$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: AAh9lCPgAS3ziWl7mlO+1NMkYEgVupaaSDfO98+esBU= Subject key identifier: B1:B9:82:E6:E7:4C:8B:C1:E1:11:FC:EB:31:BE:5E:9A:5E:92:86:EF Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0CB4 Signing time: Sun 02 Nov 2025 18:10:50 +0000 Manifest this update: Sun 02 Nov 2025 18:10:50 +0000 Manifest next update: Sun 09 Nov 2025 18:10:50 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: dEgFMJA6GyltZYOj/cC8AZZwxP+xQp12IyE05y4OPuA=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Nov 2 18:10:50 2025 GMT Not After : Nov 9 18:10:50 2025 GMT Subject: CN=69079eaa-4c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:64:f0:b0:0a:58:7f:28:c5:c4:bb:10:b8: 3d:5c:42:66:e7:eb:2f:d8:b5:37:11:4d:69:6e:6a: 9f:d0:f5:a3:0f:70:e5:4b:02:be:d1:94:5f:5b:4f: 60:bf:9b:12:e3:61:cd:db:48:0c:53:05:8b:d3:96: 1b:f5:88:9e:8c:e7:f1:dc:fa:18:b3:0e:46:da:f0: 0b:e1:f6:64:ce:23:c4:6b:b2:92:5e:42:20:18:5b: 02:42:04:d0:5b:78:ba:d8:89:e6:15:0d:4f:91:3f: 0e:ba:29:d2:97:18:ad:e3:c0:50:b6:d6:52:17:e4: 96:93:a7:86:c8:53:1a:d9:c9:a6:86:c0:59:b1:c6: c5:99:c4:41:84:41:8b:9a:98:1f:2e:f9:d6:79:79: a7:82:fd:75:59:0b:e5:e1:d7:82:26:af:1c:9a:ab: d2:53:cf:3c:c8:6a:27:3a:a6:4c:e7:6d:91:ec:74: e9:1d:b4:c1:97:e9:06:7d:91:9e:b7:ec:dc:ee:c2: a6:9c:73:34:81:83:79:4f:92:fe:28:d6:ee:a8:63: 3f:70:55:3b:b0:e5:9a:55:ca:84:4c:ad:8a:bc:b6: 55:72:14:64:de:08:6a:4c:e9:d0:43:c3:af:21:99: 0a:98:a2:6c:21:4f:0f:fb:4f:26:c8:98:82:8f:16: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B9:82:E6:E7:4C:8B:C1:E1:11:FC:EB:31:BE:5E:9A:5E:92:86:EF X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:46:55:50:d8:98:1f:e0:d8:f7:52:6e:97:97:d0:ad:3e:a2: 34:97:8c:9c:09:df:5f:14:48:3c:9d:c0:c7:3b:d7:0a:29:ac: 8f:76:96:15:d8:c1:3d:09:2b:43:02:85:9f:9e:37:12:01:29: 13:9e:9f:0b:25:67:a7:ad:22:c9:d6:9c:16:e0:06:e0:52:93: 87:09:0b:d0:6a:24:4b:c2:f1:15:05:60:aa:a3:36:f4:97:f4: 83:ac:c2:99:57:51:5b:af:d6:2e:6f:0a:13:88:17:f9:2f:94: fd:2a:88:44:4d:33:43:49:3e:08:8d:e1:da:dd:f5:de:35:2a: 73:5a:c1:5a:52:e9:ec:c8:c7:b8:b3:43:8b:eb:4b:f6:43:ce: 72:0e:90:e1:c7:36:19:ac:fc:18:f3:25:dc:73:5a:a3:d7:af: 60:40:00:e9:17:0c:2c:16:86:69:e0:89:53:9a:6f:1f:1b:74: ac:37:13:74:94:a6:d9:19:f7:e2:ee:c1:92:c8:7b:a5:2b:fb: bf:7c:8b:0c:d5:42:05:60:9e:ff:90:c2:82:69:97:b1:22:e8: 77:8c:2a:bb:9b:23:1d:ec:6b:b8:49:7c:ff:98:c0:42:48:7d: 0a:9a:9a:50:c5:c1:7e:88:5c:9e:a1:2b:59:82:1b:03:54:46: 90:03:1e:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUxMTAyMTgxMDUwWhcNMjUxMTA5MTgxMDUwWjAYMRYwFAYD VQQDEw02OTA3OWVhYS00YzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTVk8LAKWH8oxcS7ELg9XEJm5+sv2LU3EU1pbmqf0PWjD3DlSwK+0ZRfW09g v5sS42HN20gMUwWL05Yb9YiejOfx3PoYsw5G2vAL4fZkziPEa7KSXkIgGFsCQgTQ W3i62InmFQ1PkT8OuinSlxit48BQttZSF+SWk6eGyFMa2cmmhsBZscbFmcRBhEGL mpgfLvnWeXmngv11WQvl4deCJq8cmqvSU888yGonOqZM522R7HTpHbTBl+kGfZGe t+zc7sKmnHM0gYN5T5L+KNbuqGM/cFU7sOWaVcqETK2KvLZVchRk3ghqTOnQQ8Ov IZkKmKJsIU8P+08myJiCjxZKKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG5gubn TIvB4RH86zG+XppekobvMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjRlVQ2Jgf4Nj3Um6Xl9CtPqI0l4ycCd9fFEg8ncDHO9cKKayPdpYV 2ME9CStDAoWfnjcSASkTnp8LJWenrSLJ1pwW4AbgUpOHCQvQaiRLwvEVBWCqozb0 l/SDrMKZV1Fbr9YubwoTiBf5L5T9KohETTNDST4IjeHa3fXeNSpzWsFaUunsyMe4 s0OL60v2Q85yDpDhxzYZrPwY8yXcc1qj169gQADpFwwsFoZp4IlTmm8fG3SsNxN0 lKbZGffi7sGSyHulK/u/fIsM1UIFYJ7/kMKCaZexIuh3jCq7myMd7Gu4SXz/mMBC SH0KmppQxcF+iFyeoStZghsDVEaQAx7R -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:28 2025 by rpki-client