$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: l+nvwndBIm/nORyBfhICyycprt3v9x12gVfgWNc01YQ= Subject key identifier: C3:0A:01:D0:64:68:8B:9C:CB:F3:EF:53:53:20:C9:40:97:61:07:2F Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 0979 Signing time: Tue 04 Nov 2025 20:10:16 +0000 Manifest this update: Tue 04 Nov 2025 20:10:16 +0000 Manifest next update: Tue 11 Nov 2025 20:10:16 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: OfT32N7JhaF9HAug9DfbbLWL/DiyWSBLS9IBg655EMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4, serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Nov 4 20:10:16 2025 GMT Not After : Nov 11 20:10:16 2025 GMT Subject: CN=690a5da8-b152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:ce:ac:95:c7:78:c6:bd:c1:57:fa:c2:95: 0b:04:19:1c:be:48:4c:47:ad:52:ab:f5:4b:db:81: 35:97:23:f6:10:ff:27:ed:41:c1:01:4b:10:9f:44: 8d:57:61:1c:17:95:0f:f2:1d:d0:8c:83:5a:f9:ac: 01:d8:91:ba:d5:1d:20:37:1f:3f:d9:8e:a6:ba:f6: 42:8b:fa:9e:c4:d4:0d:b8:a0:80:eb:4c:69:2c:cb: af:99:9c:d4:bb:e1:6e:7b:6a:6c:e9:9f:5a:5f:f5: 85:81:91:77:50:7d:6a:2c:9e:f6:c5:08:90:14:11: 55:7c:c8:71:a8:10:69:d1:14:d7:3b:ec:a9:7c:30: e7:51:e4:61:d3:99:4b:c7:4a:dc:f0:f5:d7:0b:c0: 24:33:57:57:82:bc:2c:60:05:b4:de:0a:37:57:3a: 6d:87:77:be:8f:c2:d4:24:26:23:e8:50:93:20:9d: 9e:d9:73:ed:b1:3e:31:bd:63:5a:5a:19:91:0f:2e: 0e:ae:cd:43:04:67:55:94:9d:63:b7:a4:a6:0a:8a: 72:98:39:61:76:3f:d6:a0:e7:d1:c8:5b:bf:57:6a: 94:f9:e8:4d:d4:fc:50:d5:e5:f9:64:5b:41:7e:23: 34:98:a5:2e:e5:cc:13:15:ff:6c:59:54:ec:34:72: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0A:01:D0:64:68:8B:9C:CB:F3:EF:53:53:20:C9:40:97:61:07:2F X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:78:47:be:77:4c:74:2f:71:e8:ee:79:d7:ac:d8:c9:03:8d: 8b:47:5c:2d:66:64:a2:54:de:ea:c3:6a:be:76:7f:0e:ac:c4: e7:7d:a4:d4:9c:1b:42:59:d2:40:be:e6:64:2c:1d:99:ea:f3: 20:4d:c3:6a:06:8a:42:3f:9d:42:a7:15:bf:de:8b:54:2b:07: 5c:ed:f7:3d:f7:d2:36:5d:6e:79:f5:7d:28:7f:ba:6d:35:7d: 66:a6:cd:ed:1f:11:6e:09:26:4f:30:2e:d8:bc:eb:5c:d9:29: 67:03:b8:94:59:23:c3:e4:3f:b3:c7:38:00:b5:66:45:3d:7e: 2e:11:9c:ed:5a:4c:ed:33:53:74:74:02:c6:8f:85:76:6d:71: b4:59:fd:5c:29:82:0e:a8:1e:30:8a:ef:74:e0:98:be:e1:b7: ab:1a:45:67:7e:a5:c6:9a:84:c3:e2:0a:74:9e:aa:f8:ab:6f: 77:ef:12:c6:7a:a7:92:96:e2:cf:a7:b0:24:33:30:fe:94:87: e8:9a:55:cd:c3:86:e9:74:52:75:9e:1c:b0:8c:0c:1f:37:b8: 59:e1:c3:bf:dc:34:1f:c9:50:10:1a:40:09:7c:05:d5:60:9b: f6:55:2a:26:d6:dd:26:5b:0f:0f:49:9b:03:e0:4c:2f:e8:03: 59:1a:f2:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjUxMTA0MjAxMDE2WhcNMjUxMTExMjAxMDE2WjAYMRYwFAYD VQQDEw02OTBhNWRhOC1iMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXPOrJXHeMa9wVf6wpULBBkcvkhMR61Sq/VL24E1lyP2EP8n7UHBAUsQn0SN V2EcF5UP8h3QjINa+awB2JG61R0gNx8/2Y6muvZCi/qexNQNuKCA60xpLMuvmZzU u+Fue2ps6Z9aX/WFgZF3UH1qLJ72xQiQFBFVfMhxqBBp0RTXO+ypfDDnUeRh05lL x0rc8PXXC8AkM1dXgrwsYAW03go3Vzpth3e+j8LUJCYj6FCTIJ2e2XPtsT4xvWNa WhmRDy4Ors1DBGdVlJ1jt6SmCopymDlhdj/WoOfRyFu/V2qU+ehN1PxQ1eX5ZFtB fiM0mKUu5cwTFf9sWVTsNHJ/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMKAdBk aIucy/PvU1MgyUCXYQcvMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2eEe+d0x0L3Ho7nnXrNjJA42LR1wtZmSiVN7qw2q+dn8OrMTnfaTU nBtCWdJAvuZkLB2Z6vMgTcNqBopCP51CpxW/3otUKwdc7fc999I2XW559X0of7pt NX1mps3tHxFuCSZPMC7YvOtc2SlnA7iUWSPD5D+zxzgAtWZFPX4uEZztWkztM1N0 dALGj4V2bXG0Wf1cKYIOqB4wiu904Ji+4berGkVnfqXGmoTD4gp0nqr4q2937xLG eqeSluLPp7AkMzD+lIfomlXNw4bpdFJ1nhywjAwfN7hZ4cO/3DQfyVAQGkAJfAXV YJv2VSom1t0mWw8PSZsD4Ewv6ANZGvJg -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:23 2025 by rpki-client