$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: muepDBd8HSwxvIltpSap4UFq4RNkoTGXpyJZkckD2Jo= Subject key identifier: 4E:DB:3E:02:FE:32:AC:9B:AB:C9:3B:C9:6E:0C:DC:F8:D0:52:40:94 Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 48 Signing time: Sun 19 Oct 2025 10:47:47 +0000 Manifest this update: Sun 19 Oct 2025 10:47:46 +0000 Manifest next update: Sun 26 Oct 2025 10:47:46 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: QJ6u8PzsNKZO2bR3AFORyxf2Qq2LK5Y+zwbupAJh/ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Oct 19 10:47:46 2025 GMT Not After : Oct 26 10:47:46 2025 GMT Subject: CN=68f4c1d3-550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:97:ff:2a:3b:d7:ec:0e:97:40:95:46:d1:2d: 6c:6f:ae:88:ad:fb:ce:77:b8:d1:8f:b2:05:68:bb: 34:76:85:a4:18:bd:61:41:47:a2:9d:ef:c7:95:04: 02:c5:c1:1b:14:2b:e5:16:c2:4d:f4:34:65:43:4a: 0a:db:dd:c4:be:4a:2d:71:64:de:4c:ca:36:53:77: c3:82:8c:fc:f0:e4:d5:d9:93:eb:67:19:02:ae:b8: 9f:d3:4b:13:1b:02:ae:44:b1:ae:7f:72:5a:80:15: 02:fc:32:20:d3:25:6a:8b:90:a5:b9:ea:12:1a:ab: 0e:6d:c0:44:5b:c2:46:47:cf:12:45:76:3c:7f:ac: ff:7e:a1:4f:f9:df:74:96:64:0c:99:69:ee:26:45: 8e:7f:94:c2:07:36:ad:dd:a2:7a:84:d8:d1:d0:b6: 62:2d:6d:16:6e:db:d9:4c:b8:58:11:12:88:8a:9c: 58:64:d3:d7:7f:b8:ee:ef:59:60:2b:b6:98:6a:ba: d9:d7:5a:1a:61:0a:f8:85:dd:ce:1c:08:7d:64:29: 58:9c:b6:41:89:94:e1:5d:fa:e9:c0:83:5a:16:b2: 8c:e3:8e:27:2e:39:1f:d4:7f:67:ce:3e:c1:7d:fe: d4:a2:8c:bb:93:f8:d3:f3:de:da:78:63:b1:93:71: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:3E:02:FE:32:AC:9B:AB:C9:3B:C9:6E:0C:DC:F8:D0:52:40:94 X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:6c:12:68:06:bd:cf:e8:f5:b3:25:b8:65:30:e2:9b:d5:5a: 1b:8c:16:0e:17:d9:90:c6:f8:82:09:6b:a5:1f:9a:64:c5:49: 2f:46:85:20:03:9d:62:46:90:c4:99:db:5c:29:fb:9c:4a:31: 33:e6:75:41:52:e7:cc:3d:8e:73:03:f2:18:9d:21:3d:0f:0d: 1e:79:27:a4:1a:18:77:d6:8f:12:36:13:9e:5a:69:2c:03:01: 3a:5d:6b:b6:dd:7a:1b:78:63:b1:d0:51:1b:e4:dc:ed:e5:88: 55:3e:fb:68:5b:c5:e7:67:ef:e3:53:0d:8e:22:62:6b:5e:b6: b6:77:f9:9b:42:b1:b7:2d:c4:6a:1c:d3:cc:7b:30:0f:1a:33: 79:ec:0a:a9:c7:0d:e9:97:74:0f:64:72:23:5d:71:4d:07:e4: 83:4c:92:0f:93:21:04:48:30:83:5a:38:ec:3e:e5:d0:5d:99: 87:38:91:5d:b2:d6:bc:a1:9d:7c:35:05:05:ee:54:d5:08:28: 3c:53:5b:35:e6:87:31:67:b7:b9:ae:c1:70:31:aa:25:ba:89: 9a:84:26:57:03:54:72:61:e8:dc:ae:36:ad:8b:27:15:e3:cd: d7:3d:04:de:2c:b5:3e:2b:0f:d9:d9:cb:38:b7:10:41:3f:3b: fb:85:0c:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTEwMTkxMDQ3NDZaFw0yNTEwMjYxMDQ3NDZaMBgxFjAUBgNV BAMTDTY4ZjRjMWQzLTU1MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDql/8qO9fsDpdAlUbRLWxvroit+853uNGPsgVouzR2haQYvWFBR6Kd78eVBALF wRsUK+UWwk30NGVDSgrb3cS+Si1xZN5MyjZTd8OCjPzw5NXZk+tnGQKuuJ/TSxMb Aq5Esa5/clqAFQL8MiDTJWqLkKW56hIaqw5twERbwkZHzxJFdjx/rP9+oU/533SW ZAyZae4mRY5/lMIHNq3donqE2NHQtmItbRZu29lMuFgREoiKnFhk09d/uO7vWWAr tphqutnXWhphCviF3c4cCH1kKVictkGJlOFd+unAg1oWsozjjicuOR/Uf2fOPsF9 /tSijLuT+NPz3tp4Y7GTceHHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTts+Av4y rJuryTvJbgzc+NBSQJQwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZsEmgGvc/o9bMluGUw4pvVWhuMFg4X2ZDG+IIJa6UfmmTFSS9GhSAD nWJGkMSZ21wp+5xKMTPmdUFS58w9jnMD8hidIT0PDR55J6QaGHfWjxI2E55aaSwD ATpda7bdeht4Y7HQURvk3O3liFU++2hbxedn7+NTDY4iYmtetrZ3+ZtCsbctxGoc 08x7MA8aM3nsCqnHDemXdA9kciNdcU0H5INMkg+TIQRIMINaOOw+5dBdmYc4kV2y 1ryhnXw1BQXuVNUIKDxTWzXmhzFnt7muwXAxqiW6iZqEJlcDVHJh6NyuNq2LJxXj zdc9BN4stT4rD9nZyzi3EEE/O/uFDMQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:56 2025 by rpki-client