$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft File: 4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json) Hash identifier: 8CZZK1lcF4q/61ajqJ00Ypa8kpJWxnXJoFVx/ByZfM4= Subject key identifier: 99:6A:8E:25:EF:A0:D2:27:50:1E:09:E3:BC:41:60:71:5D:FE:60:6D Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D Certificate issuer: /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft Manifest number: 0149 Signing time: Mon 03 Nov 2025 04:17:23 +0000 Manifest this update: Mon 03 Nov 2025 04:17:22 +0000 Manifest next update: Mon 10 Nov 2025 04:17:22 +0000 Files and hashes: 1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: S3q4yWfFVxZikDQ4eoLXjIQwaThlmy5t9v8O6ORuRA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D Validity Not Before: Nov 3 04:17:22 2025 GMT Not After : Nov 10 04:17:22 2025 GMT Subject: CN=69082cd2-527f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:30:5c:4b:3f:26:f4:21:51:0c:1f:d9:2c: ed:a6:d2:da:3c:10:e2:0e:80:57:9e:11:87:1f:cd: 87:fe:08:5f:06:25:5a:b8:3d:40:40:7c:d2:17:db: 8a:5f:bb:ec:93:e6:b7:d0:ac:03:a3:84:27:e1:c1: b7:f8:9b:4b:89:f0:c1:55:9f:a3:36:68:7e:30:bc: e1:9d:90:4b:4f:a0:8d:f4:c1:38:12:78:6b:16:77: 98:a1:c3:b6:26:80:1d:5a:42:52:e1:d0:f8:74:45: 8a:16:b0:bb:6a:68:b8:b2:a7:b0:92:98:4a:ad:97: 5d:24:01:30:72:da:3a:d7:1d:f0:d1:e3:57:68:cd: 82:db:ad:c2:93:cd:1d:f1:b6:d1:41:f9:d4:85:a5: 54:89:15:f8:51:84:56:0b:c1:1d:46:f8:ca:c3:13: 73:00:3c:f8:4c:71:e4:c4:90:56:9f:58:12:0a:ce: d2:60:ea:c2:89:7f:ec:10:0e:e4:3d:8f:bc:74:89: 2d:e1:59:1b:e7:b6:bc:d3:1b:b7:28:5b:c5:ba:19: 91:e3:22:95:b9:98:02:d8:ba:e2:6e:76:b7:ef:2d: 7a:6c:64:8b:2b:33:62:b7:40:d2:7b:30:50:19:93: fa:ab:51:66:39:b1:16:ad:db:67:2d:d6:b5:dc:1b: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6A:8E:25:EF:A0:D2:27:50:1E:09:E3:BC:41:60:71:5D:FE:60:6D X509v3 Authority Key Identifier: keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:f6:0d:7c:2c:cc:7c:49:77:90:20:ae:ad:92:e8:53:5a:7b: 78:a1:7c:fe:e3:9a:ec:40:02:87:54:13:af:71:e2:22:11:09: 6d:f2:15:d0:1a:89:bb:e0:1f:a3:69:62:42:9b:a1:b3:a7:bf: 60:cf:69:b8:d1:24:1a:04:49:62:46:cc:09:ae:c7:c7:b2:86: 71:d0:58:60:3f:0d:71:c8:ef:ae:21:a3:28:f5:37:5d:fb:45: a7:49:f8:85:1f:da:28:13:33:f7:2e:99:3b:de:ff:41:8d:b2: 66:6c:60:c1:b8:d5:2b:18:32:91:3c:82:52:37:aa:3a:8f:f6: 45:be:c3:15:b9:aa:a6:39:af:ee:d4:64:60:93:2c:82:33:05: 6e:83:75:3d:b5:e9:bd:dd:e2:d8:b6:34:8c:16:9b:79:f8:7a: 46:52:54:59:0d:0a:b2:41:cf:2a:d5:22:f2:42:7a:3f:d5:e2: 43:3a:0e:36:50:c6:09:85:0b:49:77:cd:1b:a7:39:1b:0d:11: 56:51:fc:3f:18:4a:42:5d:a7:0c:d7:ca:52:61:9a:1f:7c:f3: 14:5c:87:03:2a:77:76:70:b5:ac:26:1c:d8:8c:24:9b:38:61: 3e:d5:38:20:93:0a:33:7a:3a:78:a7:aa:d3:3d:ed:31:c2:68: 67:8a:72:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKEUwMTk0QUE1M0I1ODIxQjlCRDBDNUM3QjgzNTJCQjEz ODE4NTNGOUQwHhcNMjUxMTAzMDQxNzIyWhcNMjUxMTEwMDQxNzIyWjAYMRYwFAYD VQQDEw02OTA4MmNkMi01MjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SswXEs/JvQhUQwf2SztptLaPBDiDoBXnhGHH82H/ghfBiVauD1AQHzSF9uK X7vsk+a30KwDo4Qn4cG3+JtLifDBVZ+jNmh+MLzhnZBLT6CN9ME4EnhrFneYocO2 JoAdWkJS4dD4dEWKFrC7ami4sqewkphKrZddJAEwcto61x3w0eNXaM2C263Ck80d 8bbRQfnUhaVUiRX4UYRWC8EdRvjKwxNzADz4THHkxJBWn1gSCs7SYOrCiX/sEA7k PY+8dIkt4Vkb57a80xu3KFvFuhmR4yKVuZgC2Lribna37y16bGSLKzNit0DSezBQ GZP6q1FmObEWrdtnLda13BuIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlqjiXv oNInUB4J47xBYHFd/mBtMB8GA1UdIwQYMBaAFOAZSqU7WCG5vQxce4NSuxOBhT+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi82OTU2QUUzRUJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUlibTlERng3ZzFLN0U0R0ZQ NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCbEtwVHRZSWJtOURGeDdnMUs3RTRHRlA1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi82OTU2QUUzRUJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi80QmxLcFR0WUli bTlERng3ZzFLN0U0R0ZQNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB09g18LMx8SXeQIK6tkuhTWnt4oXz+45rsQAKHVBOvceIiEQlt8hXQ Gom74B+jaWJCm6Gzp79gz2m40SQaBEliRswJrsfHsoZx0FhgPw1xyO+uIaMo9Tdd +0WnSfiFH9ooEzP3Lpk73v9BjbJmbGDBuNUrGDKRPIJSN6o6j/ZFvsMVuaqmOa/u 1GRgkyyCMwVug3U9tem93eLYtjSMFpt5+HpGUlRZDQqyQc8q1SLyQno/1eJDOg42 UMYJhQtJd80bpzkbDRFWUfw/GEpCXacM18pSYZoffPMUXIcDKnd2cLWsJhzYjCSb OGE+1Tggkwozejp4p6rTPe0xwmhninLh -----END CERTIFICATE-----Generated at Tue Nov 4 01:11:43 2025 by rpki-client