$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft File: CRERb8OOld9ZFjfYxmS0X7FvS9o.mft (raw, json) Hash identifier: mLxoP8D7tkW7J1TvILSCgvVkjosPI5uyyq0vkae+GGY= Subject key identifier: BA:AE:64:EF:A3:1B:8D:63:F2:0C:79:7B:7F:2D:47:BF:1E:B1:E7:D7 Authority key identifier: 09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA Certificate issuer: /CN=A9174C7A/serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft Manifest number: 4F Signing time: Mon 03 Nov 2025 07:16:10 +0000 Manifest this update: Mon 03 Nov 2025 07:16:09 +0000 Manifest next update: Mon 10 Nov 2025 07:16:09 +0000 Files and hashes: 1: CRERb8OOld9ZFjfYxmS0X7FvS9o.crl (hash: wGniYSeTsmZYdlXX5Inxtg8nrniA9xs18EBfYIGI8OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=0911116FC38E95DF591637D8C664B45FB16F4BDA Validity Not Before: Nov 3 07:16:09 2025 GMT Not After : Nov 10 07:16:09 2025 GMT Subject: CN=690856b9-e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:46:0d:ac:5a:56:59:d5:d0:a8:b7:d3:af: e7:45:42:26:71:96:8b:90:1b:0d:23:dd:76:a8:6f: 4b:e5:53:93:e5:59:d0:37:67:b9:a6:01:b5:7c:e0: 80:b2:6f:c9:8a:db:fa:05:86:0f:45:b6:97:6d:62: d8:81:67:88:6a:b2:5e:99:d5:33:0d:95:6d:74:d0: df:8c:a5:df:b1:05:8d:f4:87:c2:f8:0f:d5:26:b8: 80:ba:77:c4:5e:5b:51:93:6b:21:46:48:ee:05:cc: 5f:3b:59:2b:63:c2:5f:64:3a:9c:8f:8e:4f:76:0c: d0:3a:9a:89:21:1a:f8:a8:f7:1c:55:86:f4:35:5f: a2:8d:80:8f:f4:36:2f:b3:6d:c3:df:7c:8e:95:9a: f6:b5:df:c8:0a:32:2e:40:86:3d:e3:32:a5:0b:f2: 60:e2:ad:1a:68:ac:d8:64:20:10:50:58:10:e0:a4: 62:cf:55:6f:bb:61:93:2d:28:22:c2:dc:82:fc:95: 45:7e:ed:84:75:f7:37:b2:01:16:de:c0:07:fd:58: c8:66:8d:b5:37:cc:82:3c:1d:24:2c:18:9a:59:0e: 78:e4:e0:06:a5:2d:1e:28:02:33:2a:6e:51:31:19: f4:9d:c3:cc:49:61:5a:75:6d:f3:e1:15:f1:a1:69: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AE:64:EF:A3:1B:8D:63:F2:0C:79:7B:7F:2D:47:BF:1E:B1:E7:D7 X509v3 Authority Key Identifier: keyid:09:11:11:6F:C3:8E:95:DF:59:16:37:D8:C6:64:B4:5F:B1:6F:4B:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CRERb8OOld9ZFjfYxmS0X7FvS9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/4DF16DD0404611F09BF0D84FC4F9AE02/CRERb8OOld9ZFjfYxmS0X7FvS9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:8d:2d:8a:20:e8:58:78:1a:e7:16:3a:ee:dc:7c:34:e4: b5:1c:d5:8e:a7:30:fe:6d:bc:d9:0c:93:59:a7:a6:bb:dd:91: e1:d0:5a:94:bf:c4:f6:a5:73:69:3e:31:e2:83:f9:04:d5:6f: 4d:ab:52:bb:51:9f:40:ee:31:9b:b6:da:bc:e7:fc:9a:e9:4d: b6:12:2b:77:bd:9d:57:b1:1c:d5:3c:41:f0:6e:1b:53:fc:f6: 56:99:4c:ff:68:ad:1e:14:ef:61:1c:75:ad:6b:51:22:ce:a1: 8e:bd:71:d6:80:66:7d:b5:30:2c:47:34:28:fc:68:6c:61:c7: 91:7c:93:f0:68:bb:79:9c:43:8d:3e:61:ee:54:53:2d:6c:f0: 3b:63:45:63:7f:ee:ee:95:62:3c:67:51:87:3c:f5:9b:aa:e5: ad:24:ca:b7:b1:1e:37:5b:7b:f4:d1:24:f8:fa:7f:97:63:87: 9b:2e:ce:36:9c:ee:91:94:8f:03:a0:51:db:ed:e6:a4:03:bf: cd:6c:05:21:f8:20:c7:0e:e0:c6:4f:74:b2:b9:aa:b7:55:cc: b8:6a:e5:e1:64:f0:10:48:13:99:69:d2:36:f6:ce:92:61:36: 5b:c6:3c:9c:ad:8f:20:fd:76:8c:50:5a:b9:ee:f8:d4:a7:ed: 41:2e:01:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NEM3QTExMC8GA1UEBRMoMDkxMTExNkZDMzhFOTVERjU5MTYzN0Q4QzY2NEI0NUZC MTZGNEJEQTAeFw0yNTExMDMwNzE2MDlaFw0yNTExMTAwNzE2MDlaMBgxFjAUBgNV BAMTDTY5MDg1NmI5LWUzMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr+EYNrFpWWdXQqLfTr+dFQiZxlouQGw0j3Xaob0vlU5PlWdA3Z7mmAbV84ICy b8mK2/oFhg9FtpdtYtiBZ4hqsl6Z1TMNlW100N+Mpd+xBY30h8L4D9UmuIC6d8Re W1GTayFGSO4FzF87WStjwl9kOpyPjk92DNA6mokhGvio9xxVhvQ1X6KNgI/0Ni+z bcPffI6Vmva138gKMi5Ahj3jMqUL8mDirRporNhkIBBQWBDgpGLPVW+7YZMtKCLC 3IL8lUV+7YR19zeyARbewAf9WMhmjbU3zII8HSQsGJpZDnjk4AalLR4oAjMqblEx GfSdw8xJYVp1bfPhFfGhaYK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuq5k76Mb jWPyDHl7fy1Hvx6x59cwHwYDVR0jBBgwFoAUCRERb8OOld9ZFjfYxmS0X7FvS9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzRERjE2REQwNDA0 NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5WkZqZll4bVMwWDdGdlM5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1JFUmI4T09sZDlaRmpmWXhtUzBYN0Z2UzlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0 QzdBLzRERjE2REQwNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL0NSRVJiOE9PbGQ5 WkZqZll4bVMwWDdGdlM5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGojS2KIOhYeBrnFjru3Hw05LUc1Y6nMP5tvNkMk1mnprvdkeHQWpS/ xPalc2k+MeKD+QTVb02rUrtRn0DuMZu22rzn/JrpTbYSK3e9nVexHNU8QfBuG1P8 9laZTP9orR4U72Ecda1rUSLOoY69cdaAZn21MCxHNCj8aGxhx5F8k/Bou3mcQ40+ Ye5UUy1s8DtjRWN/7u6VYjxnUYc89Zuq5a0kyrexHjdbe/TRJPj6f5djh5suzjac 7pGUjwOgUdvt5qQDv81sBSH4IMcO4MZPdLK5qrdVzLhq5eFk8BBIE5lp0jb2zpJh NlvGPJytjyD9doxQWrnu+NSn7UEuAeo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:51 2025 by rpki-client