$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: ZXiCBI8tRI0mem/E4zrrKIEDy73vcqvAU2nkfy5L9co= Subject key identifier: 43:6F:24:AF:93:67:FB:58:89:F6:43:42:E9:6D:D2:77:95:FA:D4:A0 Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 3262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3259 Signing time: Tue 04 Nov 2025 15:26:42 +0000 Manifest this update: Tue 04 Nov 2025 15:26:41 +0000 Manifest next update: Tue 11 Nov 2025 15:26:41 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: lMZu6WbhAFf2dyhpqJpaR6VXwcR+jnsofvK2t9mvBUU=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12898 (0x3262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Nov 4 15:26:41 2025 GMT Not After : Nov 11 15:26:41 2025 GMT Subject: CN=690a1b32-0bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:af:4a:69:9c:42:42:5c:93:49:21:b3:e6: a4:73:78:70:97:de:ba:9b:72:7c:27:b8:b0:8c:c1: e4:f2:9c:55:3d:4c:6b:21:c0:a3:ea:d0:23:21:15: f1:35:ae:33:fb:78:f4:78:13:f9:88:fc:36:cc:8e: 1f:70:c5:ec:24:2c:38:af:0e:6d:e8:7d:d1:e7:0d: c8:6a:da:7f:dd:6e:00:d7:77:b4:e0:79:0f:54:2f: 1b:91:b9:54:5c:4e:12:87:97:9b:bc:cb:45:48:fc: d4:2b:c2:8e:4b:66:84:06:6b:cd:f1:55:e0:52:d7: 74:de:0f:3b:de:92:70:21:46:0d:a4:c6:15:fe:39: 82:a5:ab:6b:81:2c:21:1c:1b:c1:10:7f:f1:92:0d: 09:0b:70:59:74:e4:60:e9:20:1e:dd:ae:36:ef:f5: 53:10:30:57:67:42:3f:53:b1:67:4f:ff:67:69:14: df:15:c5:3e:59:15:1e:68:98:76:33:c9:9b:18:18: eb:3f:91:83:77:13:b4:0d:a9:6d:74:1b:fb:e9:81: 18:01:91:5d:01:f3:f7:8d:aa:a0:72:73:3c:d6:89: 7f:2e:85:90:e1:0e:ca:4e:9d:7c:ce:b3:fb:15:19: d0:01:44:7c:09:c9:ea:2e:15:7a:f9:a3:af:43:1b: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:24:AF:93:67:FB:58:89:F6:43:42:E9:6D:D2:77:95:FA:D4:A0 X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a0:87:68:ab:62:06:e8:b2:24:41:92:14:6b:35:3c:2d:83: c3:1a:39:74:d9:8a:7a:2c:b5:e3:1e:a2:3d:b4:5c:e5:52:08: 31:35:35:ca:f9:80:f4:4a:e9:b5:18:d8:94:1a:a6:5c:8c:5f: f8:5b:7a:cc:f1:6a:a8:3e:af:74:30:59:2f:71:c4:89:56:a0: 28:85:48:41:93:73:4f:1e:7f:f9:81:a6:7a:bf:74:b3:98:a2: 4a:eb:e6:1a:cf:8d:38:63:e8:52:54:57:c4:37:e3:4e:6f:41: 4a:b7:1c:98:39:51:fd:a3:13:58:3a:67:90:af:3c:5c:91:de: 9d:30:68:d4:4c:17:05:00:08:fc:8d:aa:c2:b9:6b:15:29:4e: 34:ee:e2:e8:e3:69:e2:70:fe:8f:8e:9e:33:bc:09:39:0a:18: 59:84:44:0e:ce:0c:72:25:9c:02:90:3f:51:7b:6f:f1:a2:b3: fe:51:0a:b8:f0:af:e1:b5:0c:5c:2f:91:b4:21:0c:a6:de:3d: 42:f1:17:4f:01:a4:dc:04:0b:39:01:c0:ac:b8:ba:76:25:b1: ca:cf:e6:90:ee:ef:51:8e:b2:9b:c8:60:c8:c7:ec:f9:ba:20: de:1b:e0:83:cd:92:e3:b7:94:65:a2:59:30:89:9a:d8:1b:bf: 14:be:d6:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjUxMTA0MTUyNjQxWhcNMjUxMTExMTUyNjQxWjAYMRYwFAYD VQQDEw02OTBhMWIzMi0wYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZGvSmmcQkJck0khs+akc3hwl966m3J8J7iwjMHk8pxVPUxrIcCj6tAjIRXx Na4z+3j0eBP5iPw2zI4fcMXsJCw4rw5t6H3R5w3Iatp/3W4A13e04HkPVC8bkblU XE4Sh5ebvMtFSPzUK8KOS2aEBmvN8VXgUtd03g873pJwIUYNpMYV/jmCpatrgSwh HBvBEH/xkg0JC3BZdORg6SAe3a427/VTEDBXZ0I/U7FnT/9naRTfFcU+WRUeaJh2 M8mbGBjrP5GDdxO0DaltdBv76YEYAZFdAfP3jaqgcnM81ol/LoWQ4Q7KTp18zrP7 FRnQAUR8CcnqLhV6+aOvQxtKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENvJK+T Z/tYifZDQult0neV+tSgMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgoIdoq2IG6LIkQZIUazU8LYPDGjl02Yp6LLXjHqI9tFzlUggxNTXK +YD0Sum1GNiUGqZcjF/4W3rM8WqoPq90MFkvccSJVqAohUhBk3NPHn/5gaZ6v3Sz mKJK6+Yaz404Y+hSVFfEN+NOb0FKtxyYOVH9oxNYOmeQrzxckd6dMGjUTBcFAAj8 jarCuWsVKU407uLo42nicP6Pjp4zvAk5ChhZhEQOzgxyJZwCkD9Re2/xorP+UQq4 8K/htQxcL5G0IQym3j1C8RdPAaTcBAs5AcCsuLp2JbHKz+aQ7u9RjrKbyGDIx+z5 uiDeG+CDzZLjt5RlolkwiZrYG78UvtY0 -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:23 2025 by rpki-client