$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft File: 4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json) Hash identifier: O10ooO6/1K+QTqHkrVhwfgtC7LkH52sOlRgklQ0yFiw= Subject key identifier: 7B:36:03:94:0A:27:37:73:DE:14:5D:15:3C:C7:6C:F2:8A:62:1F:D3 Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D Certificate issuer: /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft Manifest number: 2F Signing time: Sun 19 Oct 2025 11:11:11 +0000 Manifest this update: Sun 19 Oct 2025 11:11:10 +0000 Manifest next update: Sun 26 Oct 2025 11:11:10 +0000 Files and hashes: 1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: TbP7DWItccAkIJdQYn29qke/CRgHvqVDYsoEd/QXKlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Validity Not Before: Oct 19 11:11:10 2025 GMT Not After : Oct 26 11:11:10 2025 GMT Subject: CN=68f4c74f-701e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:cf:3f:ed:78:fc:3b:90:da:f3:6c:f3:8d: 2c:1e:98:1b:46:0f:16:f8:94:74:06:90:d1:48:16: c7:66:fb:52:69:12:9a:bc:18:d9:c7:b8:1f:60:46: 09:27:06:bc:00:f9:92:3a:d9:23:9c:17:a9:71:71: 7a:06:5f:35:e3:8a:cf:9c:f1:e5:6a:00:e8:bc:c6: 1b:c9:7b:37:6b:95:70:e2:55:ef:f8:16:fb:2b:81: a4:82:9e:3d:90:db:38:ae:7f:2f:9d:38:f3:3b:ad: b8:48:a2:ea:0d:e2:44:a2:49:a4:80:38:ae:cc:d7: f9:e1:6f:72:ff:63:17:14:b3:34:eb:eb:7b:84:4d: 4e:4e:ab:36:b8:4e:1a:4a:2b:a3:3d:ea:45:40:ee: ae:ba:b4:b1:fe:36:18:d4:aa:e3:4b:3a:61:11:d0: a5:48:c6:b3:ce:35:6c:40:f6:8e:56:d8:ea:e8:96: 75:a6:3a:66:df:ef:53:40:30:75:d0:48:fb:cb:f7: ca:49:cd:70:03:23:f0:c4:aa:ee:f9:41:6d:97:ee: 2e:05:33:c2:fd:d3:06:fd:1a:af:81:eb:0b:70:2b: 16:f6:5d:48:78:11:31:93:aa:09:06:f2:47:5c:ad: 6f:d0:36:4f:ce:e7:35:a8:41:56:f2:15:f3:1c:f4: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:36:03:94:0A:27:37:73:DE:14:5D:15:3C:C7:6C:F2:8A:62:1F:D3 X509v3 Authority Key Identifier: keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7d:e1:0a:60:92:87:11:fd:16:76:d3:cf:3a:53:90:e0:96: 2f:c0:06:79:4a:0e:66:5c:47:e3:7f:c3:80:93:b3:d2:6a:91: 96:c0:d1:bd:b4:b0:7f:c4:19:bf:3c:d5:b9:af:df:f3:56:ec: fc:47:1c:ae:c2:9c:60:3e:05:be:b8:b6:81:cb:40:2d:4d:11: 99:c8:bc:8b:56:b1:58:34:73:00:60:b6:94:cc:d8:4f:64:cb: 99:dc:12:3a:b9:6e:e8:80:55:b2:d3:51:c3:10:12:49:dc:ae: 29:5e:d0:3b:fa:4f:5f:2c:b4:40:b1:24:e5:19:dc:7e:89:b4: a3:a7:ff:4c:87:da:b4:6c:06:19:5a:71:25:cf:c0:02:4a:4a: 50:74:da:56:d2:d8:b6:9e:24:bb:41:89:2d:47:a5:3f:6b:0c: f0:c7:e1:77:87:8c:bd:1f:68:b6:36:25:3e:14:29:c1:dd:7d: 98:0d:4f:33:b8:69:16:53:32:c0:2d:54:22:01:4b:43:ac:c8: aa:7e:f6:cf:3e:d0:08:1e:27:75:76:68:a2:f5:a8:fa:e3:39: b4:bb:83:47:36:ab:38:f4:3f:b8:54:a0:7d:75:59:3f:bd:db: 54:7d:76:fe:cd:b4:0c:04:4e:a9:78:c1:9f:cc:50:18:3b:91: 75:a6:f5:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoRTE2N0RDNEQ1N0M1RkZGNkU4MTcwNTFFOTJDMDYwMTc1 QkFCMUQxRDAeFw0yNTEwMTkxMTExMTBaFw0yNTEwMjYxMTExMTBaMBgxFjAUBgNV BAMTDTY4ZjRjNzRmLTcwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKE88/7Xj8O5Da82zzjSwemBtGDxb4lHQGkNFIFsdm+1JpEpq8GNnHuB9gRgkn BrwA+ZI62SOcF6lxcXoGXzXjis+c8eVqAOi8xhvJezdrlXDiVe/4FvsrgaSCnj2Q 2ziufy+dOPM7rbhIouoN4kSiSaSAOK7M1/nhb3L/YxcUszTr63uETU5Oqza4ThpK K6M96kVA7q66tLH+NhjUquNLOmER0KVIxrPONWxA9o5W2OrolnWmOmbf71NAMHXQ SPvL98pJzXADI/DEqu75QW2X7i4FM8L90wb9Gq+B6wtwKxb2XUh4ETGTqgkG8kdc rW/QNk/O5zWoQVbyFfMc9Bn3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUezYDlAon N3PeFF0VPMds8opiH9MwHwYDVR0jBBgwFoAU4WfcTVfF//boFwUeksBgF1urHR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzEyMDQ5MjI2Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19ib0Z3VWVrc0JnRjF1ckhS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdmY1RWZkZfX2JvRndVZWtzQmdGMXVySFIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzEyMDQ5MjI2Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19i b0Z3VWVrc0JnRjF1ckhSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKx94QpgkocR/RZ20886U5Dgli/ABnlKDmZcR+N/w4CTs9JqkZbA0b20 sH/EGb881bmv3/NW7PxHHK7CnGA+Bb64toHLQC1NEZnIvItWsVg0cwBgtpTM2E9k y5ncEjq5buiAVbLTUcMQEkncrile0Dv6T18stECxJOUZ3H6JtKOn/0yH2rRsBhla cSXPwAJKSlB02lbS2LaeJLtBiS1HpT9rDPDH4XeHjL0faLY2JT4UKcHdfZgNTzO4 aRZTMsAtVCIBS0OsyKp+9s8+0AgeJ3V2aKL1qPrjObS7g0c2qzj0P7hUoH11WT+9 21R9dv7NtAwETql4wZ/MUBg7kXWm9dY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:21 2025 by rpki-client