$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft File: kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json) Hash identifier: ZLju8FN86cHDtgKxsjr/S5LBu270ZbdpaEQb1MwQ964= Subject key identifier: 40:2A:99:A7:50:EF:1C:1A:36:FF:5A:52:78:E9:22:A1:65:4A:E2:BE Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 Certificate issuer: /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Certificate serial: 1038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft Manifest number: 102C Signing time: Tue 04 Nov 2025 17:31:35 +0000 Manifest this update: Tue 04 Nov 2025 17:31:35 +0000 Manifest next update: Tue 11 Nov 2025 17:31:35 +0000 Files and hashes: 1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: tQKfd+p3FdEJw2vUQYErUYOB/vzpnV30rRtJPit29eI=) 2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: h2Z0WowEDdcT+vihpwqc3ZmmFIzfzbEzcf903yWEHbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4152 (0x1038) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079 Validity Not Before: Nov 4 17:31:35 2025 GMT Not After : Nov 11 17:31:35 2025 GMT Subject: CN=690a3877-41af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:8e:bc:7b:71:19:cf:49:2d:b2:ed:f8:d3: 68:88:0a:c1:97:b0:01:e3:ee:e8:f9:07:24:78:b1: dd:31:6f:04:21:95:d4:07:11:fe:a5:1e:65:31:dc: 87:b7:bc:87:fb:e8:a4:87:80:dc:de:1c:51:f4:e9: 18:4d:2a:98:78:25:98:2a:47:b1:46:a1:d8:49:6e: 40:02:02:bd:37:02:c3:89:7d:99:18:53:1a:a4:86: a3:10:00:0a:e9:48:ad:84:17:e4:90:46:c9:ed:21: ac:56:b6:fd:66:14:d1:6a:89:f2:a9:e8:ce:6b:3b: 01:7a:77:52:9c:2b:3d:29:e3:89:18:17:49:bd:2f: 02:c0:be:3c:21:1e:b4:2e:d3:f6:ff:58:7f:7b:68: 0d:6d:bf:e1:c6:3f:0f:e8:2a:5d:77:9f:7d:7d:71: 53:54:14:89:e5:f1:39:0b:c7:f9:7d:07:af:82:d2: 70:c4:78:06:96:76:ee:3c:95:ad:48:1e:ad:20:cd: 15:c6:14:59:d1:12:7d:97:f3:6b:9b:80:00:2b:4b: 6b:24:6c:d9:b3:81:74:07:4f:a1:11:fe:de:c3:1b: 10:c1:0e:1f:c1:6b:50:21:07:f3:b8:2a:c9:22:b6: 8b:af:06:ae:a3:2d:68:d4:d9:6d:14:25:1c:33:54: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:99:A7:50:EF:1C:1A:36:FF:5A:52:78:E9:22:A1:65:4A:E2:BE X509v3 Authority Key Identifier: keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:62:6c:e0:13:6a:5a:fe:81:bb:e8:43:06:f4:01:67:da:80: e8:0a:30:40:5e:6d:98:af:dc:cc:1e:4f:73:f2:00:bf:b1:5d: 93:f6:59:5b:84:f5:79:e2:0c:38:b8:c1:e1:d5:71:49:2f:17: 31:19:84:3a:77:cf:5b:d3:a3:58:82:2d:8a:04:4f:b7:d9:57: 4f:6f:b9:f3:d3:4e:6f:05:2b:cb:c9:2d:ea:72:82:5a:3f:00: d5:3f:58:71:bf:30:e6:1e:4f:25:66:c3:f1:e9:41:d5:37:05: 4c:81:70:ea:7b:55:b5:14:28:47:a6:78:48:21:d7:ae:71:6c: 92:a1:51:90:3d:7c:b2:c4:90:e4:55:dc:22:63:ce:64:43:9a: 24:94:f5:e7:6a:a8:55:de:a0:aa:95:b2:aa:f6:22:dc:82:f4: 3a:05:81:8b:1e:a6:44:e8:9c:36:95:a0:15:6a:13:d5:40:21: 53:83:76:2f:83:56:bd:87:01:88:e0:6e:66:52:1d:3e:dc:a8: f5:d2:45:72:20:0f:cf:f2:ce:aa:e2:35:8c:59:c7:61:2b:7d: 6f:14:99:c2:7c:58:2b:50:8d:d7:e8:aa:25:ef:69:f0:6a:54: 98:6a:d2:ca:72:0b:68:a4:66:d9:20:f1:bd:65:37:25:cc:fc: cb:f7:c8:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4 MzU1MjcwNzkwHhcNMjUxMTA0MTczMTM1WhcNMjUxMTExMTczMTM1WjAYMRYwFAYD VQQDEw02OTBhMzg3Ny00MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusKOvHtxGc9JLbLt+NNoiArBl7AB4+7o+QckeLHdMW8EIZXUBxH+pR5lMdyH t7yH++ikh4Dc3hxR9OkYTSqYeCWYKkexRqHYSW5AAgK9NwLDiX2ZGFMapIajEAAK 6UithBfkkEbJ7SGsVrb9ZhTRaonyqejOazsBendSnCs9KeOJGBdJvS8CwL48IR60 LtP2/1h/e2gNbb/hxj8P6Cpdd599fXFTVBSJ5fE5C8f5fQevgtJwxHgGlnbuPJWt SB6tIM0VxhRZ0RJ9l/Nrm4AAK0trJGzZs4F0B0+hEf7ewxsQwQ4fwWtQIQfzuCrJ IraLrwauoy1o1NltFCUcM1RkXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAqmadQ 7xwaNv9aUnjpIqFlSuK+MB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1 TElqR2xOeVZMT1dEVlNjSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFYmzgE2pa/oG76EMG9AFn2oDoCjBAXm2Yr9zMHk9z8gC/sV2T9llb hPV54gw4uMHh1XFJLxcxGYQ6d89b06NYgi2KBE+32VdPb7nz005vBSvLyS3qcoJa PwDVP1hxvzDmHk8lZsPx6UHVNwVMgXDqe1W1FChHpnhIIdeucWySoVGQPXyyxJDk VdwiY85kQ5oklPXnaqhV3qCqlbKq9iLcgvQ6BYGLHqZE6Jw2laAVahPVQCFTg3Yv g1a9hwGI4G5mUh0+3Kj10kVyIA/P8s6q4jWMWcdhK31vFJnCfFgrUI3X6Kol72nw alSYatLKcgtopGbZIPG9ZTclzPzL98jA -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:48 2025 by rpki-client