$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json) Hash identifier: z8GO5RRtldiiU1PyisHoqzOnvwZBVVI2BP7TA9UWWI0= Subject key identifier: 54:19:C2:2F:89:DF:CB:72:99:A7:75:FF:C1:C5:05:EE:03:0D:4B:F8 Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Certificate serial: 1029 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft Manifest number: 101A Signing time: Tue 04 Nov 2025 17:32:20 +0000 Manifest this update: Tue 04 Nov 2025 17:32:20 +0000 Manifest next update: Tue 11 Nov 2025 17:32:20 +0000 Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: D+l++4MbVWLfRfxbw9aTrPh+ZhVBfQcYZ5sQzTd69Hk=) 2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: thEUPRHmxogbvRJ6Y3FkP32LyqLTW2o8NNUuKxB2tbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4137 (0x1029) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6 Validity Not Before: Nov 4 17:32:20 2025 GMT Not After : Nov 11 17:32:20 2025 GMT Subject: CN=690a38a4-1065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:3a:1e:69:f1:88:15:72:02:83:e5:f5:b8: 42:04:30:b9:3c:be:56:31:b3:9a:04:34:7e:66:91: 27:23:03:53:25:db:4e:a3:fa:cf:e7:0d:33:74:f6: 84:da:ba:17:f7:ab:e8:79:a2:2e:7c:d2:63:2a:17: ff:d7:69:06:57:b4:97:97:c6:2c:1a:63:f2:b6:b2: b4:a6:f2:30:6c:3e:11:c5:09:b7:a1:62:f0:24:da: a3:21:f5:59:5a:87:ef:d2:be:94:4e:d2:a3:f7:fb: c1:af:e4:0a:d2:04:17:97:5e:83:43:24:ff:4d:dc: 5c:d0:7c:ce:d2:1d:9e:a5:4a:22:30:29:07:7c:f2: fe:0a:36:23:c0:31:6d:8f:70:70:97:57:41:df:59: 37:e0:71:9f:29:52:c4:cc:25:4a:be:6e:85:d8:43: 2c:ea:10:17:68:02:0d:6e:cb:60:1b:2b:48:49:5c: c1:73:90:78:bd:a9:b2:9f:56:a1:fd:04:cf:c6:67: 1c:11:57:47:01:bc:7a:f9:0f:0b:1e:9b:1d:2b:d9: 27:fa:fc:06:1d:ae:cf:1f:d6:c8:34:d3:2a:06:ae: ce:bf:df:9c:d7:55:23:5a:f6:af:c3:cc:b6:32:3a: cb:11:40:39:a9:da:98:15:ef:d4:6b:e4:ba:b4:e8: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:19:C2:2F:89:DF:CB:72:99:A7:75:FF:C1:C5:05:EE:03:0D:4B:F8 X509v3 Authority Key Identifier: keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:47:af:33:73:88:7b:ec:7e:89:a0:f0:93:85:00:95:67:50: 0c:2d:2e:3b:be:38:94:91:40:a7:97:0a:2d:cc:47:68:e9:17: 0d:58:df:1c:39:55:ee:6a:07:0a:9b:fe:df:4c:d2:2c:96:cc: 91:b6:7a:8c:a6:53:1f:27:e7:a0:b0:ee:17:6e:a6:c3:dd:56: 43:66:df:59:6b:99:bf:6d:ca:b5:4c:aa:f5:03:e5:1e:b2:e7: 58:e8:1d:1e:c6:ac:55:77:d7:4c:65:0b:69:55:83:a3:19:2e: ae:a4:65:57:69:a5:c8:31:88:1a:e2:29:bb:79:d6:f8:15:3d: 30:e2:b4:b6:b2:d2:a0:a1:73:6a:64:1c:88:c0:8a:ee:99:c2: de:24:17:5f:d7:b7:72:4e:ff:cf:bc:4b:c6:59:99:1c:97:a1: 30:b7:5e:9d:36:7f:a3:36:89:1a:68:e7:00:b8:07:af:61:4a: 4e:35:f9:03:c5:c7:11:98:45:89:60:04:99:8b:fd:4a:08:f2: ea:32:77:e1:87:a9:0b:3b:4c:93:e0:d0:e5:eb:e3:ba:a1:cf: 79:3c:4d:78:78:b6:e8:a0:0f:b0:92:fd:1f:c4:44:c9:db:53: f8:63:60:a1:a4:84:ab:56:05:13:1f:71:11:c1:d5:72:54:1b: 84:41:d1:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3 MzJEOUREQTYwHhcNMjUxMTA0MTczMjIwWhcNMjUxMTExMTczMjIwWjAYMRYwFAYD VQQDEw02OTBhMzhhNC0xMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FY6HmnxiBVyAoPl9bhCBDC5PL5WMbOaBDR+ZpEnIwNTJdtOo/rP5w0zdPaE 2roX96voeaIufNJjKhf/12kGV7SXl8YsGmPytrK0pvIwbD4RxQm3oWLwJNqjIfVZ Wofv0r6UTtKj9/vBr+QK0gQXl16DQyT/Tdxc0HzO0h2epUoiMCkHfPL+CjYjwDFt j3Bwl1dB31k34HGfKVLEzCVKvm6F2EMs6hAXaAINbstgGytISVzBc5B4vamyn1ah /QTPxmccEVdHAbx6+Q8LHpsdK9kn+vwGHa7PH9bINNMqBq7Ov9+c11UjWvavw8y2 MjrLEUA5qdqYFe/Ua+S6tOhuLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQZwi+J 38tymad1/8HFBe4DDUv4MB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1 RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkU5Ni9FREE2NUFDNDU1RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlB bXZIc21lbW54LUp6TFozYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqR68zc4h77H6JoPCThQCVZ1AMLS47vjiUkUCnlwotzEdo6RcNWN8c OVXuagcKm/7fTNIslsyRtnqMplMfJ+egsO4XbqbD3VZDZt9Za5m/bcq1TKr1A+Ue sudY6B0exqxVd9dMZQtpVYOjGS6upGVXaaXIMYga4im7edb4FT0w4rS2stKgoXNq ZByIwIrumcLeJBdf17dyTv/PvEvGWZkcl6Ewt16dNn+jNokaaOcAuAevYUpONfkD xccRmEWJYASZi/1KCPLqMnfhh6kLO0yT4NDl6+O6oc95PE14eLbooA+wkv0fxETJ 21P4Y2ChpISrVgUTH3ERwdVyVBuEQdEw -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:31 2025 by rpki-client