$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: XhxjxQiClO2Tz0ThxocsMvkJgb0RRPUBoC0egGMaRm4= Subject key identifier: B0:17:FC:AE:D8:A6:B8:45:95:64:70:8D:7D:B9:44:EB:34:49:8C:51 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 0153 Signing time: Wed 29 Oct 2025 03:39:28 +0000 Manifest this update: Wed 29 Oct 2025 03:39:27 +0000 Manifest next update: Wed 05 Nov 2025 03:39:27 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: vEgUXMG4Wrdkfs/KiOIdxMD363RQKdt2+wOqMfo5kgg=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Oct 29 03:39:27 2025 GMT Not After : Nov 5 03:39:27 2025 GMT Subject: CN=69018c70-38bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:79:d0:da:e1:69:75:6f:24:fb:a9:ee:31: 36:f0:c1:50:6d:28:6f:80:60:ee:51:53:a7:f5:2d: a2:04:3f:19:4d:cb:79:11:29:85:22:74:44:00:6f: 4c:2d:5d:66:a8:e5:b9:f2:7d:e2:91:3c:89:64:30: 2e:9f:ba:96:8c:42:d7:e3:d2:ec:fb:a7:ee:52:db: 38:e5:78:89:84:a3:8d:96:49:d5:94:bd:7e:ac:24: fb:1e:aa:9c:c7:ea:10:b1:77:81:6a:09:36:85:56: 27:2a:0c:7c:31:af:4e:bf:56:62:95:c6:e3:75:e6: 4d:b2:12:42:02:30:c4:5b:03:17:55:88:4e:e1:04: 73:0f:95:90:ec:82:26:fa:70:3f:40:b3:47:8a:35: a8:42:90:9c:cd:3a:b2:8e:c3:da:9b:47:52:81:98: 2c:9c:04:85:80:17:a8:f8:b6:e3:bf:a4:7e:ac:09: d0:6e:a1:81:98:c7:7b:87:19:8f:a8:e5:cd:07:9c: ba:d3:48:21:da:37:74:08:fa:e2:c0:22:d8:9d:07: a3:86:fd:37:3f:61:68:7b:3b:30:dd:81:0b:ad:dd: 21:be:84:47:1d:ae:00:54:33:a5:ff:88:20:51:2c: f9:10:ff:30:21:fb:59:aa:91:b3:fa:3f:10:f9:5e: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:17:FC:AE:D8:A6:B8:45:95:64:70:8D:7D:B9:44:EB:34:49:8C:51 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:56:91:c0:22:29:fa:c4:3e:70:00:98:35:ac:c7:a8:fb:1c: 2f:56:18:c7:6a:00:4f:c9:90:cb:0f:f2:3b:61:fb:ee:ec:84: b8:e4:8a:d9:71:85:57:9f:cb:66:7c:11:19:82:c0:59:7d:1b: b4:47:f5:4c:0d:05:c2:d7:d9:c7:57:6c:54:29:7e:e2:18:06: fd:45:5d:e7:5e:30:23:0b:34:8d:8b:d7:00:69:9f:66:71:4c: 42:6e:12:fa:38:cf:a5:47:11:6b:11:fe:c4:bb:b2:a0:b6:a9: c0:73:34:e3:7b:19:cc:dd:2b:9e:fd:a8:49:a6:0f:b5:94:10: 25:e9:7f:68:0c:9c:e7:63:55:ea:50:45:4e:88:ab:be:41:94: 45:53:df:5f:18:3d:fe:ac:48:05:a3:8a:91:b6:8a:f5:b1:bf: 0d:a9:cc:ff:ff:a1:80:b3:2c:42:75:b3:96:44:30:3a:80:3a: 4f:68:ad:b5:8a:86:2f:9e:e0:15:2a:b4:9e:c2:e8:e1:f3:b5: 5e:86:ad:56:d9:8d:19:19:9b:a8:6b:ee:6b:c5:1d:e6:81:bf: 43:dc:32:17:62:31:aa:ce:dd:b2:8d:65:53:0e:8f:a4:72:f9: 51:73:77:3c:66:85:14:7e:a6:04:8e:95:70:b4:6c:2f:ee:2d: d4:fc:2b:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUxMDI5MDMzOTI3WhcNMjUxMTA1MDMzOTI3WjAYMRYwFAYD VQQDEw02OTAxOGM3MC0zOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEV50NrhaXVvJPup7jE28MFQbShvgGDuUVOn9S2iBD8ZTct5ESmFInREAG9M LV1mqOW58n3ikTyJZDAun7qWjELX49Ls+6fuUts45XiJhKONlknVlL1+rCT7Hqqc x+oQsXeBagk2hVYnKgx8Ma9Ov1ZilcbjdeZNshJCAjDEWwMXVYhO4QRzD5WQ7IIm +nA/QLNHijWoQpCczTqyjsPam0dSgZgsnASFgBeo+Lbjv6R+rAnQbqGBmMd7hxmP qOXNB5y600gh2jd0CPriwCLYnQejhv03P2Foezsw3YELrd0hvoRHHa4AVDOl/4gg USz5EP8wIftZqpGz+j8Q+V6alQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAX/K7Y prhFlWRwjX25ROs0SYxRMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8VpHAIin6xD5wAJg1rMeo+xwvVhjHagBPyZDLD/I7Yfvu7IS45IrZ cYVXn8tmfBEZgsBZfRu0R/VMDQXC19nHV2xUKX7iGAb9RV3nXjAjCzSNi9cAaZ9m cUxCbhL6OM+lRxFrEf7Eu7KgtqnAczTjexnM3Sue/ahJpg+1lBAl6X9oDJznY1Xq UEVOiKu+QZRFU99fGD3+rEgFo4qRtor1sb8Nqcz//6GAsyxCdbOWRDA6gDpPaK21 ioYvnuAVKrSewujh87Vehq1W2Y0ZGZuoa+5rxR3mgb9D3DIXYjGqzt2yjWVTDo+k cvlRc3c8ZoUUfqYEjpVwtGwv7i3U/Cs/ -----END CERTIFICATE-----Generated at Thu Oct 30 06:29:45 2025 by rpki-client