$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: M3IqHOWk203RdUSb2Md2mtCxb87aXR/vw0XGbWWspgY= Subject key identifier: CF:E0:6A:54:35:E4:27:52:09:28:F2:F6:06:56:BB:92:16:70:07:FB Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0A68 Signing time: Sat 18 Oct 2025 20:53:50 +0000 Manifest this update: Sat 18 Oct 2025 20:53:50 +0000 Manifest next update: Sat 25 Oct 2025 20:53:50 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: rLiwNVopEPJYrWW8qoGYg0rd4Q3rXPDruFfxbXymAtk=) 2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: dOCznw/J4c94cUvosSW/kOC2oIL6jbmFAL2+O7rkhag=) 3: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: UfxAxapspNfCULgapde2dhkYeQjgb9Bzqtz/tQtQdPw=) 4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: 5nE372F+0IwqYdLJZogWsDWbHc80At5gKYtw/eBlXZE=) 5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: 9X7I+brkK/zM7IstcmQqkt3f3WU83UlUm6djQdlHWFo=) 6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: ejIz9Yuuvy/Lj5GU8AUntC0tFJ+QHqAuBe5ozlZ4Gxw=) 7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: L+W6w2B2/2JqZHEEy+XRZ0tQqm2y+76IdcVbyBsuS1w=) 8: 553170245AC511EBA052F663C4F9AE02.roa (hash: 1WjAWoIgFya9zcz3aaAfAZPj3TaOx48UOEMbOt7aBvY=) 9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: HSmuGZlq2yjbC7oby/mLDwMQgWOMUuKo8bggRUwHe8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Oct 18 20:53:50 2025 GMT Not After : Oct 25 20:53:50 2025 GMT Subject: CN=68f3fe5e-904e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:f4:e2:f5:e3:bd:87:fe:55:2e:16:32:4c: b4:75:1c:4e:46:cb:1f:d6:a9:16:44:cf:fd:0d:2e: 4b:d1:7c:97:05:38:37:9c:fc:7e:f5:f3:18:99:ac: 0a:2f:c3:53:80:73:66:42:d5:1f:49:8e:d1:b0:48: d5:4a:9c:20:4b:9b:4e:46:0e:63:34:c2:d1:cf:b9: fe:f0:e9:09:94:9c:f6:a5:09:6f:af:7a:04:5b:b5: c9:29:d0:ff:8d:02:39:ae:6d:39:6b:e2:7e:c1:34: 25:d7:ef:a8:22:1a:a7:22:83:13:56:f1:37:d0:d6: 7a:6f:50:74:8c:b8:08:0a:ce:a7:ce:c5:90:0e:ef: bf:4c:70:9e:b1:9c:f7:63:6f:3e:96:0f:ee:26:ca: fa:2a:de:b1:ad:0d:1b:7e:57:92:dd:94:84:71:5d: 13:69:c7:fb:8d:9d:c5:a1:b8:aa:14:88:e4:52:f4: c6:61:c7:dc:60:39:41:15:3c:44:1a:e7:70:f8:b1: 35:1a:70:0b:fa:58:97:19:4b:15:39:47:86:d3:59: 2b:f5:ab:10:2b:81:43:52:6b:08:07:e4:91:b0:1d: 09:0e:67:80:bc:56:9c:69:16:39:b6:6f:24:98:a0: 02:f2:09:ec:c8:d2:2b:e5:81:e0:c3:fb:dd:27:5f: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:6A:54:35:E4:27:52:09:28:F2:F6:06:56:BB:92:16:70:07:FB X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1a:ec:94:4b:fd:e1:11:85:ae:7a:22:52:bf:d7:86:7c:5b: 4a:7b:2c:00:c3:ce:21:47:8f:cf:ef:59:a0:c3:2c:c9:3c:95: 22:36:8f:be:93:1f:70:91:de:39:ab:ec:88:61:45:2a:02:d2: 50:1c:09:35:bb:4a:0e:0f:74:3a:f1:e0:61:65:7e:22:bd:ba: 33:0a:f0:90:a9:01:5b:eb:45:f6:1e:d8:a1:70:12:51:d2:9f: c9:94:16:9f:46:3a:0e:3d:f2:27:0b:76:bf:1f:28:79:61:b5: f4:57:08:1f:b1:4d:05:2a:f3:fb:26:09:9c:f4:7b:df:7b:0e: a2:d0:3c:dd:40:ed:18:f1:c8:83:ce:53:97:d7:c3:5c:3f:27: 00:22:4c:c2:4b:71:47:ce:64:53:de:64:18:1c:23:92:1f:c8: 1f:e8:a3:28:5f:81:bc:d1:e4:2a:b9:db:f0:b7:bd:aa:77:49: 74:12:fd:c8:f1:aa:5e:3d:3e:fc:b3:64:eb:04:62:16:42:2e: 93:02:15:dc:a6:1e:fc:06:21:22:26:7e:96:6d:8f:84:4f:a5: 69:49:a4:8b:b1:72:e2:46:69:e4:5f:c0:ae:47:e2:11:ed:72: 5b:2a:b3:88:91:cf:1e:26:f3:c6:a7:a8:6a:0f:d5:49:f3:17: 55:aa:6b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjUxMDE4MjA1MzUwWhcNMjUxMDI1MjA1MzUwWjAYMRYwFAYD VQQDEw02OGYzZmU1ZS05MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtj04vXjvYf+VS4WMky0dRxORssf1qkWRM/9DS5L0XyXBTg3nPx+9fMYmawK L8NTgHNmQtUfSY7RsEjVSpwgS5tORg5jNMLRz7n+8OkJlJz2pQlvr3oEW7XJKdD/ jQI5rm05a+J+wTQl1++oIhqnIoMTVvE30NZ6b1B0jLgICs6nzsWQDu+/THCesZz3 Y28+lg/uJsr6Kt6xrQ0bfleS3ZSEcV0Tacf7jZ3FobiqFIjkUvTGYcfcYDlBFTxE Gudw+LE1GnAL+liXGUsVOUeG01kr9asQK4FDUmsIB+SRsB0JDmeAvFacaRY5tm8k mKAC8gnsyNIr5YHgw/vdJ18qPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/galQ1 5CdSCSjy9gZWu5IWcAf7MB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCGuyUS/3hEYWueiJSv9eGfFtKeywAw84hR4/P71mgwyzJPJUiNo++ kx9wkd45q+yIYUUqAtJQHAk1u0oOD3Q68eBhZX4ivbozCvCQqQFb60X2HtihcBJR 0p/JlBafRjoOPfInC3a/Hyh5YbX0VwgfsU0FKvP7Jgmc9Hvfew6i0DzdQO0Y8ciD zlOX18NcPycAIkzCS3FHzmRT3mQYHCOSH8gf6KMoX4G80eQqudvwt72qd0l0Ev3I 8apePT78s2TrBGIWQi6TAhXcph78BiEiJn6WbY+ET6VpSaSLsXLiRmnkX8CuR+IR 7XJbKrOIkc8eJvPGp6hqD9VJ8xdVqmu4 -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:25 2025 by rpki-client