$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: Lj+Uem4BER61Wh+MP6+AMvG9wj7Jgb0OYfiZrD4rSNI= Subject key identifier: F6:2D:8E:17:19:DA:E8:FC:FB:AF:9B:2A:76:B4:D4:5A:DC:A6:FB:C3 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0CE1 Signing time: Tue 04 Nov 2025 18:13:16 +0000 Manifest this update: Tue 04 Nov 2025 18:13:16 +0000 Manifest next update: Tue 11 Nov 2025 18:13:16 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: yQ5FIU1mHL3vV7DTlveND+YUWLg2ldrwFfvwv4zdg4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Nov 4 18:13:16 2025 GMT Not After : Nov 11 18:13:16 2025 GMT Subject: CN=690a423c-5177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:f6:4f:cc:17:27:90:e8:34:62:41:d2:97: 9e:64:24:8f:89:0a:fd:04:19:cf:4b:21:9d:a9:5b: 28:a8:50:fa:8c:8f:ca:b0:42:2d:00:87:f3:73:43: 69:fb:89:ce:b2:dc:ec:7d:b5:5a:86:2e:94:d3:69: f8:e2:07:fe:14:82:dd:05:50:4b:ae:1f:32:2f:6a: 61:ce:07:77:04:94:17:bf:51:ea:25:5b:9b:42:93: dc:a9:56:ed:24:c9:c4:72:94:d8:12:9f:e2:79:aa: da:1c:c2:9b:ad:cf:6f:4b:49:92:f0:56:e4:ec:8e: d9:95:0e:bb:7b:80:bb:6e:b0:01:76:5f:1f:d8:8b: df:c6:c7:a4:2c:ab:25:42:fd:65:4a:fd:85:68:5f: dd:89:19:39:18:e0:7d:a4:d9:ae:d3:51:4a:65:38: bb:21:2f:be:04:12:7e:54:93:01:69:08:1b:52:4a: b9:8a:fb:53:f9:0b:61:42:d1:3b:be:d5:a9:64:a7: ef:de:a2:89:34:3b:ad:40:74:b8:5a:72:87:c6:bb: 4a:71:29:1d:a6:30:19:e1:81:ee:52:42:4c:51:b4: 26:2a:2a:60:ef:ee:f7:8d:e5:c7:aa:e2:8b:10:b0: 7d:63:e0:33:d6:63:49:0f:9a:64:d5:9a:47:80:f4: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2D:8E:17:19:DA:E8:FC:FB:AF:9B:2A:76:B4:D4:5A:DC:A6:FB:C3 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c5:7c:f6:3c:9f:6c:ba:78:2f:11:e1:09:71:4b:43:9b:40: ff:c3:e4:ac:bf:cd:87:74:1d:9d:a3:65:1c:4c:7c:11:41:4a: 2d:9b:30:f4:f4:89:b8:39:7a:76:09:cf:30:43:64:7e:e5:2b: 08:f9:96:06:f8:f5:7e:f2:c8:1d:6e:2a:86:64:ff:f4:4e:76: 0b:ae:64:bf:19:39:e1:76:7b:03:89:c8:5d:e5:f5:3d:e6:d9: 18:02:94:26:be:0a:df:35:70:56:bc:a9:b8:80:37:62:bc:7a: fa:e5:87:6f:db:1e:3d:c9:1f:dd:00:f9:b9:6c:85:10:d1:15: f1:0f:28:94:b8:b6:b1:18:68:05:5c:45:e3:9f:27:79:75:e1: 84:25:53:9a:2c:9e:1e:1a:78:a1:9d:90:21:d0:55:65:3d:b2: b1:61:79:c9:a4:5a:dd:bb:87:8a:57:87:6b:7b:b3:b4:e0:6c: 95:84:05:3c:fd:37:1d:6f:6e:48:c2:fa:15:34:6e:8b:da:bc: 50:34:4d:67:35:f0:1a:38:37:e1:85:09:78:78:af:5e:0e:af: f8:34:ce:44:13:84:d5:32:39:05:31:9e:1c:81:94:42:62:09: d4:b0:5e:88:e0:00:4b:b0:55:6d:fd:6f:1e:b1:83:5e:4d:53: d9:54:fa:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjUxMTA0MTgxMzE2WhcNMjUxMTExMTgxMzE2WjAYMRYwFAYD VQQDEw02OTBhNDIzYy01MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK72T8wXJ5DoNGJB0peeZCSPiQr9BBnPSyGdqVsoqFD6jI/KsEItAIfzc0Np +4nOstzsfbVahi6U02n44gf+FILdBVBLrh8yL2phzgd3BJQXv1HqJVubQpPcqVbt JMnEcpTYEp/iearaHMKbrc9vS0mS8Fbk7I7ZlQ67e4C7brABdl8f2IvfxsekLKsl Qv1lSv2FaF/diRk5GOB9pNmu01FKZTi7IS++BBJ+VJMBaQgbUkq5ivtT+QthQtE7 vtWpZKfv3qKJNDutQHS4WnKHxrtKcSkdpjAZ4YHuUkJMUbQmKipg7+73jeXHquKL ELB9Y+Az1mNJD5pk1ZpHgPQlLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYtjhcZ 2uj8+6+bKna01FrcpvvDMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASxXz2PJ9sungvEeEJcUtDm0D/w+Ssv82HdB2do2UcTHwRQUotmzD0 9Im4OXp2Cc8wQ2R+5SsI+ZYG+PV+8sgdbiqGZP/0TnYLrmS/GTnhdnsDichd5fU9 5tkYApQmvgrfNXBWvKm4gDdivHr65Ydv2x49yR/dAPm5bIUQ0RXxDyiUuLaxGGgF XEXjnyd5deGEJVOaLJ4eGnihnZAh0FVlPbKxYXnJpFrdu4eKV4dre7O04GyVhAU8 /Tcdb25IwvoVNG6L2rxQNE1nNfAaODfhhQl4eK9eDq/4NM5EE4TVMjkFMZ4cgZRC YgnUsF6I4ABLsFVt/W8esYNeTVPZVPqG -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:04 2025 by rpki-client