$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: s4CVfQYkCFxAMZDkW8RQ+0ytyexVlN4d3uQ6iwoU5GU= Subject key identifier: C8:C9:A0:47:0A:6C:F3:9B:0E:E2:74:F3:3F:DF:AE:02:26:02:A0:91 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 12D3 Signing time: Sat 18 Oct 2025 20:31:44 +0000 Manifest this update: Sat 18 Oct 2025 20:31:44 +0000 Manifest next update: Sat 25 Oct 2025 20:31:44 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: QQCYE4T1uJ2LHAYTSKiXF/xRkj9dtlecKOPVkauQRL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Oct 18 20:31:44 2025 GMT Not After : Oct 25 20:31:44 2025 GMT Subject: CN=68f3f930-30df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:40:83:fa:ab:69:71:cb:14:00:eb:28:ba: 8c:bb:92:f0:99:ac:d0:df:3a:92:8f:cb:9a:c5:b5: 72:f4:94:06:cd:07:60:ea:e0:a2:bb:d2:83:a2:28: 3f:f3:48:83:c6:16:cb:69:20:b6:fe:66:2f:a0:15: b3:e9:3b:06:6c:b7:6a:08:72:a6:07:f7:36:e2:de: 06:08:56:6e:ef:f0:10:52:47:d5:f7:d0:13:d3:b5: df:7b:f2:09:32:fc:69:d4:9c:6f:8c:28:0f:5e:4c: 96:20:50:18:23:db:39:f7:99:05:46:c8:84:f8:27: af:26:88:1d:9f:87:71:8b:64:f6:e7:8d:3f:02:f4: 60:df:5e:59:a0:53:63:24:ca:8b:11:cc:d4:cb:9f: 46:6b:ee:5d:23:8f:10:df:5b:c3:82:2a:aa:37:a0: 59:b8:fd:50:c9:6f:35:80:1c:53:f3:62:38:1c:ca: 80:0c:98:0d:3a:d0:16:7d:8f:9d:0c:14:34:46:a7: f3:69:75:b7:97:e9:2c:ff:fe:3c:55:5d:b0:7d:ad: fc:b6:f1:4a:b1:36:ce:d4:fc:51:1e:dc:6f:81:7b: 21:2c:15:15:5f:d9:68:f3:2f:49:66:9a:9f:8a:be: c5:08:eb:b8:13:3d:3a:2e:ae:e7:20:d4:27:86:8c: 16:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:A0:47:0A:6C:F3:9B:0E:E2:74:F3:3F:DF:AE:02:26:02:A0:91 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a5:4b:89:92:43:79:2f:f6:8f:86:c6:f1:a7:49:12:61:7e: 47:20:88:39:9f:05:3b:13:4a:0d:cd:86:aa:7f:cd:a5:66:8c: d7:6b:b5:e1:13:15:1a:a4:ce:61:27:7d:c6:31:55:be:6f:b3: 85:6f:b8:67:7a:b9:f6:7f:57:b3:84:c9:34:2e:7c:a7:0b:16: eb:fe:02:a3:dd:1b:d5:9d:15:3c:03:09:5a:70:8f:6c:eb:98: ca:db:c2:43:33:03:f0:ab:51:6f:28:cd:89:60:c9:ff:38:49: b5:ef:cf:47:26:bb:7b:de:e5:f1:37:52:3a:ae:90:fa:0b:e0: 41:28:5c:5f:39:7d:b4:a6:05:92:95:71:b8:56:ce:62:44:78: d9:52:1f:1d:a1:76:a0:17:53:28:fa:70:eb:48:54:be:ae:f4: 5c:76:de:fa:26:d8:82:bb:ea:da:a7:b3:7d:9b:2a:4e:2b:73: b8:5c:89:5b:22:e5:3b:34:e0:00:27:dc:5a:90:ce:fd:e5:ca: b8:2b:ce:78:2f:34:c4:ae:30:45:35:23:f2:24:8c:7c:71:0a: d5:11:b4:95:c3:1f:24:fd:a3:95:d4:3f:d2:74:f7:56:75:5c: c0:57:3a:de:2a:16:6d:f0:23:53:2d:d7:19:9a:44:a6:cd:3b: d5:9e:38:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUxMDE4MjAzMTQ0WhcNMjUxMDI1MjAzMTQ0WjAYMRYwFAYD VQQDEw02OGYzZjkzMC0zMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlBAg/qraXHLFADrKLqMu5LwmazQ3zqSj8uaxbVy9JQGzQdg6uCiu9KDoig/ 80iDxhbLaSC2/mYvoBWz6TsGbLdqCHKmB/c24t4GCFZu7/AQUkfV99AT07Xfe/IJ Mvxp1JxvjCgPXkyWIFAYI9s595kFRsiE+CevJogdn4dxi2T2540/AvRg315ZoFNj JMqLEczUy59Ga+5dI48Q31vDgiqqN6BZuP1QyW81gBxT82I4HMqADJgNOtAWfY+d DBQ0RqfzaXW3l+ks//48VV2wfa38tvFKsTbO1PxRHtxvgXshLBUVX9lo8y9JZpqf ir7FCOu4Ez06Lq7nINQnhowW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjJoEcK bPObDuJ08z/frgImAqCRMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOpUuJkkN5L/aPhsbxp0kSYX5HIIg5nwU7E0oNzYaqf82lZozXa7Xh ExUapM5hJ33GMVW+b7OFb7hnern2f1ezhMk0LnynCxbr/gKj3RvVnRU8AwlacI9s 65jK28JDMwPwq1FvKM2JYMn/OEm1789HJrt73uXxN1I6rpD6C+BBKFxfOX20pgWS lXG4Vs5iRHjZUh8doXagF1Mo+nDrSFS+rvRcdt76JtiCu+rap7N9mypOK3O4XIlb IuU7NOAAJ9xakM795cq4K854LzTErjBFNSPyJIx8cQrVEbSVwx8k/aOV1D/SdPdW dVzAVzreKhZt8CNTLdcZmkSmzTvVnjhf -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:19 2025 by rpki-client