$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json) Hash identifier: zIDVLTo3hOr13e4QqLmfVzxlXikXZoMOpMUa+aRo0C8= Subject key identifier: 39:5A:3A:F6:6F:09:B8:13:C0:43:3F:58:D4:15:3E:16:46:17:8A:10 Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft Manifest number: 12E3 Signing time: Sun 02 Nov 2025 19:30:58 +0000 Manifest this update: Sun 02 Nov 2025 19:30:57 +0000 Manifest next update: Sun 09 Nov 2025 19:30:57 +0000 Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: JIdvrHV2h+IOp/+nsVyotwIyMcT/VOL3eeW9J2ZcVbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7 Validity Not Before: Nov 2 19:30:57 2025 GMT Not After : Nov 9 19:30:57 2025 GMT Subject: CN=6907b172-a08f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:76:8b:86:90:83:6e:26:1c:f7:4d:ed:20:2f: 12:51:62:a5:26:5c:e5:57:7d:f8:7f:c5:c3:46:28: df:7a:2d:28:03:44:bf:a8:ec:cf:93:86:6f:53:3c: 09:58:2f:50:62:4d:28:d7:35:02:42:71:39:98:9d: 83:20:b7:97:83:6d:6d:6e:a7:0a:d9:5f:1b:2b:14: 78:8c:6f:19:97:48:09:7a:c3:51:b6:92:69:10:90: a4:42:a7:78:66:57:cd:85:d0:35:a6:04:41:30:de: 04:5b:fa:8c:99:43:54:22:a2:10:a7:83:62:fa:17: 34:ba:f7:ed:cc:09:c1:1c:93:17:ff:79:6e:aa:de: 22:82:18:81:1a:0c:c4:60:fa:8c:6d:f2:41:34:21: 32:66:33:f0:6d:85:5e:0f:96:ed:af:0e:a1:2a:f9: c6:e8:42:6b:77:77:b1:b1:49:4e:a0:80:21:11:d9: 71:01:a8:a7:3f:47:44:c7:b2:cb:cc:e9:ab:26:1a: 3d:e1:14:f6:ab:a8:1f:4b:0b:39:e8:3f:79:55:20: 24:f0:3a:86:6c:6b:e5:e6:c1:25:40:a1:dc:8f:b2: 52:91:af:4d:9d:4b:77:fc:98:66:88:5b:d9:4e:b2: 12:74:f7:d9:13:f2:29:10:e7:ac:5b:17:fc:b4:cc: 31:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:3A:F6:6F:09:B8:13:C0:43:3F:58:D4:15:3E:16:46:17:8A:10 X509v3 Authority Key Identifier: keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1c:6d:e7:b8:5e:9f:37:a2:63:82:45:3f:fe:6e:a3:93:eb: 1b:54:6a:23:0e:f8:38:f5:69:cd:92:ce:94:b7:0f:a7:22:38: 72:41:5b:10:12:5e:94:62:d1:13:8b:93:57:70:cd:7d:51:65: 03:70:0d:50:c2:ba:de:f7:e1:ce:17:34:8a:5b:aa:e3:d3:f1: 0f:93:f4:ee:dc:69:71:dd:72:bb:11:60:65:71:e7:f8:ba:cd: 92:19:e8:a8:99:43:15:a3:ab:02:9e:d4:bc:b9:9f:b9:c2:a7: f4:6a:08:bd:05:93:c9:ba:62:84:a7:a7:cd:ad:8c:0c:17:55: fb:66:ff:71:37:5c:64:9b:0d:c3:2a:01:e4:b4:11:e5:f0:1a: 2b:d2:3f:2b:35:da:c4:2b:52:21:ce:da:3f:6a:58:26:89:b4: 02:c1:60:fc:da:05:5e:35:d8:61:59:1b:58:70:e8:cf:3e:00: 32:7c:51:93:43:2d:74:e8:8c:f4:85:c1:2f:0d:19:38:1c:3c: 1f:a0:b4:75:57:3f:00:97:78:c0:a7:b6:dc:e2:a0:72:79:f2: be:b5:7c:2e:7a:e8:4f:8c:55:b4:b9:85:d7:6b:3e:94:a2:6d: d0:a0:c0:04:38:18:1e:36:a4:fb:f3:09:69:18:93:df:9d:4c: 15:f7:0c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1 MEQ2OTRDQjcwHhcNMjUxMTAyMTkzMDU3WhcNMjUxMTA5MTkzMDU3WjAYMRYwFAYD VQQDEw02OTA3YjE3Mi1hMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43aLhpCDbiYc903tIC8SUWKlJlzlV334f8XDRijfei0oA0S/qOzPk4ZvUzwJ WC9QYk0o1zUCQnE5mJ2DILeXg21tbqcK2V8bKxR4jG8Zl0gJesNRtpJpEJCkQqd4 ZlfNhdA1pgRBMN4EW/qMmUNUIqIQp4Ni+hc0uvftzAnBHJMX/3luqt4ighiBGgzE YPqMbfJBNCEyZjPwbYVeD5btrw6hKvnG6EJrd3exsUlOoIAhEdlxAainP0dEx7LL zOmrJho94RT2q6gfSws56D95VSAk8DqGbGvl5sElQKHcj7JSka9NnUt3/JhmiFvZ TrISdPfZE/IpEOesWxf8tMwxBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlaOvZv CbgTwEM/WNQVPhZGF4oQMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3 OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW RmhYT3BLc2JhQlpRMXBUTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClHG3nuF6fN6JjgkU//m6jk+sbVGojDvg49WnNks6Utw+nIjhyQVsQ El6UYtETi5NXcM19UWUDcA1Qwrre9+HOFzSKW6rj0/EPk/Tu3Glx3XK7EWBlcef4 us2SGeiomUMVo6sCntS8uZ+5wqf0agi9BZPJumKEp6fNrYwMF1X7Zv9xN1xkmw3D KgHktBHl8Bor0j8rNdrEK1Ihzto/algmibQCwWD82gVeNdhhWRtYcOjPPgAyfFGT Qy106Iz0hcEvDRk4HDwfoLR1Vz8Al3jAp7bc4qByefK+tXwueuhPjFW0uYXXaz6U om3QoMAEOBgeNqT78wlpGJPfnUwV9wxw -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:50 2025 by rpki-client