$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft File: tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json) Hash identifier: 93jqr2wkwAJOQOGHxGdC/ga40QQUzBkxnb0mt58ju2Q= Subject key identifier: 54:95:C1:47:C7:11:80:AF:85:62:1A:FC:BE:44:77:38:13:ED:1E:6B Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D Certificate issuer: /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft Manifest number: 07 Signing time: Sun 19 Oct 2025 11:42:47 +0000 Manifest this update: Sun 19 Oct 2025 11:42:46 +0000 Manifest next update: Sun 26 Oct 2025 11:42:46 +0000 Files and hashes: 1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: uOeawcmsjH8/cQ9YIIalLlfXgSojPCCr5rcJ7CdqN3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D Validity Not Before: Oct 19 11:42:46 2025 GMT Not After : Oct 26 11:42:46 2025 GMT Subject: CN=68f4ceb7-8007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:1f:b6:d6:35:ea:73:15:34:92:66:b0:31: aa:76:81:bf:9c:b2:fa:ee:1e:a8:5b:48:7b:22:6f: 6f:ed:ef:5d:53:8c:f3:07:de:b1:7a:6b:1c:1f:99: 1c:06:41:39:bc:12:9c:71:dd:3a:7a:3c:52:f0:69: 1c:ab:48:d9:57:2c:17:7b:a2:a7:8b:77:81:06:6a: 00:2b:d9:64:49:da:8a:87:e9:71:c2:65:10:c0:49: a6:73:b8:6d:40:a2:df:c8:9a:61:51:8d:a3:1b:2c: be:fc:68:0a:78:6c:0c:35:8e:72:fd:12:e9:d6:69: ad:49:c7:69:f2:8d:bd:cc:b8:e2:bf:e2:ca:f3:bd: a9:8d:9a:ca:36:e6:24:3c:a7:4e:da:b5:1f:e5:c9: 82:99:67:1d:2c:e5:b3:6a:32:7a:ea:67:c0:a1:f4: d3:bf:13:2b:41:95:2d:86:96:b8:dc:a5:25:45:7b: bc:76:2d:d9:c5:32:a4:5a:e5:3c:3a:ad:11:d8:e5: 2d:53:d9:62:a1:b1:ce:e8:0d:c0:c8:af:ba:e0:9d: b5:06:f0:c5:cc:c0:5a:6b:97:71:56:a8:65:14:6b: 0a:60:50:f3:0c:ca:3a:4a:50:8a:0f:21:24:47:ce: 37:fc:0b:4f:af:d6:47:05:31:96:59:b6:a5:f4:ce: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:C1:47:C7:11:80:AF:85:62:1A:FC:BE:44:77:38:13:ED:1E:6B X509v3 Authority Key Identifier: keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:71:b8:18:fa:27:2c:74:0e:ef:40:dc:9a:7e:99:61:76:6e: 27:65:28:46:c4:71:58:7e:35:ef:aa:1a:93:ed:c0:5c:d5:e5: 6b:2a:3b:cd:dd:46:fa:2d:4c:02:16:89:eb:7f:2c:7a:e1:be: 83:b9:88:9f:b8:ec:8d:2a:d1:59:db:b3:43:a2:20:83:95:3c: 94:00:62:a8:91:f5:16:3c:ff:87:33:c0:2e:44:a2:b0:a2:8b: 2a:13:b4:3a:b3:3b:ba:1a:70:77:23:5b:e8:78:3b:91:d4:93: c8:4b:1c:a4:8b:3c:9e:50:12:eb:ff:5b:3a:1f:31:42:ce:04: 29:58:cf:f6:c8:c5:0a:27:e0:2e:ea:d4:b5:f6:11:fb:b7:36: 5e:79:7f:c8:64:10:86:5c:be:f4:3e:5d:93:92:16:63:78:a3: 9a:e0:78:28:76:e5:f2:76:7c:df:66:4d:82:af:87:6e:cf:88: dc:7c:4f:05:5f:01:25:eb:fb:bd:98:f5:b4:aa:34:6f:19:01: fb:40:f6:82:46:d8:a5:94:c2:a7:6c:26:ac:8b:01:71:dd:07: d2:f5:71:9d:71:34:19:7c:22:bc:e7:c6:1c:5a:5a:2f:7b:a9: 50:6a:e7:b0:4f:7a:b9:d9:b2:13:c4:ae:24:89:e5:52:80:64: fe:f3:37:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI0NjExMC8GA1UEBRMoQjU0RTA4NDY1QjU0NUNFRUYxRTJFMTAwOTc3NUQ5MUJB NDEyQjYzRDAeFw0yNTEwMTkxMTQyNDZaFw0yNTEwMjYxMTQyNDZaMBgxFjAUBgNV BAMTDTY4ZjRjZWI3LTgwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBSh+21jXqcxU0kmawMap2gb+csvruHqhbSHsib2/t711TjPMH3rF6axwfmRwG QTm8Epxx3Tp6PFLwaRyrSNlXLBd7oqeLd4EGagAr2WRJ2oqH6XHCZRDASaZzuG1A ot/ImmFRjaMbLL78aAp4bAw1jnL9EunWaa1Jx2nyjb3MuOK/4srzvamNmso25iQ8 p07atR/lyYKZZx0s5bNqMnrqZ8Ch9NO/EytBlS2GlrjcpSVFe7x2LdnFMqRa5Tw6 rRHY5S1T2WKhsc7oDcDIr7rgnbUG8MXMwFprl3FWqGUUawpgUPMMyjpKUIoPISRH zjf8C0+v1kcFMZZZtqX0zpMzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVJXBR8cR gK+FYhr8vkR3OBPtHmswHwYDVR0jBBgwFoAUtU4IRltUXO7x4uEAl3XZG6QStj0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjQ2LzA4ODcwMUI4QUJC NDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3Rq MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFU0SVJsdFVYTzd4NHVFQWwzWFpHNlFTdGowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QjQ2LzA4ODcwMUI4QUJCNDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83 eDR1RUFsM1haRzZRU3RqMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABlxuBj6Jyx0Du9A3Jp+mWF2bidlKEbEcVh+Ne+qGpPtwFzV5WsqO83d RvotTAIWiet/LHrhvoO5iJ+47I0q0Vnbs0OiIIOVPJQAYqiR9RY8/4czwC5EorCi iyoTtDqzO7oacHcjW+h4O5HUk8hLHKSLPJ5QEuv/WzofMULOBClYz/bIxQon4C7q 1LX2Efu3Nl55f8hkEIZcvvQ+XZOSFmN4o5rgeCh25fJ2fN9mTYKvh27PiNx8TwVf ASXr+72Y9bSqNG8ZAftA9oJG2KWUwqdsJqyLAXHdB9L1cZ1xNBl8IrznxhxaWi97 qVBq57BPernZshPEriSJ5VKAZP7zN6w= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:05 2025 by rpki-client