$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: BdrnHZ3aHCGKBVd3VSE3FkDkdC5oEiOk8arcPz0Q2MU= Subject key identifier: 44:E3:DF:B5:B3:DD:1F:CF:38:79:25:23:09:CE:9B:34:2C:DC:45:F9 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: 011F Signing time: Mon 03 Nov 2025 04:48:28 +0000 Manifest this update: Mon 03 Nov 2025 04:48:27 +0000 Manifest next update: Mon 10 Nov 2025 04:48:27 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: BuYn+Pi8PSphoKE7XJy299Dktzi77W6OhtDh/knkf2Q=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: LDLnl9esieYIir4GSl9fbC8XSzYihIW7GYTLFm/J+Ic=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: umvNCLI7iW38RSzg3zPy1AVyFb/xTeitHNDqveQ33og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Nov 3 04:48:27 2025 GMT Not After : Nov 10 04:48:27 2025 GMT Subject: CN=6908341b-cadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:e1:39:f4:4e:f9:31:3d:f8:2c:65:e8:d9: 12:ad:5c:c8:38:19:96:d2:59:bf:77:89:2a:d1:70: b2:cc:ad:48:05:d4:f3:38:67:50:5b:f1:3e:f3:6c: 54:3a:82:58:42:fd:e7:0b:44:a4:11:0b:4f:04:a0: 73:f5:1e:a0:80:0e:7e:13:ad:22:a7:34:20:48:34: 93:cf:91:b8:16:b5:a3:ec:10:49:d7:4c:c4:d5:56: df:00:18:b5:88:63:dc:27:6a:76:1e:86:c1:17:29: 3b:fa:f8:5c:42:ec:f5:6c:da:5b:95:73:77:a6:82: 9b:20:78:50:b2:25:35:7e:5f:6f:a4:e0:4d:b1:f8: 52:a3:25:24:8d:78:b0:5f:c4:62:95:8d:8f:47:3d: 2c:0d:95:52:22:79:45:be:0d:de:a6:54:00:51:94: 00:15:5f:ac:4f:52:32:64:47:59:0a:ba:6f:89:fc: 8a:95:45:50:62:5f:e4:21:a2:d3:5a:93:20:9f:46: 40:c2:c1:a8:e3:e8:88:ab:c3:37:18:7a:5b:21:6a: 1e:1d:ac:62:e1:c9:4f:ca:5d:ca:9c:76:4e:42:f8: e8:ac:1a:03:45:6b:bf:d2:ca:63:c9:63:d2:1d:ce: c7:a0:46:72:08:20:c6:9a:d2:61:2b:6d:8b:f5:7d: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:DF:B5:B3:DD:1F:CF:38:79:25:23:09:CE:9B:34:2C:DC:45:F9 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ff:eb:55:2c:d3:bc:7c:a7:df:81:c7:6c:bc:c0:44:34:54: 3e:01:df:be:dc:03:99:76:2f:d3:a5:d1:d2:85:0f:66:7f:ab: d6:c9:cd:d7:7a:b6:91:2f:d7:ec:45:87:61:04:5a:68:89:02: 72:72:6d:28:97:cc:3c:ec:5a:bd:7c:72:55:e4:b8:fa:97:80: 80:ce:b6:32:86:63:9f:42:32:15:95:85:38:e0:8c:c8:73:4a: ec:de:e3:bc:e0:51:21:90:36:68:a3:1b:54:f1:43:48:4d:6a: 43:6b:ae:54:33:5e:d4:06:93:d1:18:c2:d1:2e:07:4e:30:70: 2e:41:b6:06:6a:95:71:cb:6d:30:76:10:85:1f:99:61:37:51: 5b:d0:90:2a:90:33:2a:aa:a1:04:15:e6:16:21:71:6a:04:a1: e0:26:77:53:b5:29:5c:c7:29:35:95:5d:36:5d:b1:89:fe:57: 8c:d7:76:1d:4a:de:f2:59:16:ad:18:37:a4:cb:f4:6c:67:6a: a7:2c:d5:08:a2:ad:8e:f8:8b:7a:86:92:37:05:32:92:be:5b: 10:57:83:b9:e5:c5:2e:22:86:35:7c:33:9e:e5:c3:65:98:1f: 00:05:0a:6e:53:99:1f:96:78:4a:9b:82:11:0c:89:06:4c:21: 08:8a:0e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUxMTAzMDQ0ODI3WhcNMjUxMTEwMDQ0ODI3WjAYMRYwFAYD VQQDEw02OTA4MzQxYi1jYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEjhOfRO+TE9+Cxl6NkSrVzIOBmW0lm/d4kq0XCyzK1IBdTzOGdQW/E+82xU OoJYQv3nC0SkEQtPBKBz9R6ggA5+E60ipzQgSDSTz5G4FrWj7BBJ10zE1VbfABi1 iGPcJ2p2HobBFyk7+vhcQuz1bNpblXN3poKbIHhQsiU1fl9vpOBNsfhSoyUkjXiw X8RilY2PRz0sDZVSInlFvg3eplQAUZQAFV+sT1IyZEdZCrpvifyKlUVQYl/kIaLT WpMgn0ZAwsGo4+iIq8M3GHpbIWoeHaxi4clPyl3KnHZOQvjorBoDRWu/0spjyWPS Hc7HoEZyCCDGmtJhK22L9X1YJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETj37Wz 3R/POHklIwnOmzQs3EX5MB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc/+tVLNO8fKffgcdsvMBENFQ+Ad++3AOZdi/TpdHShQ9mf6vWyc3X eraRL9fsRYdhBFpoiQJycm0ol8w87Fq9fHJV5Lj6l4CAzrYyhmOfQjIVlYU44IzI c0rs3uO84FEhkDZooxtU8UNITWpDa65UM17UBpPRGMLRLgdOMHAuQbYGapVxy20w dhCFH5lhN1Fb0JAqkDMqqqEEFeYWIXFqBKHgJndTtSlcxyk1lV02XbGJ/leM13Yd St7yWRatGDeky/RsZ2qnLNUIoq2O+It6hpI3BTKSvlsQV4O55cUuIoY1fDOe5cNl mB8ABQpuU5kflnhKm4IRDIkGTCEIig4Z -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client