$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft File: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json) Hash identifier: ZtC3q7jK45c/+Z5496EpWts94EoCzdIrlCRB0DHbz+c= Subject key identifier: 41:AD:B5:80:E5:1D:22:0B:F6:35:80:31:2C:0B:E0:5B:6E:2D:20:34 Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 Certificate issuer: /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft Manifest number: 4B Signing time: Wed 05 Nov 2025 07:31:56 +0000 Manifest this update: Wed 05 Nov 2025 07:31:55 +0000 Manifest next update: Wed 12 Nov 2025 07:31:55 +0000 Files and hashes: 1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: Z5PzW6QtEmcuccqbGh5Q5hAnl8LMq/QlTgqA4m1exXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884 Validity Not Before: Nov 5 07:31:55 2025 GMT Not After : Nov 12 07:31:55 2025 GMT Subject: CN=690afd6b-7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:4f:77:1a:e2:18:03:2f:98:3b:0c:39:d8: 9d:6f:55:4d:ed:81:72:e8:a7:ec:11:de:5e:37:a0: de:8b:74:04:8e:c4:bb:23:98:61:4a:2c:a1:ed:cc: a3:69:d0:48:38:0e:b8:9e:81:d7:21:8f:6f:ac:e5: 2f:0b:7b:32:22:0e:b7:71:20:fc:f7:d0:74:d0:4b: 02:99:8d:b6:70:3d:66:4b:06:c4:9c:b1:fe:c2:7b: cc:12:ad:a3:11:50:12:f6:cb:ad:1e:86:f2:f3:cf: 49:a6:f0:d4:b9:fe:f8:75:51:b7:22:f6:c2:3b:22: 18:ab:03:da:c9:d0:a0:46:4a:2c:0e:30:c4:3c:45: c8:39:67:ab:90:a4:fb:f3:7e:46:a9:b2:56:ea:95: df:df:db:60:2f:78:74:6d:90:56:9f:dc:16:cb:cd: 40:a9:38:b6:ce:49:90:e0:1c:2c:2f:5a:60:0c:5a: 8d:b0:d0:8f:90:98:d2:24:34:5b:05:93:e8:19:f1: fe:ae:55:fc:bd:32:06:8d:62:d8:75:44:02:7d:1d: 35:6d:e7:1e:93:ae:8f:42:96:d3:ed:3b:34:88:5a: a4:86:c2:9b:24:4d:53:f4:0e:91:7d:d4:4c:24:55: 61:cc:cf:13:42:f5:c5:87:84:6f:bd:b2:ad:0d:d5: a9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AD:B5:80:E5:1D:22:0B:F6:35:80:31:2C:0B:E0:5B:6E:2D:20:34 X509v3 Authority Key Identifier: keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ec:4d:71:03:bd:17:28:ea:98:18:34:70:17:ef:2e:7b:2d: aa:8d:66:67:3f:b6:06:c7:e0:56:ff:a7:b9:77:10:4b:1d:db: 98:be:32:9f:90:8b:5f:03:dd:f0:1f:6e:2c:ef:a2:a5:b8:6f: e9:a7:a9:4a:5a:d9:6c:de:6d:6a:b9:0c:de:2f:04:98:dc:f5: 9b:24:88:0b:02:67:27:ee:33:3f:0a:5d:73:1b:c7:aa:e2:f0: 1e:c5:55:f1:13:b0:33:44:15:13:10:14:39:7c:e5:58:06:5a: b0:b5:4a:49:c0:d4:23:c1:94:da:bc:5d:1c:fc:47:9d:77:9b: 77:f7:06:3b:be:2f:78:38:9c:cf:40:c4:13:09:5f:49:06:cf: 5b:67:5b:65:39:46:3c:4a:5f:8a:5c:95:d8:46:97:52:cc:3a: 02:3d:2b:fe:f0:01:a4:04:31:47:0a:0d:97:ce:5b:1e:ac:54: aa:d5:79:25:d1:66:db:e2:a6:12:e2:eb:67:c6:89:c2:bb:b8: 0d:2f:75:e8:c6:8d:c4:4c:89:28:9d:19:01:16:b5:53:32:af: ed:e1:18:a2:28:82:21:00:51:cd:1c:15:5f:d1:cb:d5:66:79: 9d:68:20:ed:fc:d5:11:d5:76:6e:39:38:ba:f1:6d:59:09:81: d1:db:1e:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REZERDExMC8GA1UEBRMoQUEyQ0FGNEU0RjE2QUJCMzM5QzFFNUQwRjA1OUY0MTNB RTVDRTg4NDAeFw0yNTExMDUwNzMxNTVaFw0yNTExMTIwNzMxNTVaMBgxFjAUBgNV BAMTDTY5MGFmZDZiLTdjM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzdU93GuIYAy+YOww52J1vVU3tgXLop+wR3l43oN6LdASOxLsjmGFKLKHtzKNp 0Eg4Driegdchj2+s5S8LezIiDrdxIPz30HTQSwKZjbZwPWZLBsScsf7Ce8wSraMR UBL2y60ehvLzz0mm8NS5/vh1Ubci9sI7IhirA9rJ0KBGSiwOMMQ8Rcg5Z6uQpPvz fkapslbqld/f22AveHRtkFaf3BbLzUCpOLbOSZDgHCwvWmAMWo2w0I+QmNIkNFsF k+gZ8f6uVfy9MgaNYth1RAJ9HTVt5x6Tro9CltPtOzSIWqSGwpskTVP0DpF91Ewk VWHMzxNC9cWHhG+9sq0N1anNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQa21gOUd Igv2NYAxLAvgW24tIDQwHwYDVR0jBBgwFoAUqiyvTk8Wq7M5weXQ8Fn0E65c6IQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkREL0EwRDQyQTJBNEE5 MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdNNXdlWFE4Rm4wRTY1YzZJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWl5dlRrOFdxN001d2VYUThGbjBFNjVjNklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE RkREL0EwRDQyQTJBNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL3FpeXZUazhXcTdN NXdlWFE4Rm4wRTY1YzZJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzsTXEDvRco6pgYNHAX7y57LaqNZmc/tgbH4Fb/p7l3EEsd25i+Mp+Q i18D3fAfbizvoqW4b+mnqUpa2WzebWq5DN4vBJjc9ZskiAsCZyfuMz8KXXMbx6ri 8B7FVfETsDNEFRMQFDl85VgGWrC1SknA1CPBlNq8XRz8R513m3f3Bju+L3g4nM9A xBMJX0kGz1tnW2U5RjxKX4pcldhGl1LMOgI9K/7wAaQEMUcKDZfOWx6sVKrVeSXR ZtviphLi62fGicK7uA0vdejGjcRMiSidGQEWtVMyr+3hGKIogiEAUc0cFV/Ry9Vm eZ1oIO381RHVdm45OLrxbVkJgdHbHo0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:53 2025 by rpki-client