$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: KXZZgu7iQs+GRIo7IzOBo9pmaM7oj/lvSTm2hfP8/rc= Subject key identifier: D9:1E:74:5D:39:B5:36:6E:7C:8D:9B:64:75:94:F9:87:9B:0B:45:C1 Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0C77 Signing time: Tue 04 Nov 2025 18:30:51 +0000 Manifest this update: Tue 04 Nov 2025 18:30:50 +0000 Manifest next update: Tue 11 Nov 2025 18:30:50 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: J9+4cQoOSDF9O3N+jU049Shaf3urFKj3v8hTb4jzl0M=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: Nov 4 18:30:50 2025 GMT Not After : Nov 11 18:30:50 2025 GMT Subject: CN=690a465a-ea9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:cf:9f:d5:47:bb:75:dd:3d:2d:8f:ce:74: e9:57:16:d2:b4:0d:a2:25:f0:60:6a:b0:bb:78:af: 02:47:1b:71:ca:cf:52:52:21:9e:2d:c4:3d:eb:db: 37:62:80:e0:87:a3:ef:7c:d9:bb:8c:19:8b:44:c0: be:f1:0b:92:b8:a5:27:b4:56:6c:9e:87:39:a5:55: b3:2a:c2:e6:76:d9:43:f9:dc:a8:84:d0:39:01:e4: ba:f0:7e:66:1b:80:27:1f:a7:18:5d:01:c0:ea:67: 04:2d:5e:fd:cc:8d:db:0e:91:61:4d:11:ef:7a:76: a5:c4:62:d2:11:50:dc:d0:f4:b9:50:f0:00:81:9a: 19:5a:72:12:b3:82:f8:9c:79:1e:3f:5a:1f:c3:02: ba:0d:fb:2e:90:d0:8e:2b:15:3d:47:cf:7e:90:0f: f9:cc:96:53:ed:db:a9:69:c8:bc:30:f7:b7:34:10: a5:2a:be:1a:c3:6e:51:f0:69:8c:e5:c4:a3:fd:ed: 8e:75:91:1f:c9:68:04:fc:25:2e:33:59:0c:97:f6: 9c:b3:c6:12:2a:f8:5f:6a:29:37:af:85:94:d8:e2: 1b:03:8a:22:5b:50:4a:f3:30:ba:5b:08:e7:5c:a7: b0:4b:6e:8f:29:e8:47:1e:20:0f:46:4a:ba:7f:a4: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:74:5D:39:B5:36:6E:7C:8D:9B:64:75:94:F9:87:9B:0B:45:C1 X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6c:00:4c:5d:9e:76:8e:8f:2f:1b:39:62:b4:44:e6:6f:06: ba:b9:a4:da:a9:a1:4b:a6:a3:69:f5:6a:a8:58:a3:a7:7f:e7: 8e:08:2d:e5:91:5d:36:60:85:b7:07:33:eb:94:04:a7:c6:a5: 1c:1f:cc:91:34:30:81:c9:e8:6c:4e:3a:87:66:75:11:8f:6b: 76:74:1a:2d:5c:65:dc:a3:c6:26:3c:f5:0f:a5:5e:73:21:50: f4:92:15:79:c3:2d:10:08:4e:3b:f9:34:74:ac:e2:e6:4a:88: a6:ff:9f:0f:2f:71:1a:36:de:9e:95:0e:dc:f6:fd:6e:de:7b: fd:0b:7a:50:3b:da:27:4f:58:c5:68:0a:92:4e:79:bc:77:7f: 47:e8:fb:19:89:d4:a8:fe:b5:04:9a:ba:8e:88:7a:cc:ad:fe: 1c:47:eb:9a:24:ae:b5:8d:dd:30:36:22:68:3f:59:24:10:03: 2d:81:b2:e0:e0:61:84:dc:d8:08:8c:91:e3:fc:ad:6a:8a:d9: fa:a8:88:be:cf:4b:46:2f:6d:18:09:e1:79:6b:41:98:9c:09: a0:57:6e:83:73:3e:57:73:09:01:b3:93:a1:f3:28:64:c1:b7: 1a:dd:87:1a:6e:24:34:9a:a2:1e:33:98:df:26:82:44:81:4f: 00:c0:97:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjUxMTA0MTgzMDUwWhcNMjUxMTExMTgzMDUwWjAYMRYwFAYD VQQDEw02OTBhNDY1YS1lYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlmfPn9VHu3XdPS2PznTpVxbStA2iJfBgarC7eK8CRxtxys9SUiGeLcQ969s3 YoDgh6PvfNm7jBmLRMC+8QuSuKUntFZsnoc5pVWzKsLmdtlD+dyohNA5AeS68H5m G4AnH6cYXQHA6mcELV79zI3bDpFhTRHvenalxGLSEVDc0PS5UPAAgZoZWnISs4L4 nHkeP1ofwwK6DfsukNCOKxU9R89+kA/5zJZT7dupaci8MPe3NBClKr4aw25R8GmM 5cSj/e2OdZEfyWgE/CUuM1kMl/acs8YSKvhfaik3r4WU2OIbA4oiW1BK8zC6Wwjn XKewS26PKehHHiAPRkq6f6R48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkedF05 tTZufI2bZHWU+YebC0XBMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANbABMXZ52jo8vGzlitETmbwa6uaTaqaFLpqNp9WqoWKOnf+eOCC3l kV02YIW3BzPrlASnxqUcH8yRNDCByehsTjqHZnURj2t2dBotXGXco8YmPPUPpV5z IVD0khV5wy0QCE47+TR0rOLmSoim/58PL3EaNt6elQ7c9v1u3nv9C3pQO9onT1jF aAqSTnm8d39H6PsZidSo/rUEmrqOiHrMrf4cR+uaJK61jd0wNiJoP1kkEAMtgbLg 4GGE3NgIjJHj/K1qitn6qIi+z0tGL20YCeF5a0GYnAmgV26Dcz5XcwkBs5Oh8yhk wbca3YcabiQ0mqIeM5jfJoJEgU8AwJdy -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:40 2025 by rpki-client