$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: LcXKdaPfesrsZQ6R9EeSczm+IMNvHmuFYl4iY+Ptwt8= Subject key identifier: 40:CA:CB:F6:B4:4F:C9:DA:B1:F5:8D:66:60:42:9B:B1:92:50:3F:14 Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: B0 Signing time: Wed 05 Nov 2025 06:25:54 +0000 Manifest this update: Wed 05 Nov 2025 06:25:53 +0000 Manifest next update: Wed 12 Nov 2025 06:25:53 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: rbdV50Ao6o4e9+iIQgvHMkevca84K/dKDJEi3JiUW1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Nov 5 06:25:53 2025 GMT Not After : Nov 12 06:25:53 2025 GMT Subject: CN=690aedf2-f66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:82:8f:b9:b2:d4:a7:44:58:d4:5d:d6:c4: 95:44:87:ab:1b:2c:c5:d6:cd:90:75:09:5a:5c:db: 7d:4d:23:f8:25:2c:08:b1:04:9d:1b:83:c8:0d:63: f4:80:44:40:fe:98:23:c3:9d:c6:a4:b1:73:71:b7: c2:8d:6d:09:4f:2f:7e:f6:97:95:69:fd:43:c7:a3: a3:c7:ed:c5:55:db:87:3a:dc:8b:6d:5f:e3:69:7d: d2:ce:a9:96:65:15:34:ac:23:ee:17:ca:c4:44:e3: c6:98:0d:cf:0d:88:b9:b5:cd:69:d5:2d:00:a2:93: 7a:0b:52:89:8c:2a:2e:3b:c6:1f:d4:91:8f:31:dd: 6f:dd:b8:e2:15:9c:8a:2e:87:a9:04:80:10:bc:69: ae:af:7a:92:4c:d5:70:99:d8:09:b2:7d:e0:04:87: a4:9b:24:d0:36:1b:b9:d6:40:4a:e3:d3:0a:5d:6e: b8:a4:79:06:79:ad:e3:f5:bb:0a:2e:97:51:bc:6d: 6a:17:53:06:68:2c:5d:ef:0f:1f:15:0d:2e:63:d2: 68:1c:a5:08:b3:3c:61:b2:04:26:90:a3:41:f4:d9: 03:3b:5e:b3:28:3d:d1:56:c5:52:3f:bb:38:cd:9d: f9:f0:95:15:5f:4d:ef:10:20:d6:ce:a2:e3:b5:2d: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:CB:F6:B4:4F:C9:DA:B1:F5:8D:66:60:42:9B:B1:92:50:3F:14 X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:23:e8:28:44:ce:00:04:f2:ee:a6:6d:0c:09:47:86:bb:e1: 3a:b9:d4:ed:ea:52:44:52:89:33:20:d6:9e:cf:28:a5:0f:cd: 9f:8d:a8:af:f7:06:f6:d6:1e:f1:df:f4:1c:2d:eb:01:73:9e: 65:e3:00:c1:92:e9:6b:5a:2a:d1:50:f2:af:33:97:e1:af:96: fa:7b:ce:61:a5:fd:6b:d6:ba:76:1a:82:16:97:02:35:6c:5d: 25:74:c4:17:56:44:ac:74:40:e4:e7:d1:8f:d5:ba:b2:fa:9a: 48:52:a4:6b:ca:09:49:41:c2:2a:b2:20:03:d1:a7:6b:a9:da: 47:8f:4e:de:79:55:3d:2b:ec:a7:8e:09:47:a4:2f:17:85:dd: e3:b1:73:c1:0c:7f:ae:5d:b1:0b:45:ec:33:a6:30:db:8c:24: 0a:9a:7f:cc:28:93:a4:75:6b:d0:e4:af:4e:2d:2c:71:3e:df: af:0c:46:28:d4:6e:f9:02:d6:0d:b8:a4:cb:49:d3:91:d4:5e: ed:6b:fb:0b:b4:31:f6:04:6c:0c:43:f2:0e:ea:4f:e3:fa:24: df:2d:51:ea:51:f3:84:13:7a:fe:f9:5c:40:45:94:04:72:a0: e1:0d:34:49:f2:51:6e:5e:00:53:5a:8b:a5:ec:76:54:b5:99: cc:17:11:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E5M0UxMTAvBgNVBAUTKEUwQUI2RDk3NzI2NURCMEQ1QzU4RDQzM0EyOEIzQ0My MDUxQTBDMjkwHhcNMjUxMTA1MDYyNTUzWhcNMjUxMTEyMDYyNTUzWjAYMRYwFAYD VQQDEw02OTBhZWRmMi1mNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kyCj7my1KdEWNRd1sSVRIerGyzF1s2QdQlaXNt9TSP4JSwIsQSdG4PIDWP0 gERA/pgjw53GpLFzcbfCjW0JTy9+9peVaf1Dx6Ojx+3FVduHOtyLbV/jaX3SzqmW ZRU0rCPuF8rEROPGmA3PDYi5tc1p1S0AopN6C1KJjCouO8Yf1JGPMd1v3bjiFZyK LoepBIAQvGmur3qSTNVwmdgJsn3gBIekmyTQNhu51kBK49MKXW64pHkGea3j9bsK LpdRvG1qF1MGaCxd7w8fFQ0uY9JoHKUIszxhsgQmkKNB9NkDO16zKD3RVsVSP7s4 zZ358JUVX03vECDWzqLjtS1ivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDKy/a0 T8nasfWNZmBCm7GSUD8UMB8GA1UdIwQYMBaAFOCrbZdyZdsNXFjUM6KLPMIFGgwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTkzRS80NzFCMzcyOEI3 OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3MWNXTlF6b29zOHdnVWFE Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTkzRS80NzFCMzcyOEI3OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3 MWNXTlF6b29zOHdnVWFEQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUI+goRM4ABPLupm0MCUeGu+E6udTt6lJEUokzINaezyilD82fjaiv 9wb21h7x3/QcLesBc55l4wDBkulrWirRUPKvM5fhr5b6e85hpf1r1rp2GoIWlwI1 bF0ldMQXVkSsdEDk59GP1bqy+ppIUqRryglJQcIqsiAD0adrqdpHj07eeVU9K+yn jglHpC8Xhd3jsXPBDH+uXbELRewzpjDbjCQKmn/MKJOkdWvQ5K9OLSxxPt+vDEYo 1G75AtYNuKTLSdOR1F7ta/sLtDH2BGwMQ/IO6k/j+iTfLVHqUfOEE3r++VxARZQE cqDhDTRJ8lFuXgBTWoul7HZUtZnMFxFp -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:58 2025 by rpki-client