$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: XnYQA65JgMxj6A1f8R4hNkD+2UhqmYezWv+V0fki17Q= Subject key identifier: 31:B3:85:89:25:9F:FA:41:01:86:6D:0E:55:67:A6:9C:06:C8:D6:FC Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 34BB Signing time: Thu 18 Sep 2025 15:12:28 +0000 Manifest this update: Thu 18 Sep 2025 15:12:28 +0000 Manifest next update: Thu 25 Sep 2025 15:12:28 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: 4mDcYUEecGGyNnRMA/FCJt5yKnXOGrP2Zxfy9bV6fv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Sep 18 15:12:28 2025 GMT Not After : Sep 25 15:12:28 2025 GMT Subject: CN=68cc215c-58be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f0:eb:b4:a1:77:a3:2f:91:67:e9:26:b4:4f: e2:72:78:80:ad:74:fb:e2:ea:de:19:a8:ea:4e:a1: d6:47:a0:2b:7a:d2:93:83:43:9f:af:6e:d0:d4:3e: 30:bf:c6:6b:d3:b0:3c:60:9a:72:42:33:cf:e4:96: 5f:f0:f8:60:96:db:53:c5:46:c5:69:7d:1a:52:7d: 51:5a:79:18:86:68:89:86:85:1d:d6:06:9a:a4:4b: 22:ff:13:2d:a4:52:f6:42:33:83:5f:09:67:78:b0: 03:3d:ca:72:f9:f3:02:ce:e4:35:81:da:b7:6e:a8: 69:a1:90:76:9f:de:2e:be:86:26:2f:86:6a:a6:7e: 59:e5:bf:85:f1:75:1e:56:2a:24:55:52:cb:09:34: 2b:b8:14:41:3c:91:2a:4a:ea:49:4c:01:d1:ee:de: a3:ce:fd:25:49:1b:56:bb:fa:f3:47:70:c6:3f:1d: 6d:76:27:b3:cd:2e:cd:f3:a6:3f:e4:5f:ca:2d:2b: 55:e9:d8:76:b1:ce:1b:26:62:be:28:ec:7f:8b:b8: b7:6d:4a:27:b4:f8:25:96:30:18:0e:6d:48:65:cc: ec:ad:b5:93:6c:3f:ba:ba:ad:4b:e0:93:28:f5:16: 35:f6:74:a0:56:fb:85:25:ee:16:0f:e4:50:21:7a: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B3:85:89:25:9F:FA:41:01:86:6D:0E:55:67:A6:9C:06:C8:D6:FC X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:db:43:34:fc:2f:21:78:61:8a:77:b8:9c:fa:e8:8f:66: b6:59:60:84:f9:a5:82:8c:c3:5a:e9:7e:68:91:76:ca:82:57: 86:a9:58:81:d2:fb:97:93:40:51:f3:80:bd:e9:a0:85:30:16: 59:3f:be:3f:5e:da:82:f7:4e:a4:b7:09:8f:f9:75:57:87:2f: 98:25:e5:08:45:53:a2:6d:d8:d0:b1:da:fa:57:01:8d:46:ba: 2c:8a:53:c0:35:95:df:ce:19:1c:0a:f8:97:66:b6:15:59:67: 1d:de:a6:1a:7f:fa:de:0f:7a:8e:75:e0:2b:e0:73:4c:1e:ba: a3:38:46:50:96:69:b7:b7:9d:e3:15:c8:47:f9:6b:c1:88:f3: 7a:fd:c5:53:07:b3:69:a3:62:95:08:80:3b:4d:f1:37:2e:65: dc:bd:97:51:4c:dd:62:45:b6:a4:ce:1a:41:1c:b8:7b:9e:e1: de:00:b5:03:fe:9a:cc:59:00:1e:9c:43:08:f4:25:2d:c2:64: 75:44:41:1b:b8:c9:f5:f1:0c:e3:1a:7e:ff:7b:53:d7:89:11: df:27:fb:21:01:11:d2:e6:80:be:dc:29:53:6e:9c:1a:f0:16: 6a:a9:55:e1:4b:a7:11:5c:69:b7:93:63:8d:62:81:84:83:76: 1a:af:80:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwOTE4MTUxMjI4WhcNMjUwOTI1MTUxMjI4WjAYMRYwFAYD VQQDEw02OGNjMjE1Yy01OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/DrtKF3oy+RZ+kmtE/icniArXT74ureGajqTqHWR6AretKTg0Ofr27Q1D4w v8Zr07A8YJpyQjPP5JZf8PhglttTxUbFaX0aUn1RWnkYhmiJhoUd1gaapEsi/xMt pFL2QjODXwlneLADPcpy+fMCzuQ1gdq3bqhpoZB2n94uvoYmL4Zqpn5Z5b+F8XUe ViokVVLLCTQruBRBPJEqSupJTAHR7t6jzv0lSRtWu/rzR3DGPx1tdiezzS7N86Y/ 5F/KLStV6dh2sc4bJmK+KOx/i7i3bUontPglljAYDm1IZczsrbWTbD+6uq1L4JMo 9RY19nSgVvuFJe4WD+RQIXq94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGzhYkl n/pBAYZtDlVnppwGyNb8MB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+DNtDNPwvIXhhine4nProj2a2WWCE+aWCjMNa6X5okXbKgleGqViB 0vuXk0BR84C96aCFMBZZP74/XtqC906ktwmP+XVXhy+YJeUIRVOibdjQsdr6VwGN RrosilPANZXfzhkcCviXZrYVWWcd3qYaf/reD3qOdeAr4HNMHrqjOEZQlmm3t53j FchH+WvBiPN6/cVTB7Npo2KVCIA7TfE3LmXcvZdRTN1iRbakzhpBHLh7nuHeALUD /prMWQAenEMI9CUtwmR1REEbuMn18QzjGn7/e1PXiRHfJ/shARHS5oC+3ClTbpwa 8BZqqVXhS6cRXGm3k2ONYoGEg3Yar4DI -----END CERTIFICATE-----Generated at Fri Sep 19 07:31:17 2025 by rpki-client