$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: 9aRSMikKCSDdK1Tw2DmMmwUqt1KGr1cr8Xm8E1WUZVw= Subject key identifier: 45:D4:C8:B7:1D:06:D8:6A:12:77:A3:F6:A8:6D:FB:AB:2D:A1:E6:08 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 07:25:06 +0000 Manifest this update: Sun 19 Oct 2025 07:25:05 +0000 Manifest next update: Sun 26 Oct 2025 07:25:05 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: xNd4qI02Qudi/6qztplnM2SE2QmPmXC++RUjaqezL4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Oct 19 07:25:05 2025 GMT Not After : Oct 26 07:25:05 2025 GMT Subject: CN=68f49252-e842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:09:a8:3e:c1:d5:4e:6b:80:70:7e:90:6b: 20:56:e9:d6:14:7b:5d:de:30:e5:be:f0:83:32:a2: c6:14:91:1d:f2:8c:cd:39:4c:2b:f5:36:31:20:f3: de:10:d8:58:cd:74:7f:92:69:02:bd:82:5f:e5:04: d0:f9:80:34:31:30:38:cd:c1:42:9e:e0:82:bb:92: e5:1d:a7:b5:9c:ea:42:8e:9b:ce:e9:3b:71:60:67: 12:ae:ae:54:f2:a8:d8:70:58:a2:98:eb:33:0f:ce: d8:9a:89:b1:a2:a3:97:6f:79:8f:13:9d:1c:1b:35: 38:58:fd:03:4e:04:51:c3:54:02:f9:a6:9b:46:c4: ac:22:70:66:46:36:e0:44:ad:b0:27:c8:f4:33:87: 66:c5:b2:6d:51:2e:99:65:ce:9d:99:fe:e5:e3:85: de:39:cb:a2:fd:4b:b6:92:9a:84:29:35:45:12:48: c0:b8:60:e3:38:83:b7:36:a3:42:47:12:4f:16:c2: 08:ba:f4:6a:38:b7:45:b9:1b:38:f3:ac:80:b0:67: 02:58:fa:6d:c6:ae:f8:f7:1d:b1:13:2e:20:09:78: 2b:9e:ea:71:7a:e7:67:38:5a:b0:f9:83:de:04:00: b4:70:44:73:15:03:a7:e8:b7:44:de:12:2a:93:9e: 00:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:C8:B7:1D:06:D8:6A:12:77:A3:F6:A8:6D:FB:AB:2D:A1:E6:08 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a2:8a:43:c2:52:bb:5f:14:56:e3:1f:bb:98:f4:d6:65:45: cd:1a:62:7d:c8:81:d1:7f:ac:81:39:b6:80:c6:6e:8e:04:76: 90:81:80:36:85:36:da:e1:5c:3b:2e:3a:50:71:b2:39:76:9f: 28:78:9e:97:d8:08:1d:75:0b:c2:ca:b4:4b:ef:32:30:12:53: e6:3d:f4:a6:18:fe:fb:cc:f8:dd:ac:49:7a:74:f8:f5:09:2a: aa:52:7c:00:8b:fd:9b:35:55:3a:b7:48:bb:32:a9:41:0f:13: bd:48:9f:94:d3:f1:7a:2e:7c:a0:52:2b:1a:91:8c:89:9f:d8: fb:72:74:37:8b:19:fa:f9:0e:5e:58:8f:26:02:d9:6c:6b:d9: f8:a2:76:00:49:82:84:70:51:32:ba:e0:14:5f:69:9f:6b:d2: c8:73:49:cd:2c:b0:b3:be:2c:7f:ee:19:08:bc:b7:2d:56:24: c1:66:9a:e9:75:76:ea:1b:80:26:5d:fe:72:a2:92:25:ff:a6: bb:52:a5:0e:33:49:36:f4:bb:08:90:5f:53:c8:40:90:85:eb: d0:09:6c:84:7d:44:33:21:64:62:72:4e:aa:67:85:a6:34:fd: 5c:aa:30:10:1f:18:62:b7:c2:ce:05:a5:90:12:86:25:53:bb: b9:e3:db:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUxMDE5MDcyNTA1WhcNMjUxMDI2MDcyNTA1WjAYMRYwFAYD VQQDEw02OGY0OTI1Mi1lODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h0JqD7B1U5rgHB+kGsgVunWFHtd3jDlvvCDMqLGFJEd8ozNOUwr9TYxIPPe ENhYzXR/kmkCvYJf5QTQ+YA0MTA4zcFCnuCCu5LlHae1nOpCjpvO6TtxYGcSrq5U 8qjYcFiimOszD87YmomxoqOXb3mPE50cGzU4WP0DTgRRw1QC+aabRsSsInBmRjbg RK2wJ8j0M4dmxbJtUS6ZZc6dmf7l44XeOcui/Uu2kpqEKTVFEkjAuGDjOIO3NqNC RxJPFsIIuvRqOLdFuRs486yAsGcCWPptxq749x2xEy4gCXgrnupxeudnOFqw+YPe BAC0cERzFQOn6LdE3hIqk54ArwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXUyLcd BthqEnej9qht+6stoeYIMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcoopDwlK7XxRW4x+7mPTWZUXNGmJ9yIHRf6yBObaAxm6OBHaQgYA2 hTba4Vw7LjpQcbI5dp8oeJ6X2AgddQvCyrRL7zIwElPmPfSmGP77zPjdrEl6dPj1 CSqqUnwAi/2bNVU6t0i7MqlBDxO9SJ+U0/F6LnygUisakYyJn9j7cnQ3ixn6+Q5e WI8mAtlsa9n4onYASYKEcFEyuuAUX2mfa9LIc0nNLLCzvix/7hkIvLctViTBZprp dXbqG4AmXf5yopIl/6a7UqUOM0k29LsIkF9TyECQhevQCWyEfUQzIWRick6qZ4Wm NP1cqjAQHxhit8LOBaWQEoYlU7u549vt -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:51 2025 by rpki-client