$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft File: TQJNfuk78G548gwtl4XADK7tbkQ.mft (raw, json) Hash identifier: X81DsbXlPvPL15iNgD+/Od4Kz0Pku1YhFktu5IeZcyI= Subject key identifier: DE:61:1C:97:4D:11:1F:5D:D9:F5:F4:E9:81:63:FD:4C:19:D7:97:5D Authority key identifier: 4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 Certificate issuer: /CN=A9134B88/serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft Manifest number: 07A5 Signing time: Tue 04 Nov 2025 21:28:41 +0000 Manifest this update: Tue 04 Nov 2025 21:28:41 +0000 Manifest next update: Tue 11 Nov 2025 21:28:41 +0000 Files and hashes: 1: TQJNfuk78G548gwtl4XADK7tbkQ.crl (hash: 6bo7rMXz2VllEqjOkGLLwkRjvRyx4nEuv9cWxChmusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B88, serialNumber=4D024D7EE93BF06E78F20C2D9785C00CAEED6E44 Validity Not Before: Nov 4 21:28:41 2025 GMT Not After : Nov 11 21:28:41 2025 GMT Subject: CN=690a7009-5c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:0d:c7:d0:24:f6:0b:ce:e6:21:e6:80:66: e7:59:14:cd:97:17:62:3c:fd:51:11:17:88:bf:35: c7:58:53:40:a6:80:73:91:08:c6:92:a8:38:d9:2b: dc:cc:63:8d:e8:22:9d:22:50:ef:2f:4c:31:fa:72: aa:ae:2d:34:8d:da:1d:8f:06:77:92:a7:ec:43:69: 55:70:dd:64:99:0f:fd:34:6d:c7:55:1d:5c:5f:8e: 07:66:f0:4b:e3:45:88:d2:c1:ea:82:ea:55:be:cb: f2:4c:8f:1a:4b:98:8d:d0:67:5d:b8:a0:b8:fc:ad: ac:fb:39:3e:4d:c2:22:a5:a9:2a:50:12:83:8a:44: c5:fb:1a:b9:67:f7:65:8c:32:38:88:ab:0c:e1:3e: ba:c5:c1:45:5e:5f:a6:37:f2:64:5d:f1:5e:c7:bd: df:85:ee:c5:a6:2a:fb:44:c0:c3:02:3e:27:d4:05: 0d:03:c6:80:bc:03:ad:b9:dc:04:56:19:27:c4:4a: 25:e9:7b:5d:e1:d9:98:b8:92:64:42:48:23:d2:06: 20:88:63:0a:c2:e0:c4:d7:cf:69:21:0c:de:0d:a4: 00:04:92:8b:f5:cb:18:2e:22:7c:c1:59:49:da:1c: 56:a0:03:b4:c7:dd:e8:aa:74:11:b5:35:c1:c6:8b: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:1C:97:4D:11:1F:5D:D9:F5:F4:E9:81:63:FD:4C:19:D7:97:5D X509v3 Authority Key Identifier: keyid:4D:02:4D:7E:E9:3B:F0:6E:78:F2:0C:2D:97:85:C0:0C:AE:ED:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TQJNfuk78G548gwtl4XADK7tbkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B88/2E33F8B01FE311EB9878EC64C4F9AE02/TQJNfuk78G548gwtl4XADK7tbkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:74:d0:01:98:8c:ff:c9:d3:30:ae:da:44:5a:fc:5f:57: 59:bb:75:fd:f4:06:48:38:cb:92:cf:ed:b7:cf:65:ec:fe:e8: 16:36:a9:a1:9e:e4:c6:26:8d:fb:bc:bd:01:2a:e0:07:40:1c: 2a:46:a6:7e:0b:d5:b3:2c:38:9c:ed:b2:19:df:54:aa:74:5e: 17:1b:87:17:09:0d:07:ec:4b:00:b1:fa:fa:3c:f3:de:cb:fb: d1:ed:e6:8d:cc:a1:4b:f3:1e:dc:de:9f:e0:e3:cf:90:81:36: 3e:4b:99:4e:f9:b9:24:0d:1f:91:b4:0e:64:7e:6c:ef:6d:7b: 54:86:f7:e5:81:a8:5b:1f:06:7c:e8:67:2b:75:03:b4:f3:28: b1:d8:a5:ea:c6:96:52:d1:42:6d:62:e2:cd:af:40:cd:81:63: da:bb:aa:d9:ef:bc:5a:4c:2f:d1:56:f5:d2:2b:24:5f:58:e9: 5f:5c:2c:1f:36:0a:d6:43:40:ae:b0:27:c6:a2:3f:88:cb:c2: ef:5a:d7:52:f9:2b:a9:1b:01:5e:1d:82:8e:ca:ac:87:1c:43: 73:ad:4c:5a:7d:5e:96:73:5d:bd:3b:6d:ee:88:8f:a9:f0:3b: d0:4d:fd:55:1d:83:fa:da:84:79:41:4a:09:7f:41:77:1c:e9: 72:db:22:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCODgxMTAvBgNVBAUTKDREMDI0RDdFRTkzQkYwNkU3OEYyMEMyRDk3ODVDMDBD QUVFRDZFNDQwHhcNMjUxMTA0MjEyODQxWhcNMjUxMTExMjEyODQxWjAYMRYwFAYD VQQDEw02OTBhNzAwOS01YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmANx9Ak9gvO5iHmgGbnWRTNlxdiPP1REReIvzXHWFNApoBzkQjGkqg42Svc zGON6CKdIlDvL0wx+nKqri00jdodjwZ3kqfsQ2lVcN1kmQ/9NG3HVR1cX44HZvBL 40WI0sHqgupVvsvyTI8aS5iN0GdduKC4/K2s+zk+TcIipakqUBKDikTF+xq5Z/dl jDI4iKsM4T66xcFFXl+mN/JkXfFex73fhe7Fpir7RMDDAj4n1AUNA8aAvAOtudwE VhknxEol6Xtd4dmYuJJkQkgj0gYgiGMKwuDE189pIQzeDaQABJKL9csYLiJ8wVlJ 2hxWoAO0x93oqnQRtTXBxou1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5hHJdN ER9d2fX06YFj/UwZ15ddMB8GA1UdIwQYMBaAFE0CTX7pO/BuePIMLZeFwAyu7W5E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI4OC8yRTMzRjhCMDFG RTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhHNTQ4Z3d0bDRYQURLN3Ri a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RRSk5mdWs3OEc1NDhnd3RsNFhBREs3dGJrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI4OC8yRTMzRjhCMDFGRTMxMUVCOTg3OEVDNjRDNEY5QUUwMi9UUUpOZnVrNzhH NTQ4Z3d0bDRYQURLN3Ria1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ9nTQAZiM/8nTMK7aRFr8X1dZu3X99AZIOMuSz+23z2Xs/ugWNqmh nuTGJo37vL0BKuAHQBwqRqZ+C9WzLDic7bIZ31SqdF4XG4cXCQ0H7EsAsfr6PPPe y/vR7eaNzKFL8x7c3p/g48+QgTY+S5lO+bkkDR+RtA5kfmzvbXtUhvflgahbHwZ8 6GcrdQO08yix2KXqxpZS0UJtYuLNr0DNgWPau6rZ77xaTC/RVvXSKyRfWOlfXCwf NgrWQ0CusCfGoj+Iy8LvWtdS+SupGwFeHYKOyqyHHENzrUxafV6Wc129O23uiI+p 8DvQTf1VHYP62oR5QUoJf0F3HOly2yL9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:34 2025 by rpki-client