$ rpki-client -vvf rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft File: KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft (raw, json) Hash identifier: uwlDXseOJryRAjX8KO8gdtmwlp4yXz4HLhjDGQ+cQqc= Subject key identifier: A8:90:1F:CD:69:AA:7B:4E:FB:00:F1:9A:48:87:D4:10:F8:35:0C:A9 Authority key identifier: 2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F Certificate issuer: /CN=A9171927/serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft Manifest number: 01FC Signing time: Mon 03 Nov 2025 02:28:15 +0000 Manifest this update: Mon 03 Nov 2025 02:28:15 +0000 Manifest next update: Mon 10 Nov 2025 02:28:15 +0000 Files and hashes: 1: KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl (hash: 1fMotVsIBNHO5AqPco2nJ2BYHA7038ZMwvZ03+7n6CM=) 2: 6AA5FC16905211EE840DED1DC4F9AE02.roa (hash: 7Dqx51HWm5FHrY3yqH5za3wPDKkHA22oTIJYfgHsb38=) 3: FD41FC5EEA6811EDBE3EE23CC4F9AE02.roa (hash: fXQJZHONbxHqV0/XhxdMVhavc2gV0JF7ZuHG+631NZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171927, serialNumber=2A69D699F13C041BFDA3DAA57E21FFAB3C53ED5F Validity Not Before: Nov 3 02:28:15 2025 GMT Not After : Nov 10 02:28:15 2025 GMT Subject: CN=6908133f-8945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:14:33:17:f8:13:39:4f:fe:95:c9:8e:c4: 1c:34:17:6a:9a:48:3f:02:2e:8f:63:8a:43:d6:d7: 59:a0:76:0c:b2:ec:d7:d1:e0:10:4a:9b:d8:06:0c: e3:7f:3a:87:8f:d2:42:fe:d3:2a:cb:28:2f:0c:f0: a4:74:01:d3:82:f5:a2:3b:61:3d:66:fe:b9:db:f4: cc:27:eb:14:75:21:3e:a7:0b:0a:7d:49:bb:c6:4d: 0c:4b:6a:bc:8c:44:98:31:06:cd:b4:0c:2b:60:af: fe:97:bc:68:9a:e6:f9:41:62:05:ed:de:58:e3:b1: 02:3c:a9:e1:2f:8e:1d:00:c8:e1:b1:28:c2:8d:ae: 52:27:34:52:98:eb:15:49:91:26:db:71:75:50:96: e2:a9:f9:f3:a9:94:56:31:32:1c:ce:53:66:8f:e9: ff:61:98:05:dc:7e:b9:47:01:d1:1c:e8:ee:d3:b5: cf:f4:30:87:e3:cb:d5:13:59:e9:5b:57:21:b4:4b: d7:80:58:0a:f8:e5:28:88:cc:eb:73:61:45:31:93: bb:0c:c0:da:aa:aa:6d:1e:6b:46:0c:72:4c:e0:4c: 4b:01:32:78:0a:3d:6a:90:21:cf:3a:9b:d5:e8:19: e7:71:e8:b3:f5:24:4d:1e:d4:a7:6e:bb:05:c0:57: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:90:1F:CD:69:AA:7B:4E:FB:00:F1:9A:48:87:D4:10:F8:35:0C:A9 X509v3 Authority Key Identifier: keyid:2A:69:D6:99:F1:3C:04:1B:FD:A3:DA:A5:7E:21:FF:AB:3C:53:ED:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmnWmfE8BBv9o9qlfiH_qzxT7V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171927/FD8B22B0BC2F11EDA8F7653EC4F9AE02/KmnWmfE8BBv9o9qlfiH_qzxT7V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c4:d3:4f:0f:3d:ee:98:4c:03:9a:a4:fa:dd:d2:c9:ed:ea: c0:ed:68:70:d9:17:28:aa:de:19:7b:b8:8a:61:de:c2:7e:d8: eb:d0:ff:17:6b:bb:a5:de:0b:ef:68:47:ba:f1:c7:d1:c3:28: 94:a1:6b:43:ee:1b:4a:4c:18:ed:bc:bc:d0:fa:a8:b5:e7:37: 72:09:00:ac:9c:28:1c:9d:97:ce:98:54:22:f5:77:ca:d2:91: 70:ea:fe:4f:d8:c5:d4:d4:81:5a:c9:9b:21:f0:02:e6:11:b1: f7:b4:f8:a8:15:96:f4:f3:07:95:9e:3e:71:09:14:84:03:b8: ed:d3:e9:c8:48:af:33:07:6a:5d:95:00:45:50:a9:0a:a5:d5: 19:7c:df:82:07:64:8d:83:7e:36:33:6e:ed:b7:fa:41:eb:3e: 16:da:2c:3d:de:ae:36:97:7d:b5:ff:b8:bf:ae:59:e1:38:1b: 23:1d:ae:ea:dd:41:2a:36:90:3e:85:70:ec:76:b1:58:41:43: c0:98:38:ed:c8:20:32:3b:bc:07:74:d0:be:f2:9b:47:3d:3e: fd:62:f3:5d:d1:3e:d3:41:ed:0f:ca:0d:63:39:c2:f3:a5:2f: 9a:9e:ca:aa:29:71:83:21:8c:a6:69:f8:4b:90:d8:2f:49:cd: c9:99:ed:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MjcxMTAvBgNVBAUTKDJBNjlENjk5RjEzQzA0MUJGREEzREFBNTdFMjFGRkFC M0M1M0VENUYwHhcNMjUxMTAzMDIyODE1WhcNMjUxMTEwMDIyODE1WjAYMRYwFAYD VQQDEw02OTA4MTMzZi04OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI4UMxf4EzlP/pXJjsQcNBdqmkg/Ai6PY4pD1tdZoHYMsuzX0eAQSpvYBgzj fzqHj9JC/tMqyygvDPCkdAHTgvWiO2E9Zv652/TMJ+sUdSE+pwsKfUm7xk0MS2q8 jESYMQbNtAwrYK/+l7xomub5QWIF7d5Y47ECPKnhL44dAMjhsSjCja5SJzRSmOsV SZEm23F1UJbiqfnzqZRWMTIczlNmj+n/YZgF3H65RwHRHOju07XP9DCH48vVE1np W1chtEvXgFgK+OUoiMzrc2FFMZO7DMDaqqptHmtGDHJM4ExLATJ4Cj1qkCHPOpvV 6Bnnceiz9SRNHtSnbrsFwFeraQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiQH81p qntO+wDxmkiH1BD4NQypMB8GA1UdIwQYMBaAFCpp1pnxPAQb/aPapX4h/6s8U+1f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkyNy9GRDhCMjJCMEJD MkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJCdjlvOXFsZmlIX3F6eFQ3 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttbldtZkU4QkJ2OW85cWxmaUhfcXp4VDdWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkyNy9GRDhCMjJCMEJDMkYxMUVEQThGNzY1M0VDNEY5QUUwMi9LbW5XbWZFOEJC djlvOXFsZmlIX3F6eFQ3VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4xNNPDz3umEwDmqT63dLJ7erA7Whw2Rcoqt4Ze7iKYd7Cftjr0P8X a7ul3gvvaEe68cfRwyiUoWtD7htKTBjtvLzQ+qi15zdyCQCsnCgcnZfOmFQi9XfK 0pFw6v5P2MXU1IFayZsh8ALmEbH3tPioFZb08weVnj5xCRSEA7jt0+nISK8zB2pd lQBFUKkKpdUZfN+CB2SNg342M27tt/pB6z4W2iw93q42l321/7i/rlnhOBsjHa7q 3UEqNpA+hXDsdrFYQUPAmDjtyCAyO7wHdNC+8ptHPT79YvNd0T7TQe0Pyg1jOcLz pS+ansqqKXGDIYymafhLkNgvSc3Jme2E -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:42 2025 by rpki-client