$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft File: qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json) Hash identifier: kHF4Bk1GMJaNVCCdSGwOhL+kiA+L2qUTYhyDtYiEBw0= Subject key identifier: 12:7A:BE:E9:E2:B9:46:42:36:26:F8:E1:0C:C2:08:8E:2A:C5:02:7D Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 Certificate issuer: /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft Manifest number: 013A Signing time: Sun 19 Oct 2025 07:14:13 +0000 Manifest this update: Sun 19 Oct 2025 07:14:13 +0000 Manifest next update: Sun 26 Oct 2025 07:14:13 +0000 Files and hashes: 1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: 210tUDIYMBhNTetqPyJTbwsbEp6xom+DEoOFLLSt6Ys=) 2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: 5Igi5uwLEP9LNSo1jtb9EAzRP4JXP+61tZCh/iJ8p+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93 Validity Not Before: Oct 19 07:14:13 2025 GMT Not After : Oct 26 07:14:13 2025 GMT Subject: CN=68f48fc5-174f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:3c:d9:55:1a:62:37:b6:1b:76:4e:90:d7: 63:eb:72:a0:0a:e4:87:66:59:83:8e:0d:82:34:ba: 78:b4:6e:ea:75:0c:17:36:c0:32:43:9f:ca:20:f1: 43:e8:c8:99:97:c6:e3:80:fc:44:d5:02:09:ab:c3: 30:20:6d:3d:23:e4:55:f3:40:d6:bc:c8:02:6c:bf: bd:86:30:c4:ad:ee:5e:ce:75:49:61:72:df:f6:53: 6e:73:64:76:ee:1a:18:ea:bf:25:21:c5:ce:36:63: 8f:5d:f3:34:d4:cc:2d:11:9e:4f:9f:ce:3a:62:ad: 83:76:58:9f:6c:d8:13:29:03:c9:75:28:85:55:ab: e7:92:40:eb:ce:f1:b2:3b:80:45:4a:9e:26:4b:b1: 8a:b9:37:84:09:45:4b:22:61:63:f7:38:ea:b0:9c: 2f:13:03:b8:fa:03:42:eb:83:7b:68:da:ae:7c:97: 7e:63:b7:4f:01:94:3d:9f:e9:18:03:84:ab:dc:8c: ac:78:e5:ac:b6:d8:bc:9d:56:33:22:b4:21:3a:4a: eb:7c:b9:ca:31:b2:65:c8:00:15:43:c6:8a:08:0d: 65:70:6b:f7:fb:96:7a:6e:fd:86:95:a1:6b:38:8c: 5a:8f:55:2d:fa:46:37:f7:b1:c3:a4:80:40:7a:c5: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7A:BE:E9:E2:B9:46:42:36:26:F8:E1:0C:C2:08:8E:2A:C5:02:7D X509v3 Authority Key Identifier: keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:4d:2e:d9:69:cb:8a:f3:29:dd:1d:d0:ff:60:cf:13:f6:d7: 2d:c3:58:4a:0f:48:06:a6:b4:df:bb:f7:1a:c8:1f:85:f3:a6: 79:49:9a:a6:db:63:6d:7d:8c:88:de:97:6d:34:e1:af:ea:cb: 46:78:43:b1:47:e8:0c:bb:f7:f8:75:27:fb:84:a0:f8:64:fd: d1:1c:d3:ed:73:c8:07:eb:21:89:b1:4c:ae:56:cb:63:30:11: de:af:44:95:20:dc:0f:4e:3a:fe:c2:34:58:b5:40:51:dd:28: e6:d9:64:dd:4a:5d:0a:5e:09:3b:87:05:36:48:8a:74:48:fb: 68:35:2c:08:48:83:a1:5c:f1:46:7a:1f:38:fb:3b:4f:51:c5: ba:33:d1:7c:75:24:c0:9f:cf:6e:97:6a:ef:22:fe:51:6b:48: 87:8a:da:9e:98:98:2c:71:82:ce:be:62:6d:ab:48:7b:92:e4: 4b:9e:96:f1:38:64:d6:7e:30:48:1c:50:1e:2b:f5:23:c7:2e: 7e:b0:ed:a9:5d:06:28:6f:6b:85:00:99:51:90:6a:37:07:89: 8e:1e:3f:00:8e:37:25:71:03:a9:00:bc:7a:eb:41:43:a4:4a: da:d1:bd:bc:c7:7a:bd:7f:89:92:ca:94:f4:43:ae:07:4d:93: 18:a3:77:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzQUYxMTAvBgNVBAUTKEE4MjRCNjYzRjNGNUEzNEY4MkVFMjI3MkE4QUVGREU0 M0I3OUJEOTMwHhcNMjUxMDE5MDcxNDEzWhcNMjUxMDI2MDcxNDEzWjAYMRYwFAYD VQQDEw02OGY0OGZjNS0xNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEc82VUaYje2G3ZOkNdj63KgCuSHZlmDjg2CNLp4tG7qdQwXNsAyQ5/KIPFD 6MiZl8bjgPxE1QIJq8MwIG09I+RV80DWvMgCbL+9hjDEre5eznVJYXLf9lNuc2R2 7hoY6r8lIcXONmOPXfM01MwtEZ5Pn846Yq2DdlifbNgTKQPJdSiFVavnkkDrzvGy O4BFSp4mS7GKuTeECUVLImFj9zjqsJwvEwO4+gNC64N7aNqufJd+Y7dPAZQ9n+kY A4Sr3IyseOWstti8nVYzIrQhOkrrfLnKMbJlyAAVQ8aKCA1lcGv3+5Z6bv2GlaFr OIxaj1Ut+kY397HDpIBAesU84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJ6vuni uUZCNib44QzCCI4qxQJ9MB8GA1UdIwQYMBaAFKgktmPz9aNPgu4icqiu/eQ7eb2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTNBRi8wNDMxNjBCMENB MDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8wLUM3aUp5cUs3OTVEdDV2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDUzJZX1AxbzAtQzdpSnlxSzc5NUR0NXZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTNBRi8wNDMxNjBCMENBMDQxMUVFQkNEMDE3NzBDNEY5QUUwMi9xQ1MyWV9QMW8w LUM3aUp5cUs3OTVEdDV2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4TS7ZacuK8yndHdD/YM8T9tctw1hKD0gGprTfu/cayB+F86Z5SZqm 22NtfYyI3pdtNOGv6stGeEOxR+gMu/f4dSf7hKD4ZP3RHNPtc8gH6yGJsUyuVstj MBHer0SVINwPTjr+wjRYtUBR3Sjm2WTdSl0KXgk7hwU2SIp0SPtoNSwISIOhXPFG eh84+ztPUcW6M9F8dSTAn89ul2rvIv5Ra0iHitqemJgscYLOvmJtq0h7kuRLnpbx OGTWfjBIHFAeK/Ujxy5+sO2pXQYob2uFAJlRkGo3B4mOHj8AjjclcQOpALx660FD pEra0b28x3q9f4mSypT0Q64HTZMYo3cv -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:17 2025 by rpki-client