$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: fPrYNm8NnKUdfBcw1veCQBFBZy2xFBAH2SFRrJLzA/s= Subject key identifier: 48:B1:04:F1:4C:7B:54:C7:A2:93:95:62:56:12:31:0D:61:16:34:2E Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: AF Signing time: Mon 03 Nov 2025 06:07:17 +0000 Manifest this update: Mon 03 Nov 2025 06:07:16 +0000 Manifest next update: Mon 10 Nov 2025 06:07:16 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: CIIxzczZkHkWBQ6Hc/7QZthdGoQgpLu7NRknaUAYUE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Nov 3 06:07:16 2025 GMT Not After : Nov 10 06:07:16 2025 GMT Subject: CN=69084695-c1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:68:b6:e7:d3:83:49:ed:06:e7:f3:8a:6d: 54:84:94:e4:eb:0f:7d:aa:48:0b:c3:15:75:72:b8: 09:2d:80:e3:5e:6f:f7:ba:87:4a:07:88:40:6c:4c: 85:2e:5f:51:29:4d:f4:7d:b6:79:8a:2d:f0:4f:2f: 0b:8a:d2:eb:1e:0a:1e:7f:bf:28:8d:03:a2:de:c3: 88:e8:d5:9a:b5:be:ae:14:73:d7:2a:e1:e3:83:59: 93:06:11:58:cc:a1:a2:81:bd:38:ee:fa:6b:3d:09: b4:bf:96:31:ef:0e:37:f6:d3:4a:b4:b8:fd:8d:3b: 3b:d1:85:cb:9d:d8:c5:eb:2f:fb:26:3d:59:e3:1f: 36:33:e8:d9:2b:77:69:4f:ed:eb:86:82:96:4a:fa: af:f8:a3:63:d6:f1:a7:ab:33:ea:fc:62:d8:13:62: 2c:f9:83:6c:19:26:d2:3b:99:65:b0:8e:b6:3c:0d: 95:64:d6:21:1a:9e:f4:64:81:81:94:6b:e7:87:bd: 3c:dc:45:7b:dc:85:e7:8e:c4:76:cc:19:49:10:58: 9d:00:20:36:e1:f1:bb:0b:a0:46:c8:73:2f:d3:33: ac:32:42:ae:ca:28:b7:bb:7b:5c:96:eb:c3:56:22: 29:77:9b:1b:a1:81:f0:27:f9:eb:a3:c5:06:de:5b: 4e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:04:F1:4C:7B:54:C7:A2:93:95:62:56:12:31:0D:61:16:34:2E X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:10:e3:a7:1a:bd:50:6f:e6:8d:d4:ea:38:0b:82:17:b0:77: 45:2e:da:66:3c:74:ac:c0:bd:2d:22:9c:54:d3:2c:9b:85:4c: cb:8c:e1:cf:f7:41:15:27:e9:f1:89:4d:0e:70:5b:f0:b7:5a: c9:16:67:7e:0c:38:fe:43:fd:09:1f:15:cd:aa:63:4a:5f:b7: b6:b3:bc:ea:8d:15:d1:f8:f8:e5:dd:c4:fe:79:6e:12:79:56: f4:6f:d3:0b:6b:1a:19:db:e5:59:51:63:5d:60:d9:9b:66:21: 64:c0:00:21:9c:c2:44:a1:a4:54:5d:56:54:bb:40:7a:01:67: 07:3d:b1:f1:c9:83:21:96:1e:f6:db:13:a2:ea:5c:9f:44:3f: 3c:98:29:cd:1c:15:b1:f5:11:ca:41:24:aa:13:db:d5:63:5d: f8:e7:c5:3a:ce:02:77:74:43:dc:eb:c7:e7:df:55:7e:09:0d: 19:14:da:ee:56:10:21:74:a6:05:de:0e:2c:81:a4:63:ff:e6: 6e:d8:0c:6e:62:b5:18:77:1f:f9:14:1c:30:38:c7:ee:e4:ab: 96:98:41:8e:d2:e5:0d:18:55:89:2e:a2:d5:4f:29:10:e4:6a: 74:54:e1:28:be:6f:c5:8f:dd:95:91:5f:6a:bc:8b:f5:26:30: a9:10:60:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGQjYxMTAvBgNVBAUTKEM2QTIxNkU0MjMyNjhCMzkyNzdEQzEyMkYzRTFBQUQ4 NkM2RDlBNDMwHhcNMjUxMTAzMDYwNzE2WhcNMjUxMTEwMDYwNzE2WjAYMRYwFAYD VQQDEw02OTA4NDY5NS1jMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyihotufTg0ntBufzim1UhJTk6w99qkgLwxV1crgJLYDjXm/3uodKB4hAbEyF Ll9RKU30fbZ5ii3wTy8LitLrHgoef78ojQOi3sOI6NWatb6uFHPXKuHjg1mTBhFY zKGigb047vprPQm0v5Yx7w439tNKtLj9jTs70YXLndjF6y/7Jj1Z4x82M+jZK3dp T+3rhoKWSvqv+KNj1vGnqzPq/GLYE2Is+YNsGSbSO5llsI62PA2VZNYhGp70ZIGB lGvnh7083EV73IXnjsR2zBlJEFidACA24fG7C6BGyHMv0zOsMkKuyii3u3tcluvD ViIpd5sboYHwJ/nro8UG3ltOaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEixBPFM e1THopOVYlYSMQ1hFjQuMB8GA1UdIwQYMBaAFMaiFuQjJos5J33BIvPhqthsbZpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84RUMzNURFNEFD NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6a25mY0VpOC1HcTJHeHRt a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84RUMzNURFNEFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6 a25mY0VpOC1HcTJHeHRta00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeEOOnGr1Qb+aN1Oo4C4IXsHdFLtpmPHSswL0tIpxU0yybhUzLjOHP 90EVJ+nxiU0OcFvwt1rJFmd+DDj+Q/0JHxXNqmNKX7e2s7zqjRXR+Pjl3cT+eW4S eVb0b9MLaxoZ2+VZUWNdYNmbZiFkwAAhnMJEoaRUXVZUu0B6AWcHPbHxyYMhlh72 2xOi6lyfRD88mCnNHBWx9RHKQSSqE9vVY13458U6zgJ3dEPc68fn31V+CQ0ZFNru VhAhdKYF3g4sgaRj/+Zu2AxuYrUYdx/5FBwwOMfu5KuWmEGO0uUNGFWJLqLVTykQ 5Gp0VOEovm/Fj92VkV9qvIv1JjCpEGDk -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:33 2025 by rpki-client