$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft File: F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json) Hash identifier: FsnXMUjEcQjVjy4DcoLSHYmOG9nOCl+4K17fnYh59Xw= Subject key identifier: AA:99:E4:F9:8A:16:65:05:C3:28:DC:8D:61:D2:AA:7C:A4:8A:7A:9C Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B Certificate issuer: /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft Manifest number: 8D Signing time: Mon 03 Nov 2025 06:32:13 +0000 Manifest this update: Mon 03 Nov 2025 06:32:12 +0000 Manifest next update: Mon 10 Nov 2025 06:32:12 +0000 Files and hashes: 1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: AxKmVGKr3x0HIZYQSpiUGJ6Kup0eAPKpzNvVnYQK7eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B Validity Not Before: Nov 3 06:32:12 2025 GMT Not After : Nov 10 06:32:12 2025 GMT Subject: CN=69084c6c-0742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:93:83:e3:7c:80:34:ec:1a:ef:25:23:c9: 2b:bd:6d:9e:4e:af:f5:76:7b:19:c7:b4:7f:2d:e7: 0d:9a:32:1a:e6:4b:cf:e4:53:44:e9:ea:ba:9e:1d: ea:c6:56:57:65:79:44:fc:d6:08:0f:ea:0f:ef:6b: ed:e7:ec:6a:17:e0:24:1c:c5:38:0d:6d:1e:22:e2: 82:44:5c:15:a5:70:fc:87:16:20:2f:cf:67:a7:0a: 93:4e:2b:92:41:c5:55:2e:11:3a:67:cf:8d:77:d8: 83:a1:57:dd:43:7d:1b:24:37:78:66:30:69:6a:d5: 38:f1:32:59:3c:d0:47:19:1e:1c:da:90:db:54:05: 73:15:4f:8a:1a:ff:ba:b0:d1:7f:0d:a4:78:b5:fc: 8d:0e:81:38:64:e7:10:e2:45:c4:69:bc:66:32:a0: bb:4c:e1:8c:65:65:02:77:9d:33:ba:fa:d0:9b:0f: 39:89:f6:f1:8e:15:86:dd:da:e0:e2:3f:e0:14:ca: 74:d3:3e:d8:c0:ad:38:dd:4e:d1:9c:54:46:78:aa: 03:0f:60:85:93:c5:5c:ae:98:6d:21:04:54:e8:61: e0:f1:b3:31:bd:fd:67:a4:88:5a:42:97:fd:cd:25: 21:9a:a7:bd:5f:40:51:84:8d:42:c0:02:f6:d3:4d: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:99:E4:F9:8A:16:65:05:C3:28:DC:8D:61:D2:AA:7C:A4:8A:7A:9C X509v3 Authority Key Identifier: keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:5e:3a:d6:e2:58:36:24:c3:fa:3f:6d:29:b9:af:d8:60: 34:bf:2b:14:d7:14:84:59:e8:c5:e0:96:be:95:43:69:7e:cc: ca:99:04:84:03:85:4d:8e:8b:76:12:61:3b:4f:75:58:9b:cb: 78:9d:04:c2:22:d1:51:80:9c:96:83:f2:0c:c6:6d:00:ef:b5: a9:ad:dd:e7:16:01:15:0b:97:b9:cd:c3:b1:21:4e:a8:85:b6: 16:16:a6:47:61:a7:a8:d9:94:aa:75:1a:30:4d:95:9d:4e:a6: 8d:e4:19:d3:31:ee:b9:28:a0:ef:81:40:8d:28:1a:65:74:a2: 31:22:2c:9d:09:a7:16:d0:83:a4:5c:4c:b8:50:df:ea:ad:21: 00:12:27:bd:00:61:34:75:74:20:5b:c9:4b:f3:2b:f1:36:de: 99:cc:5e:85:2e:61:4a:d5:de:9a:0c:d9:9e:bd:49:4d:44:c3: 05:f6:22:d1:42:88:12:da:d1:b1:49:2d:d3:bc:87:6d:de:d2: 6f:58:c7:94:36:ac:ec:a0:1a:f7:fd:df:17:66:e5:e8:72:27: 44:77:4e:1b:ac:5e:ff:eb:13:dd:03:4f:16:cd:02:5a:c6:2c: d8:e2:2a:cf:c1:75:be:d2:2b:6b:67:a1:7b:21:b8:b3:bb:23: 59:37:1a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKDE3OEM2QkI0NzZCMzdDNUYxNUU2RTk1M0FCRTRDQkNG MDg2MTA4MkIwHhcNMjUxMTAzMDYzMjEyWhcNMjUxMTEwMDYzMjEyWjAYMRYwFAYD VQQDEw02OTA4NGM2Yy0wNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT2Tg+N8gDTsGu8lI8krvW2eTq/1dnsZx7R/LecNmjIa5kvP5FNE6eq6nh3q xlZXZXlE/NYID+oP72vt5+xqF+AkHMU4DW0eIuKCRFwVpXD8hxYgL89npwqTTiuS QcVVLhE6Z8+Nd9iDoVfdQ30bJDd4ZjBpatU48TJZPNBHGR4c2pDbVAVzFU+KGv+6 sNF/DaR4tfyNDoE4ZOcQ4kXEabxmMqC7TOGMZWUCd50zuvrQmw85ifbxjhWG3drg 4j/gFMp00z7YwK043U7RnFRGeKoDD2CFk8VcrphtIQRU6GHg8bMxvf1npIhaQpf9 zSUhmqe9X0BRhI1CwAL2002ZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqZ5PmK FmUFwyjcjWHSqnykinqcMB8GA1UdIwQYMBaAFBeMa7R2s3xfFebpU6vky88IYQgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zQTgyOTBFOERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZGOFY1dWxUcS1UTHp3aGhD Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0eHJ0SGF6ZkY4VjV1bFRxLVRMendoaENDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDlGNS8zQTgyOTBFOERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi9GNHhydEhhemZG OFY1dWxUcS1UTHp3aGhDQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyV461uJYNiTD+j9tKbmv2GA0vysU1xSEWejF4Ja+lUNpfszKmQSE A4VNjot2EmE7T3VYm8t4nQTCItFRgJyWg/IMxm0A77Wprd3nFgEVC5e5zcOxIU6o hbYWFqZHYaeo2ZSqdRowTZWdTqaN5BnTMe65KKDvgUCNKBpldKIxIiydCacW0IOk XEy4UN/qrSEAEie9AGE0dXQgW8lL8yvxNt6ZzF6FLmFK1d6aDNmevUlNRMMF9iLR QogS2tGxSS3TvIdt3tJvWMeUNqzsoBr3/d8XZuXocidEd04brF7/6xPdA08WzQJa xizY4irPwXW+0itrZ6F7IbizuyNZNxr0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:55 2025 by rpki-client