$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: geJ3lFj/9nN4/zd5Ymp8YxY+1jlrNZ89Igp4tFysKsU= Subject key identifier: DA:F1:00:E1:34:37:EB:0A:C1:9D:46:B1:88:66:44:6A:40:11:48:CF Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0971 Signing time: Mon 20 Oct 2025 20:56:13 +0000 Manifest this update: Mon 20 Oct 2025 20:56:13 +0000 Manifest next update: Mon 27 Oct 2025 20:56:13 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: ZCMIZHG5P0UjkKnxRP3qWa9nvLBBQ8BI5MdFMeaE9ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Oct 20 20:56:13 2025 GMT Not After : Oct 27 20:56:13 2025 GMT Subject: CN=68f6a1ed-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:bb:bb:41:6f:08:16:59:1d:9d:7e:8b:0d: af:0b:53:f7:4a:19:3d:d2:7a:f9:6f:d6:2f:f7:bc: 92:36:34:ec:e2:2c:30:ec:ae:e6:e4:9b:9f:ff:89: 51:39:46:8e:13:c7:82:8c:cb:4a:ef:8b:8f:9c:38: 6b:28:d8:c0:ec:23:df:c8:0e:1b:58:c2:29:31:d2: 29:4c:e2:ed:92:60:2a:f0:61:c2:58:81:5f:2e:2c: ef:1a:b7:8f:5f:c7:1c:62:12:a1:d7:6e:e5:f2:95: d3:7a:e4:65:49:50:92:82:3f:f7:45:d4:be:1c:f3: 41:ff:d1:a0:ec:94:dd:49:85:24:cb:1e:32:b2:d6: 20:d1:d0:be:1d:8f:20:25:92:50:dc:d5:41:c1:46: 38:ef:15:a8:fd:c8:e3:12:ff:3e:3f:f4:0f:9f:78: bd:53:26:6d:7d:28:10:0d:13:4a:8c:45:85:31:28: 48:ba:50:92:8e:44:37:02:a4:69:a7:94:69:01:2a: 56:89:c9:0b:cf:b4:5d:3d:b7:2a:c6:f8:cf:e8:9d: 2a:46:66:23:87:c6:c3:e5:f5:c1:66:0e:4a:b4:29: 34:42:38:94:a2:76:b4:c3:68:ac:33:53:e2:85:d7: 7b:eb:9c:95:06:f0:1a:c8:75:d2:c4:85:05:8f:b4: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F1:00:E1:34:37:EB:0A:C1:9D:46:B1:88:66:44:6A:40:11:48:CF X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:11:b2:3c:94:34:8c:ec:04:be:d8:ff:6f:69:db:78:d6:5c: 24:95:7a:92:b4:9a:c8:52:48:36:48:6a:c0:53:43:fd:55:38: 54:91:60:30:e6:b0:1f:e6:6a:85:ed:02:7b:0c:61:fe:0e:62: 29:5f:dd:4f:8e:3c:49:9a:a0:64:b9:3b:94:12:99:4c:34:bf: c5:9c:5f:c9:6b:25:88:b0:c1:00:1e:d8:dc:40:84:fb:44:85: 4e:21:20:0d:61:c4:75:d7:f3:52:81:12:ea:0f:2e:61:c0:a8: 50:7f:52:3f:87:2d:7e:95:30:8a:35:45:9c:51:dd:61:26:47: a3:5c:78:ca:43:e1:33:7c:8b:13:49:79:cb:9b:2a:ae:b4:79: 55:27:68:aa:d9:19:4b:1b:31:30:cb:3d:3d:7a:9a:2d:bd:61: 13:d9:9f:5d:b5:81:3c:78:86:4e:dc:0c:24:aa:8b:76:5f:9e: 3c:a4:38:79:8b:2f:10:8d:44:2b:7d:43:fa:fb:82:ef:67:b9: 61:41:c6:50:fe:8b:51:45:4b:b0:a0:af:de:a6:fc:ce:ef:53: d8:d1:b9:64:5f:ca:4e:87:94:77:78:b9:fe:95:30:5b:65:f0: d1:f3:0b:31:f7:54:2f:4f:50:ef:5b:3a:bf:65:30:69:7c:63: f4:ed:fb:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUxMDIwMjA1NjEzWhcNMjUxMDI3MjA1NjEzWjAYMRYwFAYD VQQDEw02OGY2YTFlZC1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1G7u0FvCBZZHZ1+iw2vC1P3Shk90nr5b9Yv97ySNjTs4iww7K7m5Juf/4lR OUaOE8eCjMtK74uPnDhrKNjA7CPfyA4bWMIpMdIpTOLtkmAq8GHCWIFfLizvGreP X8ccYhKh127l8pXTeuRlSVCSgj/3RdS+HPNB/9Gg7JTdSYUkyx4ystYg0dC+HY8g JZJQ3NVBwUY47xWo/cjjEv8+P/QPn3i9UyZtfSgQDRNKjEWFMShIulCSjkQ3AqRp p5RpASpWickLz7RdPbcqxvjP6J0qRmYjh8bD5fXBZg5KtCk0QjiUona0w2isM1Pi hdd765yVBvAayHXSxIUFj7SqFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrxAOE0 N+sKwZ1GsYhmRGpAEUjPMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCREbI8lDSM7AS+2P9vadt41lwklXqStJrIUkg2SGrAU0P9VThUkWAw 5rAf5mqF7QJ7DGH+DmIpX91PjjxJmqBkuTuUEplMNL/FnF/JayWIsMEAHtjcQIT7 RIVOISANYcR11/NSgRLqDy5hwKhQf1I/hy1+lTCKNUWcUd1hJkejXHjKQ+EzfIsT SXnLmyqutHlVJ2iq2RlLGzEwyz09epotvWET2Z9dtYE8eIZO3Awkqot2X548pDh5 iy8QjUQrfUP6+4LvZ7lhQcZQ/otRRUuwoK/epvzO71PY0blkX8pOh5R3eLn+lTBb ZfDR8wsx91QvT1DvWzq/ZTBpfGP07fsO -----END CERTIFICATE-----Generated at Tue Oct 21 02:39:30 2025 by rpki-client