$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json) Hash identifier: llwIvHiAZtpYO+TwEFz1E32iewOtJBwvAErAi6mc778= Subject key identifier: 5F:D5:45:6D:1C:09:48:26:44:05:CF:8E:C3:90:A5:59:39:06:90:C1 Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft Manifest number: 26 Signing time: Mon 03 Nov 2025 07:42:02 +0000 Manifest this update: Mon 03 Nov 2025 07:42:02 +0000 Manifest next update: Mon 10 Nov 2025 07:42:02 +0000 Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: /7wPuJ24JjKEJDm+mLJpndnFgtK5Q9dcl7Jm4XZpZVQ=) 2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: 8dKxmjrD276AcnRHkqC+TGlsqBHgEpXfogCpAno8Nm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Validity Not Before: Nov 3 07:42:02 2025 GMT Not After : Nov 10 07:42:02 2025 GMT Subject: CN=69085cca-65c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:fd:f6:99:69:a1:df:d5:3b:1e:c7:62:58: 50:6e:78:77:28:21:48:3a:07:c4:a8:59:ef:e2:07: b9:8b:2b:5e:d3:0c:14:4e:04:d3:12:e1:87:f2:c7: cd:09:ef:14:0a:96:89:66:57:a2:e0:03:50:00:0d: c4:07:48:3c:22:e2:0c:a2:d7:76:31:47:b5:70:4a: 88:2e:f3:27:4a:30:ab:67:a1:39:23:3f:e8:59:b9: d6:4f:67:c0:86:12:f6:f9:b5:73:5d:e9:44:85:a3: da:65:36:09:5b:8d:48:81:c6:a0:f6:6c:1b:2d:ae: 94:ce:41:b6:35:66:f8:ac:b5:c4:7c:78:35:a2:80: 78:8e:d1:26:cb:a6:05:87:e1:08:d4:15:b9:da:be: bf:6e:7b:b0:23:f5:af:2a:85:0d:97:64:03:84:95: b3:e0:9e:43:1d:9e:d5:93:ef:9a:95:2d:55:ad:54: 23:8a:ee:25:b2:5f:aa:0a:63:b7:0e:86:73:6e:d3: 2f:a0:1c:03:10:fc:25:1d:fb:e5:25:35:79:65:fa: e0:7d:55:ba:e5:98:2b:8f:09:88:2f:8c:d8:c8:5e: 24:d3:91:e9:4a:d0:5e:df:f6:1e:62:4a:d8:72:80: 73:14:33:77:8d:c6:f0:ea:00:2c:aa:28:b0:e0:de: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:45:6D:1C:09:48:26:44:05:CF:8E:C3:90:A5:59:39:06:90:C1 X509v3 Authority Key Identifier: keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9d:d4:b0:94:9b:c2:82:ac:7d:6a:84:a4:86:28:6d:6d:f3: 25:e4:b6:64:65:e1:87:4c:fb:1d:4f:09:46:03:cf:f2:48:de: 68:18:75:ba:ce:0e:a8:3e:f9:82:1c:1b:f8:b0:fc:c5:bf:f6: 9b:02:86:ee:17:70:8a:e1:e7:08:c3:fa:2f:14:71:f3:53:e8: 7d:63:d5:18:81:97:52:77:fd:47:ff:fe:0e:d3:93:6c:a9:ba: c2:fd:6c:12:74:31:c7:9b:e0:c2:e5:70:53:4c:f6:b1:88:2c: d3:3a:17:28:b0:38:5a:73:a0:46:0a:8c:f5:8c:b0:65:75:72: 2d:fa:e7:94:8b:8b:68:34:64:55:a5:ab:15:6a:df:fe:d2:52: 6c:6e:4e:8f:09:87:88:84:c0:94:bb:9b:80:c9:d2:b0:31:8b: 2f:d2:1e:80:3b:8f:f5:3d:b2:dc:20:77:55:d5:da:22:93:b4: 1e:4c:82:47:65:74:d0:ee:1d:9a:56:e7:39:b8:01:bd:05:47: 32:8c:44:09:a9:b2:bd:92:47:8b:ee:a6:74:7d:03:21:65:0e: 2b:13:76:14:b1:98:d7:2f:aa:9e:b5:2b:1e:bb:62:5b:fe:b4: b3:ef:62:d6:98:c0:a6:b1:85:cd:73:60:4d:7a:3f:25:1c:2b: 6f:8c:15:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB RDNCNkUwRTAeFw0yNTExMDMwNzQyMDJaFw0yNTExMTAwNzQyMDJaMBgxFjAUBgNV BAMTDTY5MDg1Y2NhLTY1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe8v32mWmh39U7HsdiWFBueHcoIUg6B8SoWe/iB7mLK17TDBROBNMS4Yfyx80J 7xQKlolmV6LgA1AADcQHSDwi4gyi13YxR7VwSogu8ydKMKtnoTkjP+hZudZPZ8CG Evb5tXNd6USFo9plNglbjUiBxqD2bBstrpTOQbY1ZvistcR8eDWigHiO0SbLpgWH 4QjUFbnavr9ue7Aj9a8qhQ2XZAOElbPgnkMdntWT75qVLVWtVCOK7iWyX6oKY7cO hnNu0y+gHAMQ/CUd++UlNXll+uB9VbrlmCuPCYgvjNjIXiTTkelK0F7f9h5iSthy gHMUM3eNxvDqACyqKLDg3iSBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX9VFbRwJ SCZEBc+Ow5ClWTkGkMEwHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz cm9lNmFWSVNuUUswN2JnNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSd1LCUm8KCrH1qhKSGKG1t8yXktmRl4YdM+x1PCUYDz/JI3mgYdbrO Dqg++YIcG/iw/MW/9psChu4XcIrh5wjD+i8UcfNT6H1j1RiBl1J3/Uf//g7Tk2yp usL9bBJ0Mceb4MLlcFNM9rGILNM6FyiwOFpzoEYKjPWMsGV1ci3655SLi2g0ZFWl qxVq3/7SUmxuTo8Jh4iEwJS7m4DJ0rAxiy/SHoA7j/U9stwgd1XV2iKTtB5Mgkdl dNDuHZpW5zm4Ab0FRzKMRAmpsr2SR4vupnR9AyFlDisTdhSxmNcvqp61Kx67Ylv+ tLPvYtaYwKaxhc1zYE16PyUcK2+MFTk= -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:08 2025 by rpki-client