$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: 0opri8LPGpoUX1T/577gmbHurrp9YarHHqugMrzQKoU= Subject key identifier: 00:22:AC:9F:BC:16:53:37:97:6F:74:79:EA:4E:40:19:02:A5:34:DA Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 03E5 Signing time: Wed 05 Nov 2025 00:38:22 +0000 Manifest this update: Wed 05 Nov 2025 00:38:21 +0000 Manifest next update: Wed 12 Nov 2025 00:38:21 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: WSFCqTFjVPQbIafx80wEY3tWrsHrYII1t78GxfsDeHE=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1003 (0x3eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Nov 5 00:38:21 2025 GMT Not After : Nov 12 00:38:21 2025 GMT Subject: CN=690a9c7d-1a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:db:14:e7:a5:d7:0d:63:45:ed:ec:1d:46: 07:d4:1a:d4:6d:41:ef:62:71:9e:04:19:a5:b1:f4: 46:b2:ff:e2:0f:a0:f8:21:53:42:c6:6d:4f:46:d8: 3d:85:f5:8b:f0:51:82:6b:2f:40:cb:a6:91:73:76: 13:61:0a:7a:56:ef:b1:2e:47:ae:1e:1b:f8:7d:75: cd:8b:d1:10:94:f5:4d:f3:9e:cc:c9:d0:00:9e:eb: 6e:ab:fc:6d:2d:2e:12:f6:2d:fb:e0:01:7f:ac:24: 97:b7:9d:22:75:02:dc:ed:01:65:89:69:4f:c2:30: 68:67:41:6a:39:f9:6a:d6:b9:65:e1:d6:35:9e:db: 64:26:89:14:cf:c8:68:15:86:65:83:78:74:3c:f6: 38:28:a1:0b:4b:78:2c:ed:b4:15:03:23:2e:94:d6: 15:9f:e4:5a:17:11:5b:60:65:c1:d8:1a:a5:47:17: 38:e5:3e:66:ee:b4:df:ec:29:3d:73:64:95:97:a8: e4:32:9a:a7:bb:57:e4:b5:be:7c:a4:10:09:07:32: a0:54:38:ca:c3:15:ee:f6:ad:82:9c:9e:37:c9:52: ea:6e:a7:3a:52:54:cb:49:44:56:91:1a:4c:78:5b: 93:08:f9:2b:09:8f:a0:b2:f1:cd:3d:83:64:0e:4a: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:22:AC:9F:BC:16:53:37:97:6F:74:79:EA:4E:40:19:02:A5:34:DA X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:4c:3b:25:8c:98:0a:e6:a4:83:3e:8e:7a:a9:a9:ef:77:d7: af:16:a5:59:32:8e:9f:75:be:6c:ef:dd:2f:35:be:5e:c3:e8: ad:ed:c8:6c:20:fc:19:3b:fb:9b:0d:6c:e2:b7:41:32:6f:6b: 9b:bf:a5:93:23:b1:9b:3c:7d:8f:88:82:c5:41:ea:a2:ea:30: 69:ad:aa:4e:37:2b:d9:da:eb:34:17:2c:0b:13:df:79:e1:27: b6:8e:82:cf:6e:81:61:c7:98:29:bd:52:e4:0c:9c:00:dc:ed: 1c:06:6d:a3:9b:a6:c7:77:de:05:df:ea:7f:d3:1b:86:47:f0: 7c:89:40:bc:a5:00:4a:b6:10:9b:4e:d0:c3:cc:b6:8f:a0:8e: ad:30:28:98:32:89:5c:06:1d:1d:3a:72:de:12:d0:75:cb:15: 99:51:5f:87:4f:41:95:1d:a7:a2:b7:fb:c2:4e:31:ea:2e:47: 0c:cc:ec:7c:0b:3d:76:4e:62:ca:8c:7c:53:92:9c:3c:cc:d5: b1:b7:ce:fb:da:03:95:50:20:52:6a:62:fb:01:2e:13:cb:40: 7d:59:8c:1c:4d:20:09:50:9b:ad:e0:35:29:ca:21:43:31:77: 63:cf:f2:c6:8f:93:7c:d8:ff:3c:aa:6f:8c:94:c3:c7:ef:4e: ff:f8:b1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUxMTA1MDAzODIxWhcNMjUxMTEyMDAzODIxWjAYMRYwFAYD VQQDEw02OTBhOWM3ZC0xYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDDbFOel1w1jRe3sHUYH1BrUbUHvYnGeBBmlsfRGsv/iD6D4IVNCxm1PRtg9 hfWL8FGCay9Ay6aRc3YTYQp6Vu+xLkeuHhv4fXXNi9EQlPVN857MydAAnutuq/xt LS4S9i374AF/rCSXt50idQLc7QFliWlPwjBoZ0FqOflq1rll4dY1nttkJokUz8ho FYZlg3h0PPY4KKELS3gs7bQVAyMulNYVn+RaFxFbYGXB2BqlRxc45T5m7rTf7Ck9 c2SVl6jkMpqnu1fktb58pBAJBzKgVDjKwxXu9q2CnJ43yVLqbqc6UlTLSURWkRpM eFuTCPkrCY+gsvHNPYNkDkquRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAirJ+8 FlM3l290eepOQBkCpTTaMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCATDsljJgK5qSDPo56qanvd9evFqVZMo6fdb5s790vNb5ew+it7chs IPwZO/ubDWzit0Eyb2ubv6WTI7GbPH2PiILFQeqi6jBprapONyvZ2us0FywLE995 4Se2joLPboFhx5gpvVLkDJwA3O0cBm2jm6bHd94F3+p/0xuGR/B8iUC8pQBKthCb TtDDzLaPoI6tMCiYMolcBh0dOnLeEtB1yxWZUV+HT0GVHaeit/vCTjHqLkcMzOx8 Cz12TmLKjHxTkpw8zNWxt8772gOVUCBSamL7AS4Ty0B9WYwcTSAJUJut4DUpyiFD MXdjz/LGj5N82P88qm+MlMPH707/+LHu -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:54 2025 by rpki-client