$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: +LCuTGuHWg0n4Lxu/HgzlGmdOdj8n4UTrN1wZlciEBY= Subject key identifier: 7C:CA:B5:4E:68:FA:2D:4D:26:8D:C0:30:8B:5C:55:58:B6:6B:C9:F7 Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 34D5 Signing time: Tue 04 Nov 2025 14:44:07 +0000 Manifest this update: Tue 04 Nov 2025 14:44:06 +0000 Manifest next update: Tue 11 Nov 2025 14:44:06 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: WWrGPtzNl3HeFVA3jN8AHwpp7iXxN7+qwCbiIq5CU1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Nov 4 14:44:06 2025 GMT Not After : Nov 11 14:44:06 2025 GMT Subject: CN=690a1136-0c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:4b:a4:94:4a:95:2f:cc:fd:e0:18:c7:15: f8:1c:5c:cc:aa:0e:fa:7b:b1:f4:38:2d:91:e5:e2: 41:57:d0:7a:a6:e4:0e:f2:cc:b1:75:b1:36:6b:8a: 0a:3a:42:f8:2e:6a:a9:b3:d4:32:31:4d:f7:12:86: 14:a3:95:61:76:3a:19:db:72:5b:74:e9:97:6a:dc: a0:91:e0:a7:19:0f:6a:8e:8c:65:a9:b0:1a:43:d2: 2a:e4:d0:e4:75:16:75:7b:de:f4:b6:ef:e9:f1:b8: 55:cc:c3:a7:dd:93:7c:1c:e0:a5:c2:88:95:0d:01: 58:dc:86:8b:80:4f:28:b0:f4:d6:24:f9:fa:fb:2b: ca:71:ab:71:4f:61:92:26:e8:a7:56:5e:f3:75:1d: 63:d5:f3:29:a3:89:9e:70:55:8b:21:e4:65:ed:d5: 50:72:c4:22:b7:f1:de:82:cc:d0:68:f5:4f:eb:fe: b8:f6:93:6e:4c:0d:24:23:2f:33:b4:aa:d8:00:47: 15:dc:7e:55:2d:31:71:00:46:b5:1c:35:17:ec:9d: 51:ab:d4:ef:aa:17:27:8e:1b:a2:3e:cd:9e:f4:22: fe:cd:c4:5b:03:3b:3a:8c:35:54:74:50:9e:cb:09: 06:e8:45:3d:c5:c5:5b:80:b1:72:82:39:6c:c5:77: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:B5:4E:68:FA:2D:4D:26:8D:C0:30:8B:5C:55:58:B6:6B:C9:F7 X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:4f:e2:83:59:fa:03:c2:e5:de:d2:1d:16:95:03:c3:5c: ae:9b:ad:e6:f2:49:cd:31:7a:8d:78:e6:22:1a:d9:4c:84:f5: 3a:0d:30:d7:ad:58:ab:08:58:ea:74:6d:1d:3f:b5:5f:ec:5e: 18:fa:2a:10:b4:ce:3f:f3:cd:38:27:31:c3:dd:70:43:d3:c9: 31:45:f9:c7:2d:92:79:5f:91:98:70:03:a4:90:da:a3:7d:46: bf:71:f3:18:ba:23:0d:3c:96:ca:2f:1d:a6:13:c7:d9:b6:22: bc:61:bb:e3:a5:a3:47:1f:7d:e7:7a:7c:40:2e:a2:b1:ec:d4: 70:db:a2:7a:8f:63:5f:f0:1f:a9:b6:dc:44:98:45:97:99:21: 55:76:85:f4:1e:74:38:34:9b:1e:81:d0:81:a0:82:07:84:31: 1a:0f:0f:a2:33:9b:8b:89:a7:23:06:fa:23:c5:99:45:16:d8: bd:1d:b1:e7:17:1f:57:01:4e:19:43:d6:5b:38:b5:c9:cb:64: 0c:3c:f9:0e:46:ba:ea:c6:d9:38:66:b3:ee:9d:3a:24:01:7b: 12:40:d4:45:d6:f5:87:1f:45:32:96:e8:24:6a:5a:cf:d9:e7: 6c:65:2d:8b:22:9e:06:0d:0e:d5:51:12:35:7d:7b:e3:68:2c: b0:36:bd:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjUxMTA0MTQ0NDA2WhcNMjUxMTExMTQ0NDA2WjAYMRYwFAYD VQQDEw02OTBhMTEzNi0wYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yZLpJRKlS/M/eAYxxX4HFzMqg76e7H0OC2R5eJBV9B6puQO8syxdbE2a4oK OkL4Lmqps9QyMU33EoYUo5VhdjoZ23JbdOmXatygkeCnGQ9qjoxlqbAaQ9Iq5NDk dRZ1e970tu/p8bhVzMOn3ZN8HOClwoiVDQFY3IaLgE8osPTWJPn6+yvKcatxT2GS JuinVl7zdR1j1fMpo4mecFWLIeRl7dVQcsQit/HegszQaPVP6/649pNuTA0kIy8z tKrYAEcV3H5VLTFxAEa1HDUX7J1Rq9TvqhcnjhuiPs2e9CL+zcRbAzs6jDVUdFCe ywkG6EU9xcVbgLFygjlsxXfWnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzKtU5o +i1NJo3AMItcVVi2a8n3MB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5U/ig1n6A8Ll3tIdFpUDw1yum63m8knNMXqNeOYiGtlMhPU6DTDX rVirCFjqdG0dP7Vf7F4Y+ioQtM4/8804JzHD3XBD08kxRfnHLZJ5X5GYcAOkkNqj fUa/cfMYuiMNPJbKLx2mE8fZtiK8YbvjpaNHH33nenxALqKx7NRw26J6j2Nf8B+p ttxEmEWXmSFVdoX0HnQ4NJsegdCBoIIHhDEaDw+iM5uLiacjBvojxZlFFti9HbHn Fx9XAU4ZQ9ZbOLXJy2QMPPkORrrqxtk4ZrPunTokAXsSQNRF1vWHH0UylugkalrP 2edsZS2LIp4GDQ7VURI1fXvjaCywNr2A -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:19 2025 by rpki-client