$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: ymPLzDK6zKc9TO50smMUsVgo+ZNUIC+UmzE6n//aBqs= Subject key identifier: BF:FA:39:F6:A0:91:BD:B8:C5:42:9C:75:65:34:04:32:C1:92:F4:E7 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 12E5 Signing time: Tue 04 Nov 2025 19:38:41 +0000 Manifest this update: Tue 04 Nov 2025 19:38:40 +0000 Manifest next update: Tue 11 Nov 2025 19:38:40 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: FXiUbV3qxlCagereXOBXn85eDmlEceF3gQ0YCxHLBe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Nov 4 19:38:40 2025 GMT Not After : Nov 11 19:38:40 2025 GMT Subject: CN=690a5641-577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:02:5d:01:29:37:1f:c9:e1:47:ef:07:5f: a8:c1:f6:c2:3a:dc:dd:78:e4:30:3e:d8:3e:1c:45: 80:60:38:b1:e0:d5:4a:fd:9f:87:2c:1f:92:6b:81: 77:63:1c:aa:9a:5f:e0:01:48:f0:c4:cf:da:33:02: fa:cc:59:6c:a0:78:62:fe:71:70:5b:fd:c0:c1:c8: ca:2c:ab:62:ed:8b:97:d5:28:72:7e:76:6f:18:78: c7:c9:da:08:d8:29:ac:f7:65:91:00:3a:85:cb:9d: 25:af:4e:f4:fa:e7:98:7c:2f:d6:12:08:e4:90:1e: 0f:b7:0b:98:31:a5:f1:79:71:79:b4:a1:a1:75:81: 2d:52:02:44:28:4a:84:45:18:77:bd:bf:46:c8:55: a7:71:a3:82:45:ac:5f:be:5f:46:a9:9e:e9:36:a0: 61:08:1d:c1:a1:57:0e:bb:91:2d:ab:b9:ce:b6:8a: b4:45:4a:43:d8:bc:6e:8f:fe:17:ae:3f:09:66:4b: 6f:52:7c:c3:59:5d:ef:56:5b:ff:66:c0:c2:f2:c3: 4a:65:73:f5:3b:1f:e7:7a:6b:5e:03:f0:dd:01:0f: e3:d8:49:ab:37:2b:fa:06:2a:6c:3f:52:dd:d9:a2: 91:72:4a:44:51:84:da:e8:55:e0:7c:31:cc:cc:de: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:39:F6:A0:91:BD:B8:C5:42:9C:75:65:34:04:32:C1:92:F4:E7 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3c:80:5a:46:a9:b4:f1:6a:42:6d:36:bf:ea:e5:69:e9:72: 16:8c:04:91:62:49:b8:4e:3d:2f:7d:66:24:84:fc:1c:fd:0a: 35:e7:a9:ff:9c:76:6a:ca:09:01:df:47:52:c0:32:14:4d:d4: 41:c5:1c:88:fd:4b:8a:ac:16:30:a5:ce:46:4b:28:8e:ae:a7: cd:cf:63:0c:cf:5b:88:90:33:ef:21:c3:19:ee:bc:89:ee:24: aa:1e:fe:82:22:d4:97:57:b8:5c:af:99:d8:4b:88:98:d5:55: 27:9f:76:7c:fa:96:38:56:60:6c:84:a8:b3:f5:86:ce:43:39: 3c:e0:ef:98:69:8e:51:57:9a:36:9b:ca:b2:ae:e6:9f:1c:0d: 5e:d0:d9:8c:b7:88:26:10:cc:ba:d8:10:3c:95:47:01:b7:9c: 6a:3c:b5:f3:67:7d:09:fb:16:71:69:4d:ee:e1:73:87:28:ef: 1c:dc:04:ed:5c:93:c8:d8:ad:ec:b2:1e:4d:94:7b:06:08:18: 4b:7f:64:7c:f1:7a:11:31:41:1d:51:d6:88:71:4d:5e:45:c0: c8:bb:14:4a:be:de:49:90:40:c7:35:2f:fe:f1:17:33:e0:5b: ef:df:97:40:71:f0:5e:01:21:44:86:99:3f:0b:8d:fd:fd:19: bf:a4:83:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUxMTA0MTkzODQwWhcNMjUxMTExMTkzODQwWjAYMRYwFAYD VQQDEw02OTBhNTY0MS01NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MICXQEpNx/J4UfvB1+owfbCOtzdeOQwPtg+HEWAYDix4NVK/Z+HLB+Sa4F3 Yxyqml/gAUjwxM/aMwL6zFlsoHhi/nFwW/3AwcjKLKti7YuX1ShyfnZvGHjHydoI 2Cms92WRADqFy50lr070+ueYfC/WEgjkkB4PtwuYMaXxeXF5tKGhdYEtUgJEKEqE RRh3vb9GyFWncaOCRaxfvl9GqZ7pNqBhCB3BoVcOu5Etq7nOtoq0RUpD2Lxuj/4X rj8JZktvUnzDWV3vVlv/ZsDC8sNKZXP1Ox/nemteA/DdAQ/j2EmrNyv6BipsP1Ld 2aKRckpEUYTa6FXgfDHMzN6KcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/6Ofag kb24xUKcdWU0BDLBkvTnMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1PIBaRqm08WpCbTa/6uVp6XIWjASRYkm4Tj0vfWYkhPwc/Qo156n/ nHZqygkB30dSwDIUTdRBxRyI/UuKrBYwpc5GSyiOrqfNz2MMz1uIkDPvIcMZ7ryJ 7iSqHv6CItSXV7hcr5nYS4iY1VUnn3Z8+pY4VmBshKiz9YbOQzk84O+YaY5RV5o2 m8qyruafHA1e0NmMt4gmEMy62BA8lUcBt5xqPLXzZ30J+xZxaU3u4XOHKO8c3ATt XJPI2K3ssh5NlHsGCBhLf2R88XoRMUEdUdaIcU1eRcDIuxRKvt5JkEDHNS/+8Rcz 4Fvv35dAcfBeASFEhpk/C439/Rm/pIOs -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:27 2025 by rpki-client