$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft File: 4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json) Hash identifier: wI42iTbW4msfplW/sfNvyPb3yrql5gDVoyV4W26R0dE= Subject key identifier: 5B:DE:EC:EE:A7:42:36:D8:52:DD:D3:56:89:44:E1:D7:E7:51:08:27 Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D Certificate issuer: /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft Manifest number: 34B0 Signing time: Sun 24 Aug 2025 14:27:26 +0000 Manifest this update: Sun 24 Aug 2025 14:27:26 +0000 Manifest next update: Sun 31 Aug 2025 14:27:26 +0000 Files and hashes: 1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: FjQSVgOlnpyRYvEQ+UfEWFInjvv9nt8UDhCPCuVxI1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D Validity Not Before: Aug 24 14:27:26 2025 GMT Not After : Aug 31 14:27:26 2025 GMT Subject: CN=68ab214e-1cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:5f:a4:12:52:fa:62:53:8b:2f:1b:aa:ce: 30:3e:b3:27:4f:43:88:68:26:72:76:47:dd:0e:49: af:5d:e5:2b:c5:fb:b8:69:b8:5c:f7:2e:55:31:91: 52:e2:fd:00:a5:63:f8:72:60:8f:ab:5d:c2:a7:3d: b0:03:15:f6:b3:1d:e5:7e:ed:c1:21:95:ae:77:a6: ad:93:04:ea:5c:39:d6:81:57:92:07:dc:a7:97:06: ff:01:f9:e6:91:92:65:d3:09:ef:20:38:12:ff:b6: 94:06:9c:04:d4:14:bb:17:fb:b4:03:14:71:82:2c: 1b:be:8b:b9:4f:c2:32:e9:0b:54:de:01:2e:75:c3: a8:c1:e1:ba:99:50:23:05:16:fb:be:2d:3b:56:b6: e1:3f:48:46:a6:36:09:81:b9:63:9e:e2:d1:1e:f4: 79:14:63:04:8f:d6:5d:02:dd:fb:0e:a3:c1:40:6e: 1f:95:ed:24:95:f0:8a:09:2d:89:43:5c:ce:5d:99: 17:c4:4b:63:11:bf:65:13:c0:c2:43:6e:2d:d2:32: 76:30:46:ed:6c:2c:00:e4:cd:52:cc:1c:01:12:08: 3e:1a:15:fe:1e:fe:60:4c:01:7d:24:9a:d9:d9:4a: 12:cc:1a:9a:7a:aa:e0:a5:fc:f0:70:0a:55:ec:0e: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:EC:EE:A7:42:36:D8:52:DD:D3:56:89:44:E1:D7:E7:51:08:27 X509v3 Authority Key Identifier: keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a2:a2:d3:54:9c:f0:48:29:5c:c3:bb:ec:77:6f:37:a1:56: fc:d9:87:a4:07:32:cb:82:90:01:01:6b:83:48:cc:f1:78:60: 34:65:a0:ff:a5:a4:57:f4:dc:7e:3a:22:fe:cf:c9:54:6b:cc: 73:54:bc:a6:6d:c4:ab:31:2a:a7:87:8d:f7:86:43:7c:31:75: c6:07:90:12:50:de:2d:54:0c:55:4a:b0:63:28:52:62:42:50: 0b:8e:bb:fc:5e:89:27:5c:8e:d2:c2:f1:d1:bd:5c:d8:98:f6: 95:4e:87:f1:4b:1d:1b:b3:24:82:78:4c:15:f8:3b:26:00:53: 69:64:64:75:de:53:f1:53:e5:e7:2e:3f:5f:7f:b8:4c:0e:68: 5a:2b:02:cb:63:30:b5:b4:d0:17:88:94:60:b2:22:43:2d:7d: 15:7c:cc:4b:07:f0:48:02:da:f9:1f:1b:7b:f1:0c:fc:00:d3: df:98:b3:41:ba:7d:da:94:8a:74:1d:6b:bd:a1:bf:7c:9c:83: 82:35:0c:bd:f7:9e:b0:25:29:b4:b6:32:96:c3:75:56:22:9f: 1f:32:a6:fc:08:88:00:39:60:92:cf:dc:3e:68:ef:e4:07:07: b1:75:f6:36:9b:f8:29:52:1d:19:6a:0a:5e:38:00:a0:af:4a: 15:97:b7:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw RDZGQjc5NEQwHhcNMjUwODI0MTQyNzI2WhcNMjUwODMxMTQyNzI2WjAYMRYwFAYD VQQDEw02OGFiMjE0ZS0xY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrhfpBJS+mJTiy8bqs4wPrMnT0OIaCZydkfdDkmvXeUrxfu4abhc9y5VMZFS 4v0ApWP4cmCPq13Cpz2wAxX2sx3lfu3BIZWud6atkwTqXDnWgVeSB9ynlwb/Afnm kZJl0wnvIDgS/7aUBpwE1BS7F/u0AxRxgiwbvou5T8Iy6QtU3gEudcOoweG6mVAj BRb7vi07VrbhP0hGpjYJgbljnuLRHvR5FGMEj9ZdAt37DqPBQG4fle0klfCKCS2J Q1zOXZkXxEtjEb9lE8DCQ24t0jJ2MEbtbCwA5M1SzBwBEgg+GhX+Hv5gTAF9JJrZ 2UoSzBqaeqrgpfzwcApV7A53fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFve7O6n QjbYUt3TVolE4dfnUQgnMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp TG9yQTZmOXMxWUVOYjdlVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZoqLTVJzwSClcw7vsd283oVb82YekBzLLgpABAWuDSMzxeGA0ZaD/ paRX9Nx+OiL+z8lUa8xzVLymbcSrMSqnh433hkN8MXXGB5ASUN4tVAxVSrBjKFJi QlALjrv8XoknXI7SwvHRvVzYmPaVTofxSx0bsySCeEwV+DsmAFNpZGR13lPxU+Xn Lj9ff7hMDmhaKwLLYzC1tNAXiJRgsiJDLX0VfMxLB/BIAtr5Hxt78Qz8ANPfmLNB un3alIp0HWu9ob98nIOCNQy9956wJSm0tjKWw3VWIp8fMqb8CIgAOWCSz9w+aO/k BwexdfY2m/gpUh0ZagpeOACgr0oVl7eh -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:26 2025 by rpki-client