$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: tmXCmZdaYLd8oyLTF8QZT4BuW8UfJZOYeQYdJA+Fm8I= Subject key identifier: CC:E3:E5:9A:B3:EC:6F:AB:BB:71:1F:01:93:D7:9A:8A:8F:15:D3:D5 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34CA Signing time: Sat 18 Oct 2025 15:17:43 +0000 Manifest this update: Sat 18 Oct 2025 15:17:43 +0000 Manifest next update: Sat 25 Oct 2025 15:17:43 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: fZZUnowHW+b0E4CiLkn8f1/TVJmCl/LGkAU4AccHvnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Oct 18 15:17:43 2025 GMT Not After : Oct 25 15:17:43 2025 GMT Subject: CN=68f3af97-289b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:4e:11:da:57:8e:8b:22:5e:f6:dd:64:67: 88:7e:9b:e2:af:bc:fc:22:fc:51:aa:e1:cf:66:30: cf:7d:04:35:0a:36:86:ea:a1:48:aa:eb:07:c5:e7: 45:31:bf:60:ba:9c:32:4d:31:34:56:7e:2c:8f:92: 93:e7:cc:90:be:5f:fa:04:96:7e:a2:2a:ad:33:73: a3:3f:6c:4c:26:10:16:2e:ec:c8:ee:b4:d4:7a:97: 82:67:4f:e5:1f:6f:91:37:5e:f3:30:33:e3:fd:e3: f4:a9:19:0e:7b:0b:61:f3:1c:05:fd:3c:54:6d:97: 08:40:93:94:90:d8:c5:cf:31:af:37:c6:e1:7c:ee: 9b:ac:cd:53:11:b6:7c:44:22:c3:3c:b6:34:75:0d: 33:e9:31:24:95:e9:78:cb:85:1e:f4:8f:a9:29:81: 22:bb:56:0f:d2:ab:a0:05:41:e2:22:e7:ac:3c:7c: b1:16:c6:2b:1e:4a:d6:30:1e:80:0d:7f:be:3c:95: 52:23:68:31:2e:f8:ac:77:1b:7f:62:61:0f:d7:1d: a5:93:38:e1:32:28:02:29:a5:86:b1:85:4c:93:77: 30:d8:eb:9d:40:1d:1a:62:10:99:61:91:c4:da:5e: e3:c5:82:09:fa:1c:c8:02:36:ba:a2:17:31:26:f2: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:E5:9A:B3:EC:6F:AB:BB:71:1F:01:93:D7:9A:8A:8F:15:D3:D5 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:50:fc:58:c5:c9:42:14:47:2f:52:bf:30:65:87:10:a6:8a: 54:91:ee:f7:19:a0:f5:44:87:67:29:10:6a:1d:15:6a:a4:1e: 77:c3:e0:98:9b:87:8e:28:38:19:96:d4:ba:f0:f4:ce:0a:c6: 99:18:00:b2:0d:00:ce:e1:60:2c:5c:c7:da:15:43:a7:7f:1f: 37:9c:a3:ee:a6:01:b9:f0:f1:ec:52:96:09:57:14:da:5b:87: d9:18:92:70:ba:bf:56:5e:0b:24:f0:2a:aa:1e:03:60:a8:00: 23:f4:2e:69:40:cc:ec:16:6d:74:3f:66:c2:46:a6:be:1c:8e: f1:5a:4c:9b:80:10:3f:a0:de:72:cd:d9:25:41:9d:9b:89:2c: 81:80:d4:bb:80:3f:35:da:1c:72:f0:9e:84:69:31:4d:8d:91: 62:56:ad:a8:83:3f:4a:d8:11:bb:2d:83:c7:7b:f4:0d:3f:77: aa:0c:83:60:46:09:9a:c6:98:57:2a:f8:46:1c:d8:f3:99:e3: be:6c:ff:bc:95:85:a5:2a:2b:25:6a:8d:dc:a1:c5:d0:3a:a5: a3:95:a5:ce:3c:a8:02:85:51:94:91:4a:b1:71:03:a6:11:a8: 78:a3:bb:f6:86:06:67:b3:86:f4:19:93:a2:89:b1:f9:39:00: 27:a4:c4:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUxMDE4MTUxNzQzWhcNMjUxMDI1MTUxNzQzWjAYMRYwFAYD VQQDEw02OGYzYWY5Ny0yODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tROEdpXjosiXvbdZGeIfpvir7z8IvxRquHPZjDPfQQ1CjaG6qFIqusHxedF Mb9gupwyTTE0Vn4sj5KT58yQvl/6BJZ+oiqtM3OjP2xMJhAWLuzI7rTUepeCZ0/l H2+RN17zMDPj/eP0qRkOewth8xwF/TxUbZcIQJOUkNjFzzGvN8bhfO6brM1TEbZ8 RCLDPLY0dQ0z6TEklel4y4Ue9I+pKYEiu1YP0qugBUHiIuesPHyxFsYrHkrWMB6A DX++PJVSI2gxLvisdxt/YmEP1x2lkzjhMigCKaWGsYVMk3cw2OudQB0aYhCZYZHE 2l7jxYIJ+hzIAja6ohcxJvLOFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzj5Zqz 7G+ru3EfAZPXmoqPFdPVMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/UPxYxclCFEcvUr8wZYcQpopUke73GaD1RIdnKRBqHRVqpB53w+CY m4eOKDgZltS68PTOCsaZGACyDQDO4WAsXMfaFUOnfx83nKPupgG58PHsUpYJVxTa W4fZGJJwur9WXgsk8CqqHgNgqAAj9C5pQMzsFm10P2bCRqa+HI7xWkybgBA/oN5y zdklQZ2biSyBgNS7gD812hxy8J6EaTFNjZFiVq2ogz9K2BG7LYPHe/QNP3eqDINg RgmaxphXKvhGHNjzmeO+bP+8lYWlKislao3cocXQOqWjlaXOPKgChVGUkUqxcQOm Eah4o7v2hgZns4b0GZOiibH5OQAnpMRr -----END CERTIFICATE-----Generated at Mon Oct 20 08:37:40 2025 by rpki-client