$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: fuFKs7pNKGENDxCy5Mik/8d7y+immb4MaH52f+GOWzk= Subject key identifier: F8:F1:60:14:F5:E5:DA:E7:67:07:9D:DE:A7:0B:C8:7C:59:FF:4D:EB Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 34CC Signing time: Sat 18 Oct 2025 14:29:36 +0000 Manifest this update: Sat 18 Oct 2025 14:29:36 +0000 Manifest next update: Sat 25 Oct 2025 14:29:36 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: 3uHUP1zSH5bXUPqbf47wTYF6qjxrdklpS4Gm2m9aKmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: Oct 18 14:29:36 2025 GMT Not After : Oct 25 14:29:36 2025 GMT Subject: CN=68f3a450-6142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:25:80:5d:08:90:f1:69:2f:29:49:2a:fd: 8e:23:a2:e6:4d:ea:b2:f3:e9:51:65:aa:62:fc:74: 2b:4b:e3:4f:9b:ba:05:32:1a:d6:31:3b:8c:e3:35: 42:9e:90:3d:47:46:cc:bb:18:90:fa:c7:13:9e:e5: 6d:b8:c0:72:94:4c:c0:17:9b:38:c9:ce:89:6c:3a: 51:e6:46:15:69:0e:e4:ee:a3:53:09:df:6d:85:25: 3f:50:0d:46:43:84:9e:05:18:d1:7f:bf:2e:36:b2: 88:e6:ec:8c:e1:d6:98:d1:c5:44:e8:88:5a:56:3f: 61:2a:62:e7:59:28:ad:79:9d:2a:aa:74:7a:f8:fc: 9c:e9:a3:27:d2:98:d2:42:f5:9d:7e:32:d8:7e:e6: e5:08:7c:f0:50:83:3c:2c:fa:d0:02:a4:cf:c2:85: 7a:e9:58:14:e0:05:c5:d6:e1:7c:bc:9d:56:94:57: 9a:40:2c:e1:19:27:a7:69:f0:8c:60:b2:bc:bf:c7: 83:2b:93:a2:f2:d6:5a:1e:97:5d:33:77:d2:28:cb: 9c:94:18:76:78:0c:b0:c0:80:37:e5:38:d6:92:97: e5:05:de:54:a8:62:e6:ce:ba:54:4f:55:cd:01:ae: 39:5c:28:40:2c:f5:dc:02:02:cc:e7:af:94:75:ea: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:60:14:F5:E5:DA:E7:67:07:9D:DE:A7:0B:C8:7C:59:FF:4D:EB X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ea:3f:89:f9:11:09:78:f6:5c:d6:16:ff:72:3f:cd:68:11: d1:48:cb:2a:7a:05:d1:7a:da:8a:de:5f:8a:f3:1e:11:4a:28: 14:f6:e5:e4:d2:ff:92:49:b0:77:75:c0:5c:2c:ba:1b:96:ab: 9a:0d:ee:c2:bc:d7:ce:07:cb:83:a4:86:c0:5e:4d:40:a3:77: 40:ad:10:9e:d1:ab:18:48:90:90:e9:54:8b:04:32:a3:e3:5e: 2b:b5:36:97:f0:8c:0b:d1:13:d7:13:6c:10:9a:61:64:94:83: 6a:ac:dc:70:c1:59:36:c6:8d:97:04:5d:59:51:69:21:43:b7: c9:b2:c4:19:69:fd:9e:55:13:fa:af:02:3f:97:2c:b2:65:64: e1:1f:cd:46:c3:e9:68:9f:9a:ab:cf:5f:7f:31:a6:7e:11:fd: d5:e8:d5:ea:c9:ad:b7:e6:0a:e7:a9:40:b1:6f:2e:87:2d:0e: b6:69:82:ae:e5:c4:2b:82:2f:e4:e0:b9:b3:a2:42:a9:31:4d: aa:13:3c:64:45:79:b7:08:b9:a2:bd:8a:4a:41:e7:bc:23:3f: fc:06:64:37:4e:49:10:b7:17:bc:cf:11:fd:59:43:3b:6e:1e: 4b:d4:60:8f:a4:6a:41:ca:80:08:b9:f6:e6:0b:ce:91:87:02: eb:db:75:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjUxMDE4MTQyOTM2WhcNMjUxMDI1MTQyOTM2WjAYMRYwFAYD VQQDEw02OGYzYTQ1MC02MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3UlgF0IkPFpLylJKv2OI6LmTeqy8+lRZapi/HQrS+NPm7oFMhrWMTuM4zVC npA9R0bMuxiQ+scTnuVtuMBylEzAF5s4yc6JbDpR5kYVaQ7k7qNTCd9thSU/UA1G Q4SeBRjRf78uNrKI5uyM4daY0cVE6IhaVj9hKmLnWSiteZ0qqnR6+Pyc6aMn0pjS QvWdfjLYfublCHzwUIM8LPrQAqTPwoV66VgU4AXF1uF8vJ1WlFeaQCzhGSenafCM YLK8v8eDK5Oi8tZaHpddM3fSKMuclBh2eAywwIA35TjWkpflBd5UqGLmzrpUT1XN Aa45XChALPXcAgLM56+UdepbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjxYBT1 5drnZwed3qcLyHxZ/03rMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj6j+J+REJePZc1hb/cj/NaBHRSMsqegXRetqK3l+K8x4RSigU9uXk 0v+SSbB3dcBcLLoblquaDe7CvNfOB8uDpIbAXk1Ao3dArRCe0asYSJCQ6VSLBDKj 414rtTaX8IwL0RPXE2wQmmFklINqrNxwwVk2xo2XBF1ZUWkhQ7fJssQZaf2eVRP6 rwI/lyyyZWThH81Gw+lon5qrz19/MaZ+Ef3V6NXqya235grnqUCxby6HLQ62aYKu 5cQrgi/k4LmzokKpMU2qEzxkRXm3CLmivYpKQee8Iz/8BmQ3TkkQtxe8zxH9WUM7 bh5L1GCPpGpByoAIufbmC86RhwLr23WH -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:53 2025 by rpki-client