$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft File: qrLSCRHmfiw6NccByHZaaFtQDsc.mft (raw, json) Hash identifier: nNXUIwSv02tNhKYcx//dReax7RHdm4uDwIdhvsk6m5M= Subject key identifier: EA:36:AD:E5:B6:F8:C7:D0:9F:8C:B2:2A:9D:32:18:56:6D:51:3A:28 Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 11E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft Manifest number: 11E0 Signing time: Sat 18 Oct 2025 17:41:26 +0000 Manifest this update: Sat 18 Oct 2025 17:41:26 +0000 Manifest next update: Sat 25 Oct 2025 17:41:26 +0000 Files and hashes: 1: qrLSCRHmfiw6NccByHZaaFtQDsc.crl (hash: e0baf2HuuGYVqbdbBazvR6APxMPKchHXM/82Rz8N73g=) 2: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (hash: 7uU8WNBCftCBAsgJ0cA2B7pdvFfJrHU+yjsI9Wz3L8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4584 (0x11e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Oct 18 17:41:26 2025 GMT Not After : Oct 25 17:41:26 2025 GMT Subject: CN=68f3d146-a395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:fa:10:80:d5:eb:56:06:39:ba:2b:26:78: 98:66:2b:8f:da:a3:b5:2d:32:9d:b9:cf:bf:7f:bb: d1:ed:50:85:d7:37:00:82:b8:b9:14:06:bb:9e:9b: 2b:aa:c8:8a:89:f0:a9:d6:c4:cb:a7:44:f1:97:61: db:c5:b5:73:9b:7e:5f:f0:03:74:95:5b:66:49:25: cb:6b:12:65:03:d4:26:22:f3:c8:c7:d8:8c:74:f1: 29:2e:77:4f:da:8c:9d:31:6f:8f:93:e5:39:ad:fa: 9d:5d:c3:4c:b9:49:db:81:09:8e:8a:99:32:76:9f: f4:d0:00:42:b7:31:1e:e0:70:9b:92:ab:c0:55:92: dc:d7:16:a2:f0:bb:8c:c3:2b:44:d8:f3:a6:bb:f3: 23:36:53:90:69:d5:e3:b2:64:15:31:20:64:bb:55: 2c:ab:73:16:4c:7b:58:26:24:64:39:e7:26:51:a7: 57:4c:bc:98:29:ac:6c:a7:95:08:d4:d1:fc:2b:47: 84:59:21:7b:2e:91:26:d0:07:c4:c1:44:a1:26:7d: 97:7f:8e:a6:a0:b7:04:95:2f:56:55:8a:aa:e5:39: 92:2c:bb:55:5d:bc:a0:50:45:df:25:58:21:1f:31: 42:c3:35:13:4b:a6:f4:19:e0:9b:94:88:24:6a:cb: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:36:AD:E5:B6:F8:C7:D0:9F:8C:B2:2A:9D:32:18:56:6D:51:3A:28 X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4d:78:ae:52:3b:84:1b:8b:66:72:38:5d:27:51:d0:f5:64: 42:74:bd:f4:c7:e3:fb:87:b1:07:69:6b:0b:f4:3e:ff:e8:16: 1e:c9:05:90:4f:27:fc:01:6d:6d:cb:a2:63:f8:0e:9f:95:cc: 1a:1d:6f:cc:a8:66:60:2d:91:01:93:61:cd:eb:9e:ee:d4:85: f2:61:d6:b9:0e:57:66:b2:b6:24:9a:c6:bc:2b:5c:cb:44:4b: 7d:35:30:38:70:78:e1:50:c6:9a:f5:9b:a7:64:0e:0b:f4:ce: a7:7e:9e:94:29:90:8f:c2:84:a8:7f:b9:fc:d1:02:c3:d0:6d: 85:7f:1f:f8:16:84:93:51:82:d5:8d:8a:42:4d:e9:fd:b5:76: 12:8e:37:bc:5d:4f:ec:fd:53:e1:ca:ae:2d:d1:5e:f0:d9:3b: bd:c9:11:77:73:15:d1:87:c9:2d:f6:57:df:c0:20:5e:98:48: a4:0f:0f:f9:7b:b8:34:ca:7e:d0:62:cf:07:23:34:7b:82:fb: e2:cb:80:8a:d1:ec:3e:e9:ac:32:4e:ab:84:c3:f1:f9:70:b5: 3d:d1:14:3f:44:d8:a4:1e:ec:53:b8:4b:07:52:91:c6:70:bf: 1b:b3:c1:21:1e:8c:27:31:00:8f:66:08:84:c2:03:8f:f6:4f: e7:2f:8c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUxMDE4MTc0MTI2WhcNMjUxMDI1MTc0MTI2WjAYMRYwFAYD VQQDEw02OGYzZDE0Ni1hMzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppP6EIDV61YGOborJniYZiuP2qO1LTKduc+/f7vR7VCF1zcAgri5FAa7npsr qsiKifCp1sTLp0Txl2HbxbVzm35f8AN0lVtmSSXLaxJlA9QmIvPIx9iMdPEpLndP 2oydMW+Pk+U5rfqdXcNMuUnbgQmOipkydp/00ABCtzEe4HCbkqvAVZLc1xai8LuM wytE2POmu/MjNlOQadXjsmQVMSBku1Usq3MWTHtYJiRkOecmUadXTLyYKaxsp5UI 1NH8K0eEWSF7LpEm0AfEwUShJn2Xf46moLcElS9WVYqq5TmSLLtVXbygUEXfJVgh HzFCwzUTS6b0GeCblIgkassyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo2reW2 +MfQn4yyKp0yGFZtUTooMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUIyNC8zQkE2OTFBOEY4M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZp dzZOY2NCeUhaYWFGdFFEc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8TXiuUjuEG4tmcjhdJ1HQ9WRCdL30x+P7h7EHaWsL9D7/6BYeyQWQ Tyf8AW1ty6Jj+A6flcwaHW/MqGZgLZEBk2HN657u1IXyYda5DldmsrYkmsa8K1zL REt9NTA4cHjhUMaa9ZunZA4L9M6nfp6UKZCPwoSof7n80QLD0G2Ffx/4FoSTUYLV jYpCTen9tXYSjje8XU/s/VPhyq4t0V7w2Tu9yRF3cxXRh8kt9lffwCBemEikDw/5 e7g0yn7QYs8HIzR7gvviy4CK0ew+6awyTquEw/H5cLU90RQ/RNikHuxTuEsHUpHG cL8bs8EhHownMQCPZgiEwgOP9k/nL4zl -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:06 2025 by rpki-client