$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft File: qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json) Hash identifier: xYm1ILz892LvNeelhxOMk/xrAxNxDk/QmBvwIV14hLU= Subject key identifier: FB:48:DB:D9:09:55:86:A9:57:BF:FC:F3:2D:E4:0B:FD:F1:7C:E3:DA Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft Manifest number: 03DD Signing time: Sun 19 Oct 2025 02:32:18 +0000 Manifest this update: Sun 19 Oct 2025 02:32:18 +0000 Manifest next update: Sun 26 Oct 2025 02:32:18 +0000 Files and hashes: 1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: w4YxnzJsP58LJH4l0C3WdNQoEdGI+th28w++6u3tI0A=) 2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Oct 19 02:32:18 2025 GMT Not After : Oct 26 02:32:18 2025 GMT Subject: CN=68f44db2-2e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:0d:8b:f7:a3:55:ec:c8:58:7c:4f:46:50: 5e:1b:2d:77:ab:c6:d2:74:35:84:4f:c6:12:37:eb: 26:fa:59:16:63:61:92:a6:88:3e:b6:f7:f4:fc:51: 3b:7e:98:e2:36:81:88:ec:f4:ff:0c:79:00:e8:67: 74:20:c0:e4:b5:b2:bf:a9:ac:0e:e8:6d:73:bf:8b: 6c:09:fb:26:67:92:2c:61:00:77:db:59:40:90:ff: cd:4c:46:19:62:a1:39:3b:c0:97:f2:db:1a:7a:45: f2:18:84:7f:a3:3b:22:3e:e8:98:a6:71:0d:42:6f: 07:14:cd:d6:a3:aa:81:e3:c6:e8:98:a8:f8:be:f5: 78:b6:a6:79:4a:1a:06:f8:32:e9:61:fc:93:56:30: df:b4:8d:4a:cb:7b:2a:20:88:18:a5:d2:be:c2:6e: a3:86:3f:15:62:fb:c2:e5:21:c8:7f:b1:1e:f0:01: 18:5f:3a:60:37:56:4b:ee:c3:ac:a9:38:5c:eb:fd: f2:d4:42:11:25:4c:97:29:d2:81:6a:84:d5:33:6a: a4:0c:2f:8a:24:e9:c2:4f:cc:e6:db:18:11:fa:e2: 73:e1:08:c5:c2:3b:c9:d2:d5:7c:3f:94:98:3b:12: ef:49:45:60:a1:b5:f0:3f:73:f5:17:11:97:7c:91: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:48:DB:D9:09:55:86:A9:57:BF:FC:F3:2D:E4:0B:FD:F1:7C:E3:DA X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:fa:ed:a1:ef:91:bc:45:27:e6:7e:c8:32:20:7b:8c:1c: 15:02:39:e7:5d:cb:a0:85:fe:2d:08:af:db:bc:9a:f7:f1:52: 97:09:6d:7e:72:ca:b2:42:c8:8a:f5:06:a2:59:e4:1e:30:09: e8:1f:22:fe:92:2f:f0:c2:37:8c:33:d7:db:1c:2e:c2:68:4c: 84:18:4a:a3:0c:16:4e:87:a9:2c:8d:f2:6f:d7:15:26:84:d6: f3:38:62:7a:ce:af:29:9d:bb:2f:2b:90:db:04:24:19:00:e0: 6a:a2:ac:f9:2d:74:f6:56:f8:19:e6:b5:7a:99:47:7f:c3:ac: f6:69:49:85:c9:72:d7:e3:db:3b:82:81:84:71:9b:c2:72:d4: df:bf:38:01:e7:3e:47:a0:e0:85:b2:3b:16:67:91:4a:35:12: 40:02:26:17:80:62:0e:f6:be:f9:5f:48:bd:2c:f2:1c:af:1f: af:0b:62:f8:cb:29:f6:bf:2b:89:2c:db:4d:62:06:60:fb:88: 0d:3e:d0:9d:28:e3:11:1e:dd:39:89:b2:f0:0f:c1:76:6f:8b: 15:fc:a6:d8:69:d1:7f:b0:51:00:b3:f8:9c:35:a1:bb:86:7d: 79:fc:f6:6f:27:b5:a2:cc:e3:9a:b7:7b:0d:77:ec:70:f0:d7: d3:01:48:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUxMDE5MDIzMjE4WhcNMjUxMDI2MDIzMjE4WjAYMRYwFAYD VQQDEw02OGY0NGRiMi0yZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwroNi/ejVezIWHxPRlBeGy13q8bSdDWET8YSN+sm+lkWY2GSpog+tvf0/FE7 fpjiNoGI7PT/DHkA6Gd0IMDktbK/qawO6G1zv4tsCfsmZ5IsYQB321lAkP/NTEYZ YqE5O8CX8tsaekXyGIR/ozsiPuiYpnENQm8HFM3Wo6qB48bomKj4vvV4tqZ5ShoG +DLpYfyTVjDftI1Ky3sqIIgYpdK+wm6jhj8VYvvC5SHIf7Ee8AEYXzpgN1ZL7sOs qThc6/3y1EIRJUyXKdKBaoTVM2qkDC+KJOnCT8zm2xgR+uJz4QjFwjvJ0tV8P5SY OxLvSUVgobXwP3P1FxGXfJEPowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtI29kJ VYapV7/88y3kC/3xfOPaMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjM1RS85NjkwRUUwQzlFRDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZ X2EwWXlGZjU4ZDVZYWdVYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq8frtoe+RvEUn5n7IMiB7jBwVAjnnXcughf4tCK/bvJr38VKXCW1+ csqyQsiK9QaiWeQeMAnoHyL+ki/wwjeMM9fbHC7CaEyEGEqjDBZOh6ksjfJv1xUm hNbzOGJ6zq8pnbsvK5DbBCQZAOBqoqz5LXT2VvgZ5rV6mUd/w6z2aUmFyXLX49s7 goGEcZvCctTfvzgB5z5HoOCFsjsWZ5FKNRJAAiYXgGIO9r75X0i9LPIcrx+vC2L4 yyn2vyuJLNtNYgZg+4gNPtCdKOMRHt05ibLwD8F2b4sV/KbYadF/sFEAs/icNaG7 hn15/PZvJ7WizOOat3sNd+xw8NfTAUiW -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:35 2025 by rpki-client