$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json) Hash identifier: YESMzr3pKz0YRTgAr/PRx2Vw34L95+/Okio7BfbYHws= Subject key identifier: 25:CC:1F:00:7D:74:FF:33:9C:D2:96:F3:DF:45:6F:31:27:B7:9A:48 Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 07:22:05 +0000 Manifest this update: Mon 03 Nov 2025 07:22:05 +0000 Manifest next update: Mon 10 Nov 2025 07:22:05 +0000 Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: tzbwLDN4+wKWPNEXLh9qOLSLBTIou2cI/q0AaVm21ow=) 2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: Dtb6Fb2JpEd/Zi2+qi9cOHLUquodmN8UKkbWls/zEtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098 Validity Not Before: Nov 3 07:22:05 2025 GMT Not After : Nov 10 07:22:05 2025 GMT Subject: CN=6908581d-96d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:4f:3d:b5:d8:93:2a:4a:fc:8b:7d:f5:7f: 64:11:0d:b8:1b:59:cb:bf:a1:fc:da:72:b6:d5:29: 5b:f1:b2:8a:3e:18:ed:cf:ba:46:6e:ff:2d:a2:7d: 8f:37:12:ca:aa:6f:1d:dd:22:c3:9b:0a:3d:b2:40: cc:02:92:4d:7f:14:d6:bb:83:ad:b2:c8:56:ca:fb: 6c:99:45:1b:34:7f:a9:d7:d0:d2:2f:2b:43:b6:e8: 6a:a7:30:75:62:4f:5f:71:d7:f6:9a:46:92:98:e6: e5:26:47:97:75:5e:f8:f9:c9:26:f8:8e:c1:c7:3a: 9a:b1:0f:a0:a2:07:dd:08:b1:09:10:e1:61:5b:39: 2e:68:08:ce:40:c7:c0:70:21:32:5a:bc:24:8d:90: 01:00:62:5c:56:c4:48:ed:ca:59:5e:44:16:ea:37: 95:c6:82:ec:9c:5d:c4:de:5b:e3:74:1f:fd:b5:8f: cc:10:64:ad:02:da:75:13:6e:db:6a:b6:62:d1:d0: e8:41:d2:06:58:c4:89:00:be:01:45:34:8f:af:a7: 3b:4e:19:65:b2:64:af:ee:89:21:23:c9:06:29:de: ab:84:10:8a:ca:3d:77:8b:9c:9c:d7:3b:a1:e9:7d: 1a:1e:54:4d:c9:73:30:81:13:44:7f:94:fe:a2:79: 9b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CC:1F:00:7D:74:FF:33:9C:D2:96:F3:DF:45:6F:31:27:B7:9A:48 X509v3 Authority Key Identifier: keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d5:ba:b4:ba:0c:1f:8c:91:01:38:45:a0:0f:7c:33:26:3d: c0:45:d7:13:ad:7a:59:cf:ae:73:df:ee:39:2a:fb:8a:35:9d: 51:ab:5c:cb:85:c8:8a:49:7a:66:7e:b5:89:e0:9d:28:5c:1e: de:29:25:31:1a:71:9b:05:37:8d:42:3e:68:08:bd:6f:41:f2: 52:67:30:41:83:10:e4:5a:41:00:5a:45:b5:9a:5f:3f:8b:c7: 26:2a:b2:d0:68:16:c0:7b:cf:20:41:05:3f:1f:e3:e9:96:2d: 62:52:68:9f:15:d6:ce:dd:83:7e:50:58:12:3b:c8:11:14:9e: 7a:da:5d:e1:75:3c:c3:09:b2:b7:51:92:0e:68:7e:90:58:b1: 49:44:a9:59:9f:61:47:0a:67:0b:b5:c9:03:e7:4c:70:52:86: bd:4d:88:3c:ba:84:53:ea:65:27:48:17:da:28:6a:f1:e1:e2: 56:ee:a0:03:ce:3f:17:73:ae:3c:db:da:f8:e4:da:91:f8:ad: 8a:f3:52:9d:69:23:65:d3:c0:25:98:09:03:f4:8e:02:e9:91: e1:2a:f1:15:eb:f8:f2:77:02:13:8f:f2:4b:52:ff:6d:b9:e3: d5:16:1c:54:4f:99:5b:f1:60:91:a4:3d:90:6b:72:e0:c1:b7: 00:9a:8a:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OENDRTExMC8GA1UEBRMoNEU3RkVBNzFBNDQ3QTZBMTYxNzlDMjY5N0VCRUU1NTUx OTlEQjA5ODAeFw0yNTExMDMwNzIyMDVaFw0yNTExMTAwNzIyMDVaMBgxFjAUBgNV BAMTDTY5MDg1ODFkLTk2ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjt089tdiTKkr8i331f2QRDbgbWcu/ofzacrbVKVvxsoo+GO3PukZu/y2ifY83 Esqqbx3dIsObCj2yQMwCkk1/FNa7g62yyFbK+2yZRRs0f6nX0NIvK0O26GqnMHVi T19x1/aaRpKY5uUmR5d1Xvj5ySb4jsHHOpqxD6CiB90IsQkQ4WFbOS5oCM5Ax8Bw ITJavCSNkAEAYlxWxEjtylleRBbqN5XGguycXcTeW+N0H/21j8wQZK0C2nUTbttq tmLR0OhB0gZYxIkAvgFFNI+vpztOGWWyZK/uiSEjyQYp3quEEIrKPXeLnJzXO6Hp fRoeVE3JczCBE0R/lP6ieZs/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJcwfAH10 /zOc0pbz30VvMSe3mkgwHwYDVR0jBBgwFoAUTn/qcaRHpqFhecJpfr7lVRmdsJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4Q0NFLzhCMjE5MDlDNEZF RTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFGaGVjSnBmcjdsVlJtZHNK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVG5fcWNhUkhwcUZoZWNKcGZyN2xWUm1kc0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4 Q0NFLzhCMjE5MDlDNEZFRTExRjA4MDM3OTQ4MkM0RjlBRTAyL1RuX3FjYVJIcHFG aGVjSnBmcjdsVlJtZHNKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGPVurS6DB+MkQE4RaAPfDMmPcBF1xOtelnPrnPf7jkq+4o1nVGrXMuF yIpJemZ+tYngnShcHt4pJTEacZsFN41CPmgIvW9B8lJnMEGDEORaQQBaRbWaXz+L xyYqstBoFsB7zyBBBT8f4+mWLWJSaJ8V1s7dg35QWBI7yBEUnnraXeF1PMMJsrdR kg5ofpBYsUlEqVmfYUcKZwu1yQPnTHBShr1NiDy6hFPqZSdIF9ooavHh4lbuoAPO Pxdzrjzb2vjk2pH4rYrzUp1pI2XTwCWYCQP0jgLpkeEq8RXr+PJ3AhOP8ktS/225 49UWHFRPmVvxYJGkPZBrcuDBtwCaiu8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:57:00 2025 by rpki-client