$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json) Hash identifier: YE3Ry4DuW/ni0KyUoftiGQpoTOW21FyAbe4BVVYK6ME= Subject key identifier: 77:85:3B:1E:AA:7B:95:AC:04:95:13:FF:8D:1E:A3:BA:2B:08:E5:74 Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft Manifest number: F2 Signing time: Wed 05 Nov 2025 05:28:08 +0000 Manifest this update: Wed 05 Nov 2025 05:28:07 +0000 Manifest next update: Wed 12 Nov 2025 05:28:07 +0000 Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: qoqU6s2WugNCtwjvTuLC1XYeaF4mtaseCsEjW8pbXEU=) 2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: 6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=) 3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F Validity Not Before: Nov 5 05:28:07 2025 GMT Not After : Nov 12 05:28:07 2025 GMT Subject: CN=690ae068-39f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:d4:f7:5a:a2:be:07:28:60:0d:ff:db:7e: 4e:07:0a:0a:0e:2f:09:5b:79:9b:19:8c:6f:e6:18: aa:f1:ee:ef:c3:db:9a:a7:04:35:32:f9:fa:ec:ec: 35:82:a8:7e:86:ac:93:b0:9f:61:54:ab:6e:2f:39: 6a:c9:7c:a6:a5:0e:75:b4:1b:1f:7e:c1:8f:89:06: 7f:b5:58:75:51:03:d6:09:bb:73:ba:f0:7a:d6:08: 98:44:a7:90:6b:d7:b2:84:3a:a0:43:9e:85:a2:46: 7a:28:0c:1d:3d:98:7d:b2:d4:38:a4:7f:fa:a1:47: 86:16:26:e1:09:f3:79:a3:09:35:07:d3:f1:52:c0: 8c:ca:f7:3d:41:2b:fb:2e:a2:72:f0:79:98:78:33: 07:38:ba:0e:fe:bc:b2:7f:96:92:65:42:dc:1e:cd: 10:c5:7f:89:2c:52:7f:1b:f8:2b:23:32:c7:ec:89: 35:aa:9b:ed:0f:99:ee:cb:c0:85:bd:01:fd:54:58: 4e:f8:b7:99:39:9a:86:f9:36:9a:d4:bb:cc:6b:ed: 48:15:3d:39:45:56:eb:90:35:92:39:5a:77:7f:c0: 77:58:8d:81:46:63:99:82:bf:0e:06:b5:08:1f:c8: 6b:0e:62:6b:f6:c2:c4:3c:cb:56:80:b2:cb:88:5d: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:85:3B:1E:AA:7B:95:AC:04:95:13:FF:8D:1E:A3:BA:2B:08:E5:74 X509v3 Authority Key Identifier: keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3d:9a:e8:6e:38:d0:1f:0a:09:df:44:ba:26:26:e8:b5:b3: 0d:70:b4:b3:70:fb:87:30:54:a1:b8:e7:78:46:87:83:91:23: 89:7e:f7:2c:bb:3d:19:e4:25:2f:7c:70:72:dc:61:47:d5:4f: b1:b2:d4:c2:f5:32:c9:3e:a7:e8:c3:04:6a:c4:8c:a9:f7:4f: 87:ae:66:97:40:0f:fb:85:d1:07:04:5e:2f:e5:1d:65:d9:40: 6d:46:3d:db:67:e8:37:f5:dd:ab:0a:7f:7e:14:0b:6c:92:9c: d6:fe:b2:a2:50:c5:66:ad:74:8b:be:cc:ea:3e:7c:18:fe:d2: 3e:9c:e5:bd:b4:86:ce:46:9c:08:4f:96:d9:ab:77:ef:8b:37: 39:0d:76:4b:83:8c:c2:ce:ef:2f:59:dc:a0:ef:18:fa:3a:eb: d8:b2:41:43:a9:d0:5c:07:66:b9:da:ef:86:a5:9b:ab:7f:17: e4:45:0a:7a:37:a9:0f:3b:d9:e1:4d:06:04:2d:d4:2b:d2:3b: fa:10:b6:b8:fc:2e:94:55:98:9f:4a:ae:2b:0b:3e:d4:e5:4a: 9c:f1:58:30:af:f3:7b:5e:d4:c1:cb:4a:9a:04:3c:f8:62:b4: 2d:41:0c:f0:11:0b:88:1d:4a:f5:78:ef:e2:91:fb:8d:a0:b2: fc:95:a6:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5 NDVBMURCOUYwHhcNMjUxMTA1MDUyODA3WhcNMjUxMTEyMDUyODA3WjAYMRYwFAYD VQQDEw02OTBhZTA2OC0zOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tTU91qivgcoYA3/235OBwoKDi8JW3mbGYxv5hiq8e7vw9uapwQ1Mvn67Ow1 gqh+hqyTsJ9hVKtuLzlqyXympQ51tBsffsGPiQZ/tVh1UQPWCbtzuvB61giYRKeQ a9eyhDqgQ56FokZ6KAwdPZh9stQ4pH/6oUeGFibhCfN5owk1B9PxUsCMyvc9QSv7 LqJy8HmYeDMHOLoO/ryyf5aSZULcHs0QxX+JLFJ/G/grIzLH7Ik1qpvtD5nuy8CF vQH9VFhO+LeZOZqG+Taa1LvMa+1IFT05RVbrkDWSOVp3f8B3WI2BRmOZgr8OBrUI H8hrDmJr9sLEPMtWgLLLiF02hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeFOx6q e5WsBJUT/40eo7orCOV0MB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl X09qMWFxYXRIYktVV2gyNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQPZrobjjQHwoJ30S6JibotbMNcLSzcPuHMFShuOd4RoeDkSOJfvcs uz0Z5CUvfHBy3GFH1U+xstTC9TLJPqfowwRqxIyp90+HrmaXQA/7hdEHBF4v5R1l 2UBtRj3bZ+g39d2rCn9+FAtskpzW/rKiUMVmrXSLvszqPnwY/tI+nOW9tIbORpwI T5bZq3fvizc5DXZLg4zCzu8vWdyg7xj6OuvYskFDqdBcB2a52u+GpZurfxfkRQp6 N6kPO9nhTQYELdQr0jv6ELa4/C6UVZifSq4rCz7U5Uqc8Vgwr/N7XtTBy0qaBDz4 YrQtQQzwEQuIHUr1eO/ikfuNoLL8laZh -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:38 2025 by rpki-client