$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: wLtICXcyUz7mbQtamE6pAc+hyfp5btLT6RotVrzaqvs= Subject key identifier: 55:03:D5:25:7A:C8:7A:9D:1B:DF:6B:07:DF:15:21:A9:F2:76:AB:F5 Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 03E4 Signing time: Mon 03 Nov 2025 00:30:36 +0000 Manifest this update: Mon 03 Nov 2025 00:30:36 +0000 Manifest next update: Mon 10 Nov 2025 00:30:36 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: she3qqkz65T4AjIYMlJPVcEMlbFf6gWdNQjthlVXvi0=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Nov 3 00:30:36 2025 GMT Not After : Nov 10 00:30:36 2025 GMT Subject: CN=6907f7ac-db69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:67:4e:7e:33:cf:0a:54:27:62:dd:8c:43: e8:eb:be:67:d3:8b:d5:60:55:63:30:10:ea:e9:49: 4c:7a:83:46:99:1d:6d:f5:dc:60:1d:db:a3:18:70: 6a:3e:96:60:2b:27:18:1a:4a:38:a9:99:4d:c7:a3: d4:2a:d5:c6:e1:76:4a:dd:13:83:52:34:b9:34:9a: d8:cf:20:e0:39:f3:a2:29:d1:80:5b:a0:ac:b4:03: 08:69:bf:40:e1:72:89:ed:3e:66:b3:9f:9c:ad:af: 4e:6e:58:4d:d6:48:0e:11:e4:13:b8:14:a5:10:6a: 15:13:2d:5c:28:ed:63:b0:44:98:0d:28:e0:92:ba: f6:4b:01:34:98:1c:1f:c8:8b:31:1e:e5:3b:55:b6: 51:3e:f5:5b:2f:32:a8:6d:1f:4f:03:6a:08:95:84: da:3f:1d:ad:75:c8:e6:9c:53:55:b8:5d:e0:73:38: 2f:59:e1:d3:e1:58:ea:10:27:bc:ac:74:30:1d:d7: 5e:78:15:b0:b2:11:34:99:b7:d0:f5:79:27:02:09: fa:aa:65:e1:7d:6a:cb:95:2a:28:19:53:ef:df:be: 23:f8:9a:9c:ae:bc:c5:95:b5:eb:0a:64:9a:21:47: 7f:7f:bb:1b:f6:87:33:eb:2d:fe:3e:88:c5:fd:a8: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:D5:25:7A:C8:7A:9D:1B:DF:6B:07:DF:15:21:A9:F2:76:AB:F5 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:61:e8:ea:5c:c5:04:5c:7d:db:26:d5:b3:4d:a2:fb:b7:7c: 8d:9a:9f:6c:41:37:63:40:55:ff:cc:fa:68:09:71:12:ea:81: 4f:2f:3a:7b:01:c3:16:94:a5:e8:cb:cb:b1:41:1a:f5:20:78: 81:ca:b9:84:df:97:63:9d:91:5e:97:f3:dc:52:8e:1c:7c:05: 21:51:c7:fc:51:fd:08:61:ae:82:d2:8d:e9:ea:a9:fd:47:66: 75:a9:e5:ed:9b:7c:19:4a:ab:68:8a:0a:f1:54:39:68:9e:d8: 17:c7:58:65:cf:83:fd:57:ba:db:26:43:92:b8:ed:77:40:aa: 09:09:2b:6d:f4:1f:a4:fa:64:a1:4d:6c:88:ef:bf:dc:e1:47: 57:2a:76:21:92:7d:18:e7:40:4d:5c:42:43:06:7b:b0:5d:1c: f6:d6:84:04:77:71:cc:6c:fc:1b:87:1d:25:77:b6:5a:9d:cb: 3b:59:55:4e:0f:3a:fa:dc:86:7a:09:9d:a6:e6:7b:c7:bd:19: 5d:49:b1:9f:fa:df:99:2c:9d:0e:47:0b:fe:ac:67:5e:ff:82: 67:94:55:ce:da:0d:d2:5d:5b:17:7d:cf:b5:38:3c:40:0d:8b: 2f:da:b5:4c:13:c1:69:1b:00:ce:17:4d:3e:06:98:8e:67:19: cb:04:6f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUxMTAzMDAzMDM2WhcNMjUxMTEwMDAzMDM2WjAYMRYwFAYD VQQDEw02OTA3ZjdhYy1kYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BlnTn4zzwpUJ2LdjEPo675n04vVYFVjMBDq6UlMeoNGmR1t9dxgHdujGHBq PpZgKycYGko4qZlNx6PUKtXG4XZK3RODUjS5NJrYzyDgOfOiKdGAW6CstAMIab9A 4XKJ7T5ms5+cra9OblhN1kgOEeQTuBSlEGoVEy1cKO1jsESYDSjgkrr2SwE0mBwf yIsxHuU7VbZRPvVbLzKobR9PA2oIlYTaPx2tdcjmnFNVuF3gczgvWeHT4VjqECe8 rHQwHddeeBWwshE0mbfQ9XknAgn6qmXhfWrLlSooGVPv374j+JqcrrzFlbXrCmSa IUd/f7sb9ocz6y3+PojF/aipLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUD1SV6 yHqdG99rB98VIanydqv1MB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdYejqXMUEXH3bJtWzTaL7t3yNmp9sQTdjQFX/zPpoCXES6oFPLzp7 AcMWlKXoy8uxQRr1IHiByrmE35djnZFel/PcUo4cfAUhUcf8Uf0IYa6C0o3p6qn9 R2Z1qeXtm3wZSqtoigrxVDlontgXx1hlz4P9V7rbJkOSuO13QKoJCStt9B+k+mSh TWyI77/c4UdXKnYhkn0Y50BNXEJDBnuwXRz21oQEd3HMbPwbhx0ld7Zancs7WVVO Dzr63IZ6CZ2m5nvHvRldSbGf+t+ZLJ0ORwv+rGde/4JnlFXO2g3SXVsXfc+1ODxA DYsv2rVME8FpGwDOF00+BpiOZxnLBG+x -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:14 2025 by rpki-client