$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: gfEnDLOXUf06mn/8jLOFUMHx20MBn/PN67oEtrUW+c0= Subject key identifier: 94:3E:EF:72:21:21:CA:9B:B7:59:F0:F1:05:EC:16:B1:E8:D9:76:A7 Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 05E5 Signing time: Sun 26 Oct 2025 23:54:25 +0000 Manifest this update: Sun 26 Oct 2025 23:54:24 +0000 Manifest next update: Sun 02 Nov 2025 23:54:24 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: wqSQbw0pyhv4FsqOxa88OdvY4Ye5eABrombPjAFMDzk=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: v0ecUflCYhVKX7WWipZns2LjtpkfsuPLOo5CXM1V1Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 23:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647, serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: Oct 26 23:54:24 2025 GMT Not After : Nov 2 23:54:24 2025 GMT Subject: CN=68feb4b1-4910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:ec:ee:9d:cd:0f:40:60:c0:e5:63:d5:f3: 59:cf:5b:26:43:7a:ed:61:df:0e:d3:14:ee:a1:14: 7b:14:4f:da:8b:3d:49:83:e2:6c:90:b1:a8:e2:40: f8:79:a2:6a:18:11:66:46:75:31:0e:a0:5e:91:a7: c0:06:37:ef:33:4e:77:ed:21:5e:91:4c:f9:85:dc: 47:37:a3:05:df:2f:8d:c5:e0:20:f5:29:49:b8:e5: 0c:97:f4:d5:06:37:08:54:6d:fc:a3:21:0d:37:15: b1:b7:1d:e6:49:76:9d:2c:bf:04:d9:67:56:a0:e8: 2b:78:70:3d:99:e8:fa:ca:6e:4a:67:7a:60:36:b5: b9:cf:11:05:ca:43:b8:09:94:14:5f:d0:6f:dd:a3: 56:87:f0:02:3d:6d:81:6f:8d:05:f8:59:6c:60:3c: d7:f5:e0:73:95:7a:5c:4f:82:ae:bf:84:de:ac:5d: 49:54:dc:88:b5:0d:17:55:c7:c1:f5:58:62:fa:f5: 68:96:b2:17:0e:90:96:9c:45:92:ab:5d:41:27:7a: 0a:56:7c:78:f2:0a:b8:bf:32:35:a4:8f:47:31:1c: 39:7e:0b:21:a3:27:5c:a0:48:e8:6c:71:09:17:05: 72:b4:93:63:be:2d:cb:70:d0:9e:9b:bf:d7:01:15: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3E:EF:72:21:21:CA:9B:B7:59:F0:F1:05:EC:16:B1:E8:D9:76:A7 X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:a0:c2:df:32:9b:24:6b:f9:f4:11:7b:64:31:57:48:18: c9:e1:cd:18:63:1a:89:93:05:aa:9e:20:c2:2a:29:ba:99:67: fa:c0:c6:9f:a1:34:af:bf:2c:86:a2:45:ae:20:f7:e8:53:73: 6f:c2:82:41:1b:e4:99:29:c0:ed:d5:46:58:c5:33:23:2c:02: d8:4f:4a:52:6c:b7:69:02:d6:8b:45:97:5a:77:1d:7d:da:a2: 26:ad:73:83:09:04:90:af:6d:75:de:f5:dd:72:c0:3a:58:bb: 56:23:1c:ef:6b:fa:ef:e0:6c:03:66:86:37:fb:51:12:65:de: 02:94:3e:eb:37:e1:50:6f:e1:cd:8d:65:18:7b:0f:9a:cf:7a: c8:bd:6a:4d:ea:df:5c:db:ee:82:ec:e6:4d:70:c1:7a:dd:59: 3b:2a:0a:93:77:17:80:5f:21:e4:ed:98:27:0f:3d:da:68:1d: c3:f0:c2:9a:54:06:8d:2f:94:99:41:6c:74:0b:ba:57:ef:65: 6a:76:ca:d8:c8:1f:12:1f:f2:90:e8:67:b9:44:13:66:46:f6: 68:9a:a9:c8:98:b9:c9:9a:aa:f9:ed:21:0c:db:16:0b:d1:c9: f1:21:59:38:71:01:69:05:bf:ed:b9:2c:05:b7:32:cb:7f:1c: 3e:42:3b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjUxMDI2MjM1NDI0WhcNMjUxMTAyMjM1NDI0WjAYMRYwFAYD VQQDEw02OGZlYjRiMS00OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqjs7p3ND0BgwOVj1fNZz1smQ3rtYd8O0xTuoRR7FE/aiz1Jg+JskLGo4kD4 eaJqGBFmRnUxDqBekafABjfvM0537SFekUz5hdxHN6MF3y+NxeAg9SlJuOUMl/TV BjcIVG38oyENNxWxtx3mSXadLL8E2WdWoOgreHA9mej6ym5KZ3pgNrW5zxEFykO4 CZQUX9Bv3aNWh/ACPW2Bb40F+FlsYDzX9eBzlXpcT4Kuv4TerF1JVNyItQ0XVcfB 9Vhi+vVolrIXDpCWnEWSq11BJ3oKVnx48gq4vzI1pI9HMRw5fgshoydcoEjobHEJ FwVytJNjvi3LcNCem7/XARX9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQ+73Ih Icqbt1nw8QXsFrHo2XanMB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpqDC3zKbJGv59BF7ZDFXSBjJ4c0YYxqJkwWqniDCKim6mWf6wMaf oTSvvyyGokWuIPfoU3NvwoJBG+SZKcDt1UZYxTMjLALYT0pSbLdpAtaLRZdadx19 2qImrXODCQSQr2113vXdcsA6WLtWIxzva/rv4GwDZoY3+1ESZd4ClD7rN+FQb+HN jWUYew+az3rIvWpN6t9c2+6C7OZNcMF63Vk7KgqTdxeAXyHk7ZgnDz3aaB3D8MKa VAaNL5SZQWx0C7pX72VqdsrYyB8SH/KQ6Ge5RBNmRvZomqnImLnJmqr57SEM2xYL 0cnxIVk4cQFpBb/tuSwFtzLLfxw+QjuH -----END CERTIFICATE-----Generated at Mon Oct 27 22:06:15 2025 by rpki-client