$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: NEsj2Z5nrUHCkno3AOwvppxJv56KNYukDzBytW6rNCo= Subject key identifier: B4:47:60:07:4D:52:82:8F:0E:95:16:60:A1:E5:21:56:1A:70:D0:FA Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11E9 Signing time: Tue 04 Nov 2025 17:15:10 +0000 Manifest this update: Tue 04 Nov 2025 17:15:09 +0000 Manifest next update: Tue 11 Nov 2025 17:15:09 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: ccO8X0vLY8YvX8JyN64VNCKykTd1arerBzOul1flwQQ=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: 7uU8WNBCftCBAsgJ0cA2B7pdvFfJrHU+yjsI9Wz3L8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4593 (0x11f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Nov 4 17:15:09 2025 GMT Not After : Nov 11 17:15:09 2025 GMT Subject: CN=690a349d-60d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:e1:7a:50:95:03:7d:e9:06:fe:7d:8e:2d: 32:56:c8:81:7b:86:2d:1d:08:7e:c5:8c:51:db:24: 3e:55:e6:dc:af:4d:f1:38:5c:e1:d2:87:63:df:f2: 4a:d3:43:24:a6:34:4a:79:4f:2c:35:55:86:20:f5: 72:8a:b2:0a:a8:6f:19:64:b0:2c:39:f8:a2:f4:1f: 71:2c:36:6a:b8:f2:e3:91:20:29:81:2b:15:69:d7: 10:a3:2e:3d:56:aa:5a:77:6f:0f:1b:16:05:a3:40: 6b:6c:97:8a:3b:28:ed:99:c7:ef:4c:15:bd:66:44: ef:38:21:63:6b:f5:f0:5f:85:ad:d0:75:d1:69:75: 2b:da:dc:a7:e5:6a:e5:6a:30:f4:15:b0:64:7d:77: 53:31:04:67:83:02:18:e4:24:d5:6c:16:6c:2c:fd: 97:74:53:18:7f:e8:e5:76:ec:7f:6e:dc:be:a6:b7: 18:94:9c:56:25:f2:4d:6b:a4:e3:dc:c8:85:14:9c: 9e:4d:68:c0:db:f7:58:99:65:c4:30:68:30:d4:70: da:e5:82:42:37:8c:cb:04:63:44:91:ba:8d:a4:0c: 40:6c:a7:d2:3b:5d:fd:e8:fc:ea:71:dc:e1:97:ca: 85:89:43:0e:27:02:d6:83:ad:e1:4c:14:35:65:de: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:47:60:07:4D:52:82:8F:0E:95:16:60:A1:E5:21:56:1A:70:D0:FA X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:af:ac:f9:a4:72:6f:22:0b:6d:74:a9:db:ce:6d:09:62:5d: 0d:4c:56:a2:90:be:99:3c:22:35:9e:2f:7b:1e:69:2a:f6:f3: ee:b1:c3:41:79:33:61:e2:4a:6d:e2:0b:e6:ec:4c:2d:0c:08: af:8b:2e:3c:99:e4:e1:57:b4:76:b5:39:12:c1:18:6b:8a:ef: 07:94:77:b2:d1:4c:20:b0:a9:c1:77:4e:98:e6:ec:b8:18:20: 1b:f8:00:91:47:7f:ea:59:55:26:d5:1c:a5:07:61:d1:6b:3d: 23:12:8f:77:6f:1a:cb:91:e8:c2:33:f5:e9:a4:66:18:f1:84: 9b:59:5a:67:2e:b1:97:a4:2e:c4:d3:ac:ee:34:be:9a:71:0d: 7c:a1:c5:6e:4e:5d:4a:0d:a8:af:57:76:79:41:27:59:26:9f: 74:06:ed:eb:11:f3:93:6f:ed:b6:cf:4c:13:12:7f:82:01:72: ab:b7:c4:de:9a:e6:17:6e:83:3c:68:b5:86:60:9c:bb:82:ad: ae:78:5d:f9:c3:f8:20:0b:1c:3c:ae:9e:09:2c:16:5c:98:5b: 9b:1e:de:49:61:f7:d5:6c:e3:7e:f6:76:43:e9:c8:b7:84:3e: 87:69:6b:21:dc:45:f4:f3:3f:4f:df:c6:66:b9:81:70:84:5f: 1a:8d:8d:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUxMTA0MTcxNTA5WhcNMjUxMTExMTcxNTA5WjAYMRYwFAYD VQQDEw02OTBhMzQ5ZC02MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hvhelCVA33pBv59ji0yVsiBe4YtHQh+xYxR2yQ+Vebcr03xOFzh0odj3/JK 00MkpjRKeU8sNVWGIPVyirIKqG8ZZLAsOfii9B9xLDZquPLjkSApgSsVadcQoy49 Vqpad28PGxYFo0BrbJeKOyjtmcfvTBW9ZkTvOCFja/XwX4Wt0HXRaXUr2tyn5Wrl ajD0FbBkfXdTMQRngwIY5CTVbBZsLP2XdFMYf+jldux/bty+prcYlJxWJfJNa6Tj 3MiFFJyeTWjA2/dYmWXEMGgw1HDa5YJCN4zLBGNEkbqNpAxAbKfSO1396Pzqcdzh l8qFiUMOJwLWg63hTBQ1Zd5KFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRHYAdN UoKPDpUWYKHlIVYacND6MB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/r6z5pHJvIgttdKnbzm0JYl0NTFaikL6ZPCI1ni97Hmkq9vPuscNB eTNh4kpt4gvm7EwtDAiviy48meThV7R2tTkSwRhriu8HlHey0UwgsKnBd06Y5uy4 GCAb+ACRR3/qWVUm1RylB2HRaz0jEo93bxrLkejCM/XppGYY8YSbWVpnLrGXpC7E 06zuNL6acQ18ocVuTl1KDaivV3Z5QSdZJp90Bu3rEfOTb+22z0wTEn+CAXKrt8Te muYXboM8aLWGYJy7gq2ueF35w/ggCxw8rp4JLBZcmFubHt5JYffVbON+9nZD6ci3 hD6HaWsh3EX08z9P38ZmuYFwhF8ajY1A -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:28 2025 by rpki-client