$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json) Hash identifier: 7lxwH/14LeR92hxvJjoIHqO7MV9m2OhtS+8eqn6iypc= Subject key identifier: 14:FC:9C:D0:25:F0:37:B4:00:D6:9C:38:5B:45:E9:27:A2:9E:7C:AC Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft Manifest number: E2 Signing time: Sun 19 Oct 2025 08:25:08 +0000 Manifest this update: Sun 19 Oct 2025 08:25:07 +0000 Manifest next update: Sun 26 Oct 2025 08:25:07 +0000 Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: jFzPjCly5e44FNYnfQsQCBmCIlGzIsZhYIzBjWR3gtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF Validity Not Before: Oct 19 08:25:07 2025 GMT Not After : Oct 26 08:25:07 2025 GMT Subject: CN=68f4a064-5e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:8c:60:47:cc:47:ee:49:3e:f9:15:a3:70: f4:3d:e0:ee:a6:fc:cf:3d:42:29:d8:67:76:08:f9: c1:9a:36:f7:c5:e6:45:db:b5:b9:f8:53:22:91:c4: 2c:78:94:da:eb:20:89:cc:20:7f:8a:a7:49:2b:04: 7b:b3:82:46:d8:c5:c3:fe:35:09:b8:d8:21:28:56: 1a:6b:f6:eb:dd:5e:7b:89:2a:9e:21:04:28:20:29: e3:a9:ee:52:65:ab:c3:18:78:b7:a8:67:82:ca:bd: c4:43:c7:2b:aa:9b:92:21:c8:3b:c1:98:de:83:4d: bd:9f:61:1a:d8:2e:55:c6:02:57:f7:35:3a:e7:11: d6:3e:91:4a:3f:48:e3:62:ea:38:7e:79:46:9b:47: ac:9e:a5:63:5b:ca:dd:ce:f7:e9:3b:6d:04:18:fb: 51:07:df:39:87:fd:2c:78:a1:a4:de:87:c8:ee:45: 0e:25:6c:bf:81:eb:26:5d:ef:81:e1:0f:44:43:64: c3:8b:62:7e:a5:61:93:ec:d4:c0:9e:0b:60:54:8a: 15:53:15:ba:57:af:64:28:de:15:41:16:86:74:16: 0d:61:f5:04:56:79:81:24:8f:33:7f:d7:14:67:02: 44:4d:7e:0d:17:62:0e:b9:b6:21:13:bb:63:3e:76: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:9C:D0:25:F0:37:B4:00:D6:9C:38:5B:45:E9:27:A2:9E:7C:AC X509v3 Authority Key Identifier: keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d9:a2:6a:15:84:c8:4a:6f:64:57:eb:61:64:10:42:41:00: 3b:bb:4a:51:1a:15:aa:77:29:ee:51:9c:7a:d1:da:0b:3d:1e: 09:9f:35:62:3d:7f:a6:47:45:bb:07:64:eb:1f:22:22:31:11: 43:58:79:33:32:92:e4:63:54:f2:d9:53:1c:fb:94:d6:07:9e: ec:5c:30:d7:5f:70:12:b3:ed:c4:f0:30:1d:a2:09:ab:4c:98: 74:f3:4c:1e:30:ab:ae:e3:4d:d7:a0:d4:c9:77:46:4c:4e:a8: fc:69:9e:91:37:80:ef:cc:24:1c:76:3f:6c:d8:b1:cb:6c:c2: d2:84:54:c9:a2:57:af:21:0f:90:5f:b4:ba:96:ef:25:f6:7d: 67:dd:5c:22:a3:5b:1f:35:a1:30:50:48:10:d5:a9:66:90:89: f9:da:89:b8:48:1e:dc:4a:84:05:fb:f4:1c:fe:16:e1:71:cc: f4:22:fc:95:9d:ae:4d:f5:2c:15:1a:65:f0:82:3d:c9:49:fd: 31:79:d1:dd:28:1e:34:63:9d:26:c6:40:db:fa:43:d6:bd:30: a1:94:17:27:a4:84:3c:00:53:9e:3d:b1:6b:01:68:f3:69:b4: ae:95:e1:da:70:fa:e2:01:8c:e7:85:3b:fe:22:1d:a8:76:d2: d6:c4:00:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBFNjUxMTAvBgNVBAUTKEUxRDMzMDMxNkMzQTI2ODQyNEQ3MTk3QUJGMzQxMkY3 MjMxMTQxREYwHhcNMjUxMDE5MDgyNTA3WhcNMjUxMDI2MDgyNTA3WjAYMRYwFAYD VQQDEw02OGY0YTA2NC01ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE6MYEfMR+5JPvkVo3D0PeDupvzPPUIp2Gd2CPnBmjb3xeZF27W5+FMikcQs eJTa6yCJzCB/iqdJKwR7s4JG2MXD/jUJuNghKFYaa/br3V57iSqeIQQoICnjqe5S ZavDGHi3qGeCyr3EQ8crqpuSIcg7wZjeg029n2Ea2C5VxgJX9zU65xHWPpFKP0jj Yuo4fnlGm0esnqVjW8rdzvfpO20EGPtRB985h/0seKGk3ofI7kUOJWy/gesmXe+B 4Q9EQ2TDi2J+pWGT7NTAngtgVIoVUxW6V69kKN4VQRaGdBYNYfUEVnmBJI8zf9cU ZwJETX4NF2IOubYhE7tjPnbJCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT8nNAl 8De0ANacOFtF6SeinnysMB8GA1UdIwQYMBaAFOHTMDFsOiaEJNcZer80EvcjEUHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEU2NS9DRTIxNkY4NjUz ODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3NkpvUWsxeGw2dnpRUzl5TVJR ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkTXdNV3c2Sm9RazF4bDZ2elFTOXlNUlFkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEU2NS9DRTIxNkY4NjUzODAxMUVGQUQ2N0U4NzhDNEY5QUUwMi80ZE13TVd3Nkpv UWsxeGw2dnpRUzl5TVJRZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf2aJqFYTISm9kV+thZBBCQQA7u0pRGhWqdynuUZx60doLPR4JnzVi PX+mR0W7B2TrHyIiMRFDWHkzMpLkY1Ty2VMc+5TWB57sXDDXX3ASs+3E8DAdogmr TJh080weMKuu403XoNTJd0ZMTqj8aZ6RN4DvzCQcdj9s2LHLbMLShFTJolevIQ+Q X7S6lu8l9n1n3Vwio1sfNaEwUEgQ1almkIn52om4SB7cSoQF+/Qc/hbhccz0IvyV na5N9SwVGmXwgj3JSf0xedHdKB40Y50mxkDb+kPWvTChlBcnpIQ8AFOePbFrAWjz abSuleHacPriAYznhTv+Ih2odtLWxAA8 -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:43 2025 by rpki-client