$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft File: 4WfcTVfF__boFwUeksBgF1urHR0.mft (raw, json) Hash identifier: ru4fO4GJriex6+YrTyEn0i1Eqcnp7x9KbVRL9iy7fnk= Subject key identifier: 94:D2:66:5B:AF:20:F7:BF:32:B7:D2:64:07:09:53:FD:9D:DF:0F:FB Authority key identifier: E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D Certificate issuer: /CN=A9147150/serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:34:36 +0000 Manifest this update: Mon 03 Nov 2025 07:34:35 +0000 Manifest next update: Mon 10 Nov 2025 07:34:35 +0000 Files and hashes: 1: 4WfcTVfF__boFwUeksBgF1urHR0.crl (hash: UxhvIQoo5j3Ny1UkK8dBrIqCum8ViU+bJMpq4ll5JJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=E167DC4D57C5FFF6E817051E92C060175BAB1D1D Validity Not Before: Nov 3 07:34:35 2025 GMT Not After : Nov 10 07:34:35 2025 GMT Subject: CN=69085b0b-822b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:17:05:a6:68:c0:d3:51:87:4e:88:10:9e: 84:d8:09:cb:06:1d:cd:e3:13:e1:02:39:24:6f:ba: 28:e5:8c:09:d0:f2:fd:7e:15:83:46:35:af:02:ac: ca:0f:55:bc:cd:14:be:c5:ea:d5:b5:9c:ba:70:8c: 32:c7:18:a3:2b:51:3d:c0:77:8a:d0:74:97:67:39: 72:3d:ad:17:15:0b:e9:d0:bc:cb:20:dd:01:89:c1: da:cc:c1:f6:0c:bd:ca:24:37:1d:8b:3f:32:5e:13: 73:6e:c8:42:59:e6:63:b8:f9:72:73:aa:0d:97:8a: 4a:a1:53:1e:6b:5c:05:a6:a4:be:3b:63:f2:f6:02: 66:97:b4:92:55:11:e7:65:63:cd:7b:9b:6a:43:54: 65:e7:4a:7d:86:a2:46:a3:1b:b0:b4:50:82:c8:f3: 15:f7:b3:12:41:6a:0a:26:d1:2f:5c:88:db:87:06: b3:48:1b:d6:fb:38:ad:61:f2:3f:81:e8:d3:5d:2d: e9:0c:8c:9a:34:1d:da:25:58:1c:bd:79:f7:49:ed: 98:bd:04:99:14:e6:9a:7a:f2:60:f8:0e:08:4f:a6: 9b:21:c3:8f:c7:e7:1e:56:df:38:6d:6c:38:c4:aa: 8d:da:04:25:f5:56:60:c9:f6:f4:30:9d:08:23:d6: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:66:5B:AF:20:F7:BF:32:B7:D2:64:07:09:53:FD:9D:DF:0F:FB X509v3 Authority Key Identifier: keyid:E1:67:DC:4D:57:C5:FF:F6:E8:17:05:1E:92:C0:60:17:5B:AB:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WfcTVfF__boFwUeksBgF1urHR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/12049226677811F0B0D0F64FC4F9AE02/4WfcTVfF__boFwUeksBgF1urHR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:dd:5a:3d:bf:02:82:bf:e0:9e:d1:38:d3:a9:58:2c:71:98: 92:35:62:80:4d:d5:3e:0d:ad:26:4b:e5:f7:74:67:4e:34:80: 00:e0:82:63:13:9a:b8:0b:cd:77:11:e6:71:30:45:48:f7:02: 95:83:d9:9d:d4:6a:49:46:c9:14:4a:1b:3a:ad:31:97:fc:a8: 1e:9e:0e:5b:82:e9:ab:e6:f9:68:4f:36:26:67:7f:e4:8c:f2: 53:93:89:b9:6b:f4:0a:92:61:0e:e2:ff:d1:68:ad:b6:37:ab: 65:70:45:ec:dc:fe:3b:7c:d9:b4:f5:d3:9e:9f:46:6c:d1:33: df:98:3b:80:b8:77:a5:51:98:b4:4e:30:55:13:84:4a:95:4f: cc:01:79:32:02:b1:c5:6f:70:3c:6b:f5:d1:81:23:47:b2:de: 73:21:1d:c8:45:62:7e:b8:09:87:16:66:4c:e7:ed:1b:da:07: dd:7e:fd:ab:d8:49:01:63:f0:37:da:6f:60:58:17:c3:47:e5: d1:03:cc:83:cb:07:3c:34:e4:11:b3:e5:8a:86:9e:88:25:66: 43:a4:98:5f:46:7f:c9:37:59:70:c9:f1:d2:63:0b:0a:8d:38: a0:6d:36:33:ff:88:ce:b2:27:29:78:e6:15:1c:8d:5c:3b:23: 8f:f7:7a:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoRTE2N0RDNEQ1N0M1RkZGNkU4MTcwNTFFOTJDMDYwMTc1 QkFCMUQxRDAeFw0yNTExMDMwNzM0MzVaFw0yNTExMTAwNzM0MzVaMBgxFjAUBgNV BAMTDTY5MDg1YjBiLTgyMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUgxcFpmjA01GHTogQnoTYCcsGHc3jE+ECOSRvuijljAnQ8v1+FYNGNa8CrMoP VbzNFL7F6tW1nLpwjDLHGKMrUT3Ad4rQdJdnOXI9rRcVC+nQvMsg3QGJwdrMwfYM vcokNx2LPzJeE3NuyEJZ5mO4+XJzqg2XikqhUx5rXAWmpL47Y/L2AmaXtJJVEedl Y817m2pDVGXnSn2GokajG7C0UILI8xX3sxJBagom0S9ciNuHBrNIG9b7OK1h8j+B 6NNdLekMjJo0HdolWBy9efdJ7Zi9BJkU5pp68mD4DghPppshw4/H5x5W3zhtbDjE qo3aBCX1VmDJ9vQwnQgj1rurAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlNJmW68g 978yt9JkBwlT/Z3fD/swHwYDVR0jBBgwFoAU4WfcTVfF//boFwUeksBgF1urHR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzEyMDQ5MjI2Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19ib0Z3VWVrc0JnRjF1ckhS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdmY1RWZkZfX2JvRndVZWtzQmdGMXVySFIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzEyMDQ5MjI2Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyLzRXZmNUVmZGX19i b0Z3VWVrc0JnRjF1ckhSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7dWj2/AoK/4J7RONOpWCxxmJI1YoBN1T4NrSZL5fd0Z040gADggmMT mrgLzXcR5nEwRUj3ApWD2Z3UaklGyRRKGzqtMZf8qB6eDluC6avm+WhPNiZnf+SM 8lOTiblr9AqSYQ7i/9ForbY3q2VwRezc/jt82bT1056fRmzRM9+YO4C4d6VRmLRO MFUThEqVT8wBeTICscVvcDxr9dGBI0ey3nMhHchFYn64CYcWZkzn7RvaB91+/avY SQFj8Dfab2BYF8NH5dEDzIPLBzw05BGz5YqGnoglZkOkmF9Gf8k3WXDJ8dJjCwqN OKBtNjP/iM6yJyl45hUcjVw7I4/3enE= -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:14 2025 by rpki-client