$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: FMZT3n4D2fWq7zjRXRmgJbHvwli4xPcZX/Fr9rFW688= Subject key identifier: C4:C3:AD:D8:11:EE:26:69:7E:1B:94:D1:69:EA:5B:9C:EC:7B:6F:7B Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 1339 Signing time: Sun 02 Nov 2025 17:00:55 +0000 Manifest this update: Sun 02 Nov 2025 17:00:54 +0000 Manifest next update: Sun 09 Nov 2025 17:00:54 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: jgElHXk8YIQYE94f6Q0IVTfcPwAhpax6DyPtBw5RzPc=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4929 (0x1341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Nov 2 17:00:54 2025 GMT Not After : Nov 9 17:00:54 2025 GMT Subject: CN=69078e46-6fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:f1:32:9b:60:43:ab:1f:ba:d7:07:c6:bd: f2:82:bb:91:16:f3:a2:91:9f:33:f8:cc:ef:38:77: b3:b7:b3:63:58:70:60:ba:40:e7:17:b8:8f:cc:bf: e1:21:c9:12:09:e1:f5:f1:07:cd:3a:f4:e7:66:5b: 68:e3:89:38:12:e0:98:38:06:a7:8d:f4:10:9a:d5: 00:fa:69:9b:da:0c:6e:3b:f9:4e:73:32:cb:83:7b: a7:87:b8:1a:90:3c:38:83:14:c3:b8:6f:b5:fd:50: 54:e2:22:77:7f:8e:99:1c:22:7d:df:da:da:47:93: 40:c0:51:02:be:45:dd:49:61:e5:13:cf:0b:7b:85: 5c:6c:92:a0:4c:d8:43:cf:c7:27:c6:f8:36:97:07: f2:a6:03:09:9f:21:2d:f9:14:ad:bd:55:fb:9c:e3: b0:71:b8:18:3f:19:fb:fc:05:f3:cb:50:1a:56:f5: 82:b4:51:8a:f8:eb:3c:d5:49:0a:47:a9:f8:39:40: be:6b:2e:ae:61:fa:ed:23:de:d1:77:5a:3d:90:73: 7d:8f:a0:2e:17:cf:ad:fd:31:e4:e3:3e:2f:7c:32: e1:db:e9:f9:03:66:10:08:77:72:eb:5d:74:23:ec: 48:23:71:3d:17:a8:71:9a:71:ce:23:f0:79:59:c7: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C3:AD:D8:11:EE:26:69:7E:1B:94:D1:69:EA:5B:9C:EC:7B:6F:7B X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e1:79:29:9c:3e:c3:d1:ad:96:96:22:0c:ef:59:12:10:02: 10:1a:c1:d2:ac:ce:38:bd:28:6d:25:28:c7:86:15:34:fb:73: d8:11:f3:5e:c1:9c:d7:a4:98:77:00:6a:52:3a:03:ba:6b:71: 39:f0:6b:4c:10:a7:b6:de:b7:40:55:f2:f1:cd:66:f3:58:b9: ca:84:58:49:22:60:e2:65:c4:64:19:5d:c1:a5:25:62:8a:c7: 5f:02:71:1b:52:d8:2f:32:5c:24:1e:e8:72:28:39:28:8a:f0: 3b:c1:6c:3e:67:d1:78:4d:4b:3c:0c:ba:6a:cc:36:dd:03:13: be:14:6c:5e:25:43:75:d6:32:00:89:fc:25:42:40:37:20:17: 75:d0:5d:86:bc:68:59:94:10:d1:bf:29:64:4d:9f:31:ea:ab: 11:b4:30:42:43:bb:94:8c:f8:76:c6:e6:8d:4d:98:c4:17:1f: c0:3f:61:17:c6:34:99:b0:6b:10:94:7d:87:bc:f0:01:20:2b: 35:12:17:8e:8b:5a:43:db:98:20:06:e0:ab:d1:42:58:af:2f: 17:d8:9e:7b:25:ca:b4:4d:32:0f:d1:b7:de:55:ca:17:5d:59: e6:94:90:f6:f5:ff:42:18:28:b6:06:29:8b:18:99:81:89:28: 35:69:91:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUxMTAyMTcwMDU0WhcNMjUxMTA5MTcwMDU0WjAYMRYwFAYD VQQDEw02OTA3OGU0Ni02ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ePxMptgQ6sfutcHxr3ygruRFvOikZ8z+MzvOHezt7NjWHBgukDnF7iPzL/h IckSCeH18QfNOvTnZlto44k4EuCYOAanjfQQmtUA+mmb2gxuO/lOczLLg3unh7ga kDw4gxTDuG+1/VBU4iJ3f46ZHCJ939raR5NAwFECvkXdSWHlE88Le4VcbJKgTNhD z8cnxvg2lwfypgMJnyEt+RStvVX7nOOwcbgYPxn7/AXzy1AaVvWCtFGK+Os81UkK R6n4OUC+ay6uYfrtI97Rd1o9kHN9j6AuF8+t/THk4z4vfDLh2+n5A2YQCHdy6110 I+xII3E9F6hxmnHOI/B5WcdMowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTDrdgR 7iZpfhuU0WnqW5zse297MB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN4XkpnD7D0a2WliIM71kSEAIQGsHSrM44vShtJSjHhhU0+3PYEfNe wZzXpJh3AGpSOgO6a3E58GtMEKe23rdAVfLxzWbzWLnKhFhJImDiZcRkGV3BpSVi isdfAnEbUtgvMlwkHuhyKDkoivA7wWw+Z9F4TUs8DLpqzDbdAxO+FGxeJUN11jIA ifwlQkA3IBd10F2GvGhZlBDRvylkTZ8x6qsRtDBCQ7uUjPh2xuaNTZjEFx/AP2EX xjSZsGsQlH2HvPABICs1EheOi1pD25ggBuCr0UJYry8X2J57Jcq0TTIP0bfeVcoX XVnmlJD29f9CGCi2BimLGJmBiSg1aZGO -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:56 2025 by rpki-client