$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: rcpm/uOOdg6Q9kdJ47OrtRGkl/phnVGKa51GKZw1LA4= Subject key identifier: A7:4D:BF:1B:79:D0:A3:56:8E:AA:94:0C:15:8A:C0:88:0A:87:13:ED Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 4C Signing time: Wed 05 Nov 2025 07:30:25 +0000 Manifest this update: Wed 05 Nov 2025 07:30:24 +0000 Manifest next update: Wed 12 Nov 2025 07:30:24 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 3osaoHKnT7lV9dEP4oglehvsbLGNoISSisMto3SdRd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Nov 5 07:30:24 2025 GMT Not After : Nov 12 07:30:24 2025 GMT Subject: CN=690afd10-5d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:c7:54:4d:20:0a:00:7f:6d:15:8b:b3:d2: b6:a2:a2:fa:61:14:19:34:aa:65:d6:a6:43:36:9b: 6c:fe:41:89:10:fd:a2:ed:7d:ee:d4:07:20:7e:cc: 21:91:fd:e0:ed:6f:bb:0a:14:fd:93:76:f2:8e:45: 0e:15:7d:ba:b2:aa:99:3e:4e:41:0e:60:60:1e:22: a7:ae:01:78:db:98:7d:12:87:d8:86:00:32:6b:52: 3a:6a:2a:02:e9:c7:64:97:89:17:32:0c:01:0b:07: a5:b0:24:8b:85:7b:41:fc:90:d4:de:a6:84:8d:1f: 31:73:1b:4e:7c:83:e8:33:24:8d:d8:b9:d5:01:71: bf:ba:c9:ae:eb:9c:70:26:4a:e9:5a:1b:03:78:ba: ce:8b:58:64:4d:77:2a:79:16:18:7b:15:d4:9d:8f: ef:76:f2:a5:77:54:98:7f:3b:df:37:4a:d6:0e:dc: 5d:ce:d3:78:fa:08:f8:6e:af:8d:30:aa:be:a6:2e: 37:3a:42:6b:af:fc:33:97:72:37:8a:9a:7c:e4:61: 2c:95:ac:ba:44:a1:c8:e3:78:9d:ec:d4:90:45:df: ea:f7:11:2a:1a:39:f2:83:db:6c:e7:af:61:fe:a8: 43:ea:61:9f:e9:1c:96:e5:2b:d3:3c:e5:51:9c:dc: 0e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4D:BF:1B:79:D0:A3:56:8E:AA:94:0C:15:8A:C0:88:0A:87:13:ED X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1b:ca:1e:6a:70:ef:f8:bd:da:6a:72:72:f2:57:49:e3:9f: 94:de:72:69:6b:76:66:d0:6f:58:84:07:73:21:3f:a3:af:20: 19:2a:8c:b4:02:cd:ee:16:cf:ef:9f:dd:02:48:2c:16:48:a6: 1b:87:0c:83:ab:c8:90:cd:45:a8:29:25:26:97:3c:a0:c2:82: 19:a5:fa:ac:21:2f:40:b7:67:5d:32:b0:c1:fc:27:ee:17:73: 89:f9:7a:f4:c4:e1:3d:75:ce:42:86:f1:0d:a8:e2:1e:b5:af: 1a:f3:e2:2b:6e:0c:1b:0c:63:8b:05:7f:e6:77:45:c8:cf:53: 41:e0:29:f6:da:cc:bf:96:d8:04:28:bf:16:8d:7d:a1:28:f4: 75:2b:e1:41:40:31:2d:6c:ac:24:c8:b0:79:de:bf:ea:45:9a: 53:5a:63:fd:59:63:3a:c8:31:7f:4a:4a:3f:04:e1:2a:d1:8f: 65:54:3b:60:12:a3:cf:e5:bb:76:d5:d7:f8:d8:3a:10:49:35: 79:18:cf:65:6a:fa:c4:ca:f4:16:76:cb:6a:b6:ea:ed:c0:c9: 85:81:5a:04:0c:97:1b:cf:d8:a6:33:0c:f5:d4:8a:b1:86:69: ca:1d:1c:7c:6b:87:5a:a8:5d:0f:50:55:81:21:16:ed:3d:41: 9f:22:a7:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTExMDUwNzMwMjRaFw0yNTExMTIwNzMwMjRaMBgxFjAUBgNV BAMTDTY5MGFmZDEwLTVkNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC17MdUTSAKAH9tFYuz0raiovphFBk0qmXWpkM2m2z+QYkQ/aLtfe7UByB+zCGR /eDtb7sKFP2TdvKORQ4Vfbqyqpk+TkEOYGAeIqeuAXjbmH0Sh9iGADJrUjpqKgLp x2SXiRcyDAELB6WwJIuFe0H8kNTepoSNHzFzG058g+gzJI3YudUBcb+6ya7rnHAm SulaGwN4us6LWGRNdyp5Fhh7FdSdj+928qV3VJh/O983StYO3F3O03j6CPhur40w qr6mLjc6Qmuv/DOXcjeKmnzkYSyVrLpEocjjeJ3s1JBF3+r3ESoaOfKD22znr2H+ qEPqYZ/pHJblK9M85VGc3A57AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp02/G3nQ o1aOqpQMFYrAiAqHE+0wHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgbyh5qcO/4vdpqcnLyV0njn5TecmlrdmbQb1iEB3MhP6OvIBkqjLQC ze4Wz++f3QJILBZIphuHDIOryJDNRagpJSaXPKDCghml+qwhL0C3Z10ysMH8J+4X c4n5evTE4T11zkKG8Q2o4h61rxrz4ituDBsMY4sFf+Z3RcjPU0HgKfbazL+W2AQo vxaNfaEo9HUr4UFAMS1srCTIsHnev+pFmlNaY/1ZYzrIMX9KSj8E4SrRj2VUO2AS o8/lu3bV1/jYOhBJNXkYz2Vq+sTK9BZ2y2q26u3AyYWBWgQMlxvP2KYzDPXUirGG acodHHxrh1qoXQ9QVYEhFu09QZ8ip7k= -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:05 2025 by rpki-client