$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft File: p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json) Hash identifier: gbXXAHnARsZ3Nm4WP2qbQdZ7UcwA7Ro6nXvG9r76WQU= Subject key identifier: FD:CD:0B:E5:9A:AB:7B:32:29:67:01:6D:FC:51:DC:55:8A:40:8F:15 Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft Manifest number: 1E0B Signing time: Sat 18 Oct 2025 16:23:40 +0000 Manifest this update: Sat 18 Oct 2025 16:23:40 +0000 Manifest next update: Sat 25 Oct 2025 16:23:40 +0000 Files and hashes: 1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: A5T4r5Cj/RU6r1JiA3HOS3+5xJW3fLspUy1Jcveolz0=) 2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7701 (0x1e15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Oct 18 16:23:40 2025 GMT Not After : Oct 25 16:23:40 2025 GMT Subject: CN=68f3bf0c-827a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:a8:fa:b8:d8:bf:e9:c4:16:a1:2c:b2:08: c3:03:73:44:44:53:e6:85:5f:72:31:97:ca:8a:8a: fe:ff:ea:e4:70:7c:1c:06:6a:72:02:14:11:3d:c7: 09:ed:7b:fd:33:27:21:b7:ef:27:a5:73:e7:ff:09: 3d:3c:bf:aa:f5:ed:e3:45:12:4c:31:21:e1:32:70: fd:2d:1c:5e:0a:60:e9:e3:41:be:83:db:f1:c0:24: eb:f7:f3:0f:59:da:c5:83:86:6e:08:bc:a9:50:e0: 22:26:f9:f8:a9:fe:52:4e:75:2e:6e:4f:a4:06:cc: 0f:e6:cd:f0:b3:46:31:3d:e1:0c:83:aa:ec:59:bc: 30:d1:f2:d5:08:f8:47:d9:0c:05:ef:42:67:a1:0b: a0:00:30:ae:2f:88:44:16:47:89:57:f3:bf:be:c9: 8b:eb:2e:66:dd:3f:99:76:53:44:98:3a:f4:0f:6a: a9:fd:e8:e1:98:56:fa:c2:07:48:af:33:27:0c:ce: dd:65:d1:f0:67:1d:78:e7:5f:08:c6:74:93:7b:ab: c7:23:1a:d7:e0:73:0c:0f:79:73:03:da:03:c1:b7: b6:17:fa:8c:50:3a:a6:21:ab:3c:86:04:15:12:cb: 8e:66:89:e7:26:d5:b1:0b:e6:bc:00:93:d4:ec:fe: 5d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:0B:E5:9A:AB:7B:32:29:67:01:6D:FC:51:DC:55:8A:40:8F:15 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:41:5b:45:f6:f6:8e:09:ed:76:b5:03:9d:6b:44:9b:1b:be: d0:9d:4c:68:2e:3a:0c:61:86:0b:d7:82:ed:81:04:9b:af:0f: fe:a0:79:18:91:6d:1b:5f:1e:31:cf:96:f5:0d:a9:df:39:13: ff:d9:f2:09:54:a2:97:9d:ea:9f:6b:c3:8e:c0:48:e5:76:19: 3a:d6:b8:3e:9b:66:c0:1d:2e:1e:67:d3:fd:f6:1d:b0:4c:fe: d5:0e:ed:5c:c2:69:f2:e9:bd:ec:2b:05:8b:95:4a:e2:31:a0: 29:29:79:5f:ce:ea:5a:78:e3:ab:4e:b1:62:95:8e:46:20:47: 20:50:70:32:a0:54:16:fa:f1:73:a3:ef:d3:bc:8c:36:28:f2: b1:00:86:35:30:c8:40:3e:f0:76:65:73:6a:63:4b:7b:15:3d: f7:be:ec:df:0e:c9:68:fd:03:37:75:94:2a:72:01:c6:c1:ea: 7d:99:74:56:d3:6e:2e:8e:9d:28:37:35:7c:30:ce:20:75:3d: 94:0d:b1:48:f9:c9:74:64:c7:22:6e:ce:6f:ab:3a:b9:57:df: 85:7f:1d:a7:9c:5f:b5:d1:3d:36:d3:d2:ee:ed:37:14:30:6f: 51:6e:79:81:80:95:23:c8:c8:30:ac:92:5a:d9:20:23:d4:e6: c1:18:50:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMDE4MTYyMzQwWhcNMjUxMDI1MTYyMzQwWjAYMRYwFAYD VQQDEw02OGYzYmYwYy04MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/yo+rjYv+nEFqEssgjDA3NERFPmhV9yMZfKior+/+rkcHwcBmpyAhQRPccJ 7Xv9Mycht+8npXPn/wk9PL+q9e3jRRJMMSHhMnD9LRxeCmDp40G+g9vxwCTr9/MP WdrFg4ZuCLypUOAiJvn4qf5STnUubk+kBswP5s3ws0YxPeEMg6rsWbww0fLVCPhH 2QwF70JnoQugADCuL4hEFkeJV/O/vsmL6y5m3T+ZdlNEmDr0D2qp/ejhmFb6wgdI rzMnDM7dZdHwZx14518IxnSTe6vHIxrX4HMMD3lzA9oDwbe2F/qMUDqmIas8hgQV EsuOZonnJtWxC+a8AJPU7P5dZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3NC+Wa q3syKWcBbfxR3FWKQI8VMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnQVtF9vaOCe12tQOda0SbG77QnUxoLjoMYYYL14LtgQSbrw/+oHkY kW0bXx4xz5b1DanfORP/2fIJVKKXneqfa8OOwEjldhk61rg+m2bAHS4eZ9P99h2w TP7VDu1cwmny6b3sKwWLlUriMaApKXlfzupaeOOrTrFilY5GIEcgUHAyoFQW+vFz o+/TvIw2KPKxAIY1MMhAPvB2ZXNqY0t7FT33vuzfDslo/QM3dZQqcgHGwep9mXRW 024ujp0oNzV8MM4gdT2UDbFI+cl0ZMcibs5vqzq5V9+Ffx2nnF+10T0209Lu7TcU MG9RbnmBgJUjyMgwrJJa2SAj1ObBGFAB -----END CERTIFICATE-----Generated at Mon Oct 20 12:12:02 2025 by rpki-client