$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft File: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json) Hash identifier: FYN5BIjoIRTpr/v1NePp+Yck62c7QgpoepDS+yB+7is= Subject key identifier: C6:77:19:68:5A:F5:C7:DA:BB:A8:5A:17:B9:13:3E:F9:80:DE:77:7F Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 Certificate issuer: /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft Manifest number: 0108 Signing time: Mon 03 Nov 2025 04:59:14 +0000 Manifest this update: Mon 03 Nov 2025 04:59:14 +0000 Manifest next update: Mon 10 Nov 2025 04:59:14 +0000 Files and hashes: 1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: SAuBvSeOzUf/kjswSXq78hU9HGY2LMhyFbijowkFO90=) 2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: GgtpbCe0DWHXE3n4d7zrRXZLNfKbReC9s/SOQ0QeSio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038 Validity Not Before: Nov 3 04:59:14 2025 GMT Not After : Nov 10 04:59:14 2025 GMT Subject: CN=690836a2-7b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:37:96:a3:a0:c8:48:03:6d:d9:70:ef:f2:64: 53:3c:12:28:54:ac:8b:2e:26:c9:fe:01:18:f4:f1: 1e:95:54:60:8c:0c:29:0a:8c:61:31:9e:96:2a:90: 31:e8:ee:aa:2b:d0:08:be:6a:73:ab:9b:96:56:e8: fd:83:62:de:6e:28:94:12:e6:ee:91:59:d3:c9:b2: d5:2f:84:f7:0c:ae:7b:ba:1c:51:05:65:a1:2b:16: e8:c7:fc:12:01:81:bf:ce:2b:c1:d0:5d:e0:a7:e9: 70:6b:70:9f:ad:20:d5:0a:81:55:f8:4d:8d:0b:3a: f0:21:ac:4d:28:05:81:b8:ef:d2:68:c5:2e:31:32: 64:33:09:37:e5:14:19:cc:c5:22:c9:b1:c9:20:eb: 2b:ad:18:6d:7c:ef:34:de:1f:46:5a:21:53:61:84: e3:c2:f2:40:95:5e:77:bf:0a:d9:97:cd:9a:8b:7d: 03:36:21:46:96:22:a4:d8:b2:78:db:b7:94:16:09: fa:79:30:9d:50:44:ed:0d:59:e1:1b:79:1f:74:05: fd:2b:e0:84:45:a3:38:9f:1c:bb:e8:4a:8a:58:f2: c6:54:db:c5:f3:28:e3:ea:33:e8:94:a5:1d:fe:5c: f3:c5:bb:38:09:5a:64:3e:02:8a:d1:07:6a:ad:9d: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:77:19:68:5A:F5:C7:DA:BB:A8:5A:17:B9:13:3E:F9:80:DE:77:7F X509v3 Authority Key Identifier: keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:24:f0:db:b5:9e:b1:71:c6:31:20:d3:04:be:1d:18:88:88: 7c:49:c6:09:75:17:ce:85:b8:97:f5:e7:fe:ef:be:30:9c:0e: b0:63:4c:0a:d9:31:65:fd:ee:98:25:7b:98:76:86:59:51:4f: b7:17:32:a0:77:72:70:2e:d2:ca:81:27:c7:0e:00:25:98:48: c0:8e:e3:74:ea:f7:ac:5a:f1:39:1b:af:fb:7e:28:55:34:25: 7e:f9:7a:33:17:82:f5:12:ea:e7:fc:64:e6:bd:43:c3:50:37: 4a:29:3b:f3:5d:b9:48:37:2c:d7:30:30:47:26:db:dc:12:f9: 1c:34:03:86:94:c7:7e:de:bf:c2:b7:47:8a:b0:10:ce:e7:bc: c4:95:54:e3:9c:a6:20:a8:c6:0a:ba:9a:ec:e9:36:6b:cd:6d: bb:28:55:99:22:db:78:7c:47:66:7e:6e:40:fe:ed:fa:77:a0: 6c:83:c0:03:52:8b:2a:3c:d5:a3:75:ff:f9:12:86:a0:e6:01: 56:ab:9d:29:a7:34:b2:48:f5:5a:81:d9:61:a1:05:20:af:76: d4:22:e7:ae:d4:ac:16:ae:64:75:e2:0a:50:6c:18:6d:f3:fe: 4f:28:3a:df:50:80:cb:ea:d1:6c:1e:02:6e:b7:d9:43:c9:df: ed:7e:ca:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy RkYxOTIwMzgwHhcNMjUxMTAzMDQ1OTE0WhcNMjUxMTEwMDQ1OTE0WjAYMRYwFAYD VQQDEw02OTA4MzZhMi03YjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DeWo6DISANt2XDv8mRTPBIoVKyLLibJ/gEY9PEelVRgjAwpCoxhMZ6WKpAx 6O6qK9AIvmpzq5uWVuj9g2LebiiUEubukVnTybLVL4T3DK57uhxRBWWhKxbox/wS AYG/zivB0F3gp+lwa3CfrSDVCoFV+E2NCzrwIaxNKAWBuO/SaMUuMTJkMwk35RQZ zMUiybHJIOsrrRhtfO803h9GWiFTYYTjwvJAlV53vwrZl82ai30DNiFGliKk2LJ4 27eUFgn6eTCdUETtDVnhG3kfdAX9K+CERaM4nxy76EqKWPLGVNvF8yjj6jPolKUd /lzzxbs4CVpkPgKK0QdqrZ0+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ3GWha 9cfau6haF7kTPvmA3nd/MB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH M05weExtWWZiWjh2OFpJRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuJPDbtZ6xccYxINMEvh0YiIh8ScYJdRfOhbiX9ef+774wnA6wY0wK 2TFl/e6YJXuYdoZZUU+3FzKgd3JwLtLKgSfHDgAlmEjAjuN06vesWvE5G6/7fihV NCV++XozF4L1Eurn/GTmvUPDUDdKKTvzXblINyzXMDBHJtvcEvkcNAOGlMd+3r/C t0eKsBDO57zElVTjnKYgqMYKuprs6TZrzW27KFWZItt4fEdmfm5A/u36d6Bsg8AD UosqPNWjdf/5Eoag5gFWq50ppzSySPVagdlhoQUgr3bUIueu1KwWrmR14gpQbBht 8/5PKDrfUIDL6tFsHgJut9lDyd/tfsq+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:20 2025 by rpki-client