$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: jbkggkFbR1IE+LDuwoGs+H0hX8HbAfIR7oWiUTvscbw= Subject key identifier: 20:BB:32:A5:76:A5:9F:C3:E8:4E:24:25:C5:59:0F:BE:12:12:11:EB Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 11:32:38 +0000 Manifest this update: Sun 19 Oct 2025 11:32:37 +0000 Manifest next update: Sun 26 Oct 2025 11:32:37 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: QkAtWu2KLBdJz8Vvu24pdMZvyjSbkfr7SM97xW1rNQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Oct 19 11:32:37 2025 GMT Not After : Oct 26 11:32:37 2025 GMT Subject: CN=68f4cc55-39ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:f7:42:64:4f:72:8d:c4:a9:1d:9b:7c:0e: bf:5b:49:62:6a:6d:35:08:37:6f:1a:55:37:7a:90: 37:68:dd:7d:05:e9:65:48:8d:6c:11:bb:3e:bb:83: a4:50:d3:72:7d:84:c4:4b:05:4f:b1:6e:f9:5a:85: c5:d2:33:fa:18:86:ad:22:b9:e6:a7:34:5c:d3:ed: 2e:ff:d3:61:67:bd:3d:ab:b5:8d:00:37:f1:31:fa: 00:a0:e7:54:7a:48:f2:67:10:7e:40:bc:b1:ff:99: 3d:a2:9f:10:ac:18:62:3f:61:5e:48:86:b4:a1:43: 37:36:69:65:0a:da:05:a8:02:44:17:fc:a9:5e:5b: c9:a3:a4:43:30:80:06:52:e8:ae:f4:06:20:74:7f: 4b:1e:8e:35:2b:3b:50:be:01:f1:5f:29:33:b1:77: dc:76:7b:9c:ee:fd:db:9e:79:dd:a2:f2:70:f1:08: 40:86:00:01:81:41:de:e7:56:84:f2:06:3f:86:ba: 25:9f:ec:b0:17:87:d1:49:3e:5e:3f:07:28:fc:14: 82:28:5d:53:15:4d:64:4d:a2:ff:36:c0:f6:09:c5: ad:64:e3:78:75:19:13:9d:d4:a7:2f:f8:b4:0e:4e: 7b:71:50:b3:5a:f6:1b:8a:47:c7:46:b8:21:d3:3b: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:32:A5:76:A5:9F:C3:E8:4E:24:25:C5:59:0F:BE:12:12:11:EB X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:2f:d1:af:da:fc:ac:c0:3d:dc:16:7c:a1:98:05:ee:0a: 09:a3:e0:4d:1e:07:66:89:a6:dd:56:e8:28:0d:16:f2:88:39: 20:2b:54:e5:25:54:05:3b:b9:cc:ca:05:49:b7:1f:84:7b:cd: f1:ed:76:d7:15:e1:da:8b:c1:89:55:1e:5c:59:b5:7e:30:18: 12:41:e5:64:f1:6a:a1:6f:80:09:27:da:70:26:dc:6e:d3:e5: 35:03:ce:22:aa:43:16:6d:71:0b:ce:85:aa:0c:75:05:fd:b6: 95:4a:b9:50:53:38:8c:f7:76:a4:d6:e3:8f:d0:65:19:2a:59: b8:a1:4a:da:6b:9e:84:5d:ca:93:a3:c7:b5:40:dc:c0:90:49: 89:0d:1f:f7:87:84:ee:5c:9e:13:65:d6:6e:36:63:80:48:f4: 41:af:80:d3:6a:2c:b8:5c:85:b8:83:d4:1d:37:c3:55:c9:cf: 41:1f:86:71:34:e9:ce:ac:a3:d5:ae:e6:73:f4:97:a7:11:47: ec:e8:8f:7e:5d:1d:cd:71:94:53:46:2c:f2:48:3e:7c:91:c2: 90:ad:04:98:8c:a7:5f:ca:62:ca:a1:46:bf:65:ad:50:73:d2: a5:9d:6f:49:70:1f:4a:69:f4:6a:cd:c2:c5:b4:db:35:f7:d2: a1:d8:73:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4 RDUxNDA3RTAeFw0yNTEwMTkxMTMyMzdaFw0yNTEwMjYxMTMyMzdaMBgxFjAUBgNV BAMTDTY4ZjRjYzU1LTM5ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0efdCZE9yjcSpHZt8Dr9bSWJqbTUIN28aVTd6kDdo3X0F6WVIjWwRuz67g6RQ 03J9hMRLBU+xbvlahcXSM/oYhq0iueanNFzT7S7/02FnvT2rtY0AN/Ex+gCg51R6 SPJnEH5AvLH/mT2inxCsGGI/YV5IhrShQzc2aWUK2gWoAkQX/KleW8mjpEMwgAZS 6K70BiB0f0sejjUrO1C+AfFfKTOxd9x2e5zu/dueed2i8nDxCECGAAGBQd7nVoTy Bj+GuiWf7LAXh9FJPl4/Byj8FIIoXVMVTWRNov82wPYJxa1k43h1GROd1Kcv+LQO TntxULNa9huKR8dGuCHTO6k/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUILsypXal n8PoTiQlxVkPvhISEeswHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF S1hsOEpHUWdwOW8xUlFINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFknL9Gv2vyswD3cFnyhmAXuCgmj4E0eB2aJpt1W6CgNFvKIOSArVOUl VAU7uczKBUm3H4R7zfHtdtcV4dqLwYlVHlxZtX4wGBJB5WTxaqFvgAkn2nAm3G7T 5TUDziKqQxZtcQvOhaoMdQX9tpVKuVBTOIz3dqTW44/QZRkqWbihStprnoRdypOj x7VA3MCQSYkNH/eHhO5cnhNl1m42Y4BI9EGvgNNqLLhchbiD1B03w1XJz0EfhnE0 6c6so9Wu5nP0l6cRR+zoj35dHc1xlFNGLPJIPnyRwpCtBJiMp1/KYsqhRr9lrVBz 0qWdb0lwH0pp9GrNwsW02zX30qHYc/E= -----END CERTIFICATE-----Generated at Mon Oct 20 04:52:41 2025 by rpki-client