$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json) Hash identifier: sX5nFV7ujo8VsfVpG1vSuuWekSYjJchHM4bQLVVqNwE= Subject key identifier: 28:B7:C2:C4:70:CD:15:00:A9:6E:DB:7B:C2:AC:B9:0D:F6:A6:73:5F Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Certificate serial: 116B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft Manifest number: 1162 Signing time: Tue 04 Nov 2025 17:19:42 +0000 Manifest this update: Tue 04 Nov 2025 17:19:41 +0000 Manifest next update: Tue 11 Nov 2025 17:19:41 +0000 Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: /SsfCxyWizWPRYTwfGWlA8Ub+qKZCzIvjEJeNEQ9I9A=) 2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: KtVDjjSzHPLYoect4ZHiTibts9NkJOtiflrVSKdNkLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4459 (0x116b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B Validity Not Before: Nov 4 17:19:41 2025 GMT Not After : Nov 11 17:19:41 2025 GMT Subject: CN=690a35ae-e002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:2e:42:69:68:f1:08:0e:98:34:13:56:05: 9a:b6:37:07:f4:eb:1e:33:a5:fe:ef:91:89:bc:79: 86:b9:c6:b2:aa:b9:53:3b:08:61:7b:7b:3e:80:b6: a1:9b:0c:0e:c0:51:ce:e5:0e:75:61:64:2e:76:1b: 67:45:7e:08:6d:6a:e7:eb:e1:05:ec:36:2e:41:ae: c4:a1:e3:d9:0a:75:00:60:9b:53:dd:0c:da:f4:98: 8f:86:75:15:21:6b:90:15:3d:09:b2:b8:d5:4f:58: 75:08:e3:a4:6f:87:09:fe:7a:17:9f:03:c8:88:7f: 49:94:14:69:fc:36:8f:86:a4:bf:e4:5a:ad:2f:35: f6:4e:da:47:00:e2:61:92:73:53:7c:06:7d:5b:b9: fc:8e:5b:de:3e:de:a9:a6:d1:7e:6d:94:14:da:9e: 2c:3b:21:a0:18:6f:0e:cd:ca:42:99:29:c2:07:64: 6a:2a:82:36:b6:97:44:1d:7f:40:23:2c:a5:71:31: 37:7e:80:de:36:59:70:2d:22:e5:2d:ea:b4:4a:3c: c9:4a:f7:fe:69:0f:66:f3:97:b6:8f:64:44:b6:0b: 7c:4e:3f:0f:67:ff:0c:20:b3:3f:a5:87:43:e1:43: 72:ce:ba:07:4c:f7:8c:0c:c2:90:03:ef:43:bc:98: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:C2:C4:70:CD:15:00:A9:6E:DB:7B:C2:AC:B9:0D:F6:A6:73:5F X509v3 Authority Key Identifier: keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:91:60:2e:0a:fb:86:df:53:19:1f:12:91:c8:2f:70:e6:ef: 51:4a:cf:16:32:8c:37:98:6f:d4:a1:9a:ac:d8:68:dc:2e:a6: 6a:4a:26:4b:a0:92:79:e5:0d:cd:4e:e0:31:fd:c3:ae:52:c5: 64:46:03:01:32:83:53:b2:dd:73:b7:8e:ec:1f:ac:17:7f:69: c5:29:6d:f9:10:15:3e:88:c5:87:c8:8e:6e:e8:8a:00:12:1a: 6c:77:c2:3f:e9:b3:be:b9:8f:71:3b:7d:6c:07:5d:ad:2b:03: 91:c5:95:5b:d3:31:51:2f:e9:16:19:33:c3:12:4e:7a:65:ea: 5d:2f:34:84:60:bb:bd:fb:bb:80:c2:19:e7:c6:ea:4e:5a:84: f9:5b:58:50:cd:e8:5a:ae:f3:41:c5:f2:b3:42:98:35:6b:2f: a0:ea:06:1c:3e:75:72:9a:71:15:56:cd:53:38:fe:46:85:98: ed:90:2c:6f:91:19:48:5c:6f:8d:16:65:21:53:45:9b:43:d4: de:38:c7:99:3a:9c:20:3c:9a:d7:e6:97:12:33:66:13:19:df: 80:d5:3e:41:33:35:9c:e1:72:63:dc:51:21:62:08:48:01:3e: 58:e5:e3:f7:36:4c:36:e6:c8:9e:c0:10:36:5e:94:11:92:79: 36:4b:af:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzMjUxMTAvBgNVBAUTKDQzNEE0OTE3NTk1MjE2QkYwODgyOURDNTJDMkVEM0E4 RjI4MjA0OEIwHhcNMjUxMTA0MTcxOTQxWhcNMjUxMTExMTcxOTQxWjAYMRYwFAYD VQQDEw02OTBhMzVhZS1lMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/EuQmlo8QgOmDQTVgWatjcH9OseM6X+75GJvHmGucayqrlTOwhhe3s+gLah mwwOwFHO5Q51YWQudhtnRX4IbWrn6+EF7DYuQa7EoePZCnUAYJtT3Qza9JiPhnUV IWuQFT0JsrjVT1h1COOkb4cJ/noXnwPIiH9JlBRp/DaPhqS/5FqtLzX2TtpHAOJh knNTfAZ9W7n8jlvePt6pptF+bZQU2p4sOyGgGG8OzcpCmSnCB2RqKoI2tpdEHX9A IyylcTE3foDeNllwLSLlLeq0SjzJSvf+aQ9m85e2j2REtgt8Tj8PZ/8MILM/pYdD 4UNyzroHTPeMDMKQA+9DvJjzvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi3wsRw zRUAqW7be8KsuQ32pnNfMB8GA1UdIwQYMBaAFENKSRdZUha/CIKdxSwu06jyggSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzMyNS84Q0U3REU3NjEz NzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0ZyOElncDNGTEM3VHFQS0NC SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EwcEpGMWxTRnI4SWdwM0ZMQzdUcVBLQ0JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzMyNS84Q0U3REU3NjEzNzQxMUU5QTFEQzEwNTNDNEY5QUUwMi9RMHBKRjFsU0Zy OElncDNGTEM3VHFQS0NCSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqkWAuCvuG31MZHxKRyC9w5u9RSs8WMow3mG/UoZqs2GjcLqZqSiZL oJJ55Q3NTuAx/cOuUsVkRgMBMoNTst1zt47sH6wXf2nFKW35EBU+iMWHyI5u6IoA Ehpsd8I/6bO+uY9xO31sB12tKwORxZVb0zFRL+kWGTPDEk56ZepdLzSEYLu9+7uA whnnxupOWoT5W1hQzeharvNBxfKzQpg1ay+g6gYcPnVymnEVVs1TOP5GhZjtkCxv kRlIXG+NFmUhU0WbQ9TeOMeZOpwgPJrX5pcSM2YTGd+A1T5BMzWc4XJj3FEhYghI AT5Y5eP3Nkw25siewBA2XpQRknk2S6/6 -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:29 2025 by rpki-client