$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: p9UB1CyujQA/4s+AjEr1xy8gI7HCg2O6pA8T/rebkjU= Subject key identifier: BC:E3:6B:DA:B1:70:21:86:65:7A:76:B3:A7:05:B8:A2:0A:0B:4F:32 Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 45 Signing time: Wed 05 Nov 2025 07:34:57 +0000 Manifest this update: Wed 05 Nov 2025 07:34:56 +0000 Manifest next update: Wed 12 Nov 2025 07:34:56 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: pNAgXs7QguSnAzVZXjAAuwBp107zTu0l+uZ2xzeJ6CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Nov 5 07:34:56 2025 GMT Not After : Nov 12 07:34:56 2025 GMT Subject: CN=690afe20-0cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:19:f3:8d:cf:ee:29:af:b3:fa:32:f6:c5: 7a:53:69:87:7b:fc:93:4b:68:d2:5c:b5:f8:6e:c9: 74:f5:67:cb:f6:ad:15:31:5e:25:30:c9:bb:df:eb: d5:47:17:91:82:c8:d3:c4:32:04:40:02:e8:01:1c: 6b:a8:ee:ed:14:28:eb:f9:fc:41:82:09:25:06:37: 6f:bc:7e:67:09:04:0d:8b:7d:50:78:08:1c:5b:de: 3d:0c:64:31:eb:30:59:c9:cd:a7:a9:3d:9b:e7:2e: a2:e3:99:ce:c0:70:98:4f:da:0a:03:bb:41:1e:38: cd:b2:82:a9:0f:a2:b9:f0:15:23:ff:00:02:c4:90: d5:8c:e8:8f:a1:88:bd:fe:1d:8a:53:7d:c3:ab:a0: fc:bb:91:88:81:26:99:8d:84:2e:b7:4f:a2:9e:18: 81:e9:33:f2:b8:6d:76:32:7a:cc:45:e4:a1:92:56: 25:45:35:66:b8:e3:b5:49:cd:e5:01:83:d1:e4:69: b3:a2:af:af:80:2f:65:d6:d0:be:81:65:53:6b:fc: 36:34:1b:5e:75:a1:77:31:ee:68:13:10:07:97:9f: b9:1f:a5:ab:ef:d6:80:cf:5b:26:dd:c8:63:c4:bc: c0:42:4d:eb:1d:b2:d8:cd:d9:5e:bd:2c:13:e7:5c: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E3:6B:DA:B1:70:21:86:65:7A:76:B3:A7:05:B8:A2:0A:0B:4F:32 X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cf:ff:eb:eb:94:87:52:ab:73:09:c3:a0:c9:66:5a:59:e4: ab:20:aa:cf:fa:51:df:6f:a3:36:ec:b6:f7:d8:aa:58:08:f8: a6:50:44:22:97:4c:38:8e:a6:d6:3d:44:e0:c4:93:a2:44:50: cd:d3:2a:c6:51:cb:0a:be:a3:59:e3:93:57:62:2b:1e:19:2a: ad:64:8e:8e:10:83:2c:25:7b:1f:fb:76:cc:63:43:a2:fc:bd: 89:3a:af:2a:b8:ec:e5:3d:58:33:96:b3:e8:31:ad:ad:17:0c: 12:8c:42:50:62:e9:6f:8c:9e:c6:58:14:54:e8:fb:4c:10:19: d6:0c:82:55:e6:29:26:1a:b3:0d:5d:c5:06:c0:7b:bf:5d:e5: a2:2b:f0:03:e6:f3:fb:0b:a9:6d:3a:7e:ee:24:fa:9e:58:d0: 3e:8e:58:fd:a3:69:62:17:3b:f0:05:eb:30:98:df:c4:73:ef: f5:bf:c1:39:81:10:29:4a:9a:ce:7a:56:15:b9:70:55:d9:f3: 83:a0:74:c7:dd:9f:03:8a:cf:70:97:68:4e:a8:fa:2b:93:da: 51:59:1e:a2:fb:99:fb:bf:21:05:dc:63:42:96:ba:f4:a5:7d: 08:ba:13:35:f0:74:62:0f:ce:8e:63:e9:bb:7c:9e:5e:11:1e: 12:7d:24:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTExMDUwNzM0NTZaFw0yNTExMTIwNzM0NTZaMBgxFjAUBgNV BAMTDTY5MGFmZTIwLTBjYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPkhnzjc/uKa+z+jL2xXpTaYd7/JNLaNJctfhuyXT1Z8v2rRUxXiUwybvf69VH F5GCyNPEMgRAAugBHGuo7u0UKOv5/EGCCSUGN2+8fmcJBA2LfVB4CBxb3j0MZDHr MFnJzaepPZvnLqLjmc7AcJhP2goDu0EeOM2ygqkPornwFSP/AALEkNWM6I+hiL3+ HYpTfcOroPy7kYiBJpmNhC63T6KeGIHpM/K4bXYyesxF5KGSViVFNWa447VJzeUB g9HkabOir6+AL2XW0L6BZVNr/DY0G151oXcx7mgTEAeXn7kfpavv1oDPWybdyGPE vMBCTesdstjN2V69LBPnXOPzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvONr2rFw IYZlenazpwW4ogoLTzIwHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3P/+vrlIdSq3MJw6DJZlpZ5Ksgqs/6Ud9vozbstvfYqlgI+KZQRCKX TDiOptY9RODEk6JEUM3TKsZRywq+o1njk1diKx4ZKq1kjo4Qgywlex/7dsxjQ6L8 vYk6ryq47OU9WDOWs+gxra0XDBKMQlBi6W+MnsZYFFTo+0wQGdYMglXmKSYasw1d xQbAe79d5aIr8APm8/sLqW06fu4k+p5Y0D6OWP2jaWIXO/AF6zCY38Rz7/W/wTmB EClKms56VhW5cFXZ84OgdMfdnwOKz3CXaE6o+iuT2lFZHqL7mfu/IQXcY0KWuvSl fQi6EzXwdGIPzo5j6bt8nl4RHhJ9JKA= -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:35 2025 by rpki-client