$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: WMWrb+zFKDQsCuhGJffMtc3OkQxEeO1iAbtC2QwRmPU= Subject key identifier: 20:D8:7A:EC:0D:F1:8E:34:7D:04:FC:EC:92:A5:50:C1:41:63:10:42 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:30:19 +0000 Manifest this update: Sun 19 Oct 2025 08:30:18 +0000 Manifest next update: Sun 26 Oct 2025 08:30:18 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: hMicCbmzwKlSdQDWK7qgzMwGCQdxtWKfV73DyyPU4CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Oct 19 08:30:18 2025 GMT Not After : Oct 26 08:30:18 2025 GMT Subject: CN=68f4a19b-f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:d2:a1:e3:63:37:10:a7:66:e3:f8:84:fe: c6:f7:a8:b2:f9:81:01:93:7a:b6:6b:03:52:f4:8b: 16:68:93:59:c5:1c:7a:eb:29:bd:72:cd:63:44:c6: e7:a1:6e:49:a8:a0:d8:d4:ed:46:45:1a:24:7b:de: 8e:7b:d4:d3:3d:46:95:e2:2b:61:ac:bc:8d:c4:50: 6d:9a:02:07:0d:aa:98:d4:33:1c:be:12:fa:a0:6f: b4:7e:11:23:3a:b3:2a:3f:98:9d:75:a5:2d:db:df: df:33:e9:ab:ba:5a:89:47:35:06:a0:0b:9c:fe:eb: 36:36:af:6e:7d:fd:f9:9c:d9:a0:6c:b9:34:a5:be: 67:8a:9b:f9:2e:2f:3c:c2:7e:ef:7a:df:87:55:66: ed:97:45:6d:87:5b:e7:57:9a:f6:bc:bd:69:b7:6b: 55:fa:dd:c5:9a:6d:96:d8:8c:be:35:58:c5:e7:08: 11:c8:c2:ad:0d:f6:c1:ef:ba:95:ca:f8:b8:10:4e: b3:69:61:e8:94:ec:08:2f:63:95:b2:d5:22:20:76: e8:14:92:52:77:62:ea:96:31:2c:f0:19:6a:fa:ec: 86:cc:20:1b:6b:75:2a:c7:5d:8c:60:d7:9f:9c:b9: a2:9c:3e:03:b3:26:20:a7:4a:b0:29:65:d5:99:17: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:7A:EC:0D:F1:8E:34:7D:04:FC:EC:92:A5:50:C1:41:63:10:42 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0d:76:67:a6:25:08:8a:85:0a:23:de:b4:8b:f0:11:09:6e: 6d:ce:23:dd:47:d2:b5:aa:40:1f:4c:4e:96:90:c5:31:e8:ef: d6:8c:8f:fb:c0:ea:d8:c6:eb:32:62:19:12:4c:bc:bd:f0:c4: b1:58:ea:57:93:e7:60:af:bd:d7:a5:40:1f:a4:59:e6:5e:0a: 20:c2:03:85:a4:30:1a:bf:c8:28:34:89:dc:39:91:32:81:af: bf:ba:d3:12:cf:47:72:79:a7:4d:54:19:8d:e3:a1:b8:17:1d: 5a:e4:af:ef:81:8f:e1:8c:34:99:1b:c1:76:14:6a:53:f6:bd: 79:9c:42:8e:4a:d6:d6:ff:48:a1:21:bf:74:9f:39:48:45:08: da:87:62:6a:15:3e:6d:b0:e7:ca:a7:7d:1f:40:bb:0e:14:a3: 72:64:55:f0:b4:f3:81:6f:e8:00:b1:f3:b8:63:9b:e4:41:40: 45:73:c4:6f:9b:de:04:50:97:61:00:1b:68:d0:85:43:61:1e: 45:13:af:01:5a:41:e7:94:80:07:e7:cd:aa:7f:dc:a9:f2:06: 3f:24:f2:dc:e9:73:cb:33:0a:08:ad:72:10:9d:1f:c4:ea:ea: fa:d2:f8:bf:69:51:3d:f0:d8:4c:9c:95:8e:ee:9b:2f:49:34: b7:87:0e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUxMDE5MDgzMDE4WhcNMjUxMDI2MDgzMDE4WjAYMRYwFAYD VQQDEw02OGY0YTE5Yi1mNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xbSoeNjNxCnZuP4hP7G96iy+YEBk3q2awNS9IsWaJNZxRx66ym9cs1jRMbn oW5JqKDY1O1GRRoke96Oe9TTPUaV4ithrLyNxFBtmgIHDaqY1DMcvhL6oG+0fhEj OrMqP5iddaUt29/fM+mrulqJRzUGoAuc/us2Nq9uff35nNmgbLk0pb5nipv5Li88 wn7vet+HVWbtl0Vth1vnV5r2vL1pt2tV+t3Fmm2W2Iy+NVjF5wgRyMKtDfbB77qV yvi4EE6zaWHolOwIL2OVstUiIHboFJJSd2LqljEs8Blq+uyGzCAba3Uqx12MYNef nLminD4DsyYgp0qwKWXVmReIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDYeuwN 8Y40fQT87JKlUMFBYxBCMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDXZnpiUIioUKI960i/ARCW5tziPdR9K1qkAfTE6WkMUx6O/WjI/7 wOrYxusyYhkSTLy98MSxWOpXk+dgr73XpUAfpFnmXgogwgOFpDAav8goNIncOZEy ga+/utMSz0dyeadNVBmN46G4Fx1a5K/vgY/hjDSZG8F2FGpT9r15nEKOStbW/0ih Ib90nzlIRQjah2JqFT5tsOfKp30fQLsOFKNyZFXwtPOBb+gAsfO4Y5vkQUBFc8Rv m94EUJdhABto0IVDYR5FE68BWkHnlIAH582qf9yp8gY/JPLc6XPLMwoIrXIQnR/E 6ur60vi/aVE98NhMnJWO7psvSTS3hw5h -----END CERTIFICATE-----Generated at Mon Oct 20 21:01:25 2025 by rpki-client