$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: JXct+DU+M5Q6zAYVVbIya0wAr1qWbZnH/h0gXZSzI/E= Subject key identifier: 08:A4:E1:C3:F0:07:98:10:03:4A:A3:64:FB:9F:7F:C1:D4:7F:00:A5 Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 34CD Signing time: Mon 20 Oct 2025 14:53:18 +0000 Manifest this update: Mon 20 Oct 2025 14:53:17 +0000 Manifest next update: Mon 27 Oct 2025 14:53:17 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: hDR5nloUSYQ+QbO0s2AW9VmhWRY82Q14nRYM9zcRlYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: Oct 20 14:53:17 2025 GMT Not After : Oct 27 14:53:17 2025 GMT Subject: CN=68f64cdd-aa63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:7a:69:24:d9:3e:af:1f:70:ba:3e:82:dd: 95:1b:0f:a9:3d:38:a6:84:d6:8a:8d:3e:f4:21:4e: 79:39:5d:f5:a4:4c:f6:8f:04:f1:84:42:4f:3c:1e: 4a:4c:6b:5f:83:fc:f1:23:79:dc:0b:c2:ed:4b:2b: 15:89:02:16:d8:45:07:a5:d4:c3:67:2d:92:10:7f: 56:81:bc:e9:d1:90:ec:0d:63:e4:0d:45:19:4d:6f: 71:a3:89:cc:bb:76:9e:58:90:48:1a:84:a6:28:0b: 36:03:8b:a3:b9:35:79:65:3c:13:29:5d:fc:9c:2d: a1:bb:f0:3d:e2:72:04:d0:e7:ee:57:28:65:7b:ef: cc:b6:5c:15:ad:19:1a:02:3e:a1:11:91:7a:75:a7: 09:9b:11:69:01:8a:d2:05:64:f3:0d:9a:13:3a:21: d4:90:fd:88:84:60:00:bc:25:18:f6:48:d0:e1:ff: b2:46:2a:d5:0c:72:09:55:ad:60:e5:42:c5:e0:b0: 4f:77:6c:4f:8d:b8:a3:af:73:de:f3:cb:49:3d:37: 78:1e:13:cc:f5:c4:64:a6:f2:58:17:e7:d3:10:c8: b2:bc:13:2d:5e:83:6a:74:4f:b5:2b:53:1f:e4:85: 4a:30:c6:39:0c:d4:98:0c:e9:e5:52:c6:be:f2:f0: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A4:E1:C3:F0:07:98:10:03:4A:A3:64:FB:9F:7F:C1:D4:7F:00:A5 X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c2:56:3f:0f:f4:21:c7:d6:12:d2:48:ed:e7:49:fd:4c:f5: b3:5a:46:f4:be:b7:80:03:6a:1b:2c:ba:e9:ad:0a:75:26:bf: fb:6a:de:8f:ae:bf:e3:82:49:6b:ef:4c:20:40:db:44:55:54: 99:02:de:af:0b:c8:5f:91:41:14:43:14:e3:f8:dd:4e:a0:13: 75:03:70:a9:3f:6c:86:9e:ed:ff:9c:34:d3:26:a8:71:41:c9: 31:50:af:26:b2:57:57:9c:fe:09:1f:17:e0:56:ce:db:26:24: 68:c6:3b:40:9e:3c:0c:d7:ab:01:cf:32:0f:c5:73:f5:50:9d: c6:39:77:16:af:55:8c:32:dd:47:5d:ee:a7:86:51:f7:33:43: 90:14:b1:63:29:7e:ec:0c:09:09:7e:0b:9d:cc:17:6d:6d:9f: 2d:66:a4:87:a8:79:8c:d9:29:83:49:12:bb:e8:58:d4:5b:84: 04:ce:f6:6c:2b:0d:e9:d6:4e:b7:7e:b7:69:4b:53:b8:8a:02: 8d:01:ba:0c:a2:f6:6d:65:fa:7d:c3:fb:64:42:e5:78:3c:6b: 7a:19:a7:64:54:37:88:c8:e7:3e:54:cc:bd:0e:91:ef:fc:36: 7b:25:87:9f:5f:70:82:15:1b:f4:0e:81:69:2a:82:b7:ae:9f: 20:fc:b9:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUxMDIwMTQ1MzE3WhcNMjUxMDI3MTQ1MzE3WjAYMRYwFAYD VQQDEw02OGY2NGNkZC1hYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyp6aSTZPq8fcLo+gt2VGw+pPTimhNaKjT70IU55OV31pEz2jwTxhEJPPB5K TGtfg/zxI3ncC8LtSysViQIW2EUHpdTDZy2SEH9Wgbzp0ZDsDWPkDUUZTW9xo4nM u3aeWJBIGoSmKAs2A4ujuTV5ZTwTKV38nC2hu/A94nIE0OfuVyhle+/MtlwVrRka Aj6hEZF6dacJmxFpAYrSBWTzDZoTOiHUkP2IhGAAvCUY9kjQ4f+yRirVDHIJVa1g 5ULF4LBPd2xPjbijr3Pe88tJPTd4HhPM9cRkpvJYF+fTEMiyvBMtXoNqdE+1K1Mf 5IVKMMY5DNSYDOnlUsa+8vDVNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAik4cPw B5gQA0qjZPuff8HUfwClMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfwlY/D/Qhx9YS0kjt50n9TPWzWkb0vreAA2obLLrprQp1Jr/7at6P rr/jgklr70wgQNtEVVSZAt6vC8hfkUEUQxTj+N1OoBN1A3CpP2yGnu3/nDTTJqhx QckxUK8msldXnP4JHxfgVs7bJiRoxjtAnjwM16sBzzIPxXP1UJ3GOXcWr1WMMt1H Xe6nhlH3M0OQFLFjKX7sDAkJfgudzBdtbZ8tZqSHqHmM2SmDSRK76FjUW4QEzvZs Kw3p1k63frdpS1O4igKNAboMovZtZfp9w/tkQuV4PGt6GadkVDeIyOc+VMy9DpHv /DZ7JYefX3CCFRv0DoFpKoK3rp8g/LkB -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:58 2025 by rpki-client