$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft File: KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json) Hash identifier: i1HNsIrZE5xjLmtaK1RFXtfzbjQpqE+JTUvyDz3vM6g= Subject key identifier: C7:CA:A1:43:39:5D:06:7C:29:2F:76:B8:3E:14:75:0B:49:89:C1:93 Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C Certificate issuer: /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 05:30:45 +0000 Manifest this update: Mon 03 Nov 2025 05:30:44 +0000 Manifest next update: Mon 10 Nov 2025 05:30:44 +0000 Files and hashes: 1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: nS/K6P6biLSgmm29wNSAwsKElrEuRnH3Gyggdelo7Ws=) 2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: QN8v9t5P0QTRBsYg+U9O7T5DHQfpoMuEMEImQ353CzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C Validity Not Before: Nov 3 05:30:44 2025 GMT Not After : Nov 10 05:30:44 2025 GMT Subject: CN=69083e04-98a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:2b:f9:d0:37:af:92:bb:4a:f8:6f:16:e6: a6:0c:80:9d:b9:19:f5:b0:ae:ce:4b:f0:ff:e0:86: c1:84:6e:01:78:7a:07:bd:95:b2:0f:b9:67:26:ec: 96:d7:a3:9c:6d:25:65:b9:77:c5:90:91:c9:99:6d: 6d:bc:4a:6b:aa:05:ab:c1:64:13:b1:9a:45:2e:86: 7d:6e:ea:e0:94:d2:80:56:53:79:3f:07:ba:f3:a5: 20:fa:66:71:fb:24:7f:43:7e:d8:52:54:fb:03:83: 12:38:33:c6:25:bc:9e:0d:81:99:7e:f9:cd:8b:8f: 4c:45:18:fa:8a:be:1c:a9:46:d8:18:f6:c2:92:1f: eb:f4:da:5d:6e:76:e9:60:7d:4f:ab:f7:12:04:73: 1c:d4:e8:cd:65:a0:b5:6d:17:79:73:b7:cc:fa:b7: 2c:e6:99:1f:54:03:5b:63:41:d1:d2:53:85:6d:bd: 1c:bf:cd:88:ae:b9:09:ff:34:db:86:86:ba:ba:a5: 9e:61:27:7d:76:d8:b0:7f:1f:97:e0:5d:85:0f:d3: 8b:30:cc:8a:4c:43:ac:66:51:a6:54:25:b6:b3:d5: 99:9d:f8:bc:31:0b:95:b0:9e:09:3c:44:96:4b:c8: c6:c7:be:41:f5:2b:21:28:2f:64:9a:eb:80:37:ea: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CA:A1:43:39:5D:06:7C:29:2F:76:B8:3E:14:75:0B:49:89:C1:93 X509v3 Authority Key Identifier: keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:a3:3b:e7:cf:f4:2b:05:79:fe:f2:92:aa:20:ac:79:ab:86: 9a:a6:a4:46:38:75:e4:2e:b3:5f:1f:90:36:3e:ed:a6:20:af: ab:f6:ff:d6:c4:d3:60:1c:d2:54:4d:bb:60:07:b8:75:da:79: 9e:b7:f2:8b:6c:ab:18:e0:24:04:88:e9:99:12:de:60:69:8f: d5:4c:76:bd:5f:9e:e4:b2:5a:8e:8e:1f:32:51:ac:de:c7:f3: 09:53:be:dc:af:1a:1d:49:b0:d9:a0:89:25:5b:a3:66:f9:24: 2f:da:9b:be:a0:10:ac:6b:97:8a:b2:fd:6a:3b:f5:cb:bd:45: 44:cd:de:64:f0:c1:17:99:21:6f:e5:de:8a:88:48:4b:59:14: e4:ea:49:f6:8f:a5:92:d0:3e:0d:77:89:b9:f5:53:5d:41:d3: 44:71:59:6c:de:1a:0f:5f:57:4e:48:e4:7f:4a:7e:48:8e:d7: d1:c4:c3:7e:7c:30:3b:a6:32:1a:bc:6b:63:09:48:96:5b:c5: 8d:82:de:d0:38:c5:24:1c:e2:b8:ad:7a:90:fb:2c:17:f4:52: 35:00:61:7e:56:c6:c9:61:4d:18:16:14:47:83:92:73:e1:ee: dc:e3:57:1e:fe:db:b5:15:10:0e:e9:fe:1e:68:c4:de:e5:c2: ed:9e:d5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGOEQxMTAvBgNVBAUTKDJBMDFDOEZFOTY3OTY5NDQ3ODMxRUMwMUMwMkJDNEU5 Q0I5QUNFMkMwHhcNMjUxMTAzMDUzMDQ0WhcNMjUxMTEwMDUzMDQ0WjAYMRYwFAYD VQQDEw02OTA4M2UwNC05OGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28kr+dA3r5K7SvhvFuamDICduRn1sK7OS/D/4IbBhG4BeHoHvZWyD7lnJuyW 16OcbSVluXfFkJHJmW1tvEprqgWrwWQTsZpFLoZ9burglNKAVlN5Pwe686Ug+mZx +yR/Q37YUlT7A4MSODPGJbyeDYGZfvnNi49MRRj6ir4cqUbYGPbCkh/r9Npdbnbp YH1Pq/cSBHMc1OjNZaC1bRd5c7fM+rcs5pkfVANbY0HR0lOFbb0cv82IrrkJ/zTb hoa6uqWeYSd9dtiwfx+X4F2FD9OLMMyKTEOsZlGmVCW2s9WZnfi8MQuVsJ4JPESW S8jGx75B9SshKC9kmuuAN+r80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfKoUM5 XQZ8KS92uD4UdQtJicGTMB8GA1UdIwQYMBaAFCoByP6WeWlEeDHsAcArxOnLms4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEY4RC9BMTc5RTUzQzY0 NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFVUjRNZXdCd0N2RTZjdWF6 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tnSElfcFo1YVVSNE1ld0J3Q3ZFNmN1YXppdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC9BMTc5RTUzQzY0NzcxMUVGQTgyREU5M0RDNEY5QUUwMi9LZ0hJX3BaNWFV UjRNZXdCd0N2RTZjdWF6aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRozvnz/QrBXn+8pKqIKx5q4aapqRGOHXkLrNfH5A2Pu2mIK+r9v/W xNNgHNJUTbtgB7h12nmet/KLbKsY4CQEiOmZEt5gaY/VTHa9X57kslqOjh8yUaze x/MJU77crxodSbDZoIklW6Nm+SQv2pu+oBCsa5eKsv1qO/XLvUVEzd5k8MEXmSFv 5d6KiEhLWRTk6kn2j6WS0D4Nd4m59VNdQdNEcVls3hoPX1dOSOR/Sn5IjtfRxMN+ fDA7pjIavGtjCUiWW8WNgt7QOMUkHOK4rXqQ+ywX9FI1AGF+VsbJYU0YFhRHg5Jz 4e7c41ce/tu1FRAO6f4eaMTe5cLtntXv -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:24 2025 by rpki-client