$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: Yu5jnOlEUFsBgsn4x4DUG0s6B/6LaShXc4WcFyjwkew= Subject key identifier: 75:D9:54:96:83:1E:E3:A9:B9:CA:8A:4D:6B:40:5A:E6:A4:80:56:DD Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0461 Signing time: Wed 05 Nov 2025 00:15:10 +0000 Manifest this update: Wed 05 Nov 2025 00:15:09 +0000 Manifest next update: Wed 12 Nov 2025 00:15:09 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: Foc11LhhOaVXvVxUR+h8BinAtztBHyU19RNGl0TjnCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Nov 5 00:15:09 2025 GMT Not After : Nov 12 00:15:09 2025 GMT Subject: CN=690a970e-d69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4f:d4:d7:8e:e0:c1:0a:b8:7f:25:8f:f1:e5: 65:55:64:1a:03:ee:71:b5:07:ab:3a:84:1e:b0:e7: 5c:8c:93:9a:07:bb:5f:a6:ed:86:3e:44:3c:dc:09: 6d:52:f7:44:34:5d:9b:41:b7:00:25:cd:2d:ba:30: a6:0b:e2:c5:27:7d:cd:5b:e8:2d:da:d2:05:78:47: c5:c6:59:a6:c7:a1:e1:9b:5e:67:73:8b:72:e8:f4: fa:96:ee:90:81:53:7c:73:95:f1:d6:5e:79:7c:6f: ae:78:50:86:7e:82:1c:c7:c9:72:03:8d:5d:3b:93: c5:9b:09:5f:b8:13:0c:f5:d9:2a:f0:1f:28:2f:ab: 52:b4:e7:55:58:6b:98:4f:7f:8f:8f:3a:91:06:2c: 16:83:fc:13:7e:bb:5b:3b:3a:03:e6:36:fd:3a:ef: d6:24:14:fd:f2:ee:5c:71:02:4b:a0:08:12:de:aa: 9f:13:3f:25:20:51:75:59:1a:3e:ae:e4:a6:c8:e8: 8d:15:1a:70:0e:ef:84:33:5b:f2:09:bb:bd:05:e7: 1b:6f:f4:a6:43:4c:5a:7e:62:d3:39:3d:b9:06:18: 85:1c:a6:8d:75:a8:26:56:74:d7:ee:59:96:8f:22: eb:7f:3a:f4:9d:eb:32:80:2d:0b:83:75:c3:1e:c8: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:54:96:83:1E:E3:A9:B9:CA:8A:4D:6B:40:5A:E6:A4:80:56:DD X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d3:b8:49:f2:40:9b:0f:54:db:7a:bb:0d:1a:98:0d:76:ad: 98:77:23:95:60:24:89:96:1a:ae:a0:53:58:2f:d5:5c:1e:de: 01:ea:1a:20:4b:5c:5d:ee:f8:54:ed:36:57:2a:06:0f:d5:93: 71:e3:0e:55:4f:a6:4a:78:19:5e:4a:28:d2:38:1a:97:1b:26: f5:e5:39:72:e5:04:21:46:e4:cf:f5:22:81:e2:53:81:b0:87: 33:45:31:8f:37:86:ec:46:86:9c:22:cf:c5:ca:8d:f6:59:8e: 78:12:f7:d4:67:61:4a:c1:97:1e:fc:ef:96:c3:aa:d3:72:17: 17:02:28:9b:0e:cc:37:a3:b0:fd:2e:d6:b4:83:7f:84:00:8c: 31:e4:07:a0:b8:c4:50:40:e3:ea:bd:09:00:ee:e6:81:ff:22: b1:59:18:f4:c9:e6:50:49:0f:ff:16:b5:b6:5c:8f:86:5a:2e: d8:bf:54:dc:1b:67:dc:2c:ba:74:41:a9:93:4a:c1:b5:1e:49: e7:54:52:2b:56:de:43:e6:4e:9f:cb:14:9c:89:b3:af:30:93: 04:27:af:55:7a:d4:26:06:dc:8a:07:83:6f:ef:c1:8a:f6:a5: 3c:7a:89:f6:5a:41:cc:60:ab:35:0a:20:a0:6a:07:08:a5:32: 86:42:47:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUxMTA1MDAxNTA5WhcNMjUxMTEyMDAxNTA5WjAYMRYwFAYD VQQDEw02OTBhOTcwZS1kNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0/U147gwQq4fyWP8eVlVWQaA+5xtQerOoQesOdcjJOaB7tfpu2GPkQ83Alt UvdENF2bQbcAJc0tujCmC+LFJ33NW+gt2tIFeEfFxlmmx6Hhm15nc4ty6PT6lu6Q gVN8c5Xx1l55fG+ueFCGfoIcx8lyA41dO5PFmwlfuBMM9dkq8B8oL6tStOdVWGuY T3+PjzqRBiwWg/wTfrtbOzoD5jb9Ou/WJBT98u5ccQJLoAgS3qqfEz8lIFF1WRo+ ruSmyOiNFRpwDu+EM1vyCbu9Becbb/SmQ0xafmLTOT25BhiFHKaNdagmVnTX7lmW jyLrfzr0nesygC0Lg3XDHsgEvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXZVJaD HuOpucqKTWtAWuakgFbdMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm07hJ8kCbD1TbersNGpgNdq2YdyOVYCSJlhquoFNYL9VcHt4B6hog S1xd7vhU7TZXKgYP1ZNx4w5VT6ZKeBleSijSOBqXGyb15Tly5QQhRuTP9SKB4lOB sIczRTGPN4bsRoacIs/Fyo32WY54EvfUZ2FKwZce/O+Ww6rTchcXAiibDsw3o7D9 Lta0g3+EAIwx5AeguMRQQOPqvQkA7uaB/yKxWRj0yeZQSQ//FrW2XI+GWi7Yv1Tc G2fcLLp0QamTSsG1HknnVFIrVt5D5k6fyxScibOvMJMEJ69VetQmBtyKB4Nv78GK 9qU8eon2WkHMYKs1CiCgagcIpTKGQkdZ -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:21 2025 by rpki-client