$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft File: 1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json) Hash identifier: fhDIQgls4S76qmpzsflfLV5gtJJLd7aRwLGs+gnmqTI= Subject key identifier: 89:D6:73:3D:4F:B1:69:1F:B7:5F:5C:9F:49:44:8F:DE:AA:AF:BD:DC Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft Manifest number: 08B1 Signing time: Tue 04 Nov 2025 20:35:21 +0000 Manifest this update: Tue 04 Nov 2025 20:35:20 +0000 Manifest next update: Tue 11 Nov 2025 20:35:20 +0000 Files and hashes: 1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: Slvm6eEXeXMC00IlHM9h1k/FSF3DG+LmuApr4lPbBdI=) 2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: Fp3IoCNith1vGTf69ryDz+R4pr7DX4NONp6q1LMxCoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE Validity Not Before: Nov 4 20:35:20 2025 GMT Not After : Nov 11 20:35:20 2025 GMT Subject: CN=690a6388-6a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:48:c6:90:4e:c3:49:9d:a8:f8:b9:85:b7: e3:1c:59:78:bf:54:69:31:a3:64:c2:40:77:21:29: 7c:7e:e0:e6:41:a5:76:38:6b:6f:4f:84:63:90:1d: 25:a3:bc:b3:6b:4f:c7:5a:9c:61:5a:96:fa:c7:6e: ed:b2:81:44:f9:12:99:2b:64:a9:22:ec:b4:8a:b2: aa:99:22:28:10:70:fc:44:65:00:3b:8f:78:35:d4: 03:76:85:10:32:7b:ee:60:62:25:68:97:52:02:ad: 63:ba:da:bf:72:10:cb:dc:87:ce:f8:8b:1c:db:47: c5:5f:9b:56:c0:68:eb:1f:35:52:b8:4a:a7:f7:3e: 16:60:96:47:43:ae:e0:bb:7d:1b:82:7f:b3:a0:bb: 23:a0:a0:cc:30:0e:93:9a:25:6b:51:cc:34:39:07: 0c:e2:ee:b3:62:19:70:da:dd:4f:5b:de:3d:26:f3: fd:ac:0f:de:63:0e:8f:f9:06:a2:0e:e4:f4:45:7d: 34:3c:6a:0e:b8:c0:a1:f6:81:5a:5e:44:7b:de:4c: 1e:89:96:23:c8:05:4d:18:45:b2:6a:ac:55:b6:fc: b1:3c:50:b8:84:68:5d:19:98:c0:35:e4:f0:7e:5a: ef:47:f3:7b:6b:c5:f5:be:ad:52:ec:68:70:eb:fa: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:73:3D:4F:B1:69:1F:B7:5F:5C:9F:49:44:8F:DE:AA:AF:BD:DC X509v3 Authority Key Identifier: keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:05:78:ad:a3:09:4a:a6:0a:55:7c:15:5a:67:85:19:6f:20: 87:3a:2f:f5:bd:e3:d5:b3:ff:9b:12:d4:ed:c0:4b:0c:7c:19: e8:10:ed:dd:1a:04:42:02:16:b5:5d:f3:4f:d8:80:dd:77:ad: c1:41:2e:85:c6:65:48:f8:33:7a:a6:ad:22:32:e6:ab:9b:88: 24:46:ef:30:cc:92:9a:20:9b:f2:b9:44:cd:78:dd:f5:62:7e: 31:d8:51:40:f8:f9:dd:6a:58:aa:31:d4:7a:80:6f:10:94:fa: 1a:8f:f8:5f:6c:81:97:c9:fb:50:28:a4:2f:fa:ff:66:04:20: ad:41:5f:6c:cf:7f:b0:14:df:db:f2:f7:f7:12:a7:8e:8a:7d: 15:9e:9d:78:3c:55:3f:b3:e5:44:79:97:29:4f:87:4c:42:c5: cf:08:1d:19:60:03:f3:12:f1:c1:95:13:1e:03:6b:97:f8:0f: 01:90:7c:7b:43:ba:09:08:d7:47:7f:74:c7:f0:1e:a8:fe:cd: 15:f4:42:40:7e:30:85:8d:ed:4b:e9:25:4b:cf:1d:78:b8:35: 00:07:7c:89:82:39:2e:54:3f:43:a1:ee:a8:30:0d:38:dd:52: db:88:42:d4:42:1d:15:5e:66:3a:3a:b1:b7:69:ef:8a:45:ac: 7a:37:91:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NEQxMTAvBgNVBAUTKEQ1MDREODE5MDJCMTgzOEIyODJBRTlGNDVDNERDM0Y4 MTc4RTI0RUUwHhcNMjUxMTA0MjAzNTIwWhcNMjUxMTExMjAzNTIwWjAYMRYwFAYD VQQDEw02OTBhNjM4OC02YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6BIxpBOw0mdqPi5hbfjHFl4v1RpMaNkwkB3ISl8fuDmQaV2OGtvT4RjkB0l o7yza0/HWpxhWpb6x27tsoFE+RKZK2SpIuy0irKqmSIoEHD8RGUAO494NdQDdoUQ MnvuYGIlaJdSAq1jutq/chDL3IfO+Isc20fFX5tWwGjrHzVSuEqn9z4WYJZHQ67g u30bgn+zoLsjoKDMMA6TmiVrUcw0OQcM4u6zYhlw2t1PW949JvP9rA/eYw6P+Qai DuT0RX00PGoOuMCh9oFaXkR73kweiZYjyAVNGEWyaqxVtvyxPFC4hGhdGZjANeTw flrvR/N7a8X1vq1S7Ghw6/pvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInWcz1P sWkft19cn0lEj96qr73cMB8GA1UdIwQYMBaAFNUE2BkCsYOLKCrp9FxNw/gXjiTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0RC82OEExRDU1QUM3 MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0c29LdW4wWEUzRC1CZU9K TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRVFlHUUt4ZzRzb0t1bjBYRTNELUJlT0pPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0RC82OEExRDU1QUM3MjYxMUVBOTk1NUU0MTBDNEY5QUUwMi8xUVRZR1FLeGc0 c29LdW4wWEUzRC1CZU9KTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYBXitowlKpgpVfBVaZ4UZbyCHOi/1vePVs/+bEtTtwEsMfBnoEO3d GgRCAha1XfNP2IDdd63BQS6FxmVI+DN6pq0iMuarm4gkRu8wzJKaIJvyuUTNeN31 Yn4x2FFA+PndaliqMdR6gG8QlPoaj/hfbIGXyftQKKQv+v9mBCCtQV9sz3+wFN/b 8vf3EqeOin0Vnp14PFU/s+VEeZcpT4dMQsXPCB0ZYAPzEvHBlRMeA2uX+A8BkHx7 Q7oJCNdHf3TH8B6o/s0V9EJAfjCFje1L6SVLzx14uDUAB3yJgjkuVD9Doe6oMA04 3VLbiELUQh0VXmY6OrG3ae+KRax6N5Gz -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:32 2025 by rpki-client