$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: EVN/Y8WPM3lTSHwvbTQp7ZzFmvTmzIDkxBC5JPBEcuw= Subject key identifier: 98:04:BF:BF:19:16:49:7A:45:D8:2E:9E:A7:69:DE:2D:89:42:F2:FF Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 34D5 Signing time: Sun 02 Nov 2025 14:26:50 +0000 Manifest this update: Sun 02 Nov 2025 14:26:49 +0000 Manifest next update: Sun 09 Nov 2025 14:26:49 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: DOqpoR93g7ZUy/cNtQIfOfFGvoHYn3iSZFInKv5wXSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: Nov 2 14:26:49 2025 GMT Not After : Nov 9 14:26:49 2025 GMT Subject: CN=69076a2a-2eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:23:ec:a4:0e:86:b6:56:39:ce:21:b3:5d:ea: 23:d2:ed:59:83:00:79:5d:82:fd:13:a9:05:90:22: 24:ad:5b:ee:bb:2d:93:5b:cf:5f:a8:cf:e8:ec:89: 88:33:9d:1d:b0:a3:ab:a4:9e:6c:b4:63:45:f0:1b: cb:43:8a:93:cb:f0:20:e2:82:c3:de:98:76:b6:d0: 78:79:60:dd:34:d6:39:34:af:7b:ff:76:5d:5b:c1: d7:04:d4:19:ba:da:66:d8:96:ca:af:93:89:67:7f: 82:4a:f6:bb:27:b5:8e:73:99:0d:5e:1e:cd:78:62: a4:a2:91:78:27:b0:47:49:73:63:77:7a:0a:a1:e7: 24:41:7a:c7:bc:f2:06:1c:34:fd:a3:00:da:97:af: ee:5c:79:fc:aa:f6:6e:bf:0f:f6:a2:4e:d6:25:f8: b8:24:41:70:09:2d:38:07:50:ae:42:d1:50:89:3c: 48:60:6f:bd:06:2a:bb:1a:bc:97:d6:3c:2f:5d:b3: b2:24:50:ca:20:0d:ef:03:61:41:a0:1e:e7:8d:f2: 37:96:a0:a0:c8:97:a3:1a:5b:d7:cb:6b:55:36:f2: 18:e1:4a:b8:ac:45:24:f4:6a:58:74:9d:bb:68:df: 8e:b2:82:f7:d2:de:a0:2a:ea:66:dd:1c:90:c6:fd: f4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:04:BF:BF:19:16:49:7A:45:D8:2E:9E:A7:69:DE:2D:89:42:F2:FF X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:87:6d:6f:00:b4:9b:fa:54:fc:ad:95:cd:ac:8b:28:03:8d: d3:30:ef:45:32:b5:ac:91:cc:49:90:eb:45:f0:28:0b:43:35: 3c:4f:7a:0e:69:ae:e2:51:15:42:1f:33:fe:c1:0c:ef:ad:cf: b4:62:bb:d0:da:ca:f5:39:3d:bc:fc:c7:67:ee:bc:52:0d:5d: 55:a1:05:55:90:38:5b:f3:a2:23:f1:ed:a3:69:d7:0a:f5:52: 45:f9:f2:22:46:52:04:24:bf:e1:d5:c0:e2:a1:eb:e3:7e:13: 66:cb:e1:15:85:68:74:6e:a7:aa:6e:74:80:b9:d3:8b:d5:b2: fc:ab:81:6d:ed:27:83:22:3b:a8:a0:63:24:42:e2:9e:33:47: c1:eb:91:a8:92:4a:eb:11:68:b4:74:bd:e0:5b:91:95:5e:1c: 89:8b:1a:54:e7:c7:ed:d8:6d:5e:11:bd:2d:44:45:6b:36:ff: f8:c5:47:ff:e8:5c:21:c6:1b:15:0d:4a:83:15:88:79:5e:6a: 60:9e:f1:28:18:6c:00:5c:1c:26:df:d6:41:77:e6:6a:78:4f: 4e:fa:37:fb:b9:8b:e4:d6:3e:47:66:ee:ce:d0:f4:a3:d3:59: 1d:78:ce:07:1d:c9:f0:e5:db:71:85:df:71:0d:00:05:d6:a2: 07:09:91:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjUxMTAyMTQyNjQ5WhcNMjUxMTA5MTQyNjQ5WjAYMRYwFAYD VQQDEw02OTA3NmEyYS0yZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yPspA6GtlY5ziGzXeoj0u1ZgwB5XYL9E6kFkCIkrVvuuy2TW89fqM/o7ImI M50dsKOrpJ5stGNF8BvLQ4qTy/Ag4oLD3ph2ttB4eWDdNNY5NK97/3ZdW8HXBNQZ utpm2JbKr5OJZ3+CSva7J7WOc5kNXh7NeGKkopF4J7BHSXNjd3oKoeckQXrHvPIG HDT9owDal6/uXHn8qvZuvw/2ok7WJfi4JEFwCS04B1CuQtFQiTxIYG+9Biq7GryX 1jwvXbOyJFDKIA3vA2FBoB7njfI3lqCgyJejGlvXy2tVNvIY4Uq4rEUk9GpYdJ27 aN+OsoL30t6gKupm3RyQxv30GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgEv78Z Fkl6Rdgunqdp3i2JQvL/MB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7h21vALSb+lT8rZXNrIsoA43TMO9FMrWskcxJkOtF8CgLQzU8T3oO aa7iURVCHzP+wQzvrc+0YrvQ2sr1OT28/Mdn7rxSDV1VoQVVkDhb86Ij8e2jadcK 9VJF+fIiRlIEJL/h1cDioevjfhNmy+EVhWh0bqeqbnSAudOL1bL8q4Ft7SeDIjuo oGMkQuKeM0fB65GokkrrEWi0dL3gW5GVXhyJixpU58ft2G1eEb0tREVrNv/4xUf/ 6FwhxhsVDUqDFYh5XmpgnvEoGGwAXBwm39ZBd+ZqeE9O+jf7uYvk1j5HZu7O0PSj 01kdeM4HHcnw5dtxhd9xDQAF1qIHCZFk -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:02 2025 by rpki-client