$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft File: mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json) Hash identifier: Lw3yq7RV3/NruTaZEVvLGPHymWqUbp/HlCc9pKKENgA= Subject key identifier: 74:5D:F2:C8:36:5E:F7:A4:AA:64:09:D2:9D:E4:99:99:04:5B:BC:BE Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 Certificate issuer: /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft Manifest number: 4D Signing time: Wed 17 Sep 2025 08:02:29 +0000 Manifest this update: Wed 17 Sep 2025 08:02:28 +0000 Manifest next update: Wed 24 Sep 2025 08:02:28 +0000 Files and hashes: 1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: WVLSFKlX/kNMO/0cs6ip+52uml/iL/h4TPG98nlXscY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748 Validity Not Before: Sep 17 08:02:28 2025 GMT Not After : Sep 24 08:02:28 2025 GMT Subject: CN=68ca6b15-e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7c:1c:9d:cc:ec:98:bd:bb:74:80:4e:d2:7c: b6:6c:0a:14:23:01:35:eb:95:d0:26:a0:28:ee:5b: 33:59:4f:7b:f8:70:9d:6a:fa:6c:85:ae:91:9e:2d: e7:0f:ba:9e:a6:11:fb:ab:95:76:f1:ed:ea:41:d5: 53:ff:a3:86:8b:d1:67:7e:56:c5:c5:06:04:6f:a9: 7a:e8:79:a8:a2:63:ca:8e:a5:d6:5f:6c:15:68:fa: 99:d2:a4:52:a2:79:07:26:e7:66:5e:9b:c0:d0:2d: 18:a8:46:87:ec:39:5b:c7:ed:f9:11:ba:48:51:20: dd:a8:6e:6e:e6:90:8c:af:bd:55:6e:2b:33:13:bd: 92:2f:57:cd:f4:d7:74:09:13:07:df:69:18:5c:d2: af:58:bd:ac:83:15:ad:7c:bd:70:70:e9:2b:16:fd: 29:19:3b:bb:76:fb:b3:05:d0:23:ed:60:ff:2d:f0: c9:f6:12:07:74:9f:da:1b:99:46:51:25:0e:ee:55: 7b:2b:78:c8:9e:a9:ea:49:98:36:39:ff:7a:b1:49: 47:93:2b:5e:39:ae:8f:94:b3:fd:b6:10:79:35:6e: bd:94:b6:b4:5e:40:73:99:cc:ef:4a:20:f7:a8:15: df:07:5e:4d:60:62:5d:7d:57:e3:57:f1:d1:d2:f3: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5D:F2:C8:36:5E:F7:A4:AA:64:09:D2:9D:E4:99:99:04:5B:BC:BE X509v3 Authority Key Identifier: keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a8:5d:13:b4:03:64:d3:53:ce:b3:4d:d7:81:2c:b9:6f:03: 45:91:a8:fe:3a:57:11:c5:b9:20:b2:bf:fc:23:88:9a:0a:ae: 9d:0a:26:05:bb:89:98:ea:98:90:44:c7:de:92:6b:d9:13:72: de:8c:f6:24:30:d9:ce:12:4b:d1:63:6e:f5:ee:78:2b:08:15: 19:9f:bc:35:f6:cc:9a:87:0c:d0:92:cc:f2:c4:45:27:75:9a: 67:c6:10:53:c4:87:0a:fa:bf:f9:ba:d8:06:68:ff:be:9e:cd: 0e:81:74:0d:af:04:47:1f:4a:2e:20:ba:84:3c:54:b2:bb:d8: 7c:9c:ff:50:94:f6:4a:de:c0:50:66:da:2e:a9:0f:50:74:67: 93:f2:40:94:47:f4:3a:70:58:09:5b:b1:94:21:5d:5b:36:67: 90:21:1d:c0:39:3d:1f:0d:cb:39:88:c0:ba:b9:34:95:fa:32: 91:b7:54:9b:af:74:71:8f:d9:b0:d2:49:c4:e5:d9:32:ec:f3: bc:85:6f:1d:75:c7:a6:9c:ab:0f:5c:33:77:b1:07:b4:98:1b: 14:65:d5:51:a1:83:cb:7f:f3:aa:97:ee:79:bc:8e:9c:cb:c8: f5:87:5b:05:53:ea:8b:e7:12:99:9e:dc:7b:78:c1:16:cc:27: 15:00:26:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTY4QjExMC8GA1UEBRMoOUFENEM4MDUzMjhDRURDRjUxOTAzNDA0ODk2NDc0RDZE RTQ4Njc0ODAeFw0yNTA5MTcwODAyMjhaFw0yNTA5MjQwODAyMjhaMBgxFjAUBgNV BAMTDTY4Y2E2YjE1LWU0OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjfBydzOyYvbt0gE7SfLZsChQjATXrldAmoCjuWzNZT3v4cJ1q+myFrpGeLecP up6mEfurlXbx7epB1VP/o4aL0Wd+VsXFBgRvqXroeaiiY8qOpdZfbBVo+pnSpFKi eQcm52Zem8DQLRioRofsOVvH7fkRukhRIN2obm7mkIyvvVVuKzMTvZIvV83013QJ EwffaRhc0q9YvayDFa18vXBw6SsW/SkZO7t2+7MF0CPtYP8t8Mn2Egd0n9obmUZR JQ7uVXsreMieqepJmDY5/3qxSUeTK145ro+Us/22EHk1br2UtrReQHOZzO9KIPeo Fd8HXk1gYl19V+NX8dHS8+JjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdF3yyDZe 96SqZAnSneSZmQRbvL4wHwYDVR0jBBgwFoAUmtTIBTKM7c9RkDQEiWR01t5IZ0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNjhCLzE2QTkwQzQ0MUNG MDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5UmtEUUVpV1IwMXQ1SVow Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbXRUSUJUS003YzlSa0RRRWlXUjAxdDVJWjBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF NjhCLzE2QTkwQzQ0MUNGMDExRjA4OENGNzE4MkM0RjlBRTAyL210VElCVEtNN2M5 UmtEUUVpV1IwMXQ1SVowZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE+oXRO0A2TTU86zTdeBLLlvA0WRqP46VxHFuSCyv/wjiJoKrp0KJgW7 iZjqmJBEx96Sa9kTct6M9iQw2c4SS9FjbvXueCsIFRmfvDX2zJqHDNCSzPLERSd1 mmfGEFPEhwr6v/m62AZo/76ezQ6BdA2vBEcfSi4guoQ8VLK72Hyc/1CU9krewFBm 2i6pD1B0Z5PyQJRH9DpwWAlbsZQhXVs2Z5AhHcA5PR8NyzmIwLq5NJX6MpG3VJuv dHGP2bDSScTl2TLs87yFbx11x6acqw9cM3exB7SYGxRl1VGhg8t/86qX7nm8jpzL yPWHWwVT6ovnEpme3Ht4wRbMJxUAJnY= -----END CERTIFICATE-----Generated at Thu Sep 18 23:45:26 2025 by rpki-client