$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft File: k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json) Hash identifier: bJZbiIloBmWMjb2WW0FWEMsV3EqTZX2nWjac1RBlk00= Subject key identifier: 96:4E:27:40:E3:30:58:83:12:75:45:59:F8:3F:09:03:8F:C4:BD:0C Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 Certificate issuer: /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft Manifest number: 022F Signing time: Mon 27 Oct 2025 03:28:02 +0000 Manifest this update: Mon 27 Oct 2025 03:28:01 +0000 Manifest next update: Mon 03 Nov 2025 03:28:01 +0000 Files and hashes: 1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: 7296IoK7Rz06dhehvcGa9LMxnGJHDEdyDshA+IDrX2o=) 2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: Hz4MNEz2iKlBVZUTwXmU+LHuAvQlzMxEja9uy8vjPy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98 Validity Not Before: Oct 27 03:28:01 2025 GMT Not After : Nov 3 03:28:01 2025 GMT Subject: CN=68fee6c2-c4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:29:6b:14:81:2a:02:90:d7:13:a4:ea:a8: d8:e4:d5:cf:e8:4b:57:82:8f:a7:7a:47:57:9b:58: c2:0c:bc:5c:9d:ec:38:1c:89:34:b5:2f:1a:d9:3c: 50:5f:00:a2:37:7c:dc:c5:83:00:22:ee:ac:24:52: f2:96:34:19:19:2c:f4:a1:a8:13:94:d3:95:8a:b4: ff:09:c6:8d:58:a9:0e:cc:fc:73:a9:ff:ea:62:09: cc:ce:6f:fb:c7:39:7d:00:88:2f:4a:87:0e:07:f4: e1:d8:33:73:c5:b9:a6:5b:48:79:c4:e9:87:e6:31: c4:1f:73:81:83:12:97:d5:b3:ec:53:86:5c:87:0e: 6b:c8:55:ae:2c:0f:0c:e9:83:3b:dd:d5:53:51:60: 69:56:18:f6:13:81:b2:d0:ea:4f:af:32:4b:a0:4e: 19:f1:84:bc:c8:76:01:ee:00:8d:6c:1d:df:ed:71: f6:88:bc:01:78:ec:e1:68:b8:c1:2e:45:25:b6:41: 56:ff:a5:33:55:50:6c:3a:4f:aa:e4:8c:05:e1:94: 25:17:3b:6f:0c:a4:27:dd:8f:e4:bb:12:69:80:54: 67:94:4e:48:87:56:bb:c8:69:a9:53:55:99:c2:ac: e8:d4:40:eb:96:b8:5f:d1:70:bb:33:cd:66:e2:f8: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4E:27:40:E3:30:58:83:12:75:45:59:F8:3F:09:03:8F:C4:BD:0C X509v3 Authority Key Identifier: keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:67:fd:a5:d6:23:b9:a9:c3:7d:56:8f:95:59:8a:58:c8:f1: a1:8e:db:04:8a:d0:59:e2:44:8f:a2:f1:8f:a6:b1:79:42:d3: f6:ee:1b:b7:c6:68:37:79:6f:84:bd:4f:df:b5:1e:c2:49:92: 32:75:8b:21:ce:94:59:6b:50:6a:f8:0e:6e:7d:dd:3f:f7:45: fe:d9:ab:2e:cd:ef:fd:78:f6:2f:50:58:3f:33:80:e2:ed:bc: 39:e4:a2:d7:46:1a:bc:fa:af:a5:a9:bb:54:53:d0:67:5b:aa: 15:ec:fe:c0:aa:c6:dc:6e:b6:7d:5c:e7:bf:35:e1:10:4e:9f: f5:07:b0:df:e1:74:47:69:c4:4d:a8:8a:fe:fe:d1:94:29:c7: f7:a0:9b:17:62:c6:46:05:75:26:44:47:94:7d:4e:7a:44:37: f2:93:b4:57:ff:d7:1b:70:d1:8e:da:db:ec:b4:7d:be:ce:1b: db:40:27:cd:56:dc:d0:4d:c9:a6:f6:7f:2a:72:20:09:10:9c: 34:81:e4:d5:6b:32:d6:e7:15:5f:56:52:8b:e3:f6:e8:3a:3d: 51:40:a3:c9:23:d0:cc:28:57:67:21:4c:ac:31:fc:16:e5:bf: 11:45:8d:fc:3b:65:7f:e0:3c:cf:d8:06:45:ff:49:5e:95:66: 4d:26:ad:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE3ODgxMTAvBgNVBAUTKDkzQzBCQTE3OUFDQUExQzA3OUQzM0M2NjkzRjQ0Njcw MTA0RkNEOTgwHhcNMjUxMDI3MDMyODAxWhcNMjUxMTAzMDMyODAxWjAYMRYwFAYD VQQDEw02OGZlZTZjMi1jNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpApaxSBKgKQ1xOk6qjY5NXP6EtXgo+nekdXm1jCDLxcnew4HIk0tS8a2TxQ XwCiN3zcxYMAIu6sJFLyljQZGSz0oagTlNOVirT/CcaNWKkOzPxzqf/qYgnMzm/7 xzl9AIgvSocOB/Th2DNzxbmmW0h5xOmH5jHEH3OBgxKX1bPsU4Zchw5ryFWuLA8M 6YM73dVTUWBpVhj2E4Gy0OpPrzJLoE4Z8YS8yHYB7gCNbB3f7XH2iLwBeOzhaLjB LkUltkFW/6UzVVBsOk+q5IwF4ZQlFztvDKQn3Y/kuxJpgFRnlE5Ih1a7yGmpU1WZ wqzo1EDrlrhf0XC7M81m4vgeQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZOJ0Dj MFiDEnVFWfg/CQOPxL0MMB8GA1UdIwQYMBaAFJPAuheayqHAedM8ZpP0RnAQT82Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTc4OC8zRDA1MTVBMDU5 QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29jQjUwenhta19SR2NCQlB6 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QzZGNXJLb2NCNTB6eG1rX1JHY0JCUHpaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTc4OC8zRDA1MTVBMDU5QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29j QjUwenhta19SR2NCQlB6WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEZ/2l1iO5qcN9Vo+VWYpYyPGhjtsEitBZ4kSPovGPprF5QtP27hu3 xmg3eW+EvU/ftR7CSZIydYshzpRZa1Bq+A5ufd0/90X+2asuze/9ePYvUFg/M4Di 7bw55KLXRhq8+q+lqbtUU9BnW6oV7P7AqsbcbrZ9XOe/NeEQTp/1B7Df4XRHacRN qIr+/tGUKcf3oJsXYsZGBXUmREeUfU56RDfyk7RX/9cbcNGO2tvstH2+zhvbQCfN VtzQTcmm9n8qciAJEJw0geTVazLW5xVfVlKL4/boOj1RQKPJI9DMKFdnIUysMfwW 5b8RRY38O2V/4DzP2AZF/0lelWZNJq05 -----END CERTIFICATE-----Generated at Tue Oct 28 13:44:14 2025 by rpki-client