$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: M5rQrld7fLFNwaNlmyp5yAh0Yt04nnqkrj1N3fxZZMo= Subject key identifier: 95:1C:E6:B1:66:04:48:31:4B:12:38:C4:C5:2E:B3:D8:22:6B:E0:68 Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: A8 Signing time: Sun 19 Oct 2025 09:32:18 +0000 Manifest this update: Sun 19 Oct 2025 09:32:18 +0000 Manifest next update: Sun 26 Oct 2025 09:32:18 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: 3ieAmZXBRRtY3j6hIz4+5q48yfvKHFEeAcgv9A32HHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Oct 19 09:32:18 2025 GMT Not After : Oct 26 09:32:18 2025 GMT Subject: CN=68f4b022-f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:d7:6c:8d:11:1d:20:ae:5e:6f:9d:3a:d9: f1:02:44:8d:a0:60:ab:6c:8d:16:a3:73:9a:e3:1a: 72:41:37:81:f6:e0:6d:9f:99:8c:a3:d4:9d:9e:a4: a9:2e:98:30:8f:03:52:aa:ce:42:bd:2e:20:ba:88: f7:6e:01:e3:44:da:b7:5f:61:1c:a3:ee:ee:c4:83: 43:37:ee:02:89:9c:70:2f:6e:17:ed:d6:88:ac:ed: 0e:c6:43:2e:c2:bf:78:a0:7b:a5:ac:9a:f9:06:55: 84:36:b9:89:0e:22:d8:ca:af:b3:f2:92:b1:d7:00: e2:3b:39:a0:6f:38:5a:b3:94:a1:7e:b1:d6:d7:fa: 28:31:aa:ba:75:25:f2:ef:37:45:21:ff:15:a6:a0: dc:bb:cc:d3:eb:a6:81:19:91:3c:49:fe:df:da:d8: 3e:1f:de:2e:8c:9c:ed:b2:9b:fc:ab:ed:a4:45:ab: 24:94:90:62:4c:16:fd:b6:77:92:6e:81:c8:7c:70: a7:49:63:5e:1e:69:c7:c0:8a:19:65:81:7f:65:b3: 4b:20:32:58:5f:e0:03:fd:75:e7:3f:7a:73:45:88: fe:22:31:dd:4b:3a:34:8d:40:44:d2:d7:7b:be:f6: 31:5b:f6:d2:02:56:21:e6:5c:68:62:b9:e0:b2:20: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1C:E6:B1:66:04:48:31:4B:12:38:C4:C5:2E:B3:D8:22:6B:E0:68 X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bc:a2:fc:75:94:2e:04:82:3c:e7:c9:3e:3c:c4:bf:9f:7a: 45:f1:fa:40:3e:ed:1b:27:cc:be:0b:90:ad:9b:db:54:e3:0c: 58:a6:af:9b:db:c1:18:57:7d:6c:32:fd:2b:17:55:3d:d1:7f: 49:a4:cb:bd:36:42:98:6c:a2:1b:cf:b4:34:2f:69:55:e9:4f: bb:ab:70:7d:ae:e8:b0:02:29:67:69:6d:7a:ee:0f:e1:59:fd: 79:b4:ef:83:a2:2a:99:d5:db:a4:be:4e:4a:d7:83:74:41:96: 46:52:43:91:fa:f6:e5:40:86:4d:5f:35:ed:a1:e2:3c:68:16: be:05:b2:ba:c2:23:4a:85:08:02:03:af:1c:d6:d5:e8:93:9d: dc:74:b0:1f:fa:1d:c5:dc:8e:1d:81:56:ca:6e:f2:69:32:42: 76:a8:26:1c:18:28:c9:fa:de:e3:53:dc:d5:a7:2d:f1:4f:5e: 14:ba:92:79:26:a4:dc:4a:41:6e:d9:ad:f3:5c:58:25:17:9a: 53:66:a2:51:6e:e5:43:e4:92:51:ec:cb:6a:d6:3b:7b:dc:5f: f2:28:db:c1:37:5e:19:60:d1:fa:7e:e8:89:34:37:01:a2:00: 26:67:39:7e:0e:7d:6a:b4:28:e2:a9:66:17:f2:40:fd:8d:51: 8d:40:cd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E5M0UxMTAvBgNVBAUTKEUwQUI2RDk3NzI2NURCMEQ1QzU4RDQzM0EyOEIzQ0My MDUxQTBDMjkwHhcNMjUxMDE5MDkzMjE4WhcNMjUxMDI2MDkzMjE4WjAYMRYwFAYD VQQDEw02OGY0YjAyMi1mMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvfXbI0RHSCuXm+dOtnxAkSNoGCrbI0Wo3Oa4xpyQTeB9uBtn5mMo9SdnqSp LpgwjwNSqs5CvS4guoj3bgHjRNq3X2Eco+7uxINDN+4CiZxwL24X7daIrO0OxkMu wr94oHulrJr5BlWENrmJDiLYyq+z8pKx1wDiOzmgbzhas5ShfrHW1/ooMaq6dSXy 7zdFIf8VpqDcu8zT66aBGZE8Sf7f2tg+H94ujJztspv8q+2kRasklJBiTBb9tneS boHIfHCnSWNeHmnHwIoZZYF/ZbNLIDJYX+AD/XXnP3pzRYj+IjHdSzo0jUBE0td7 vvYxW/bSAlYh5lxoYrngsiA5TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUc5rFm BEgxSxI4xMUus9gia+BoMB8GA1UdIwQYMBaAFOCrbZdyZdsNXFjUM6KLPMIFGgwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTkzRS80NzFCMzcyOEI3 OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3MWNXTlF6b29zOHdnVWFE Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTkzRS80NzFCMzcyOEI3OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3 MWNXTlF6b29zOHdnVWFEQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANvKL8dZQuBII858k+PMS/n3pF8fpAPu0bJ8y+C5Ctm9tU4wxYpq+b 28EYV31sMv0rF1U90X9JpMu9NkKYbKIbz7Q0L2lV6U+7q3B9ruiwAilnaW167g/h Wf15tO+DoiqZ1dukvk5K14N0QZZGUkOR+vblQIZNXzXtoeI8aBa+BbK6wiNKhQgC A68c1tXok53cdLAf+h3F3I4dgVbKbvJpMkJ2qCYcGCjJ+t7jU9zVpy3xT14UupJ5 JqTcSkFu2a3zXFglF5pTZqJRbuVD5JJR7Mtq1jt73F/yKNvBN14ZYNH6fuiJNDcB ogAmZzl+Dn1qtCjiqWYX8kD9jVGNQM0k -----END CERTIFICATE-----Generated at Mon Oct 20 08:55:43 2025 by rpki-client