$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: 3biN9ebLJG16YvPwX8EQVfMgy/TkmPsixiIpaUmEEBY= Subject key identifier: C2:67:B5:78:94:71:3B:F1:61:0F:27:D3:D7:4F:B7:C4:FA:FC:6C:A2 Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 0131 Signing time: Wed 17 Sep 2025 05:08:12 +0000 Manifest this update: Wed 17 Sep 2025 05:08:11 +0000 Manifest next update: Wed 24 Sep 2025 05:08:11 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: mJAd+pmvEPXONLkEKk0yjI0Cp+eA3XVxk9H0kcVwJ4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Sep 17 05:08:11 2025 GMT Not After : Sep 24 05:08:11 2025 GMT Subject: CN=68ca423b-0c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:07:9a:7a:20:dc:20:38:7c:28:ed:9c:47: 31:3f:9b:ad:83:40:fc:e0:23:80:8f:34:00:f1:64: 80:5e:11:8b:04:8d:da:1c:39:bc:13:37:97:f7:e8: 63:da:bc:a4:57:45:b6:7d:a8:6d:46:5e:93:8c:f7: 02:01:1e:d9:0e:42:fe:f6:88:ba:7e:0d:b1:19:11: ad:10:45:a0:43:f5:e2:19:95:0a:8e:39:5c:7e:cd: 4b:7e:ce:8f:9e:d2:3c:97:fb:80:62:d9:3a:6a:60: 3b:81:b3:be:3d:b8:a4:1d:cf:57:48:c8:fb:92:ab: 04:91:4e:08:83:53:91:12:e1:d8:47:95:b7:ca:d9: 11:c9:80:3c:6d:e9:63:fc:3f:24:72:26:29:35:ec: 0e:b5:b8:84:16:78:6b:e9:e4:24:97:02:57:35:db: 6c:84:fa:c1:1e:71:ed:a9:8e:1f:7a:96:14:0a:27: dd:43:07:92:a0:36:ab:cf:e1:1c:c3:89:36:a3:fe: d6:52:e9:ee:18:f0:0a:69:20:80:64:6a:de:3d:b8: 76:66:11:86:f4:44:2b:7a:7e:03:81:bf:81:15:b0: fe:4d:89:33:e2:ed:f0:6d:df:cb:64:dd:64:67:cd: 08:07:64:95:cc:fb:80:03:3b:9e:d6:4a:7e:ba:db: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:B5:78:94:71:3B:F1:61:0F:27:D3:D7:4F:B7:C4:FA:FC:6C:A2 X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f8:94:14:30:94:2b:ce:6d:40:2c:e1:66:1c:e1:d1:98:be: 39:b9:b7:4c:fc:32:d4:64:c5:5b:89:07:2f:e7:3d:1c:58:bd: 26:7e:64:0e:6d:69:66:a6:27:92:b4:db:8d:7b:1c:63:0a:3d: 4f:42:db:d0:ef:22:e3:dc:4c:e8:32:0b:7b:24:2f:7f:33:05: 76:2a:72:c2:2c:3d:d8:e4:00:6a:df:f9:bd:be:99:04:25:df: 48:92:78:2f:8e:c1:5d:7b:a9:b7:c3:2e:cc:e7:c7:7f:72:94: 7e:38:c5:8e:6d:f8:4e:38:cf:67:57:8c:4c:c4:6f:24:94:14: 06:61:d2:ea:c1:fc:f0:2f:45:63:49:f2:a9:b1:b1:18:f3:b8: 72:4e:81:6f:54:49:69:ee:6a:03:19:fe:51:fb:74:a5:42:2b: 7e:72:d3:11:d6:a4:3e:c2:d5:3f:b6:c0:b1:ec:d3:bd:fa:0f: 90:32:ea:c5:97:57:58:69:2d:a3:7a:3a:bc:7c:e1:6e:aa:38: 22:fa:3e:f8:67:19:e9:e3:b1:89:f3:fa:61:35:82:39:a7:f0: 58:68:c1:fe:19:e6:4b:7c:15:3f:4b:31:54:a9:fb:f0:fc:3b: ed:84:a3:6d:6a:df:04:a1:d0:97:af:ab:77:e3:d1:a1:b1:04: 87:99:41:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUwOTE3MDUwODExWhcNMjUwOTI0MDUwODExWjAYMRYwFAYD VQQDEw02OGNhNDIzYi0wYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkcHmnog3CA4fCjtnEcxP5utg0D84COAjzQA8WSAXhGLBI3aHDm8EzeX9+hj 2rykV0W2fahtRl6TjPcCAR7ZDkL+9oi6fg2xGRGtEEWgQ/XiGZUKjjlcfs1Lfs6P ntI8l/uAYtk6amA7gbO+PbikHc9XSMj7kqsEkU4Ig1OREuHYR5W3ytkRyYA8belj /D8kciYpNewOtbiEFnhr6eQklwJXNdtshPrBHnHtqY4fepYUCifdQweSoDarz+Ec w4k2o/7WUunuGPAKaSCAZGrePbh2ZhGG9EQren4Dgb+BFbD+TYkz4u3wbd/LZN1k Z80IB2SVzPuAAzue1kp+utsAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJntXiU cTvxYQ8n09dPt8T6/GyiMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt+JQUMJQrzm1ALOFmHOHRmL45ubdM/DLUZMVbiQcv5z0cWL0mfmQO bWlmpieStNuNexxjCj1PQtvQ7yLj3EzoMgt7JC9/MwV2KnLCLD3Y5ABq3/m9vpkE Jd9IkngvjsFde6m3wy7M58d/cpR+OMWObfhOOM9nV4xMxG8klBQGYdLqwfzwL0Vj SfKpsbEY87hyToFvVElp7moDGf5R+3SlQit+ctMR1qQ+wtU/tsCx7NO9+g+QMurF l1dYaS2jejq8fOFuqjgi+j74Zxnp47GJ8/phNYI5p/BYaMH+GeZLfBU/SzFUqfvw /DvthKNtat8EodCXr6t349GhsQSHmUFh -----END CERTIFICATE-----Generated at Thu Sep 18 23:29:13 2025 by rpki-client