$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: pIbUj9Z++myKF/ps2vkaJaQAbMPh9yeVDc67LD2DkBA= Subject key identifier: C0:2E:2D:7F:BF:DD:30:B0:1B:80:8B:7B:F3:49:7B:58:A7:6A:52:85 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0459 Signing time: Sun 19 Oct 2025 02:03:48 +0000 Manifest this update: Sun 19 Oct 2025 02:03:47 +0000 Manifest next update: Sun 26 Oct 2025 02:03:47 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: +CnSLn7jlw+FyHkfVnw0GDu0OMNG8UQzyKIe4mBBEU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Oct 19 02:03:47 2025 GMT Not After : Oct 26 02:03:47 2025 GMT Subject: CN=68f44704-4221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:58:e0:84:96:9c:7d:de:1f:4b:7b:76:62: c8:c0:f8:3e:59:aa:eb:4a:54:20:6f:f6:48:24:80: 44:a8:95:61:2f:f3:e0:ca:6c:14:a7:a5:0f:20:3c: 4f:8e:61:97:d2:b7:f7:cc:0d:0b:30:0a:05:50:ff: f6:15:b7:ec:d8:fa:c5:69:0a:bf:9f:9f:38:7d:4a: df:93:1d:1d:02:7e:1f:ab:2f:61:b1:c8:0a:e0:5e: c5:ba:07:cc:3b:86:dd:74:00:c4:4f:d3:7a:84:fb: e2:39:df:85:9d:8c:76:27:26:ae:ab:5b:c5:d7:19: 7a:84:e1:78:a4:20:a7:ad:76:85:a6:4d:cc:5b:f2: 2c:76:59:0f:2d:4a:e7:ab:aa:c8:24:48:5b:d6:c7: 04:78:fb:aa:c2:a3:3c:db:d1:13:2f:b7:42:8d:69: 80:43:89:14:11:1b:02:2f:3b:f6:c8:0e:39:3f:b6: d6:77:7a:05:2a:c7:3b:ee:15:dd:00:b6:78:20:5c: 40:cc:c0:da:a3:58:ca:de:87:cb:4c:4c:23:24:f1: ab:b6:5e:90:53:e5:39:0e:b3:15:73:a5:b4:10:f8: 06:d2:fb:0b:83:d4:f6:d8:74:5c:f2:a8:8d:66:93: a4:1d:48:b8:0e:dd:39:77:ea:ac:55:b8:be:11:9d: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2E:2D:7F:BF:DD:30:B0:1B:80:8B:7B:F3:49:7B:58:A7:6A:52:85 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:58:b5:21:3c:3e:8c:22:84:f0:dc:c3:ab:6f:53:24:2c: 73:85:f6:6d:a4:c1:dc:61:13:eb:74:14:1e:22:05:f5:ca:b3: 54:ba:fe:88:3b:ba:0d:c8:50:67:d1:e9:af:17:26:82:74:5b: 17:5e:50:a3:c2:f4:21:22:96:08:d8:c0:e8:07:4d:aa:d9:66: 41:40:4e:d9:09:fe:95:a0:f4:64:35:d7:48:62:fa:51:4e:12: da:7c:8a:df:ad:f0:cd:ff:6e:47:ba:b6:1a:c0:e5:ae:4b:f1: 95:94:e6:1a:d6:af:c7:77:c0:98:ff:2c:92:a6:b7:be:0c:1b: 78:76:6e:3c:5d:eb:46:37:45:6f:64:8b:96:21:ae:03:78:9a: 97:2a:6b:34:23:15:37:c4:bd:b0:cd:4d:b1:37:8a:fd:fa:0b: e4:1b:00:f7:db:07:7b:78:77:69:b4:2a:32:f5:e6:8b:2d:40: 4d:e1:ab:1b:f3:73:da:95:02:6e:fb:50:5c:3c:fd:14:71:a7: b1:c2:98:3c:d7:e1:07:fc:84:31:5e:3a:32:ff:ef:21:55:33: 38:5e:ff:04:b7:09:4e:25:1b:a7:fe:b7:d5:80:3d:dc:ca:c5: 05:8c:01:52:37:79:49:64:c8:e4:92:8a:cc:f2:39:fe:dd:63: d8:6d:ba:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUxMDE5MDIwMzQ3WhcNMjUxMDI2MDIwMzQ3WjAYMRYwFAYD VQQDEw02OGY0NDcwNC00MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt5Y4ISWnH3eH0t7dmLIwPg+WarrSlQgb/ZIJIBEqJVhL/PgymwUp6UPIDxP jmGX0rf3zA0LMAoFUP/2Fbfs2PrFaQq/n584fUrfkx0dAn4fqy9hscgK4F7FugfM O4bddADET9N6hPviOd+FnYx2Jyauq1vF1xl6hOF4pCCnrXaFpk3MW/IsdlkPLUrn q6rIJEhb1scEePuqwqM829ETL7dCjWmAQ4kUERsCLzv2yA45P7bWd3oFKsc77hXd ALZ4IFxAzMDao1jK3ofLTEwjJPGrtl6QU+U5DrMVc6W0EPgG0vsLg9T22HRc8qiN ZpOkHUi4Dt05d+qsVbi+EZ0QAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAuLX+/ 3TCwG4CLe/NJe1inalKFMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFj1i1ITw+jCKE8NzDq29TJCxzhfZtpMHcYRPrdBQeIgX1yrNUuv6I O7oNyFBn0emvFyaCdFsXXlCjwvQhIpYI2MDoB02q2WZBQE7ZCf6VoPRkNddIYvpR ThLafIrfrfDN/25HurYawOWuS/GVlOYa1q/Hd8CY/yySpre+DBt4dm48XetGN0Vv ZIuWIa4DeJqXKms0IxU3xL2wzU2xN4r9+gvkGwD32wd7eHdptCoy9eaLLUBN4asb 83PalQJu+1BcPP0Ucaexwpg81+EH/IQxXjoy/+8hVTM4Xv8EtwlOJRun/rfVgD3c ysUFjAFSN3lJZMjkkorM8jn+3WPYbbrW -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:49 2025 by rpki-client