$ rpki-client -vvf rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft File: pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft (raw, json) Hash identifier: f+53AJXpi07AbZb3HN17DxQG7FBzK0ftHO13URGLU+A= Subject key identifier: 46:63:3B:40:39:7B:B2:FE:51:85:1A:1B:E7:3D:C8:54:8F:C5:EE:90 Authority key identifier: A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F Certificate issuer: /CN=A913D0CA/serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 07:18:12 +0000 Manifest this update: Mon 03 Nov 2025 07:18:11 +0000 Manifest next update: Mon 10 Nov 2025 07:18:11 +0000 Files and hashes: 1: pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl (hash: xyDIxM8KTSt7B132HEeylJjcyBKTqkWq3KOXEaLdnAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D0CA, serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F Validity Not Before: Nov 3 07:18:11 2025 GMT Not After : Nov 10 07:18:11 2025 GMT Subject: CN=69085734-6280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:a3:16:f0:3c:99:c3:e3:c6:88:f9:e1:45: b5:33:07:8e:5e:30:fe:c7:bd:09:21:2b:10:26:93: 12:d5:0b:36:c1:2e:71:30:9d:0b:0c:69:37:2e:fd: 32:ed:8c:84:1b:ad:d1:66:57:5f:ff:72:65:91:92: be:c2:20:b0:a6:26:ba:a1:d3:f4:ce:ad:75:6b:2f: 73:cd:6e:4d:22:f8:0b:fa:43:0a:a3:0e:8f:b3:3b: b5:a8:eb:7d:0d:ea:eb:5b:aa:5f:1b:69:bf:04:56: 84:4e:51:d0:34:bf:c0:7b:c0:0f:20:b3:e7:20:27: d1:b9:ca:4c:68:f9:0e:a1:ff:38:18:cd:86:a6:03: d7:2b:ad:df:c5:c8:f3:1f:3d:7b:ba:f5:6e:9e:d4: 7c:25:bd:d8:80:4d:cd:8d:36:4b:60:44:c7:b4:85: d7:8f:01:7b:32:ae:d0:38:38:89:29:bf:9f:84:a4: 9f:4d:7c:23:14:9f:03:5a:bc:d7:55:10:97:bf:e3: cb:22:41:88:70:21:e4:7b:a7:5b:fd:1e:eb:0f:d0: 69:6b:f1:d0:61:cb:20:1c:b6:c7:41:5d:d6:90:dd: 33:25:69:e4:7e:3e:45:1d:09:13:f8:61:16:ba:76: 61:08:a2:81:e4:e1:10:32:25:86:fc:2b:ab:c0:e4: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:3B:40:39:7B:B2:FE:51:85:1A:1B:E7:3D:C8:54:8F:C5:EE:90 X509v3 Authority Key Identifier: keyid:A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:94:d2:5c:f8:df:8b:95:46:ef:f1:81:60:7f:42:89:8f:e5: 03:bd:a0:db:d3:92:72:6a:c7:24:8d:88:4c:18:9b:01:b1:88: 0f:31:b7:8d:58:cf:50:9c:07:e7:88:6e:15:78:f6:6d:66:58: 98:ce:77:3c:ea:29:b5:d0:11:6a:9c:21:b8:2b:92:6b:86:94: 55:29:45:30:9b:b5:63:40:84:3f:cd:d5:e0:42:7e:ac:53:10: bd:6a:68:1c:8e:8c:21:70:c1:05:07:46:48:c6:f1:9a:08:45: 12:e4:37:a7:b9:c0:16:31:a9:36:8e:07:7b:c8:b2:07:24:65: 7a:58:16:c1:84:19:f2:a9:44:28:f8:25:1c:e8:9e:88:94:b8: ab:1f:f8:c7:49:7d:c7:81:0f:84:bd:03:55:f9:f9:bb:ee:34: 21:5f:de:19:42:15:d2:8b:00:ab:fd:60:67:01:3a:57:31:19: b1:de:bf:4d:20:28:61:60:40:b3:fc:ad:2c:e9:2c:19:78:b4: 7a:0d:c0:3a:28:43:37:a4:aa:d7:65:cf:f7:d8:27:83:fd:d7: 74:65:d9:cf:45:77:ec:36:48:e4:16:f7:8b:bf:13:16:eb:3d: b1:9a:05:91:8e:a0:27:c6:6f:3c:54:5c:c8:34:48:87:22:79: fc:7f:46:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDBDQTExMC8GA1UEBRMoQTQ3NEYwOEM3RjNGNDg4RDVCOTBFMTI5OUEzNDlGRjI1 MURERTExRjAeFw0yNTExMDMwNzE4MTFaFw0yNTExMTAwNzE4MTFaMBgxFjAUBgNV BAMTDTY5MDg1NzM0LTYyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL9aMW8DyZw+PGiPnhRbUzB45eMP7HvQkhKxAmkxLVCzbBLnEwnQsMaTcu/TLt jIQbrdFmV1//cmWRkr7CILCmJrqh0/TOrXVrL3PNbk0i+Av6QwqjDo+zO7Wo630N 6utbql8bab8EVoROUdA0v8B7wA8gs+cgJ9G5ykxo+Q6h/zgYzYamA9crrd/FyPMf PXu69W6e1HwlvdiATc2NNktgRMe0hdePAXsyrtA4OIkpv5+EpJ9NfCMUnwNavNdV EJe/48siQYhwIeR7p1v9HusP0Glr8dBhyyActsdBXdaQ3TMlaeR+PkUdCRP4YRa6 dmEIooHk4RAyJYb8K6vA5CkDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURmM7QDl7 sv5RhRob5z3IVI/F7pAwHwYDVR0jBBgwFoAUpHTwjH8/SI1bkOEpmjSf8lHd4R8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMENBL0I3ODg3M0EyNDVC ODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kxYmtPRXBtalNmOGxIZDRS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEhUd2pIOF9TSTFia09FcG1qU2Y4bEhkNFI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MENBL0I3ODg3M0EyNDVCODExRjA4NEYzNkM1RkM0RjlBRTAyL3BIVHdqSDhfU0kx YmtPRXBtalNmOGxIZDRSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGCU0lz434uVRu/xgWB/QomP5QO9oNvTknJqxySNiEwYmwGxiA8xt41Y z1CcB+eIbhV49m1mWJjOdzzqKbXQEWqcIbgrkmuGlFUpRTCbtWNAhD/N1eBCfqxT EL1qaByOjCFwwQUHRkjG8ZoIRRLkN6e5wBYxqTaOB3vIsgckZXpYFsGEGfKpRCj4 JRzonoiUuKsf+MdJfceBD4S9A1X5+bvuNCFf3hlCFdKLAKv9YGcBOlcxGbHev00g KGFgQLP8rSzpLBl4tHoNwDooQzekqtdlz/fYJ4P913Rl2c9Fd+w2SOQW94u/Exbr PbGaBZGOoCfGbzxUXMg0SIciefx/Rvg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:22 2025 by rpki-client