$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: AuCf0PkdZzAj6v4QoDUlH4Ddh4ENqH0cNXMjh7+SicQ= Subject key identifier: 9E:93:79:4A:F4:F5:82:A5:B2:78:8E:73:DC:C3:5E:FF:9D:3F:D7:05 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 08BA Signing time: Sun 02 Nov 2025 20:26:43 +0000 Manifest this update: Sun 02 Nov 2025 20:26:43 +0000 Manifest next update: Sun 09 Nov 2025 20:26:43 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: Jlhk0cz9OODkQBQS6EjuMiByhcj/3aEVq+1ekUIrB/w=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: tqRni/vRCybcm/Qe5j/RJ1ji818pRaDVNQ0/GTu1HOQ=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: /rsO1xFmt4Wd2M5OBk3RGt2QvbZOZFnfqTaQeAfy5hE=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Nov 2 20:26:43 2025 GMT Not After : Nov 9 20:26:43 2025 GMT Subject: CN=6907be83-622a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:61:1c:aa:78:06:e8:f4:dd:84:47:9f:02: 75:52:b6:ef:12:d6:ad:da:e4:2a:d3:82:0c:cd:8f: d9:f1:25:59:68:22:22:ce:23:3c:d2:a1:26:71:f1: 9b:e3:31:fe:31:4c:b2:15:c8:51:83:99:66:09:ee: 7a:ba:ad:a3:c8:7f:ce:75:29:fe:eb:81:4d:fa:58: a4:0a:d3:fc:c5:fe:34:46:2d:87:55:7e:63:f3:7d: d3:2b:76:5d:bb:fb:b2:7f:60:9c:c5:36:6a:04:44: e3:35:df:d4:4a:18:2c:ac:1e:25:14:6b:75:72:0f: c1:dd:d3:4e:26:b3:8b:05:17:42:2d:fa:37:95:82: 57:5c:89:74:87:6e:31:bd:7e:1b:a7:99:d4:ec:c0: 98:ad:60:8c:bc:39:c0:fa:88:04:66:a8:95:52:6b: 86:64:a2:3b:2c:f0:ea:6f:9b:d1:8c:ed:15:09:b9: a1:fc:c6:2d:2b:89:c9:27:70:40:da:38:38:40:a5: e3:64:43:62:3f:11:c5:8d:b8:56:e7:df:0d:7a:24: 04:89:9e:89:03:37:4a:e6:3d:b6:25:db:96:ee:aa: 4a:9c:38:e4:3b:d2:70:02:c9:20:54:00:9f:d7:50: fa:40:25:96:85:d9:79:bc:34:78:5c:9e:e5:d0:0d: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:79:4A:F4:F5:82:A5:B2:78:8E:73:DC:C3:5E:FF:9D:3F:D7:05 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:52:c1:26:b3:8a:bd:a3:a7:f6:c1:6a:d4:05:43:f4:ed:19: e0:f4:4f:e9:d5:3e:44:12:bf:f0:9f:2f:1a:c9:21:30:93:7c: 8b:ef:72:be:a1:b3:c6:4f:e3:64:fa:ef:1b:c7:53:37:5a:47: 70:00:ae:d4:08:84:61:68:2d:c2:8a:3d:58:50:50:4a:3c:60: 9e:91:1a:e5:01:f7:95:07:30:d5:a3:04:5d:c0:02:1b:d6:1a: ec:4e:7b:7b:52:b4:30:67:22:c8:c5:54:8c:f4:0a:05:5c:de: bd:a1:d7:cf:4e:19:50:18:df:56:26:98:4f:c6:3c:c4:80:59: 90:38:c8:e8:69:b2:e0:35:d5:b4:c5:80:e8:1d:e0:b1:f3:5d: e6:78:76:52:9a:b5:3c:2f:76:92:c2:0b:ad:51:9d:0f:33:9c: 9f:bc:05:8a:65:8f:0f:16:66:80:fb:a8:2c:7e:36:34:1f:63: 97:03:b2:51:64:8f:f1:17:c8:9a:b2:db:b3:2d:d6:67:5d:9b: e4:1e:70:35:85:72:31:3d:da:76:82:5b:c1:73:dd:0d:df:51: 51:fe:1c:cb:bf:e6:52:c4:4f:82:57:12:21:15:4f:43:24:6c: 67:8e:2d:5d:25:8a:ad:03:48:b9:38:88:6d:e1:01:88:a2:05: a8:3c:9c:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUxMTAyMjAyNjQzWhcNMjUxMTA5MjAyNjQzWjAYMRYwFAYD VQQDEw02OTA3YmU4My02MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wZhHKp4Buj03YRHnwJ1UrbvEtat2uQq04IMzY/Z8SVZaCIiziM80qEmcfGb 4zH+MUyyFchRg5lmCe56uq2jyH/OdSn+64FN+likCtP8xf40Ri2HVX5j833TK3Zd u/uyf2CcxTZqBETjNd/UShgsrB4lFGt1cg/B3dNOJrOLBRdCLfo3lYJXXIl0h24x vX4bp5nU7MCYrWCMvDnA+ogEZqiVUmuGZKI7LPDqb5vRjO0VCbmh/MYtK4nJJ3BA 2jg4QKXjZENiPxHFjbhW598NeiQEiZ6JAzdK5j22JduW7qpKnDjkO9JwAskgVACf 11D6QCWWhdl5vDR4XJ7l0A31UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6TeUr0 9YKlsniOc9zDXv+dP9cFMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyUsEms4q9o6f2wWrUBUP07Rng9E/p1T5EEr/wny8aySEwk3yL73K+ obPGT+Nk+u8bx1M3WkdwAK7UCIRhaC3Cij1YUFBKPGCekRrlAfeVBzDVowRdwAIb 1hrsTnt7UrQwZyLIxVSM9AoFXN69odfPThlQGN9WJphPxjzEgFmQOMjoabLgNdW0 xYDoHeCx813meHZSmrU8L3aSwgutUZ0PM5yfvAWKZY8PFmaA+6gsfjY0H2OXA7JR ZI/xF8iastuzLdZnXZvkHnA1hXIxPdp2glvBc90N31FR/hzLv+ZSxE+CVxIhFU9D JGxnji1dJYqtA0i5OIht4QGIogWoPJxC -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:58 2025 by rpki-client