$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: FCKEq3xZxSBuKVSR8XtneYm1H2qgRFRKnnRBfUUxQug= Subject key identifier: 3E:30:94:21:06:15:FE:C1:D8:41:C4:64:9B:7F:E3:C5:A1:BC:8F:A9 Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 0169 Signing time: Wed 05 Nov 2025 04:07:46 +0000 Manifest this update: Wed 05 Nov 2025 04:07:46 +0000 Manifest next update: Wed 12 Nov 2025 04:07:46 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: qgdODFZqknnDqg2u0QlJIe06Y7pMPjSW2K5RLaMINm4=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Nov 5 04:07:46 2025 GMT Not After : Nov 12 04:07:46 2025 GMT Subject: CN=690acd92-7351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:14:f8:8a:ce:36:93:3c:08:93:5e:b3:8a: 7d:d8:a3:4d:21:d8:31:68:44:e3:2b:13:09:8e:f7: 9d:56:95:9b:6c:f7:79:73:c3:e7:e3:bc:0f:bf:12: 8d:68:46:bc:be:c8:64:46:1b:97:ca:95:14:9d:24: 5d:9d:9c:3d:11:e3:d3:c0:d0:af:36:00:c9:23:df: 9d:8b:23:a5:4d:ed:8e:9c:dd:a6:ec:4a:65:3c:bc: 41:f8:43:3a:34:7f:03:2a:a8:1c:b3:11:8a:e8:0f: b3:85:3a:21:ad:00:72:e2:04:a7:9f:f1:39:b5:e9: a2:1a:43:d2:d8:92:44:97:31:fc:e2:5e:d0:61:d6: 1d:70:b7:c6:6d:93:95:ac:56:27:0d:ed:37:c8:cc: 8b:37:8d:82:9c:1d:04:29:ca:05:6e:ec:d2:9d:20: d0:cc:f9:db:f0:ed:22:64:61:ea:3e:7e:45:d9:d8: e0:c2:a2:64:c2:db:1b:3e:2c:77:e5:fc:72:3b:88: f2:8a:38:5f:5a:bb:89:40:57:3f:85:c1:37:8a:3f: 74:30:bf:08:2f:71:00:b2:19:ea:84:57:54:f0:90: f7:86:6a:a4:fc:c0:cb:7e:fc:f4:73:04:e5:eb:54: 55:57:0c:a2:7e:71:02:71:48:10:75:e4:5d:a7:7e: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:30:94:21:06:15:FE:C1:D8:41:C4:64:9B:7F:E3:C5:A1:BC:8F:A9 X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:73:03:34:5d:4c:1a:c9:3d:c8:a4:87:b8:57:a4:75:80:0e: 61:50:18:01:d5:48:94:47:b3:32:7f:34:a4:b9:c5:70:03:b5: e6:03:1c:84:0b:e4:dd:f7:f7:b4:58:dc:22:bb:dd:ab:ca:e9: e2:fa:12:6a:e5:96:37:f5:a5:a8:ad:b3:f2:ee:1f:f2:8a:08: c6:e9:3c:38:c8:cc:32:b1:73:ac:21:fd:51:e3:f5:b2:69:2a: d1:16:2e:7f:24:f4:9b:18:6d:9b:00:5b:96:b7:ee:a8:b6:11: 83:40:eb:8c:7f:fb:17:e8:88:fa:b6:e9:53:a5:49:42:4e:85: 7a:84:65:39:cc:7f:2f:f5:c8:ca:10:0d:56:b2:b9:bd:5f:a1: db:07:19:0d:27:dd:f3:91:07:98:94:54:63:3a:73:9e:0c:35: 0e:df:d5:f1:25:86:fb:4e:b1:e7:f7:0b:bc:43:7c:2d:7b:31: 26:12:b2:66:8d:95:e1:b2:7d:b0:a8:c6:04:6b:3d:b2:27:0a: 77:6a:7b:c6:70:38:9d:e0:e7:c2:03:9e:7d:78:0e:ec:af:ca: c7:38:bc:57:ca:c0:fd:a0:49:98:8c:81:aa:55:2e:17:a6:01: d1:2a:24:3d:6e:5a:0d:47:ae:41:b4:41:bb:99:2c:55:f6:fe: ac:26:a5:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUxMTA1MDQwNzQ2WhcNMjUxMTEyMDQwNzQ2WjAYMRYwFAYD VQQDEw02OTBhY2Q5Mi03MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4cU+IrONpM8CJNes4p92KNNIdgxaETjKxMJjvedVpWbbPd5c8Pn47wPvxKN aEa8vshkRhuXypUUnSRdnZw9EePTwNCvNgDJI9+diyOlTe2OnN2m7EplPLxB+EM6 NH8DKqgcsxGK6A+zhTohrQBy4gSnn/E5temiGkPS2JJElzH84l7QYdYdcLfGbZOV rFYnDe03yMyLN42CnB0EKcoFbuzSnSDQzPnb8O0iZGHqPn5F2djgwqJkwtsbPix3 5fxyO4jyijhfWruJQFc/hcE3ij90ML8IL3EAshnqhFdU8JD3hmqk/MDLfvz0cwTl 61RVVwyifnECcUgQdeRdp36zywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4wlCEG Ff7B2EHEZJt/48WhvI+pMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3cwM0XUwayT3IpIe4V6R1gA5hUBgB1UiUR7MyfzSkucVwA7XmAxyE C+Td9/e0WNwiu92ryuni+hJq5ZY39aWorbPy7h/yigjG6Tw4yMwysXOsIf1R4/Wy aSrRFi5/JPSbGG2bAFuWt+6othGDQOuMf/sX6Ij6tulTpUlCToV6hGU5zH8v9cjK EA1Wsrm9X6HbBxkNJ93zkQeYlFRjOnOeDDUO39XxJYb7TrHn9wu8Q3wtezEmErJm jZXhsn2wqMYEaz2yJwp3anvGcDid4OfCA559eA7sr8rHOLxXysD9oEmYjIGqVS4X pgHRKiQ9bloNR65BtEG7mSxV9v6sJqU+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:41:06 2025 by rpki-client