$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: 5aGqxRvoAGy07zIJOUx6RTnACAbt1LujmNrw8nr2po4= Subject key identifier: 45:05:07:32:35:23:93:66:A9:2A:41:2B:80:78:E7:AF:2B:9F:EF:44 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 20DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 2831 Signing time: Tue 04 Nov 2025 16:02:52 +0000 Manifest this update: Tue 04 Nov 2025 16:02:52 +0000 Manifest next update: Tue 11 Nov 2025 16:02:52 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: JUw9ZF9peltCb2RUjgxcV/0vX/aYZAGYMo1+iwrsQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8413 (0x20dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Nov 4 16:02:52 2025 GMT Not After : Nov 11 16:02:52 2025 GMT Subject: CN=690a23ac-87f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5c:cc:6c:d5:f8:45:0e:b8:b3:8b:85:8f:f4: 01:32:39:1d:89:1e:9a:07:ce:df:57:86:eb:6c:55: 60:ab:db:46:21:e6:8b:52:3b:cd:ba:39:7e:16:09: e7:e6:5e:ff:18:bb:83:a7:6b:39:13:77:b2:52:ef: a3:c7:b6:d5:8a:a4:b9:ac:78:79:ff:98:f5:86:8e: 6a:9d:cd:08:d7:05:22:9c:6a:0a:1a:47:21:cf:5e: 8c:0a:98:74:f8:9a:b9:c7:9d:ee:d5:f1:b2:5f:23: 7a:1e:7b:70:d9:85:0e:a9:e3:4a:b6:50:99:b6:b1: dc:93:c2:a3:b3:ec:be:5e:16:a5:e5:11:5c:ce:5c: a3:a0:5e:33:23:e3:e9:1f:fa:b1:29:56:ce:0d:5e: aa:37:0f:a5:6a:99:36:6b:c2:41:ac:ab:57:64:33: bd:a6:73:58:a1:0d:26:04:65:23:5d:a7:45:ad:f7: 32:9b:85:c4:74:e4:b5:21:58:3d:f0:04:fc:b1:98: 81:ee:bf:a5:94:ee:04:9f:fa:02:86:0a:5e:e6:82: 4a:c4:c1:d2:02:04:3c:4b:6a:f6:28:22:a9:b5:3b: 94:c6:3a:13:45:90:08:89:e5:84:ea:b5:d0:27:68: be:0d:2f:7f:7f:03:f3:ec:4a:11:6a:bb:68:3c:59: 55:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:07:32:35:23:93:66:A9:2A:41:2B:80:78:E7:AF:2B:9F:EF:44 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:8f:fd:13:e7:8f:99:11:2c:bc:7a:be:aa:9f:c1:27:4d: 02:af:a7:ea:ad:44:67:a1:b0:ec:68:45:8e:79:3c:54:98:de: 3f:e6:43:25:50:eb:8f:5b:c4:10:cc:8d:4a:13:30:e1:03:af: 7d:63:7b:1e:61:af:f4:f4:2a:b2:d1:f8:e9:60:b6:d9:60:aa: 71:02:da:45:25:68:7d:fe:f4:df:45:f7:84:e4:2f:5e:22:28: b3:01:84:d3:f5:05:0b:d7:a3:13:da:7d:12:46:19:71:59:d0: ba:47:a8:31:a9:92:a7:89:b9:fc:81:70:32:9d:51:90:6d:8a: 1a:b1:26:02:ad:c6:30:c9:77:22:e9:db:14:1b:6a:9c:6f:0f: 22:b1:94:71:45:05:11:70:35:49:c7:aa:2c:8c:6a:09:5d:8e: b6:60:6e:b6:6d:8c:04:76:43:e1:37:b5:8b:7e:06:9e:64:c1: 39:ae:8a:09:ae:f6:b2:bc:65:3d:b6:aa:51:03:e9:52:59:53: b9:df:38:b1:dc:c5:2b:22:9d:50:5b:bc:46:d5:c9:8e:27:2b: 52:0b:1b:c0:80:aa:35:8d:8a:2f:37:03:e3:0e:2a:b3:f5:ce: 3e:31:fd:e5:30:8e:f7:f1:47:cd:5d:ec:65:9d:3c:82:18:c7: d3:f6:29:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjUxMTA0MTYwMjUyWhcNMjUxMTExMTYwMjUyWjAYMRYwFAYD VQQDEw02OTBhMjNhYy04N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VzMbNX4RQ64s4uFj/QBMjkdiR6aB87fV4brbFVgq9tGIeaLUjvNujl+Fgnn 5l7/GLuDp2s5E3eyUu+jx7bViqS5rHh5/5j1ho5qnc0I1wUinGoKGkchz16MCph0 +Jq5x53u1fGyXyN6Hntw2YUOqeNKtlCZtrHck8Kjs+y+Xhal5RFczlyjoF4zI+Pp H/qxKVbODV6qNw+lapk2a8JBrKtXZDO9pnNYoQ0mBGUjXadFrfcym4XEdOS1IVg9 8AT8sZiB7r+llO4En/oChgpe5oJKxMHSAgQ8S2r2KCKptTuUxjoTRZAIieWE6rXQ J2i+DS9/fwPz7EoRartoPFlVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUFBzI1 I5NmqSpBK4B4568rn+9EMB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApZ4/9E+ePmREsvHq+qp/BJ00Cr6fqrURnobDsaEWOeTxUmN4/5kMl UOuPW8QQzI1KEzDhA699Y3seYa/09Cqy0fjpYLbZYKpxAtpFJWh9/vTfRfeE5C9e IiizAYTT9QUL16MT2n0SRhlxWdC6R6gxqZKnibn8gXAynVGQbYoasSYCrcYwyXci 6dsUG2qcbw8isZRxRQURcDVJx6osjGoJXY62YG62bYwEdkPhN7WLfgaeZME5rooJ rvayvGU9tqpRA+lSWVO53zix3MUrIp1QW7xG1cmOJytSCxvAgKo1jYovNwPjDiqz 9c4+Mf3lMI738UfNXexlnTyCGMfT9imJ -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:01 2025 by rpki-client