$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft File: QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json) Hash identifier: C7nuaJP2FMFzd2JR/LWSuI9ReF3jPKjGCrXdXM0lYW0= Subject key identifier: 91:42:CC:C4:72:E2:EB:B6:7C:B3:EA:91:EF:9D:AA:F1:C8:A1:13:47 Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 Certificate issuer: /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft Manifest number: 0134 Signing time: Mon 03 Nov 2025 04:30:58 +0000 Manifest this update: Mon 03 Nov 2025 04:30:58 +0000 Manifest next update: Mon 10 Nov 2025 04:30:58 +0000 Files and hashes: 1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: C3XAN8gUgFd7VkNcpjFRTU9nKfxxpbXE+j40OruPymQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445 Validity Not Before: Nov 3 04:30:58 2025 GMT Not After : Nov 10 04:30:58 2025 GMT Subject: CN=69083002-e4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:69:cb:09:44:55:11:d3:af:46:e9:84:5c: 1a:53:bb:4d:99:2f:53:69:12:52:c0:4d:18:43:0f: ef:69:a2:57:44:7c:35:67:2c:03:a8:32:00:76:57: fd:79:99:26:0d:56:92:bb:0c:7f:05:fa:ab:36:5d: 62:55:c9:cd:39:5c:da:20:9d:82:ac:0b:21:03:5a: d8:6a:9d:73:1e:ce:8e:63:2a:e1:48:e9:38:51:b8: 7e:e0:99:2e:4b:54:a3:36:38:ae:a4:f6:dd:64:31: e6:d5:26:23:c6:be:8d:2f:f7:f0:f1:60:e1:30:ef: 0f:1f:d5:71:f0:4e:48:17:65:66:91:16:67:db:1b: b2:48:8b:3d:ed:4f:ab:de:58:91:35:7f:4e:d5:56: 3b:31:3d:24:06:29:28:b2:6e:73:b0:db:b5:de:98: ae:da:88:50:0f:5d:67:34:41:ed:44:69:96:f9:00: 1c:a6:29:28:b2:fb:0b:9e:fa:8d:8d:6a:b5:61:9d: 00:70:7e:08:08:eb:e8:48:77:ec:74:51:fa:19:6a: 7e:39:04:9e:ed:a2:48:38:b6:bc:05:a1:73:1c:3b: 3f:aa:f9:5f:bd:a3:bf:72:32:1b:fe:fd:0d:0f:76: 68:2c:0d:d7:95:30:4c:ad:13:b7:ff:1a:f6:1a:ec: 08:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:CC:C4:72:E2:EB:B6:7C:B3:EA:91:EF:9D:AA:F1:C8:A1:13:47 X509v3 Authority Key Identifier: keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4f:14:ae:fb:72:63:7d:44:0e:af:8e:ca:6a:a5:2d:e3:2f: da:d3:97:d4:68:69:9e:f1:54:c1:8c:dc:1b:45:aa:a5:a3:02: 95:cb:a7:6d:df:f8:c6:a6:60:e4:a7:54:35:c5:70:52:16:e8: a9:b8:52:ef:1b:d6:26:98:90:93:63:9f:33:bc:4c:51:3d:29: 11:1d:cb:f1:17:83:62:5e:76:9e:50:94:1a:ac:c8:9a:31:0c: ec:75:25:b3:a3:0d:b2:dd:1f:06:b1:d5:4f:21:4e:a5:47:1e: 01:be:f1:d5:d4:74:e4:7a:bf:53:6b:17:3b:8e:55:70:40:ca: 83:a6:72:a6:d6:8b:4c:0f:1c:02:b1:09:01:11:55:18:00:a3: 04:3d:0a:f1:37:41:ba:8a:21:79:e2:70:f1:2f:3a:b4:47:86: 3e:cf:51:4d:7e:61:b6:65:c8:e8:77:5b:9c:3a:56:be:62:5f: 2b:ce:5e:c9:c0:f9:a1:2e:09:c3:31:e2:f1:ce:b2:66:74:7e: 76:70:00:eb:5e:98:5a:d4:0e:44:86:61:11:b9:57:08:ca:52: 1f:81:32:66:fe:f8:d3:d8:54:40:de:52:cd:49:47:46:7b:8c: 76:5c:cf:28:37:83:e6:fd:aa:d7:d4:c7:c3:df:4f:bb:63:c5: 2f:52:99:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2OEIxMTAvBgNVBAUTKDQyRTY2NUUxMTEwNEQ4Q0QwODNGQjE5RDNDNkYzNTVD NzYyOEM0NDUwHhcNMjUxMTAzMDQzMDU4WhcNMjUxMTEwMDQzMDU4WjAYMRYwFAYD VQQDEw02OTA4MzAwMi1lNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HxpywlEVRHTr0bphFwaU7tNmS9TaRJSwE0YQw/vaaJXRHw1ZywDqDIAdlf9 eZkmDVaSuwx/BfqrNl1iVcnNOVzaIJ2CrAshA1rYap1zHs6OYyrhSOk4Ubh+4Jku S1SjNjiupPbdZDHm1SYjxr6NL/fw8WDhMO8PH9Vx8E5IF2VmkRZn2xuySIs97U+r 3liRNX9O1VY7MT0kBikosm5zsNu13piu2ohQD11nNEHtRGmW+QAcpikosvsLnvqN jWq1YZ0AcH4ICOvoSHfsdFH6GWp+OQSe7aJIOLa8BaFzHDs/qvlfvaO/cjIb/v0N D3ZoLA3XlTBMrRO3/xr2GuwIiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFCzMRy 4uu2fLPqke+dqvHIoRNHMB8GA1UdIwQYMBaAFELmZeERBNjNCD+xnTxvNVx2KMRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTY4Qi9GQzFEMjczNkUx MkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJNMElQN0dkUEc4MVhIWW94 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F1Wmw0UkVFMk0wSVA3R2RQRzgxWEhZb3hFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTY4Qi9GQzFEMjczNkUxMkExMUVFODY4NEMyMTdDNEY5QUUwMi9RdVpsNFJFRTJN MElQN0dkUEc4MVhIWW94RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1TxSu+3JjfUQOr47KaqUt4y/a05fUaGme8VTBjNwbRaqlowKVy6dt 3/jGpmDkp1Q1xXBSFuipuFLvG9YmmJCTY58zvExRPSkRHcvxF4NiXnaeUJQarMia MQzsdSWzow2y3R8GsdVPIU6lRx4BvvHV1HTker9Taxc7jlVwQMqDpnKm1otMDxwC sQkBEVUYAKMEPQrxN0G6iiF54nDxLzq0R4Y+z1FNfmG2Zcjod1ucOla+Yl8rzl7J wPmhLgnDMeLxzrJmdH52cADrXpha1A5EhmERuVcIylIfgTJm/vjT2FRA3lLNSUdG e4x2XM8oN4Pm/arX1MfD30+7Y8UvUpnt -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:35 2025 by rpki-client