$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: 8hqBvBXUFv9nTE7GSY+FZTBWvXRUps34th/KCWGALJE= Subject key identifier: C7:54:D6:5A:D2:84:1E:46:A3:4B:6F:67:E4:DD:85:84:3F:16:ED:08 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 0583 Signing time: Sun 02 Nov 2025 23:16:42 +0000 Manifest this update: Sun 02 Nov 2025 23:16:41 +0000 Manifest next update: Sun 09 Nov 2025 23:16:41 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: /PFS0wdjS3nVfho4YMr8mMHQzB1pOjr3m7O6vGSRmEg=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Nov 2 23:16:41 2025 GMT Not After : Nov 9 23:16:41 2025 GMT Subject: CN=6907e65a-6ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:fd:9d:0f:71:48:29:26:3a:f4:4d:f7:97: 1e:b3:fa:9c:8a:9e:8b:32:a7:12:07:df:3b:25:c0: 02:75:e9:70:03:cd:62:aa:ae:fb:59:ae:33:7b:05: 96:8f:a4:c4:f5:25:a7:ad:98:64:43:84:47:a7:4f: a7:da:2b:c3:94:65:0e:42:19:ed:6a:7e:4c:14:d3: f7:3e:dd:e8:c1:b0:58:25:5f:91:0a:02:df:f4:9b: ce:55:94:86:38:d9:d1:77:00:fd:41:b7:6b:dd:a4: b3:cf:ac:2a:f9:5b:7c:38:d4:23:f5:1c:67:6b:26: 5c:59:45:f6:8f:d8:a5:d0:a7:72:8e:9a:a4:4f:46: 26:85:bf:bd:dd:cf:6f:44:85:b1:10:62:de:39:dc: e4:0e:ac:1a:0f:82:bc:23:86:02:ab:19:ac:4c:b6: 22:69:76:29:c0:9a:3e:1f:07:9d:fa:5a:bf:c6:d2: 37:3b:a4:1e:67:8a:52:94:c1:76:d4:0d:19:0c:a3: b1:70:25:46:5d:18:0f:f0:d2:13:f4:34:b8:1b:b6: 82:74:a0:16:98:24:eb:63:e7:b9:5c:00:8e:2d:8a: 8d:15:9f:e6:e4:4b:ac:a8:13:fd:43:54:d8:46:a1: 3e:e9:31:e7:a1:02:63:d6:82:7e:fe:62:59:3f:a9: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:D6:5A:D2:84:1E:46:A3:4B:6F:67:E4:DD:85:84:3F:16:ED:08 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:46:79:4e:e3:e1:b7:d0:c4:85:ed:cd:7f:a7:22:3f:dd:bf: 52:4d:a0:e0:d9:07:c8:b8:19:67:f8:68:08:0e:83:0b:53:dd: b4:b1:4f:d0:a0:74:2b:51:2a:75:fc:90:1e:02:0d:bd:32:85: 71:63:27:4d:66:a2:64:be:e8:77:eb:17:e3:de:73:09:4c:6b: 05:a1:b6:83:3d:3d:f3:0b:2d:e9:4a:61:ac:7b:ab:cd:7e:67: dc:0b:e7:19:ef:e6:c9:b3:96:e1:e6:77:85:76:d4:14:59:0b: c0:a6:6c:9a:9e:20:8e:e5:4e:fe:10:bd:80:ce:aa:22:99:83: 32:3a:3e:97:b8:36:f1:b6:1c:ae:6b:f5:31:20:be:07:f5:27: 6a:87:77:c9:80:9a:30:07:f2:9f:de:9d:7f:83:0e:27:d7:0d: 41:3e:47:4a:08:94:55:4a:2d:19:48:e9:d2:54:d1:38:25:de: b3:af:31:bc:30:4f:37:85:73:1c:b8:73:24:f2:9e:2d:89:40: 1f:28:0d:c9:c3:cc:21:7f:1d:3e:da:b6:d6:b5:66:79:da:f4: fa:86:d7:45:53:74:9a:c7:ae:21:7d:16:fa:2c:2f:81:56:8a: b3:7d:d2:36:89:61:85:07:c7:b1:08:4c:c5:12:e7:a2:27:0a: 7e:e4:cb:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjUxMTAyMjMxNjQxWhcNMjUxMTA5MjMxNjQxWjAYMRYwFAYD VQQDEw02OTA3ZTY1YS02Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1/9nQ9xSCkmOvRN95ces/qcip6LMqcSB987JcACdelwA81iqq77Wa4zewWW j6TE9SWnrZhkQ4RHp0+n2ivDlGUOQhntan5MFNP3Pt3owbBYJV+RCgLf9JvOVZSG ONnRdwD9Qbdr3aSzz6wq+Vt8ONQj9RxnayZcWUX2j9il0KdyjpqkT0Ymhb+93c9v RIWxEGLeOdzkDqwaD4K8I4YCqxmsTLYiaXYpwJo+Hwed+lq/xtI3O6QeZ4pSlMF2 1A0ZDKOxcCVGXRgP8NIT9DS4G7aCdKAWmCTrY+e5XACOLYqNFZ/m5EusqBP9Q1TY RqE+6THnoQJj1oJ+/mJZP6kMdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdU1lrS hB5Go0tvZ+TdhYQ/Fu0IMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8RnlO4+G30MSF7c1/pyI/3b9STaDg2QfIuBln+GgIDoMLU920sU/Q oHQrUSp1/JAeAg29MoVxYydNZqJkvuh36xfj3nMJTGsFobaDPT3zCy3pSmGse6vN fmfcC+cZ7+bJs5bh5neFdtQUWQvApmyaniCO5U7+EL2AzqoimYMyOj6XuDbxthyu a/UxIL4H9Sdqh3fJgJowB/Kf3p1/gw4n1w1BPkdKCJRVSi0ZSOnSVNE4Jd6zrzG8 ME83hXMcuHMk8p4tiUAfKA3Jw8whfx0+2rbWtWZ52vT6htdFU3Sax64hfRb6LC+B VoqzfdI2iWGFB8exCEzFEueiJwp+5MsM -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:56 2025 by rpki-client