$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: W6KNnct13UD3n2FSZDzi8/LGDYDmFO+hmHk/yXRvJf0= Subject key identifier: 3B:EA:09:40:5F:08:7A:1B:FC:1F:9A:A8:D1:CF:58:20:85:9D:07:7D Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:52:14 +0000 Manifest this update: Mon 03 Nov 2025 07:52:14 +0000 Manifest next update: Mon 10 Nov 2025 07:52:14 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: 8INEFlcFqqvZGbMd+GmCk7Gcf2+j6IbHli60glia9Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Nov 3 07:52:14 2025 GMT Not After : Nov 10 07:52:14 2025 GMT Subject: CN=69085f2e-e59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:13:32:4b:1f:c0:24:3a:b0:81:cc:ca:77: 9d:7a:24:f1:52:9e:06:e2:84:e4:c5:c7:ba:29:0d: 33:f6:7f:47:ef:5c:ca:b5:9d:b7:6e:af:20:dc:63: 42:b5:ba:08:39:9c:95:93:62:bd:48:37:ec:48:57: b3:6e:c2:da:96:9a:d1:0d:a2:88:4e:62:3a:4c:c4: 72:24:ff:b5:6a:03:35:6c:ab:56:09:fe:46:0e:7d: 34:dc:18:dc:46:8e:7c:0f:1d:6a:99:b2:60:9d:f1: fc:fa:6b:ac:4c:61:b1:eb:d0:65:1f:09:c0:04:8e: 8f:5c:6c:9c:a1:e2:ff:a2:93:ce:31:36:77:04:7f: f4:67:60:10:32:c5:0b:65:35:c2:cf:de:b1:9f:76: de:0d:a1:96:8c:a3:b0:28:88:b8:5d:1b:b8:c2:d3: 6c:29:3c:a2:be:a7:78:15:ea:16:ed:73:ca:29:46: e6:51:ec:38:22:8e:cf:c2:b4:ff:56:03:cc:b9:38: f7:44:3e:46:d3:d9:e8:60:49:26:3d:d9:62:48:94: ea:08:a8:67:ae:91:68:4c:ef:92:60:90:aa:e7:36: 93:61:6d:ac:fc:d6:d3:9f:27:59:94:b6:a8:b5:81: eb:1b:98:21:c2:f0:57:fc:05:62:d1:25:28:c7:3c: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:09:40:5F:08:7A:1B:FC:1F:9A:A8:D1:CF:58:20:85:9D:07:7D X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:da:11:6f:31:98:af:66:27:8c:d2:3d:da:64:16:ba:b7:08: b3:83:80:5e:4d:bd:e8:38:38:f8:ea:70:95:a0:aa:cd:88:ec: 3f:66:51:28:d8:9d:42:1c:c6:55:38:69:ad:a0:d7:3f:87:31: 78:2a:2b:d1:3d:cd:5a:7c:95:6c:83:c4:bd:35:4d:d9:f9:af: 01:92:e0:b3:e4:8b:8b:4c:3a:3c:59:d2:34:f2:67:5e:b8:8a: 0b:65:8a:73:a0:9a:66:e3:57:16:57:14:f7:1c:d0:2a:f6:8e: 62:f2:8e:c2:23:4d:f9:1d:29:a6:0a:b0:9b:3d:00:ff:5e:a0: 8d:b0:50:02:eb:43:0d:7a:47:b6:ee:3b:ae:88:29:b9:ff:67: 86:c7:c0:96:07:15:23:98:74:54:4f:a9:27:44:2c:a4:66:cb: c6:bb:66:09:eb:44:28:db:f7:6e:99:49:4a:1b:c5:ad:51:a3: ee:85:2a:1a:b4:8e:9c:01:5f:ac:1e:31:90:22:8b:78:2c:1d: 03:7a:4a:01:95:b7:50:06:e4:f3:74:ac:4a:ea:ad:9b:fa:ef: a8:bb:64:a4:2b:b8:fb:53:a2:63:8a:f5:7e:37:94:78:bf:76: a2:ba:ac:58:a9:c1:30:92:2e:7f:38:b4:d9:85:01:f8:68:81: c1:36:13:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4 RDUxNDA3RTAeFw0yNTExMDMwNzUyMTRaFw0yNTExMTAwNzUyMTRaMBgxFjAUBgNV BAMTDTY5MDg1ZjJlLWU1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRFhMySx/AJDqwgczKd516JPFSngbihOTFx7opDTP2f0fvXMq1nbduryDcY0K1 ugg5nJWTYr1IN+xIV7NuwtqWmtENoohOYjpMxHIk/7VqAzVsq1YJ/kYOfTTcGNxG jnwPHWqZsmCd8fz6a6xMYbHr0GUfCcAEjo9cbJyh4v+ik84xNncEf/RnYBAyxQtl NcLP3rGfdt4NoZaMo7AoiLhdG7jC02wpPKK+p3gV6hbtc8opRuZR7Dgijs/CtP9W A8y5OPdEPkbT2ehgSSY92WJIlOoIqGeukWhM75JgkKrnNpNhbaz81tOfJ1mUtqi1 gesbmCHC8Ff8BWLRJSjHPKDTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO+oJQF8I ehv8H5qo0c9YIIWdB30wHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF S1hsOEpHUWdwOW8xUlFINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPaEW8xmK9mJ4zSPdpkFrq3CLODgF5Nveg4OPjqcJWgqs2I7D9mUSjY nUIcxlU4aa2g1z+HMXgqK9E9zVp8lWyDxL01Tdn5rwGS4LPki4tMOjxZ0jTyZ164 igtlinOgmmbjVxZXFPcc0Cr2jmLyjsIjTfkdKaYKsJs9AP9eoI2wUALrQw16R7bu O66IKbn/Z4bHwJYHFSOYdFRPqSdELKRmy8a7ZgnrRCjb926ZSUobxa1Ro+6FKhq0 jpwBX6weMZAii3gsHQN6SgGVt1AG5PN0rErqrZv676i7ZKQruPtTomOK9X43lHi/ dqK6rFipwTCSLn84tNmFAfhogcE2EwU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:41 2025 by rpki-client