f:3a:50:f8: 02:66:d1:ad:ba:c1:2a:87:b0:3c:e3:f9:ed:0b:aa: 49:24:70:01:da:7f:8a:b7:85:b4:76:2a:62:90:ad: b1:41:a8:a9:a2:e9:ca:92:ee:c5:e1:49:8e:0c:8f: 78:a5:4a:17:e4:e2:df:9b:97:09:20:74:8a:5c:de: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C3:88:9E:D2:67:CA:63:BA:A9:60:3F:E7:22:11:C8:63:89:3B:8B X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:47:6d:1d:ba:ac:56:64:96:5f:85:36:d4:a3:d3:f4:ba:51: 4d:d1:6a:b1:52:ea:a5:12:4e:87:80:92:0d:c7:16:05:82:a2: 2d:40:05:c1:03:c1:1a:6f:9f:f4:fa:13:ea:6a:45:bb:ad:06: 93:f5:1a:41:60:e4:ce:ce:48:e2:8b:78:db:2e:3b:0e:d0:56: 0c:28:a0:5d:66:a0:6b:18:f8:53:c4:0c:c0:ef:fb:a3:34:dd: 46:04:8a:b6:e1:2a:08:70:f9:76:5d:4d:8e:a2:ac:71:d7:cd: b9:bd:72:e1:87:c8:ac:4b:20:20:0f:61:62:b0:a4:cc:4d:18: 86:be:cf:94:b4:41:bb:30:b5:6a:e1:2f:a9:f7:1a:19:cb:e3: 6d:cb:38:3c:cf:e8:9c:70:82:20:2d:40:7c:8b:e1:85:71:d3: 66:f1:fa:34:99:72:06:b6:e3:b7:76:35:2a:c4:02:60:63:03: f6:c2:6d:d5:4c:23:63:aa:f8:34:04:dd:ee:1e:57:f2:4c:5f: 54:18:11:bf:91:97:d0:cf:65:bc:f1:d3:f1:b0:86:87:e0:1c: 12:bb:e7:4f:ad:a4:c2:d6:74:e3:f6:61:9c:8e:58:6c:eb:69: 3c:c6:ec:03:f3:0b:6d:75:44:7b:95:41:59:78:60:a6:0c:25: 50:c1:67:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUxMTA0MjExNjU2WhcNMjUxMTExMjExNjU2WjAYMRYwFAYD VQQDEw02OTBhNmQ0OS0zYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uLk0fszCJQjLm3/yq8wIQ325Ou96UBwwTFX4yRI42FoMltyXCLAMFkCIwKR eKxM1Rp0UNuH2XX0t+jcZ4LqWcr8vUkpz6i5o9sFuVkWIjD7toeectXntOBP9mjK TuXxCNUU9eUc0L7Iuyu4oDppI03HjN6AaP94j7IzWJafW9jze/sG0MpuPxfVVVvB 9i2dvpKt4IG5xoCgUNlrHrClua+Nu/z3AS7Q8lRTJPiIrbJ6k3bDVbowT2tzr6Gj pQ86UPgCZtGtusEqh7A84/ntC6pJJHAB2n+Kt4W0dipikK2xQaipounKku7F4UmO DI94pUoX5OLfm5cJIHSKXN7f8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvDiJ7S Z8pjuqlgP+ciEchjiTuLMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALR20duqxWZJZfhTbUo9P0ulFN0WqxUuqlEk6HgJINxxYFgqItQAXB A8Eab5/0+hPqakW7rQaT9RpBYOTOzkjii3jbLjsO0FYMKKBdZqBrGPhTxAzA7/uj NN1GBIq24SoIcPl2XU2Ooqxx1825vXLhh8isSyAgD2FisKTMTRiGvs+UtEG7MLVq 4S+p9xoZy+Ntyzg8z+iccIIgLUB8i+GFcdNm8fo0mXIGtuO3djUqxAJgYwP2wm3V TCNjqvg0BN3uHlfyTF9UGBG/kZfQz2W88dPxsIaH4BwSu+dPraTC1nTj9mGcjlhs 62k8xuwD8wttdUR7lUFZeGCmDCVQwWd8 -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:25 2025 by rpki-client