$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: mgqIOjEj4gfsMRhAplJAibFs1lto4v0BnBcGeMQ/KKk= Subject key identifier: BA:99:45:C5:F9:8B:F8:99:DB:D8:7A:B5:2B:FF:69:0D:62:03:A3:92 Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 0A60 Signing time: Sun 02 Nov 2025 19:36:39 +0000 Manifest this update: Sun 02 Nov 2025 19:36:39 +0000 Manifest next update: Sun 09 Nov 2025 19:36:39 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: rG5+H7v5xdq9yCRLC4g8RJHQfZzm0C8ogpJ4DT/GqcQ=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: OgrtZob9BenmszWmMepyuR4+jTnWhH21Nc4ELG9DAkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Validity Not Before: Nov 2 19:36:39 2025 GMT Not After : Nov 9 19:36:39 2025 GMT Subject: CN=6907b2c7-f20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:97:54:4e:e0:a6:84:c2:31:2c:75:3b:fc: 6d:20:3a:ff:bb:b5:d9:03:80:fd:c6:64:d9:2f:9d: e3:4f:9d:4e:5d:12:20:14:48:78:6d:b2:54:b1:f7: 7d:25:81:c4:f4:aa:7c:55:2e:72:ab:0f:c6:1e:28: 97:00:c9:99:60:66:a1:67:a3:af:17:3b:8b:e5:6d: 91:0c:62:41:72:c7:31:1f:26:92:3d:12:ca:4d:00: 91:89:7f:28:3c:8e:43:a1:9c:15:8d:18:46:89:aa: 20:ad:55:8e:49:e0:bd:ee:a1:28:fe:44:a1:05:4f: c4:8c:65:fb:7a:8e:6a:d4:7c:1b:90:84:02:c2:3e: db:e2:17:36:22:70:f8:4e:51:1f:3e:e9:01:8b:97: a9:95:07:b1:5f:db:af:9d:2c:04:95:12:98:85:72: 1b:8e:b0:10:f5:36:9f:31:05:d1:2b:d0:b2:9c:14: 85:75:97:a1:f7:f6:41:a5:da:e9:00:1d:d7:1d:8a: 81:c5:8b:15:b7:a1:f5:41:6b:ba:82:9c:2d:74:4c: a4:ca:0f:03:bf:5b:45:32:34:25:17:d5:d9:79:3c: 6a:b4:ac:e8:df:56:53:82:10:00:05:09:31:cd:f4: 8e:6e:2a:2a:02:40:92:9b:d9:93:93:4f:7e:ef:06: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:99:45:C5:F9:8B:F8:99:DB:D8:7A:B5:2B:FF:69:0D:62:03:A3:92 X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:56:65:56:b3:18:04:0b:9e:3e:68:7c:ef:38:20:5a:29:3e: 1a:ab:c7:69:6a:cf:e6:bb:e6:d5:dd:4c:e7:ff:2a:39:96:e3: 05:c6:d1:d8:99:33:07:a3:d2:85:02:3b:69:f5:23:bc:86:81: d4:ef:86:9f:1b:cc:d7:a9:82:29:0d:79:fd:6a:8a:f9:05:c8: bd:59:0d:76:19:44:0f:7c:fe:14:9e:0f:dd:24:29:c8:3b:9f: 53:75:ad:77:b4:a3:d0:aa:6b:b8:fb:78:2a:35:c6:74:18:42: 12:ff:b7:85:60:4d:02:1d:d4:cb:35:17:79:53:71:73:d7:b3: 6f:5a:9d:d4:8a:00:0c:bc:3a:e8:96:fa:d3:bb:48:9f:ab:22: 72:b2:a6:46:f1:b6:76:35:bf:b1:31:e5:ae:f9:48:85:31:cf: cb:86:8b:e2:86:96:db:b3:ba:25:bf:7a:d8:d1:fb:8b:14:0f: 22:2d:ed:e8:e6:de:33:f8:cb:9f:db:78:96:58:06:ac:71:3c: 79:99:27:97:71:4b:99:5c:27:0a:b9:68:00:a0:15:78:18:b0: f6:c5:52:aa:34:29:c6:8d:5b:76:84:28:0e:10:c4:40:9a:5f: cc:22:09:d3:5c:76:a6:d7:a8:d1:0f:ab:60:32:03:de:a9:09: 3b:ae:f2:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjUxMTAyMTkzNjM5WhcNMjUxMTA5MTkzNjM5WjAYMRYwFAYD VQQDEw02OTA3YjJjNy1mMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySKXVE7gpoTCMSx1O/xtIDr/u7XZA4D9xmTZL53jT51OXRIgFEh4bbJUsfd9 JYHE9Kp8VS5yqw/GHiiXAMmZYGahZ6OvFzuL5W2RDGJBcscxHyaSPRLKTQCRiX8o PI5DoZwVjRhGiaogrVWOSeC97qEo/kShBU/EjGX7eo5q1HwbkIQCwj7b4hc2InD4 TlEfPukBi5eplQexX9uvnSwElRKYhXIbjrAQ9TafMQXRK9CynBSFdZeh9/ZBpdrp AB3XHYqBxYsVt6H1QWu6gpwtdEykyg8Dv1tFMjQlF9XZeTxqtKzo31ZTghAABQkx zfSObioqAkCSm9mTk09+7wb/wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqZRcX5 i/iZ29h6tSv/aQ1iA6OSMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/VmVWsxgEC54+aHzvOCBaKT4aq8dpas/mu+bV3Uzn/yo5luMFxtHY mTMHo9KFAjtp9SO8hoHU74afG8zXqYIpDXn9aor5Bci9WQ12GUQPfP4Ung/dJCnI O59Tda13tKPQqmu4+3gqNcZ0GEIS/7eFYE0CHdTLNRd5U3Fz17NvWp3UigAMvDro lvrTu0ifqyJysqZG8bZ2Nb+xMeWu+UiFMc/Lhovihpbbs7olv3rY0fuLFA8iLe3o 5t4z+Muf23iWWAascTx5mSeXcUuZXCcKuWgAoBV4GLD2xVKqNCnGjVt2hCgOEMRA ml/MIgnTXHam16jRD6tgMgPeqQk7rvK+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:05 2025 by rpki-client