$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json) Hash identifier: xxJpkDfSEKM6OiQzzRkyAtr9lh4N0E+pRhdomqYsTxs= Subject key identifier: 18:2E:3D:42:2A:74:2B:9B:BC:C3:24:FC:9E:BC:0D:A0:D5:1E:A5:CD Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft Manifest number: 34D3 Signing time: Tue 04 Nov 2025 15:16:26 +0000 Manifest this update: Tue 04 Nov 2025 15:16:26 +0000 Manifest next update: Tue 11 Nov 2025 15:16:26 +0000 Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: 3NZjLxPMk3vaVrsfivlAcT+r7I8SC5fOshHClEmZih0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12 Validity Not Before: Nov 4 15:16:26 2025 GMT Not After : Nov 11 15:16:26 2025 GMT Subject: CN=690a18ca-ba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:5f:ed:7a:b9:c7:7b:ee:a2:66:f0:89:a0: 48:d4:32:50:d8:5e:d9:0a:1e:44:33:c7:e4:d1:ec: b3:bd:96:98:6b:60:e6:85:de:0d:1c:8f:ff:61:f5: eb:78:80:88:4d:bb:bc:3b:45:16:8b:d8:b6:35:6e: db:5a:ae:e4:86:5d:95:7f:2f:e9:4e:09:cf:6f:04: 5b:34:36:92:c2:41:7d:6b:94:c6:97:9b:6c:88:d0: ae:01:d8:49:99:c9:44:fd:a2:1e:12:92:27:ef:80: 67:40:bc:82:e0:66:d0:8b:0b:53:18:ca:71:8d:e0: 78:84:1b:37:16:d0:21:a2:18:00:da:a0:4f:27:4e: 3e:2f:d2:03:9a:ff:73:6b:b8:52:40:ce:54:3e:b4: c1:2d:10:35:b2:9b:b1:a6:ac:4b:a5:fd:46:d6:2f: af:b1:7d:83:b1:de:31:0d:6b:b0:c8:b9:7e:15:33: 7a:74:69:3f:51:ea:98:92:15:07:2c:31:91:f7:68: 29:ba:af:38:99:9c:85:c9:e5:a0:4d:5b:02:f1:2e: d5:bf:7f:c8:8b:a8:3b:4e:8f:59:46:1a:a2:9c:e1: c7:35:85:6b:d2:b2:79:59:11:9c:80:43:c2:85:2d: b3:f5:fe:f3:b0:f0:9e:c3:b4:0a:18:23:87:3b:53: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:3D:42:2A:74:2B:9B:BC:C3:24:FC:9E:BC:0D:A0:D5:1E:A5:CD X509v3 Authority Key Identifier: keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d8:42:ff:e1:88:d5:84:29:75:7a:fb:3f:a4:c1:45:26:49: ca:3f:26:3c:0e:6e:05:7b:51:54:77:b9:0e:40:19:23:93:2c: 32:60:5d:f9:4f:e6:d1:06:0d:6e:47:d0:37:9a:58:8f:2b:ef: 35:ef:a9:c0:c8:2a:a8:ec:15:cb:a6:68:2e:dd:0b:6e:63:53: ad:45:22:8d:64:05:e8:73:e7:19:59:b8:05:66:6c:f2:04:22: 74:5f:b0:f5:58:03:97:f0:87:6c:ca:6e:5c:e6:81:58:46:c0: 35:9d:eb:1f:7b:92:20:75:6a:93:38:cc:cd:67:4d:ee:6d:ab: 10:a4:d3:08:35:08:46:c1:54:b7:79:30:a7:b3:a5:99:07:c6: 32:28:0c:5c:6a:42:a3:fe:aa:da:1d:de:30:0e:62:55:26:90: 4b:62:3c:4a:f4:1c:a2:49:a6:8c:76:cd:10:de:dc:a5:6c:31: fe:7a:12:e1:5e:14:9f:02:87:58:fd:ee:d3:f2:8d:97:f7:f5: a4:f9:f3:3a:01:e4:5e:ae:76:59:b7:1f:34:11:82:de:44:3d: a7:1f:33:b2:8d:e6:73:d9:c1:0f:9a:dd:09:d8:7a:b1:7a:31: db:8d:fb:16:5e:65:7f:33:67:aa:b3:22:dd:0e:24:9e:76:95: f0:1d:25:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0 N0Q2OEZGMTIwHhcNMjUxMTA0MTUxNjI2WhcNMjUxMTExMTUxNjI2WjAYMRYwFAYD VQQDEw02OTBhMThjYS1iYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXNf7Xq5x3vuombwiaBI1DJQ2F7ZCh5EM8fk0eyzvZaYa2Dmhd4NHI//YfXr eICITbu8O0UWi9i2NW7bWq7khl2Vfy/pTgnPbwRbNDaSwkF9a5TGl5tsiNCuAdhJ mclE/aIeEpIn74BnQLyC4GbQiwtTGMpxjeB4hBs3FtAhohgA2qBPJ04+L9IDmv9z a7hSQM5UPrTBLRA1spuxpqxLpf1G1i+vsX2Dsd4xDWuwyLl+FTN6dGk/UeqYkhUH LDGR92gpuq84mZyFyeWgTVsC8S7Vv3/Ii6g7To9ZRhqinOHHNYVr0rJ5WRGcgEPC hS2z9f7zsPCew7QKGCOHO1PFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBguPUIq dCubvMMk/J68DaDVHqXNMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM OVdTT29IbDZmSE5IMW9feEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ2EL/4YjVhCl1evs/pMFFJknKPyY8Dm4Fe1FUd7kOQBkjkywyYF35 T+bRBg1uR9A3mliPK+8176nAyCqo7BXLpmgu3QtuY1OtRSKNZAXoc+cZWbgFZmzy BCJ0X7D1WAOX8Idsym5c5oFYRsA1nesfe5IgdWqTOMzNZ03ubasQpNMINQhGwVS3 eTCns6WZB8YyKAxcakKj/qraHd4wDmJVJpBLYjxK9ByiSaaMds0Q3tylbDH+ehLh XhSfAodY/e7T8o2X9/Wk+fM6AeRernZZtx80EYLeRD2nHzOyjeZz2cEPmt0J2Hqx ejHbjfsWXmV/M2eqsyLdDiSedpXwHSV2 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:54 2025 by rpki-client