$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft File: Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json) Hash identifier: 2jgIjSM110BejFho0HO1Q7gSe4h8mLNLv0Nq3s3Ingc= Subject key identifier: E9:3B:04:C0:0A:DD:0D:44:55:CA:62:0A:6C:D4:08:0F:37:D6:92:1D Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft Manifest number: 13CE Signing time: Sat 18 Oct 2025 19:52:42 +0000 Manifest this update: Sat 18 Oct 2025 19:52:41 +0000 Manifest next update: Sat 25 Oct 2025 19:52:41 +0000 Files and hashes: 1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: GyAsJ5P3nMiU1qy3+MA8CKTxvcNs+ijj85UtKE8meBo=) 2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: 5zkE6RPNVvetKuzik8vsy3mHeLDd3Wj/ciaGchVH9po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9 Validity Not Before: Oct 18 19:52:41 2025 GMT Not After : Oct 25 19:52:41 2025 GMT Subject: CN=68f3f009-78c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:b4:e8:69:e3:a5:39:ae:ff:0d:40:8c:04: a4:65:52:bc:d4:67:be:25:ff:ac:16:55:0d:7f:5e: 1c:5c:43:87:08:5b:a8:99:1f:e6:fe:70:45:38:99: e4:a9:63:06:ca:79:3e:7b:52:04:e2:9e:86:07:a3: 5f:52:8d:fc:0b:e4:61:9a:0e:7f:9c:39:11:c2:c2: 2c:5c:5d:e7:c8:5e:2c:c7:7b:b1:21:5a:22:ab:21: 95:f8:42:ba:15:ad:38:15:c1:1a:49:67:9f:4e:a9: 76:69:e3:f2:07:e6:35:49:5e:4b:84:c6:4e:69:90: be:2d:69:01:bf:97:45:ab:a8:6b:6c:e4:1e:0f:44: a8:b7:e6:03:b5:27:a3:2a:3b:71:86:78:7e:ee:40: 16:16:06:cd:dc:01:0f:6a:5e:ef:f0:5b:d8:12:d6: a3:d5:22:48:c7:c8:cb:21:f2:7e:be:86:d4:68:60: c7:4a:bd:db:ce:50:6f:e0:40:80:ba:84:b6:1e:60: 68:27:00:5d:e8:2a:44:00:6f:27:2a:50:7d:6c:b5: 2d:3b:f5:43:cd:88:ae:15:58:7d:84:3a:ce:73:b9: 94:ac:7b:7c:88:77:85:a6:fa:9c:80:55:6c:43:96: 7d:a7:5b:b1:c9:fa:fc:ba:9d:3d:f6:a6:e4:5d:a4: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3B:04:C0:0A:DD:0D:44:55:CA:62:0A:6C:D4:08:0F:37:D6:92:1D X509v3 Authority Key Identifier: keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:bd:52:54:f7:d3:71:17:99:f3:ba:08:9d:ff:2a:b9:cb:af: 30:0d:96:60:74:10:34:4d:e1:39:4b:3b:62:07:54:8b:22:e7: 25:4a:ff:84:af:43:03:c0:ed:0a:4c:3f:dc:cf:b3:6e:4d:31: 0d:26:4a:28:07:5a:1a:33:64:58:81:8b:a2:74:58:1f:aa:a1: 28:1f:d1:7f:6c:2c:31:c4:46:6c:a0:93:bb:8a:a6:86:43:b6: c1:b5:3e:af:cf:02:04:28:d6:ef:91:64:94:13:7c:4f:2a:3a: 63:34:95:7b:75:57:d7:8b:a9:19:16:da:b4:da:bb:5c:d6:c2: 54:0a:4b:b1:53:c1:39:c5:df:a6:5e:2a:de:63:20:4c:de:5d: 94:d5:c3:13:03:a3:9c:78:ba:67:a3:d7:ae:50:bf:e4:bf:e8: 7d:90:d0:41:39:d0:2d:86:ff:19:c8:3d:b3:7c:22:d4:5d:d6: d1:c1:83:14:33:0e:7e:9b:80:09:f8:4b:1a:3e:13:11:6e:fd: 78:76:bb:fa:a3:e0:cb:57:11:3e:48:b3:b5:ad:aa:24:83:09: 8f:74:e4:33:60:09:81:0c:a0:2d:d5:33:d7:f2:8d:6b:90:e8: 39:98:75:42:0d:74:fb:54:25:7f:e1:4c:f6:56:53:81:13:5f: 81:b1:12:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD RjUwQzI0RjkwHhcNMjUxMDE4MTk1MjQxWhcNMjUxMDI1MTk1MjQxWjAYMRYwFAYD VQQDEw02OGYzZjAwOS03OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/m06GnjpTmu/w1AjASkZVK81Ge+Jf+sFlUNf14cXEOHCFuomR/m/nBFOJnk qWMGynk+e1IE4p6GB6NfUo38C+Rhmg5/nDkRwsIsXF3nyF4sx3uxIVoiqyGV+EK6 Fa04FcEaSWefTql2aePyB+Y1SV5LhMZOaZC+LWkBv5dFq6hrbOQeD0Sot+YDtSej Kjtxhnh+7kAWFgbN3AEPal7v8FvYEtaj1SJIx8jLIfJ+vobUaGDHSr3bzlBv4ECA uoS2HmBoJwBd6CpEAG8nKlB9bLUtO/VDzYiuFVh9hDrOc7mUrHt8iHeFpvqcgFVs Q5Z9p1uxyfr8up099qbkXaTrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk7BMAK 3Q1EVcpiCmzUCA831pIdMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNG REp5RWlHcXBUT2pQVU1KUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0vVJU99NxF5nzugid/yq5y68wDZZgdBA0TeE5SztiB1SLIuclSv+E r0MDwO0KTD/cz7NuTTENJkooB1oaM2RYgYuidFgfqqEoH9F/bCwxxEZsoJO7iqaG Q7bBtT6vzwIEKNbvkWSUE3xPKjpjNJV7dVfXi6kZFtq02rtc1sJUCkuxU8E5xd+m XireYyBM3l2U1cMTA6OceLpno9euUL/kv+h9kNBBOdAthv8ZyD2zfCLUXdbRwYMU Mw5+m4AJ+EsaPhMRbv14drv6o+DLVxE+SLO1raokgwmPdOQzYAmBDKAt1TPX8o1r kOg5mHVCDXT7VCV/4Uz2VlOBE1+BsRJZ -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:42 2025 by rpki-client