$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json) Hash identifier: 58grrfFK6stlm6uVqUcxkPtWE/uuYIwxonCqX8g+P/M= Subject key identifier: DC:6B:E3:E3:06:30:F5:14:9A:A7:78:5B:EF:06:D5:7E:9F:04:73:B3 Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft Manifest number: 44 Signing time: Sun 19 Oct 2025 10:51:08 +0000 Manifest this update: Sun 19 Oct 2025 10:51:07 +0000 Manifest next update: Sun 26 Oct 2025 10:51:07 +0000 Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 5DwmWCfZu0ulcbn4QE2jfnzVp+0vV+yrgyT72a692gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19 Validity Not Before: Oct 19 10:51:07 2025 GMT Not After : Oct 26 10:51:07 2025 GMT Subject: CN=68f4c29c-495e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:90:92:ec:f4:6c:90:21:ff:0c:af:07:6b: aa:cc:b1:99:3f:68:2f:c0:c5:63:8e:61:cc:82:2b: 0d:34:84:69:ca:82:ce:87:4c:c7:7b:5d:00:d4:02: cf:98:f4:7c:6c:3c:68:f8:1c:05:a6:f1:82:63:a3: 34:46:ab:e4:e0:9d:fd:39:40:5d:57:b3:ea:b0:68: dd:de:2a:dd:dd:0d:5f:c9:6e:77:b3:94:43:d0:fe: c2:fe:95:0c:22:1e:0d:62:0d:8d:c8:6e:b7:89:14: 5d:80:96:ae:5d:0a:96:50:ee:57:cf:cd:87:3f:10: b9:cc:a4:38:66:a8:ed:9e:7e:f3:45:e6:a8:80:5e: c6:cc:c1:df:43:5b:93:65:33:b4:6b:51:a5:7f:a3: d0:a2:f7:2c:8c:3a:e3:f9:ad:3f:20:0c:fb:8b:4c: 04:80:39:af:f7:9d:0f:f5:fa:59:1b:9c:0a:75:15: ef:f3:dc:87:7c:c2:c4:cb:cc:3d:10:b4:bf:69:ee: 57:51:e3:e4:c4:7e:f0:5b:09:65:64:ef:1d:b5:88: ad:5f:38:28:13:cf:ea:bb:69:42:c5:9c:8e:14:d4: 65:fb:0b:19:c2:ca:2c:de:e0:a0:40:1a:ca:3b:49: f2:85:47:e8:29:34:c8:38:75:7c:4a:bc:06:65:a1: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6B:E3:E3:06:30:F5:14:9A:A7:78:5B:EF:06:D5:7E:9F:04:73:B3 X509v3 Authority Key Identifier: keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c9:65:eb:1b:05:a5:69:fc:5a:c2:d4:47:0e:dc:cf:ec:42: 39:05:7d:bc:6b:6e:a4:3d:d4:b0:04:8c:d3:0a:34:f9:36:21: ad:50:33:43:6a:58:f2:7b:08:07:23:b6:ad:0b:e3:eb:df:1f: f4:78:4c:47:b9:b5:fd:50:65:b1:63:e4:f2:5e:d9:9a:15:0e: af:97:b6:2f:74:5b:14:55:73:06:32:bb:9d:05:6f:c3:bb:78: b9:48:23:e0:e9:88:3c:d9:28:97:91:87:22:f3:3d:f3:58:98: 1a:31:80:85:bb:0e:c7:23:2f:ae:27:88:a5:e0:5f:55:fd:ee: 68:b9:00:c6:aa:aa:5b:ee:68:5c:ea:13:cd:87:15:f3:d4:98: f8:23:75:04:6d:aa:74:18:86:b8:08:69:bd:f8:5a:aa:b0:7e: 75:4a:fb:89:4e:23:3d:08:d6:b3:ff:56:c2:44:74:8b:46:d9: 42:3b:3b:ba:3a:f1:99:ce:00:ca:a5:1a:5b:42:93:ba:25:17: a3:f3:c5:5f:90:73:aa:ad:54:8e:4a:c0:f7:34:54:85:a0:30: 40:a7:42:a7:20:4c:8b:7f:43:99:89:56:2e:95:bf:d0:fc:58: 19:01:59:92:c0:f6:ff:17:1d:f8:1c:1d:d0:8f:40:2a:7c:8d: 0b:3a:d7:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzJDQTExMC8GA1UEBRMoOUFBQ0NDRjEwOTU5N0FDNjVCQzhGN0EwNTAyQTNFQTRB RTFDNUYxOTAeFw0yNTEwMTkxMDUxMDdaFw0yNTEwMjYxMDUxMDdaMBgxFjAUBgNV BAMTDTY4ZjRjMjljLTQ5NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr7pCS7PRskCH/DK8Ha6rMsZk/aC/AxWOOYcyCKw00hGnKgs6HTMd7XQDUAs+Y 9HxsPGj4HAWm8YJjozRGq+Tgnf05QF1Xs+qwaN3eKt3dDV/JbnezlEPQ/sL+lQwi Hg1iDY3IbreJFF2Alq5dCpZQ7lfPzYc/ELnMpDhmqO2efvNF5qiAXsbMwd9DW5Nl M7RrUaV/o9Ci9yyMOuP5rT8gDPuLTASAOa/3nQ/1+lkbnAp1Fe/z3Id8wsTLzD0Q tL9p7ldR4+TEfvBbCWVk7x21iK1fOCgTz+q7aULFnI4U1GX7CxnCyize4KBAGso7 SfKFR+gpNMg4dXxKvAZloZ5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Gvj4wYw 9RSap3hb7wbVfp8Ec7MwHwYDVR0jBBgwFoAUmqzM8QlZesZbyPegUCo+pK4cXxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMkNBLzgxNThFRDJFNDY4 NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNaYnlQZWdVQ28tcEs0Y1h4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXF6TThRbFplc1pieVBlZ1VDby1wSzRjWHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MkNBLzgxNThFRDJFNDY4NjExRjBBOTc0Rjc0MEM0RjlBRTAyL21xek04UWxaZXNa YnlQZWdVQ28tcEs0Y1h4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7JZesbBaVp/FrC1EcO3M/sQjkFfbxrbqQ91LAEjNMKNPk2Ia1QM0Nq WPJ7CAcjtq0L4+vfH/R4TEe5tf1QZbFj5PJe2ZoVDq+Xti90WxRVcwYyu50Fb8O7 eLlII+DpiDzZKJeRhyLzPfNYmBoxgIW7DscjL64niKXgX1X97mi5AMaqqlvuaFzq E82HFfPUmPgjdQRtqnQYhrgIab34WqqwfnVK+4lOIz0I1rP/VsJEdItG2UI7O7o6 8ZnOAMqlGltCk7olF6PzxV+Qc6qtVI5KwPc0VIWgMECnQqcgTIt/Q5mJVi6Vv9D8 WBkBWZLA9v8XHfgcHdCPQCp8jQs61/M= -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:17 2025 by rpki-client