$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: 23fw7qRmkGlgZezDXJ709tdJY4ez+ttMEHDEFCe5iNU= Subject key identifier: 8C:79:A4:A7:BE:55:19:E0:8C:7C:AA:3D:D7:83:D3:7D:5A:CF:9E:1D Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11E3 Signing time: Fri 24 Oct 2025 17:35:46 +0000 Manifest this update: Fri 24 Oct 2025 17:35:45 +0000 Manifest next update: Fri 31 Oct 2025 17:35:45 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: F5HUFPFRdi+e8sYn/xzETfToVmqOCkgAA122OzbCEKE=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: 7uU8WNBCftCBAsgJ0cA2B7pdvFfJrHU+yjsI9Wz3L8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4587 (0x11eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Oct 24 17:35:45 2025 GMT Not After : Oct 31 17:35:45 2025 GMT Subject: CN=68fbb8f2-97ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:65:72:8d:1c:eb:a9:f6:1e:89:00:02:86:56: ec:bc:62:b0:ed:70:bd:fd:16:b3:19:67:e0:18:7b: 2a:3b:61:93:ec:74:0b:a3:3f:f6:b6:37:77:7b:8c: b0:06:15:ad:b7:c6:ea:16:a8:91:e7:f2:77:8f:59: ee:8c:59:6d:27:87:e1:be:22:56:97:b4:ec:2f:51: 06:18:1e:b0:de:cd:29:ca:4c:69:38:48:8c:37:0d: bc:f7:dc:3c:8e:4e:0e:5f:bc:b6:a7:7a:29:15:8b: 8f:07:f2:dc:7f:ca:b7:a1:3b:04:cc:eb:cf:1d:7d: a9:84:cf:ac:6e:71:d5:ea:66:5b:8f:1f:dc:61:6f: 94:c1:9f:51:9d:6e:5c:1c:bb:2e:f3:27:a9:d0:3c: ee:59:8b:a9:c8:f1:34:9f:19:e2:16:7d:66:4c:de: 42:a9:97:a4:67:1b:10:76:45:e8:4e:bf:f4:be:84: f5:b0:79:1b:8a:f4:19:2c:d3:62:bf:da:7e:f6:40: 48:72:bf:3c:2f:34:e9:68:11:04:59:e0:04:2b:49: 0e:eb:e5:8e:57:2b:df:08:85:e0:74:19:c1:75:84: 64:f3:5e:98:78:e2:7e:a6:d7:ea:a0:fb:18:0f:13: d9:e8:6d:c7:a8:dd:9a:69:98:53:ed:37:44:ba:34: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:79:A4:A7:BE:55:19:E0:8C:7C:AA:3D:D7:83:D3:7D:5A:CF:9E:1D X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:42:17:34:7d:43:8a:aa:53:13:e7:73:ef:b2:54:54:ff:a9: be:16:14:df:7a:95:56:18:4c:f2:a4:5f:1d:b5:81:80:48:9b: 00:b5:57:95:6a:f1:56:60:6b:2b:e8:9e:24:a8:17:6b:28:1f: 76:72:b9:00:7e:c2:5f:c6:74:22:ee:d9:ca:54:26:cc:51:fc: 5b:a5:33:87:63:22:68:27:df:1a:e0:a6:94:84:80:c5:b8:1b: 08:7c:47:71:35:71:b8:96:b9:70:af:69:5d:bf:c6:11:20:95: 5d:84:5e:2d:6d:58:38:b9:55:d8:13:4c:3f:dd:dc:f0:1a:24: 5e:63:50:7f:cb:1e:06:3d:ab:76:45:39:19:49:55:6f:70:e3: 46:db:cf:3d:90:61:3c:05:d7:27:a7:8d:06:a2:ca:c2:8f:c9: f5:ba:e4:46:fd:07:92:52:f6:50:40:f1:d1:5b:61:c6:fb:5d: dc:43:a5:a4:c8:66:cb:e5:44:b5:fc:78:fe:3b:07:70:95:26: 41:4e:fa:dd:56:2b:84:82:aa:91:48:fa:51:34:90:1b:1a:c9: 1e:2e:4e:ef:dc:9f:e7:ed:60:22:38:e8:16:dd:db:57:3c:b0: 5f:77:59:08:13:b9:f9:04:32:c7:01:2b:aa:99:37:d3:d8:c1: 3d:8c:c3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUxMDI0MTczNTQ1WhcNMjUxMDMxMTczNTQ1WjAYMRYwFAYD VQQDEw02OGZiYjhmMi05N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62VyjRzrqfYeiQAChlbsvGKw7XC9/RazGWfgGHsqO2GT7HQLoz/2tjd3e4yw BhWtt8bqFqiR5/J3j1nujFltJ4fhviJWl7TsL1EGGB6w3s0pykxpOEiMNw2899w8 jk4OX7y2p3opFYuPB/Lcf8q3oTsEzOvPHX2phM+sbnHV6mZbjx/cYW+UwZ9RnW5c HLsu8yep0DzuWYupyPE0nxniFn1mTN5CqZekZxsQdkXoTr/0voT1sHkbivQZLNNi v9p+9kBIcr88LzTpaBEEWeAEK0kO6+WOVyvfCIXgdBnBdYRk816YeOJ+ptfqoPsY DxPZ6G3HqN2aaZhT7TdEujTHCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIx5pKe+ VRngjHyqPdeD031az54dMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCQhc0fUOKqlMT53PvslRU/6m+FhTfepVWGEzypF8dtYGASJsAtVeV avFWYGsr6J4kqBdrKB92crkAfsJfxnQi7tnKVCbMUfxbpTOHYyJoJ98a4KaUhIDF uBsIfEdxNXG4lrlwr2ldv8YRIJVdhF4tbVg4uVXYE0w/3dzwGiReY1B/yx4GPat2 RTkZSVVvcONG2889kGE8Bdcnp40GosrCj8n1uuRG/QeSUvZQQPHRW2HG+13cQ6Wk yGbL5US1/Hj+OwdwlSZBTvrdViuEgqqRSPpRNJAbGskeLk7v3J/n7WAiOOgW3dtX PLBfd1kIE7n5BDLHASuqmTfT2ME9jMO8 -----END CERTIFICATE-----Generated at Sun Oct 26 07:18:51 2025 by rpki-client