$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft File: KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json) Hash identifier: 5bJxcStmRdQVWEkeq3SwJb9IHAypArgmyXj6RM6U9WU= Subject key identifier: AC:BA:CB:90:7C:9C:95:AD:BA:42:32:F9:85:05:EB:4C:2C:38:13:BC Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B Certificate issuer: /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft Manifest number: 0518 Signing time: Mon 03 Nov 2025 00:19:57 +0000 Manifest this update: Mon 03 Nov 2025 00:19:56 +0000 Manifest next update: Mon 10 Nov 2025 00:19:56 +0000 Files and hashes: 1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: 9YHtD6fYX78OuD2iNoCHbc7Zk8f6+reh2YQ5Fg8sAfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B Validity Not Before: Nov 3 00:19:56 2025 GMT Not After : Nov 10 00:19:56 2025 GMT Subject: CN=6907f52d-83b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:4f:25:22:f5:b4:84:2c:09:86:66:63:d6: 5c:ce:74:52:d3:2d:5c:b6:d7:50:2c:e3:4f:ca:1f: ac:67:6a:48:16:1a:47:fc:2b:46:39:84:ca:a5:79: d5:91:1f:e6:63:11:3b:8c:aa:2f:0d:5d:7e:67:f4: f3:85:05:ac:d3:63:5c:8e:7b:c8:f8:5c:3b:c5:10: 39:e1:d2:f5:72:e3:a0:70:8e:32:a9:53:d1:3f:f9: 7f:a2:26:8f:06:a7:8a:a4:38:7c:38:ea:bc:46:14: 62:ae:3f:a9:f5:46:81:aa:51:a5:11:4e:30:a8:1c: ce:10:59:05:f1:4c:9d:c1:c7:30:13:4a:07:5a:6b: 01:31:d5:bf:76:a1:51:de:5e:dd:e5:50:7c:e7:1b: d3:49:9d:37:24:f9:9f:91:48:d2:14:ff:39:3b:db: 38:03:f0:bd:94:b9:fc:8e:5a:06:5b:e9:9d:13:82: fd:e8:7a:f4:aa:23:2e:a2:08:3d:1e:d4:69:7a:19: f4:e2:5c:b8:0f:87:e9:4f:1a:3e:b2:af:ec:5b:63: 30:18:d8:45:ed:cc:fe:db:1f:1b:eb:36:ce:f9:90: 14:c5:4d:0f:c0:29:00:a2:1c:8c:53:5e:65:a1:51: 25:7f:af:ca:9f:98:a8:f9:b2:4b:15:71:6d:3a:92: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:CB:90:7C:9C:95:AD:BA:42:32:F9:85:05:EB:4C:2C:38:13:BC X509v3 Authority Key Identifier: keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:98:40:00:ec:8d:a5:b6:ae:bb:2e:35:cb:ad:d7:e0:4b:11: ed:d7:a6:5b:e9:d0:ce:5e:02:35:f8:86:b6:b4:c9:9f:25:65: 4a:a5:19:75:d8:02:ea:4e:05:31:f8:31:54:47:c2:fa:43:a5: 8b:38:7c:86:21:7b:d0:29:7a:1b:5a:b2:85:6c:cd:12:de:27: 04:72:d5:11:9f:98:7d:3c:5e:df:f7:e7:0e:51:f5:2e:65:a0: f3:82:29:d6:17:bb:eb:d9:3f:ed:26:d8:04:7a:09:3d:41:97: b2:1c:27:9a:ee:a2:f7:4e:31:89:bb:9f:81:7a:0c:ad:b2:ed: ef:19:53:db:3e:01:04:6a:49:e4:48:be:b8:2b:67:ca:40:36: 2e:b9:87:37:63:09:f3:4e:91:c0:80:de:33:cd:33:d3:cb:30: c9:95:85:97:80:0f:c5:7b:65:cb:b6:0d:27:56:94:50:e3:6d: 34:6b:8a:17:43:9f:89:15:4b:bb:2b:50:e5:96:3a:aa:89:f9: 78:dc:0e:ec:e0:d0:8e:e7:6a:38:e2:d3:ad:e8:aa:08:f8:fd: 1b:04:f2:ff:3c:d1:91:d4:48:3b:fb:49:58:d8:03:63:9e:f4: 7b:9e:00:d4:da:00:ba:91:5d:a3:0f:93:5c:dd:d3:81:42:76: 8c:2a:be:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNBODAxMTAvBgNVBAUTKDJCMDM3RTVFREJDMjg0QTM5Mzg4RDE5QkNENDVEMkQ5 NDc0QjMxOUIwHhcNMjUxMTAzMDAxOTU2WhcNMjUxMTEwMDAxOTU2WjAYMRYwFAYD VQQDEw02OTA3ZjUyZC04M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtBPJSL1tIQsCYZmY9ZcznRS0y1cttdQLONPyh+sZ2pIFhpH/CtGOYTKpXnV kR/mYxE7jKovDV1+Z/TzhQWs02NcjnvI+Fw7xRA54dL1cuOgcI4yqVPRP/l/oiaP BqeKpDh8OOq8RhRirj+p9UaBqlGlEU4wqBzOEFkF8UydwccwE0oHWmsBMdW/dqFR 3l7d5VB85xvTSZ03JPmfkUjSFP85O9s4A/C9lLn8jloGW+mdE4L96Hr0qiMuogg9 HtRpehn04ly4D4fpTxo+sq/sW2MwGNhF7cz+2x8b6zbO+ZAUxU0PwCkAohyMU15l oVElf6/Kn5io+bJLFXFtOpIQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy6y5B8 nJWtukIy+YUF60wsOBO8MB8GA1UdIwQYMBaAFCsDfl7bwoSjk4jRm81F0tlHSzGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0E4MC82OTAxMTlEMjg4 MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hLT1RpTkdielVYUzJVZExN WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t3Ti1YdHZDaEtPVGlOR2J6VVhTMlVkTE1acy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0E4MC82OTAxMTlEMjg4MUExMUVDQkNDRkEwMEZDNEY5QUUwMi9Ld04tWHR2Q2hL T1RpTkdielVYUzJVZExNWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJmEAA7I2ltq67LjXLrdfgSxHt16Zb6dDOXgI1+Ia2tMmfJWVKpRl1 2ALqTgUx+DFUR8L6Q6WLOHyGIXvQKXobWrKFbM0S3icEctURn5h9PF7f9+cOUfUu ZaDzginWF7vr2T/tJtgEegk9QZeyHCea7qL3TjGJu5+Begytsu3vGVPbPgEEaknk SL64K2fKQDYuuYc3YwnzTpHAgN4zzTPTyzDJlYWXgA/Fe2XLtg0nVpRQ4200a4oX Q5+JFUu7K1Dlljqqifl43A7s4NCO52o44tOt6KoI+P0bBPL/PNGR1Eg7+0lY2ANj nvR7ngDU2gC6kV2jD5Nc3dOBQnaMKr6w -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:29 2025 by rpki-client