$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: bNQG9wN8YYvTDIB97nPkym6LMmsLM7NCQ12k0fAdKXM= Subject key identifier: 1D:47:EE:76:F2:29:DA:FA:46:B6:1A:15:DB:8B:87:C7:5E:6C:8A:15 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 022F Signing time: Mon 03 Nov 2025 01:51:59 +0000 Manifest this update: Mon 03 Nov 2025 01:51:58 +0000 Manifest next update: Mon 10 Nov 2025 01:51:58 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: 37Qb+6J3hce79inaFRvCKETqcuxx78KT/8+bLtwP8SE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Nov 3 01:51:58 2025 GMT Not After : Nov 10 01:51:58 2025 GMT Subject: CN=69080abe-cf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:3c:cf:49:2e:4f:e8:e2:37:0a:b3:fd:46: f8:1f:46:f9:c9:05:b3:e5:03:03:b7:1d:13:ee:a8: 97:06:e7:43:fc:77:ac:d2:75:7e:8f:39:fd:84:89: df:a1:b2:88:63:6f:75:1f:7c:ff:48:35:0d:9c:68: 13:78:05:e5:2d:e9:b7:05:9a:23:ee:60:a4:e9:ce: fb:af:d2:df:9e:25:28:7b:35:a9:3f:25:0a:5a:bd: c5:af:74:f5:3a:3a:59:f9:55:bd:e4:ec:0d:bd:51: de:3a:93:8d:68:75:57:cb:fa:b6:1a:4f:e8:ed:6f: 4c:30:ea:4d:aa:cc:af:0a:6a:65:21:69:93:e8:a9: 85:a2:03:cc:33:c9:20:9f:4d:af:0a:b9:2a:0a:ce: 86:38:a1:bb:32:18:87:e0:59:59:37:50:84:9a:f4: 2c:91:a2:20:21:ef:28:04:dd:2e:cd:86:45:73:30: a8:7b:b8:26:7a:2e:6d:7d:6d:f4:0a:04:62:ad:18: ae:a4:6f:8f:c1:25:a5:62:ed:a0:22:ca:5e:8e:e7: d7:15:cb:07:36:e3:ed:a3:d8:e1:5b:5c:3e:6f:c9: a2:0a:06:b4:a2:8c:43:14:b7:da:da:91:ac:97:16: 1e:5c:ef:80:25:c8:b6:0c:1b:d6:23:2a:93:23:d1: 7c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:EE:76:F2:29:DA:FA:46:B6:1A:15:DB:8B:87:C7:5E:6C:8A:15 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:33:09:1c:b8:07:78:10:c0:05:fc:c5:ef:51:b5:24:95:20: 35:46:dc:73:8b:b0:a0:3e:d9:60:2b:35:5b:0a:9c:42:d2:dc: 62:e9:19:f5:22:dd:e6:a1:c4:2e:17:e4:44:ff:17:c2:d7:1f: 5f:8b:46:a1:97:2b:ef:a8:55:9c:65:b9:5b:91:7d:fa:e0:b8: 28:f1:79:01:45:5f:95:d5:1f:e5:9a:94:e9:e6:2b:8c:0a:f9: bb:e1:f4:ca:c1:5a:30:bc:7b:3b:e9:aa:33:f3:e0:bf:4f:a8: 96:1c:4e:57:28:25:29:10:88:7a:3a:29:fd:b9:8d:b9:e8:ad: 66:23:a3:25:7f:cd:65:c7:eb:be:ad:93:21:c6:72:4b:20:44: 2b:8b:69:b1:c3:3f:1c:72:30:6a:a2:5a:12:35:af:b4:0b:9f: 95:29:2f:07:9a:a8:2d:84:fc:00:86:fd:fd:e3:20:b2:9e:6a: 6e:85:65:fc:23:87:65:1b:63:65:46:c5:19:95:2d:4d:ea:e5: 33:90:dd:84:c6:05:1e:a4:4b:18:d3:0a:d8:81:db:1b:ff:87: e8:a3:7f:af:10:bb:c0:1e:1f:3c:69:fb:19:0b:28:1b:c5:23: c1:e8:0e:5a:2d:ec:92:1c:f2:ce:bd:e5:87:6d:1b:0e:cc:fb: 83:d9:df:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUxMTAzMDE1MTU4WhcNMjUxMTEwMDE1MTU4WjAYMRYwFAYD VQQDEw02OTA4MGFiZS1jZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosw8z0kuT+jiNwqz/Ub4H0b5yQWz5QMDtx0T7qiXBudD/Hes0nV+jzn9hInf obKIY291H3z/SDUNnGgTeAXlLem3BZoj7mCk6c77r9LfniUoezWpPyUKWr3Fr3T1 OjpZ+VW95OwNvVHeOpONaHVXy/q2Gk/o7W9MMOpNqsyvCmplIWmT6KmFogPMM8kg n02vCrkqCs6GOKG7MhiH4FlZN1CEmvQskaIgIe8oBN0uzYZFczCoe7gmei5tfW30 CgRirRiupG+PwSWlYu2gIspejufXFcsHNuPto9jhW1w+b8miCga0ooxDFLfa2pGs lxYeXO+AJci2DBvWIyqTI9F8VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1H7nby Kdr6RrYaFduLh8debIoVMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuMwkcuAd4EMAF/MXvUbUklSA1Rtxzi7CgPtlgKzVbCpxC0txi6Rn1 It3mocQuF+RE/xfC1x9fi0ahlyvvqFWcZblbkX364Lgo8XkBRV+V1R/lmpTp5iuM Cvm74fTKwVowvHs76aoz8+C/T6iWHE5XKCUpEIh6Oin9uY256K1mI6Mlf81lx+u+ rZMhxnJLIEQri2mxwz8ccjBqoloSNa+0C5+VKS8HmqgthPwAhv394yCynmpuhWX8 I4dlG2NlRsUZlS1N6uUzkN2ExgUepEsY0wrYgdsb/4foo3+vELvAHh88afsZCygb xSPB6A5aLeySHPLOveWHbRsOzPuD2d/9 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:22 2025 by rpki-client