$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: 0NAWGO172vQ6izArCVsYbB0XORCf3g9/qZ1HnUooaLI= Subject key identifier: 3A:35:46:F6:58:55:69:CF:06:86:EA:FD:B8:97:59:0E:A0:C9:91:BF Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 01D7 Signing time: Wed 05 Nov 2025 02:54:30 +0000 Manifest this update: Wed 05 Nov 2025 02:54:30 +0000 Manifest next update: Wed 12 Nov 2025 02:54:30 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: I2oLMf5db2/MNaaGiYmrVhREnlyxHNTcCHiImyVIF2g=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: D711Z8aFp5S41gq5GTKSZhCq3zfbGCfPqwt5JDMk3xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: Nov 5 02:54:30 2025 GMT Not After : Nov 12 02:54:30 2025 GMT Subject: CN=690abc66-b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:82:25:5d:58:e2:5b:aa:33:74:e2:90:10: 55:55:c9:b3:45:59:f6:f8:fa:8b:9e:9e:c5:a7:7f: f1:54:ab:b5:84:01:03:cd:0c:9d:ef:a1:1d:b0:b0: d6:ff:69:0f:21:4c:f3:07:e6:9c:67:f7:7d:27:92: 06:27:04:2b:2c:15:bf:3f:fe:32:bd:6f:ac:a1:be: d0:32:90:a6:9b:b0:85:a6:73:56:74:e0:c2:ad:44: d1:1c:61:35:e9:2b:bf:48:50:e8:bc:50:32:33:7a: 63:7a:95:fc:e2:36:ec:6c:fd:79:87:20:fc:50:03: 7b:a5:ce:52:2c:09:b2:32:3d:0c:65:8b:2b:b5:b2: 29:50:c8:69:37:76:75:c7:31:df:8c:68:e4:6f:43: 08:a5:b7:c7:84:a2:1f:f6:f9:95:8a:f4:79:f3:d1: e7:1c:19:73:bd:2c:03:13:67:0d:6c:b3:a0:72:53: 3e:48:93:ee:ea:8d:26:1b:75:b1:0c:18:16:f5:eb: ae:e9:09:4f:dd:17:65:e8:51:d4:93:68:a7:2f:2d: 07:45:6a:c1:a9:b0:66:c7:b7:95:e6:40:cc:32:ef: 15:53:d9:16:bc:46:28:ff:e4:bd:c4:0d:6e:53:f6: 63:09:8b:bd:cf:ea:6c:b2:3d:bd:97:d1:fd:d7:41: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:35:46:F6:58:55:69:CF:06:86:EA:FD:B8:97:59:0E:A0:C9:91:BF X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b8:2c:2d:5c:23:31:12:94:10:ac:40:7e:9c:8f:01:0c:61: 20:21:ac:36:fb:6b:2a:fc:4f:8f:55:66:fa:55:e7:1e:3a:43: 82:bb:14:7f:f0:83:d7:4d:ca:fb:61:9d:ba:0a:56:80:93:06: ca:6e:dc:7b:13:22:f2:92:a6:1c:c1:9d:dc:bc:5f:e8:16:85: 46:a1:d1:56:99:e7:06:82:1c:e3:2a:b3:99:6f:df:89:1d:73: 0e:88:e5:ad:d1:59:ff:d1:dd:a4:2a:a0:cd:3d:b6:66:f9:d3: 45:ce:12:2e:c9:91:84:57:c6:ca:77:ff:64:17:12:18:51:3c: af:1e:40:4d:3d:54:46:32:d5:24:10:4a:f5:b4:a9:dc:eb:9c: 15:4c:86:08:77:74:6d:4b:6d:bb:e9:56:60:03:06:49:b7:9f: 05:e6:81:30:ac:99:52:5e:e1:5f:f9:3f:7d:4f:f0:a4:c5:6e: 13:d8:b7:81:e1:98:7e:a1:bf:60:50:b3:79:ee:db:32:c5:11: 32:fd:66:b1:75:90:bc:44:a2:c1:fe:cf:db:a2:65:f0:3f:4f: fe:6f:96:fa:bd:7b:3e:33:e8:f4:20:60:a8:b1:3a:63:1f:1b: c4:5f:76:69:2d:f1:11:87:4a:14:fe:f5:76:eb:ec:c3:b9:3b: 5e:34:c1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjUxMTA1MDI1NDMwWhcNMjUxMTEyMDI1NDMwWjAYMRYwFAYD VQQDEw02OTBhYmM2Ni1iMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DWCJV1Y4luqM3TikBBVVcmzRVn2+PqLnp7Fp3/xVKu1hAEDzQyd76EdsLDW /2kPIUzzB+acZ/d9J5IGJwQrLBW/P/4yvW+sob7QMpCmm7CFpnNWdODCrUTRHGE1 6Su/SFDovFAyM3pjepX84jbsbP15hyD8UAN7pc5SLAmyMj0MZYsrtbIpUMhpN3Z1 xzHfjGjkb0MIpbfHhKIf9vmVivR589HnHBlzvSwDE2cNbLOgclM+SJPu6o0mG3Wx DBgW9euu6QlP3Rdl6FHUk2inLy0HRWrBqbBmx7eV5kDMMu8VU9kWvEYo/+S9xA1u U/ZjCYu9z+pssj29l9H910H10QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo1RvZY VWnPBobq/biXWQ6gyZG/MB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCauCwtXCMxEpQQrEB+nI8BDGEgIaw2+2sq/E+PVWb6VeceOkOCuxR/ 8IPXTcr7YZ26ClaAkwbKbtx7EyLykqYcwZ3cvF/oFoVGodFWmecGghzjKrOZb9+J HXMOiOWt0Vn/0d2kKqDNPbZm+dNFzhIuyZGEV8bKd/9kFxIYUTyvHkBNPVRGMtUk EEr1tKnc65wVTIYId3RtS2276VZgAwZJt58F5oEwrJlSXuFf+T99T/CkxW4T2LeB 4Zh+ob9gULN57tsyxREy/WaxdZC8RKLB/s/bomXwP0/+b5b6vXs+M+j0IGCosTpj HxvEX3ZpLfERh0oU/vV26+zDuTteNMGz -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:38 2025 by rpki-client