$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft File: 4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json) Hash identifier: rtJCzARIvlPoffZCwI8RwQW3CFBbsQ7kuGw+nK3noPc= Subject key identifier: 6C:6B:56:2C:F0:A3:3F:11:85:32:E4:19:CE:E6:95:D9:E7:46:DD:17 Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D Certificate issuer: /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft Manifest number: 37 Signing time: Wed 05 Nov 2025 07:46:13 +0000 Manifest this update: Wed 05 Nov 2025 07:46:12 +0000 Manifest next update: Wed 12 Nov 2025 07:46:12 +0000 Files and hashes: 1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: 6Qfr/6pLBp52Hn7/kC6oUnwX2CJTcudhsBl41KP0SlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Validity Not Before: Nov 5 07:46:12 2025 GMT Not After : Nov 12 07:46:12 2025 GMT Subject: CN=690b00c5-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:6b:20:57:15:55:44:e5:a3:5f:48:e8:c0: 94:f0:89:e5:fa:ba:d3:02:4e:54:04:ec:a6:b1:6b: f1:65:2f:20:8e:d0:47:45:e4:36:64:55:d7:d1:8b: 4a:4f:c7:32:bb:e4:d7:e1:68:75:6a:d7:f2:59:36: 9b:f7:35:d3:53:a4:3b:c5:91:25:25:d9:69:4f:67: 9b:d0:23:3e:48:8f:27:36:70:ff:aa:7f:7d:e3:c5: bb:83:12:6c:da:bb:b6:be:83:b0:7a:3b:89:4b:0c: 57:24:14:59:e8:24:e0:f6:50:93:12:d7:30:62:75: 95:d5:18:b4:dc:2e:48:c8:23:85:58:99:da:96:fe: f0:33:48:29:90:1b:d7:35:a5:49:02:ca:63:fc:8f: 70:99:3d:e1:3a:c2:64:cb:4b:94:f0:e3:35:56:38: f9:c3:93:af:57:78:60:cd:4d:c1:45:75:e8:15:7a: 27:18:85:fd:ee:26:92:7b:e9:e1:61:62:38:47:f7: 3e:2b:2d:bd:6c:b0:5f:58:fb:c6:8a:36:62:de:4f: f2:a3:bd:b2:2c:63:aa:20:48:bf:11:47:6d:da:72: 3e:0c:40:49:46:a7:7d:79:c8:13:26:ae:b2:00:2a: 17:58:e2:52:54:f5:46:fe:50:5d:10:96:0a:76:65: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:56:2C:F0:A3:3F:11:85:32:E4:19:CE:E6:95:D9:E7:46:DD:17 X509v3 Authority Key Identifier: keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:43:36:4a:f3:0c:ca:a8:79:5d:e5:6a:6a:0d:6c:8d:48:ef: ba:c7:74:27:82:de:4c:d3:7a:11:04:96:c2:2a:23:98:eb:63: 44:70:e7:e5:cc:aa:9f:c8:1c:1d:13:e4:0c:f9:46:c6:c5:09: fa:f4:60:76:97:d0:06:d3:f0:eb:5b:4d:67:cc:8f:75:5b:80: 01:e2:84:08:34:77:8c:e3:ba:a1:75:e8:c3:2a:2e:e9:5c:99: cc:be:80:4b:7f:96:29:8d:36:b8:06:25:e0:23:b7:fd:f4:c4: 3f:e8:0a:f0:cd:6a:49:dd:99:0d:d9:e9:c1:cc:7c:8a:a6:5e: ff:43:d6:2e:c5:c9:1d:3f:ec:5f:d2:dc:25:d2:eb:72:a2:c2: 03:cd:46:a0:b6:17:08:a7:99:e9:b7:19:17:83:be:09:3d:e4: 96:e8:a5:8e:90:e8:2c:59:8a:3b:7f:47:9a:34:af:c9:b3:66: a7:06:75:20:b1:df:0b:9e:d3:21:e2:1f:80:ce:87:e4:f5:bf: 9c:d7:58:0b:b4:0b:4c:e3:0c:a0:3f:0a:29:89:82:63:be:aa: 3e:96:13:ea:97:f7:b5:25:c8:69:98:5c:53:71:56:bd:49:c9: 6b:5e:04:79:51:64:68:27:19:81:4e:f5:3f:00:f6:4a:03:d9: 9d:4d:58:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoRTE2N0RDNEQ1N0M1RkZGNkU4MTcwNTFFOTJDMDYwMTc1 QkFCMUQxRDAeFw0yNTExMDUwNzQ2MTJaFw0yNTExMTIwNzQ2MTJaMBgxFjAUBgNV BAMTDTY5MGIwMGM1LWZhYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9kWsgVxVVROWjX0jowJTwieX6utMCTlQE7Kaxa/FlLyCO0EdF5DZkVdfRi0pP xzK75NfhaHVq1/JZNpv3NdNTpDvFkSUl2WlPZ5vQIz5Ijyc2cP+qf33jxbuDEmza u7a+g7B6O4lLDFckFFnoJOD2UJMS1zBidZXVGLTcLkjII4VYmdqW/vAzSCmQG9c1 pUkCymP8j3CZPeE6wmTLS5Tw4zVWOPnDk69XeGDNTcFFdegVeicYhf3uJpJ76eFh YjhH9z4rLb1ssF9Y+8aKNmLeT/KjvbIsY6ogSL8RR23acj4MQElGp315yBMmrrIA KhdY4lJU9Ub+UF0Qlgp2ZYElAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbGtWLPCj PxGFMuQZzuaV2edG3RcwHwYDVR0jBBgwFoAU4WfcTVfF//boFwUeksBgF1urHR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzEyMDQ5MjI2Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19ib0Z3VWVrc0JnRjF1ckhS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdmY1RWZkZfX2JvRndVZWtzQmdGMXVySFIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzEyMDQ5MjI2Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19i b0Z3VWVrc0JnRjF1ckhSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGVDNkrzDMqoeV3lamoNbI1I77rHdCeC3kzTehEElsIqI5jrY0Rw5+XM qp/IHB0T5Az5RsbFCfr0YHaX0AbT8OtbTWfMj3VbgAHihAg0d4zjuqF16MMqLulc mcy+gEt/limNNrgGJeAjt/30xD/oCvDNakndmQ3Z6cHMfIqmXv9D1i7FyR0/7F/S 3CXS63KiwgPNRqC2Fwinmem3GReDvgk95JbopY6Q6CxZijt/R5o0r8mzZqcGdSCx 3wue0yHiH4DOh+T1v5zXWAu0C0zjDKA/CimJgmO+qj6WE+qX97UlyGmYXFNxVr1J yWteBHlRZGgnGYFO9T8A9koD2Z1NWL0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:21 2025 by rpki-client