$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json) Hash identifier: Quo3s0M3OBbBziACUiCrs/Va4cRTbwCiI3RAPoog5bY= Subject key identifier: 68:CB:AA:B0:23:AB:1F:77:EB:4C:7D:0C:C4:B5:E3:9D:C6:4B:34:3C Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft Manifest number: 38 Signing time: Sat 25 Oct 2025 11:37:47 +0000 Manifest this update: Sat 25 Oct 2025 11:37:47 +0000 Manifest next update: Sat 01 Nov 2025 11:37:47 +0000 Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: GgedCiB3AtxNboom01pX94YcJruhtsJ5seIWIExT93g=) 2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM=) 3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: R9MuPEXmcb9QPVduJszFJZ3jI05Vo9fUIK/CYjPl3pQ=) 4: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: Vi+X8eC77LW+19x04LHYzDEZAgS3KYmTg+MI+Li5Sts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Oct 25 11:37:47 2025 GMT Not After : Nov 1 11:37:47 2025 GMT Subject: CN=68fcb68b-31c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:e1:98:86:8a:21:dd:48:06:21:ff:7f:83: a0:81:37:64:ed:87:95:6f:c0:72:25:65:8b:24:59: b1:03:56:5c:cd:4a:4c:d6:8d:48:45:c6:49:e0:9e: 80:79:f1:64:aa:d5:74:69:34:f0:03:59:2e:aa:86: 56:5e:7a:5f:91:3d:2a:71:1f:78:65:f3:66:53:2a: 32:6b:e3:d0:97:be:86:d5:76:7b:66:d7:9a:53:ce: db:42:3b:c3:35:60:7a:19:b9:af:09:bc:00:13:9e: 45:93:15:01:62:e9:5c:4c:19:3c:55:71:0b:6b:3d: d3:33:b9:4d:de:da:b9:be:fa:f4:ee:56:43:85:e3: 8f:9f:4a:27:73:6e:67:29:bc:09:cb:b9:94:07:8b: a0:9b:19:62:e7:1d:0b:bf:ef:12:eb:11:ba:04:ae: 35:c6:3f:5b:8a:de:9e:c4:82:ad:d3:94:ef:7d:86: 83:e0:fd:35:84:29:c2:63:25:c7:41:e4:7d:51:e8: ad:e1:3f:43:30:4f:ce:28:38:bf:d1:ba:73:c5:ae: 13:d2:7a:c3:a7:7e:a3:32:47:4a:a2:52:54:c2:7f: 78:d0:75:ff:a5:2f:0b:fa:24:fa:de:6e:55:18:0c: 13:63:41:d9:0d:97:5c:c6:7b:d6:1e:d6:d3:80:66: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:AA:B0:23:AB:1F:77:EB:4C:7D:0C:C4:B5:E3:9D:C6:4B:34:3C X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:bd:97:ca:cd:d5:a8:57:6e:1e:c0:f8:12:19:d2:9b:89:61: 4a:05:49:1d:6d:f4:bb:73:63:4e:49:41:5b:84:1c:8c:3f:b3: ca:13:61:26:e8:45:5a:90:2f:fd:83:04:40:1c:07:09:ed:b5: d7:c5:93:c2:1e:44:27:47:2d:25:46:ba:bf:2e:e0:ae:aa:a7: b2:6e:24:8b:55:ba:65:df:98:51:39:5c:dd:4a:b9:e9:f8:5c: 36:42:72:aa:74:a1:fc:ad:be:37:62:40:24:51:20:e4:5e:ea: d5:98:76:1e:2c:fe:46:f5:61:48:15:4b:2a:9b:98:06:f8:08: bf:62:e1:5c:32:6b:cb:d4:39:42:1f:9c:f7:36:2f:28:f7:10: b0:c7:c5:e8:4c:23:97:a3:66:c7:2c:46:a1:b6:9d:75:e7:13: be:28:3d:5e:fd:4a:3f:e8:a8:b6:5a:2c:5e:c8:e6:3f:16:1b: c8:a2:bd:e9:f8:45:6c:93:d8:7f:6b:5f:15:89:67:37:f3:c8: 88:3b:16:d1:b6:9f:06:48:13:55:7c:1b:50:05:c1:d1:a3:2b: 80:98:5e:db:f4:44:b5:c9:1f:79:7b:88:6a:39:e1:7a:50:06: 1a:0f:26:41:a5:3e:9f:6b:f3:16:07:56:ac:94:42:61:a3:52: c3:89:9b:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1 MzMwQ0U0MjAeFw0yNTEwMjUxMTM3NDdaFw0yNTExMDExMTM3NDdaMBgxFjAUBgNV BAMTDTY4ZmNiNjhiLTMxYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCEOGYhooh3UgGIf9/g6CBN2Tth5VvwHIlZYskWbEDVlzNSkzWjUhFxkngnoB5 8WSq1XRpNPADWS6qhlZeel+RPSpxH3hl82ZTKjJr49CXvobVdntm15pTzttCO8M1 YHoZua8JvAATnkWTFQFi6VxMGTxVcQtrPdMzuU3e2rm++vTuVkOF44+fSidzbmcp vAnLuZQHi6CbGWLnHQu/7xLrEboErjXGP1uK3p7Egq3TlO99hoPg/TWEKcJjJcdB 5H1R6K3hP0MwT84oOL/RunPFrhPSesOnfqMyR0qiUlTCf3jQdf+lLwv6JPreblUY DBNjQdkNl1zGe9Ye1tOAZjU1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaMuqsCOr H3frTH0MxLXjncZLNDwwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 NUYwLzRCRTY5RDAyNjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0 VWFmSGRzd0diRmxNd3prSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKC9l8rN1ahXbh7A+BIZ0puJYUoFSR1t9LtzY05JQVuEHIw/s8oTYSbo RVqQL/2DBEAcBwnttdfFk8IeRCdHLSVGur8u4K6qp7JuJItVumXfmFE5XN1Kuen4 XDZCcqp0ofytvjdiQCRRIORe6tWYdh4s/kb1YUgVSyqbmAb4CL9i4Vwya8vUOUIf nPc2Lyj3ELDHxehMI5ejZscsRqG2nXXnE74oPV79Sj/oqLZaLF7I5j8WG8iiven4 RWyT2H9rXxWJZzfzyIg7FtG2nwZIE1V8G1AFwdGjK4CYXtv0RLXJH3l7iGo54XpQ BhoPJkGlPp9r8xYHVqyUQmGjUsOJm1c= -----END CERTIFICATE-----Generated at Sat Oct 25 17:42:03 2025 by rpki-client