$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: BKIW1inIqB9P12Cfc7C/FJEqjyGKr02Y0FuitXTInWA= Subject key identifier: 49:29:C5:D3:38:03:12:EC:C7:59:45:CC:3E:86:D0:EF:6E:DE:4E:2F Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 13E0 Signing time: Tue 04 Nov 2025 19:06:29 +0000 Manifest this update: Tue 04 Nov 2025 19:06:29 +0000 Manifest next update: Tue 11 Nov 2025 19:06:29 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: 7lS7BArEt1V2fMEtvndzVoMg+atiEpn4xvpx9DElL3g=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 5zkE6RPNVvetKuzik8vsy3mHeLDd3Wj/ciaGchVH9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: Nov 4 19:06:29 2025 GMT Not After : Nov 11 19:06:29 2025 GMT Subject: CN=690a4eb5-ed90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:ce:e2:74:5a:d8:11:a5:5a:5c:d9:a7:3a: 32:25:03:02:a8:58:4b:31:94:d3:a6:9e:fc:fc:10: 92:16:8f:02:3c:f8:84:c6:de:d3:3d:b1:6c:f8:73: 4c:40:61:2b:43:76:8e:02:5e:86:2e:09:cd:0e:6f: 9d:49:23:db:13:39:20:f7:cc:b7:63:44:73:9b:e9: 59:16:98:e5:53:19:7c:32:42:f3:28:5b:b4:3c:be: 9c:a3:3e:a4:63:a3:4c:8c:ec:e3:cd:bc:27:17:cf: 93:21:e4:3f:fe:07:34:db:bc:94:a7:f4:3f:ea:bb: 89:ae:da:1a:90:85:54:51:7d:27:3e:36:26:ff:63: 0a:d7:cd:91:f4:15:b8:a1:d6:04:54:d2:5b:a4:d6: 18:24:21:a2:04:d4:20:af:b6:73:b1:a5:5c:0d:91: 3c:b9:22:b1:52:f9:4b:a4:c6:65:94:98:a4:3c:7a: 63:5a:ee:8f:53:ea:69:58:9d:44:06:b5:fb:15:24: c3:e0:21:63:51:55:c3:1a:52:cf:53:30:99:80:d4: 01:6f:a5:00:5a:3d:ba:ef:c2:e3:a0:94:fe:6f:54: f2:ca:ed:f8:21:ba:46:e0:8b:3c:5b:f7:00:ae:e1: 67:95:31:25:0c:95:d8:47:94:52:1c:78:53:1f:e0: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:29:C5:D3:38:03:12:EC:C7:59:45:CC:3E:86:D0:EF:6E:DE:4E:2F X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:dc:8e:95:5f:fd:12:a5:b8:9e:e7:df:35:00:b8:fd:5f:54: fd:2f:81:26:a0:f0:3f:4c:01:2b:69:d3:9b:b2:bd:34:96:4e: 65:35:b7:77:c6:52:11:5b:c7:f2:41:1d:5c:0d:de:c6:94:5b: 70:44:53:5b:de:03:75:47:0c:ce:88:39:2a:86:8e:78:e5:b6: 0d:77:71:63:9a:8e:93:dc:44:1a:1c:c8:05:92:77:62:45:18: cc:eb:34:be:03:57:31:46:df:c7:6e:55:4d:65:70:9a:b2:54: b1:73:42:7d:c9:2e:52:a2:28:f0:c6:f8:b6:91:80:10:27:11: ff:fb:88:8a:9d:5b:6d:04:59:d3:f2:35:fb:1c:1b:81:6b:51: 17:2b:e9:84:6f:37:47:bb:a1:59:69:38:3d:f8:a0:70:be:e2: 65:77:8a:93:ff:1f:3d:00:11:05:4a:7b:6b:06:f7:36:f4:fc: b8:13:2f:a0:b7:2e:c7:1d:6c:40:ba:4e:44:13:14:94:8c:82: ad:07:42:fc:4d:e0:21:31:e1:72:de:54:7c:70:2b:b2:26:7e: b5:d3:56:d6:f4:72:3c:f5:88:4c:55:99:b1:39:42:ba:e6:68: 86:9b:3c:75:38:60:a0:3e:2f:5c:71:81:85:46:4a:b0:96:dc: af:b5:87:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjUxMTA0MTkwNjI5WhcNMjUxMTExMTkwNjI5WjAYMRYwFAYD VQQDEw02OTBhNGViNS1lZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JzO4nRa2BGlWlzZpzoyJQMCqFhLMZTTpp78/BCSFo8CPPiExt7TPbFs+HNM QGErQ3aOAl6GLgnNDm+dSSPbEzkg98y3Y0Rzm+lZFpjlUxl8MkLzKFu0PL6coz6k Y6NMjOzjzbwnF8+TIeQ//gc027yUp/Q/6ruJrtoakIVUUX0nPjYm/2MK182R9BW4 odYEVNJbpNYYJCGiBNQgr7ZzsaVcDZE8uSKxUvlLpMZllJikPHpjWu6PU+ppWJ1E BrX7FSTD4CFjUVXDGlLPUzCZgNQBb6UAWj2678LjoJT+b1Tyyu34IbpG4Is8W/cA ruFnlTElDJXYR5RSHHhTH+CJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkpxdM4 AxLsx1lFzD6G0O9u3k4vMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB13I6VX/0Spbie5981ALj9X1T9L4EmoPA/TAEradObsr00lk5lNbd3 xlIRW8fyQR1cDd7GlFtwRFNb3gN1RwzOiDkqho545bYNd3Fjmo6T3EQaHMgFkndi RRjM6zS+A1cxRt/HblVNZXCaslSxc0J9yS5Soijwxvi2kYAQJxH/+4iKnVttBFnT 8jX7HBuBa1EXK+mEbzdHu6FZaTg9+KBwvuJld4qT/x89ABEFSntrBvc29Py4Ey+g ty7HHWxAuk5EExSUjIKtB0L8TeAhMeFy3lR8cCuyJn6101bW9HI89YhMVZmxOUK6 5miGmzx1OGCgPi9ccYGFRkqwltyvtYfI -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:28 2025 by rpki-client