$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json) Hash identifier: 29BGBhpYiLb1NlU/rPXCX/8BJsm7qrGmuRAjuqwUwYk= Subject key identifier: 5A:72:31:56:AD:DA:D2:AF:1A:EE:30:29:5B:2E:22:8C:7E:CC:E6:82 Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft Manifest number: 17 Signing time: Mon 03 Nov 2025 07:53:40 +0000 Manifest this update: Mon 03 Nov 2025 07:53:39 +0000 Manifest next update: Mon 10 Nov 2025 07:53:39 +0000 Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: AWXRrEHAXjLFbKTUbd21LzCaiB4b4CA39ayARZSabLg=) 2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Validity Not Before: Nov 3 07:53:39 2025 GMT Not After : Nov 10 07:53:39 2025 GMT Subject: CN=69085f83-05b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:c6:3b:26:a1:5e:1b:1a:5f:4b:27:91:72: 32:6b:10:b1:b3:df:31:51:86:90:21:ed:c4:a8:e1: 50:63:0b:cb:85:32:23:f0:22:3b:cf:21:58:8b:1d: 96:7f:67:d4:bc:88:8a:6a:6e:15:f9:e2:28:f4:c8: ac:30:8b:cf:f5:99:f3:73:c4:70:2b:a1:ad:75:03: d6:68:6a:b9:a5:23:5f:12:4e:0a:6c:3a:c3:1d:1e: 0d:48:ee:83:a2:a9:38:e3:17:22:07:92:30:3a:86: 08:be:b5:14:45:c2:f7:86:d3:9a:e2:24:66:ec:3e: 30:75:a6:42:1b:0c:ad:45:aa:89:9b:0e:20:22:e8: eb:8e:37:05:94:c0:52:06:6a:86:09:52:01:2c:33: ba:45:fe:a7:2e:25:79:60:9f:d4:dd:5f:97:59:5d: 0d:32:e2:49:88:84:3a:18:90:97:8a:09:25:eb:2a: 36:72:ac:90:5b:c3:c8:c8:25:85:02:59:2e:0a:cc: b2:d9:8f:af:ea:7d:48:d8:10:e7:d1:8e:7d:d9:0e: 7b:f1:fa:1e:c0:bf:31:10:da:56:4a:51:dc:8c:09: 80:ab:16:fd:15:2b:5f:a8:4c:4b:00:78:cb:6a:d3: e2:32:b7:06:01:62:5a:d5:bb:a1:01:e1:45:c8:ab: 78:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:31:56:AD:DA:D2:AF:1A:EE:30:29:5B:2E:22:8C:7E:CC:E6:82 X509v3 Authority Key Identifier: keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c9:84:6d:a4:03:46:a1:5e:85:1d:e1:be:14:98:98:0a:54: 77:c1:8f:9f:21:b1:15:b1:97:f8:b2:08:6f:23:e4:1b:ac:ff: 70:e6:17:d4:0d:fc:c6:3d:16:55:71:d1:11:ba:ce:17:ff:03: 72:5d:56:07:b6:58:0b:20:99:39:60:cd:7b:1b:8a:4d:42:d7: aa:dd:c1:32:d5:dd:3f:86:48:ac:71:28:19:e9:64:0b:f2:1d: 57:77:d7:d4:0e:96:77:e0:4e:22:58:7c:1e:8b:45:aa:08:d2: 7c:ac:5b:6a:4a:be:b3:cb:a6:84:73:a7:18:08:ea:59:be:4f: 44:64:8c:61:6e:a9:54:a3:16:51:12:a7:2a:6d:69:fc:22:fa: c2:15:e7:71:80:22:e8:70:14:94:66:b9:e2:1c:a8:c1:da:80: 4c:3a:b1:c1:a5:29:44:2e:0d:39:89:5b:3d:64:c8:8b:05:13: 34:0d:f0:36:da:2b:d9:a5:23:fc:29:22:a4:5d:6d:02:ac:29: 33:c0:ce:62:8a:a8:80:29:93:0b:4e:83:09:2d:ec:57:c5:79: 90:de:dd:63:f4:ab:c6:86:03:a8:07:47:e2:29:71:b9:1d:c8: 59:b3:de:fc:1b:40:11:36:09:93:20:a0:70:bd:90:a5:d6:20: dd:d9:50:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkMxRjExMC8GA1UEBRMoRDRBNEYwQjYwMDBERTAyMjQ4QzQ2NTdBRjlERDI2QjAy M0M1RjY3OTAeFw0yNTExMDMwNzUzMzlaFw0yNTExMTAwNzUzMzlaMBgxFjAUBgNV BAMTDTY5MDg1ZjgzLTA1YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDITsY7JqFeGxpfSyeRcjJrELGz3zFRhpAh7cSo4VBjC8uFMiPwIjvPIViLHZZ/ Z9S8iIpqbhX54ij0yKwwi8/1mfNzxHAroa11A9ZoarmlI18STgpsOsMdHg1I7oOi qTjjFyIHkjA6hgi+tRRFwveG05riJGbsPjB1pkIbDK1FqombDiAi6OuONwWUwFIG aoYJUgEsM7pF/qcuJXlgn9TdX5dZXQ0y4kmIhDoYkJeKCSXrKjZyrJBbw8jIJYUC WS4KzLLZj6/qfUjYEOfRjn3ZDnvx+h7AvzEQ2lZKUdyMCYCrFv0VK1+oTEsAeMtq 0+IytwYBYlrVu6EB4UXIq3jLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWnIxVq3a 0q8a7jApWy4ijH7M5oIwHwYDVR0jBBgwFoAU1KTwtgAN4CJIxGV6+d0msCPF9nkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QzFGL0U2QTdGNkI4OUE4 NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjlu ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUtUd3RnQU40Q0pJeEdWNi1kMG1zQ1BGOW5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QzFGL0U2QTdGNkI4OUE4NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENK SXhHVjYtZDBtc0NQRjluay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfJhG2kA0ahXoUd4b4UmJgKVHfBj58hsRWxl/iyCG8j5Bus/3DmF9QN /MY9FlVx0RG6zhf/A3JdVge2WAsgmTlgzXsbik1C16rdwTLV3T+GSKxxKBnpZAvy HVd319QOlnfgTiJYfB6LRaoI0nysW2pKvrPLpoRzpxgI6lm+T0RkjGFuqVSjFlES pyptafwi+sIV53GAIuhwFJRmueIcqMHagEw6scGlKUQuDTmJWz1kyIsFEzQN8Dba K9mlI/wpIqRdbQKsKTPAzmKKqIApkwtOgwkt7FfFeZDe3WP0q8aGA6gHR+Ipcbkd yFmz3vwbQBE2CZMgoHC9kKXWIN3ZULM= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:45 2025 by rpki-client