$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: tPdPF0iz+exmtRegr7294Iy+0eavICYQYu9KfzgVXMA= Subject key identifier: 22:0F:C9:C2:2D:09:A9:82:32:DF:EA:48:8D:5F:C4:F4:7C:EC:2B:71 Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 0B Signing time: Wed 05 Nov 2025 08:12:32 +0000 Manifest this update: Wed 05 Nov 2025 08:12:32 +0000 Manifest next update: Wed 12 Nov 2025 08:12:32 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: IjEAtljBC8qUWjR7xujDaA0q202X1l/eHCPi/C0T/qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Nov 5 08:12:32 2025 GMT Not After : Nov 12 08:12:32 2025 GMT Subject: CN=690b06f0-76e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:76:2c:01:23:f6:b0:ca:20:19:b7:ff:48: 4f:20:76:fa:e2:d8:1d:35:10:b3:e0:dc:17:45:47: 95:83:0e:c5:49:77:de:c8:45:21:e5:16:25:b4:10: bf:da:1a:40:1e:46:9c:e6:d1:3c:86:31:77:65:42: a0:2d:61:da:3d:ad:e3:a3:c1:e3:2f:85:5f:4e:1d: ac:5f:3b:75:b7:cf:45:50:69:e6:5c:df:70:72:49: 16:fd:c9:f3:bc:6f:36:48:0e:77:d5:9d:6c:ce:95: 02:a4:4f:52:74:05:79:c7:63:22:de:f4:16:ed:25: a1:82:aa:59:b1:3e:90:cf:fa:53:6d:be:dd:1a:b0: b5:df:98:96:c6:f6:47:6c:95:c7:40:e3:90:6c:b0: 37:1c:a4:b4:a8:3a:74:20:d8:c2:07:93:e3:ec:63: f9:82:38:14:84:cf:da:bd:08:22:7c:2a:8f:8a:9a: 76:84:42:34:bf:f8:4e:27:58:98:86:fd:7c:fe:f2: 0d:9c:46:25:f7:0f:b2:58:38:3f:0b:1f:3e:35:89: 25:3a:75:32:f2:51:90:63:56:55:30:80:35:25:c3: bb:ce:d7:79:60:ee:eb:14:7e:6a:ee:64:9c:05:4d: b2:d3:01:78:f4:b4:46:3a:ec:c1:e5:10:08:89:ff: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:C9:C2:2D:09:A9:82:32:DF:EA:48:8D:5F:C4:F4:7C:EC:2B:71 X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:26:02:48:c9:2b:29:7d:06:f5:94:85:ae:c4:f1:70:fc:9c: 73:48:c6:70:43:47:2a:b8:05:c6:b2:1d:47:d8:85:ae:12:73: 23:c1:3e:56:1d:f9:3e:26:30:e8:59:53:98:2f:b0:b1:a1:8e: 94:a7:39:ad:e7:fc:72:03:45:63:04:90:49:b2:38:10:54:1e: 8a:c3:a2:bc:eb:eb:29:0b:72:38:b8:23:6a:be:19:50:2b:ff: 48:17:78:d3:5b:f5:9c:ee:ec:1d:09:99:ac:90:bc:8c:7c:93: e4:eb:71:fe:45:3f:1f:23:7b:33:d1:75:3b:cb:3e:bf:0d:85: c3:37:89:ef:8d:35:4f:3d:fe:ef:6b:20:cc:e0:60:61:90:0a: a2:cf:93:40:11:1e:0e:c2:ff:cc:9e:39:77:fb:32:1b:7c:b9: 07:c8:d4:35:0c:79:13:07:d9:b7:b4:88:b4:d6:d9:8f:6a:a5: 98:12:35:fb:22:d0:58:02:1f:ec:df:43:c5:3f:2a:72:8b:11: 37:92:98:fe:68:56:6d:29:63:54:96:b5:50:b5:e9:74:f3:42: 6d:ea:0c:50:8c:0e:8d:cd:dd:89:e6:ae:14:f0:ee:c9:52:c2: 8e:93:01:29:28:dc:c4:dd:e8:02:d7:1f:6e:86:a3:c2:8b:39: 98:45:dc:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNTExMDUwODEyMzJaFw0yNTExMTIwODEyMzJaMBgxFjAUBgNV BAMTDTY5MGIwNmYwLTc2ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9iHYsASP2sMogGbf/SE8gdvri2B01ELPg3BdFR5WDDsVJd97IRSHlFiW0EL/a GkAeRpzm0TyGMXdlQqAtYdo9reOjweMvhV9OHaxfO3W3z0VQaeZc33BySRb9yfO8 bzZIDnfVnWzOlQKkT1J0BXnHYyLe9BbtJaGCqlmxPpDP+lNtvt0asLXfmJbG9kds lcdA45BssDccpLSoOnQg2MIHk+PsY/mCOBSEz9q9CCJ8Ko+KmnaEQjS/+E4nWJiG /Xz+8g2cRiX3D7JYOD8LHz41iSU6dTLyUZBjVlUwgDUlw7vO13lg7usUfmruZJwF TbLTAXj0tEY67MHlEAiJ/4q1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIg/Jwi0J qYIy3+pIjV/E9HzsK3EwHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYmAkjJKyl9BvWUha7E8XD8nHNIxnBDRyq4BcayHUfYha4ScyPBPlYd +T4mMOhZU5gvsLGhjpSnOa3n/HIDRWMEkEmyOBBUHorDorzr6ykLcji4I2q+GVAr /0gXeNNb9Zzu7B0JmayQvIx8k+Trcf5FPx8jezPRdTvLPr8NhcM3ie+NNU89/u9r IMzgYGGQCqLPk0ARHg7C/8yeOXf7Mht8uQfI1DUMeRMH2be0iLTW2Y9qpZgSNfsi 0FgCH+zfQ8U/KnKLETeSmP5oVm0pY1SWtVC16XTzQm3qDFCMDo3N3YnmrhTw7slS wo6TASko3MTd6ALXH26Go8KLOZhF3DM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:30:13 2025 by rpki-client