$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft File: qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json) Hash identifier: mD+D648/+9EAnzCHgYTZe0p7C+dRrAEVl33/5ylwzXU= Subject key identifier: B2:EA:DE:F1:CC:06:4E:4F:EB:E2:04:32:95:2A:54:23:CB:C0:D5:4C Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Certificate serial: 325A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft Manifest number: 3251 Signing time: Mon 20 Oct 2025 15:32:53 +0000 Manifest this update: Mon 20 Oct 2025 15:32:53 +0000 Manifest next update: Mon 27 Oct 2025 15:32:53 +0000 Files and hashes: 1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: WzGHVwU4JXFtkGhkmiNZpV47MNkaz9+yQ/80dinaXis=) 2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12890 (0x325a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1 Validity Not Before: Oct 20 15:32:53 2025 GMT Not After : Oct 27 15:32:53 2025 GMT Subject: CN=68f65625-a1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:a7:ba:8a:56:72:f3:52:73:56:ab:6d:dd: b1:a8:92:cb:0e:dc:97:f0:07:72:95:75:6c:64:97: 51:da:05:2e:36:39:08:d1:4b:4e:39:17:b3:f5:fe: 23:80:ff:db:e0:b2:eb:ee:33:f0:1a:05:46:d4:8b: c3:6a:84:82:e5:42:08:17:aa:db:4b:e5:e5:43:ce: 30:2c:31:45:16:0c:5b:1c:2e:0f:8b:d5:f9:8b:f4: eb:4f:29:d9:82:ef:f5:43:8c:9c:5b:3d:48:b6:a1: 5e:fe:93:4a:d8:30:bb:25:fd:85:e2:5f:3e:ff:78: b1:48:53:b4:1c:00:63:62:20:0c:89:08:5d:b4:48: f1:fc:ee:d1:98:6d:fc:6d:da:3c:08:e4:ad:d6:be: 3b:49:26:98:ca:1a:39:63:ea:29:15:b5:26:74:a2: 61:d4:a6:82:0e:f0:41:0a:32:18:85:a3:99:62:92: 6e:9c:78:b0:8d:9c:43:32:80:9b:65:66:fd:38:3b: 72:52:ad:26:c0:01:04:26:ea:9e:b7:9c:65:99:d1: c3:06:89:92:f8:2d:fc:f3:d2:f3:47:c5:e6:1e:25: fa:76:41:bd:a1:d3:ce:0b:58:fb:9f:92:14:7d:13: 4c:52:b7:f7:cf:db:91:8a:bf:d2:67:17:d6:2b:10: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EA:DE:F1:CC:06:4E:4F:EB:E2:04:32:95:2A:54:23:CB:C0:D5:4C X509v3 Authority Key Identifier: keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:3c:80:08:c8:18:a4:81:20:32:48:30:fa:54:76:fb:9a: 3f:1b:78:26:51:6e:a9:86:9e:54:37:32:c1:68:06:80:37:06: ae:4b:98:22:a8:42:3c:73:30:fa:cc:ba:c9:87:3d:64:dd:c4: e5:0f:5a:79:96:09:60:d9:78:c7:a0:36:94:11:12:4e:35:9e: 97:2b:e9:68:cc:5a:cd:6d:22:0d:5c:0a:72:ef:22:15:6f:7c: bb:4b:90:ca:2c:91:9a:f4:1e:67:78:60:47:7a:de:34:2f:ec: ef:27:90:6a:c1:28:10:47:d6:66:d4:62:5e:1a:e4:f5:bd:d5: 7c:16:d7:0c:e9:4b:85:13:40:4b:09:f1:0f:c1:ff:1d:8d:b8: e6:51:bc:a2:7c:9f:99:87:d7:7c:49:57:26:d5:cd:77:a4:2a: 7f:09:33:76:ff:49:26:56:34:07:b3:a0:57:7e:03:83:e7:0f: 0c:a7:77:56:71:bf:c8:16:62:7d:02:44:9b:75:2b:63:6e:99: d9:53:8c:a2:52:fd:03:4a:40:a1:97:f9:2d:9e:48:ac:33:57: fe:0b:f9:6d:0e:ed:3b:6b:b3:4c:fe:64:d7:71:3e:97:ce:6a: b0:7c:b9:69:13:f4:13:0b:f7:5e:28:73:fe:1a:1d:fd:51:ee: 8f:55:43:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0NDcxMTAvBgNVBAUTKEE4M0M2RUNFMjIzM0I2Q0I4Q0MwRUI2MTNGMEE5NTJD ODMzQzAzQTEwHhcNMjUxMDIwMTUzMjUzWhcNMjUxMDI3MTUzMjUzWjAYMRYwFAYD VQQDEw02OGY2NTYyNS1hMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5CnuopWcvNSc1arbd2xqJLLDtyX8AdylXVsZJdR2gUuNjkI0UtOORez9f4j gP/b4LLr7jPwGgVG1IvDaoSC5UIIF6rbS+XlQ84wLDFFFgxbHC4Pi9X5i/TrTynZ gu/1Q4ycWz1ItqFe/pNK2DC7Jf2F4l8+/3ixSFO0HABjYiAMiQhdtEjx/O7RmG38 bdo8COSt1r47SSaYyho5Y+opFbUmdKJh1KaCDvBBCjIYhaOZYpJunHiwjZxDMoCb ZWb9ODtyUq0mwAEEJuqet5xlmdHDBomS+C3889LzR8XmHiX6dkG9odPOC1j7n5IU fRNMUrf3z9uRir/SZxfWKxDi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLq3vHM Bk5P6+IEMpUqVCPLwNVMMB8GA1UdIwQYMBaAFKg8bs4iM7bLjMDrYT8KlSyDPAOh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ0Ny84MUIwRjE1QzlD NzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRzdU13T3RoUHdxVkxJTThB NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FEeHV6aUl6dHN1TXdPdGhQd3FWTElNOEE2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTQ0Ny84MUIwRjE1QzlDNzcxMUUyQTk4MzQ4REYyRjVBNzc1NC9xRHh1emlJenRz dU13T3RoUHdxVkxJTThBNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASezyACMgYpIEgMkgw+lR2+5o/G3gmUW6php5UNzLBaAaANwauS5gi qEI8czD6zLrJhz1k3cTlD1p5lglg2XjHoDaUERJONZ6XK+lozFrNbSINXApy7yIV b3y7S5DKLJGa9B5neGBHet40L+zvJ5BqwSgQR9Zm1GJeGuT1vdV8FtcM6UuFE0BL CfEPwf8djbjmUbyifJ+Zh9d8SVcm1c13pCp/CTN2/0kmVjQHs6BXfgOD5w8Mp3dW cb/IFmJ9AkSbdStjbpnZU4yiUv0DSkChl/ktnkisM1f+C/ltDu07a7NM/mTXcT6X zmqwfLlpE/QTC/deKHP+Gh39Ue6PVUNk -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:00 2025 by rpki-client