$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: vPQs3ZG6QPjs3F4n311Kw0G90r/ieipCoAf85ioigXE= Subject key identifier: 43:44:34:1C:6B:0B:43:3D:07:A6:D2:5D:D9:5D:ED:25:31:1A:F6:14 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0228 Signing time: Sun 19 Oct 2025 04:12:56 +0000 Manifest this update: Sun 19 Oct 2025 04:12:55 +0000 Manifest next update: Sun 26 Oct 2025 04:12:55 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: vU7VDo5EXEjxUo0olOch3jZ64nCnOtONd2p+5qGCOmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Oct 19 04:12:55 2025 GMT Not After : Oct 26 04:12:55 2025 GMT Subject: CN=68f46548-510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:a4:10:c9:e2:57:44:7e:e5:e4:04:f6:0b: ce:2c:39:0d:be:0a:4e:37:f0:80:37:db:59:7d:0a: 1b:fb:18:ac:62:9a:4d:94:b4:4f:46:2a:21:0b:9f: c0:75:c1:fb:c0:dd:ab:83:5f:21:1f:bc:65:f2:d3: b5:28:cd:e1:1b:f3:ea:2e:0e:4f:c7:f6:7a:50:ae: 97:60:eb:02:a4:d8:e9:ed:5c:5a:92:3b:44:b8:99: 78:f9:c4:9a:4f:c2:e6:6a:34:26:e9:fa:27:16:80: 7d:fe:d8:d1:60:19:cf:95:19:7f:f9:1a:dd:62:93: fa:d6:63:65:ce:f0:21:a9:8c:80:00:2f:14:87:6c: c6:bd:04:a3:52:37:4e:64:d6:81:a5:a9:32:20:3d: 6e:2d:26:24:f8:26:70:e9:a0:be:4a:f9:07:44:33: c1:b5:a9:84:10:47:20:97:47:0b:a3:5b:d5:c1:a3: e6:e4:81:40:2b:27:29:d1:84:ec:0c:bc:3a:79:54: c0:3e:c0:6f:4c:dc:69:47:e9:71:bc:28:5d:3b:5e: aa:1e:15:a5:47:9a:4b:bd:fa:52:95:54:1e:73:08: 8f:fd:d6:67:9a:5a:80:d1:c6:9f:45:1b:39:93:02: 23:e8:cc:ad:f9:cf:ea:6a:fc:07:9d:e3:8e:df:ac: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:34:1C:6B:0B:43:3D:07:A6:D2:5D:D9:5D:ED:25:31:1A:F6:14 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8d:af:ed:19:cd:23:85:a4:ab:bd:01:16:b1:98:32:d9:39: 30:b8:73:a9:b1:e2:f4:89:b8:a6:49:54:9c:f5:72:70:e3:9f: 0a:08:62:29:f1:5f:09:4a:cd:ee:cf:6a:91:2b:4a:94:f5:e6: 9d:8a:0c:ee:f9:8f:a3:ca:f7:72:0d:80:86:b1:e7:72:09:fe: f7:23:12:90:dd:c5:f7:51:59:64:23:94:8f:c7:a3:57:80:2f: 2f:84:1c:b7:1e:e5:2e:77:e8:6a:f7:1c:95:dd:5e:1c:44:cb: ce:93:a9:75:5b:89:fc:0c:97:94:63:95:77:9a:5a:c2:a8:7e: 84:18:01:1b:e5:78:02:fb:87:01:3f:68:e2:61:7e:a9:d1:1f: 9a:9a:aa:98:44:50:2b:8f:c2:bd:53:f4:49:1e:82:d1:5e:30: d0:4d:e7:8b:cc:e3:dd:1a:80:5e:e0:4c:4f:05:01:92:7a:09: c3:07:83:9a:98:22:3e:b5:9c:ac:35:22:4f:06:de:48:1c:15: 2d:7a:11:5d:f4:0c:ae:47:64:22:71:d4:00:87:26:34:26:07: 3b:94:69:8a:dc:10:d7:ce:4b:62:d9:39:0e:37:e4:0f:08:8a: cd:c8:dd:31:11:9f:5c:ab:9e:f5:1b:e9:c8:97:8e:ac:ef:c1: d4:1b:f3:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUxMDE5MDQxMjU1WhcNMjUxMDI2MDQxMjU1WjAYMRYwFAYD VQQDEw02OGY0NjU0OC01MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp2kEMniV0R+5eQE9gvOLDkNvgpON/CAN9tZfQob+xisYppNlLRPRiohC5/A dcH7wN2rg18hH7xl8tO1KM3hG/PqLg5Px/Z6UK6XYOsCpNjp7VxakjtEuJl4+cSa T8LmajQm6fonFoB9/tjRYBnPlRl/+RrdYpP61mNlzvAhqYyAAC8Uh2zGvQSjUjdO ZNaBpakyID1uLSYk+CZw6aC+SvkHRDPBtamEEEcgl0cLo1vVwaPm5IFAKycp0YTs DLw6eVTAPsBvTNxpR+lxvChdO16qHhWlR5pLvfpSlVQecwiP/dZnmlqA0cafRRs5 kwIj6Myt+c/qavwHneOO36yrGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENENBxr C0M9B6bSXdld7SUxGvYUMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMja/tGc0jhaSrvQEWsZgy2TkwuHOpseL0ibimSVSc9XJw458KCGIp 8V8JSs3uz2qRK0qU9eadigzu+Y+jyvdyDYCGsedyCf73IxKQ3cX3UVlkI5SPx6NX gC8vhBy3HuUud+hq9xyV3V4cRMvOk6l1W4n8DJeUY5V3mlrCqH6EGAEb5XgC+4cB P2jiYX6p0R+amqqYRFArj8K9U/RJHoLRXjDQTeeLzOPdGoBe4ExPBQGSegnDB4Oa mCI+tZysNSJPBt5IHBUtehFd9AyuR2QicdQAhyY0Jgc7lGmK3BDXzkti2TkON+QP CIrNyN0xEZ9cq571G+nIl46s78HUG/Nx -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:03 2025 by rpki-client