$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: jiF7u5v20tnYCBTgq8fnQDTp/SlEi+dEAOHQfDedwKQ= Subject key identifier: F5:23:49:92:09:C7:4E:64:AA:17:AD:05:D4:F2:02:08:74:EA:A5:03 Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 06A6 Signing time: Sun 02 Nov 2025 22:14:20 +0000 Manifest this update: Sun 02 Nov 2025 22:14:19 +0000 Manifest next update: Sun 09 Nov 2025 22:14:19 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: Lg6Tw5jq0Hmj9Uwz2zMdeoKJ4ee9RD/h17vOhKVWamE=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: rH99d2UyS2BchbUPUbqFc9GOoYlWGp7hkjxEyr/ZGj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: Nov 2 22:14:19 2025 GMT Not After : Nov 9 22:14:19 2025 GMT Subject: CN=6907d7bb-3876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0b:f3:cf:27:e3:18:19:a4:ee:5c:40:82:07: b1:d2:b6:58:1c:6c:b2:3b:99:c0:54:fc:54:8a:b9: 8a:46:33:e9:36:2d:39:22:8d:2e:89:23:58:04:fb: 5a:ed:a0:9b:e5:89:8b:00:48:95:de:65:b4:ce:fc: 79:89:86:f9:f6:e0:cd:8d:c3:78:fc:79:7f:4b:54: 12:23:e9:56:af:f1:77:34:26:03:c4:4c:1b:20:1a: 8e:48:a8:f8:49:69:54:71:37:8a:44:a7:16:2c:cb: f5:0a:04:25:c4:99:22:73:b0:e1:1e:f2:ef:3b:bc: 8d:31:22:a5:20:18:7b:5c:92:7c:d9:44:3b:1e:d0: fe:fc:36:59:3f:03:2a:6c:03:c1:bb:b5:41:3f:5f: 9c:80:19:3f:83:ee:b5:a2:bf:01:b6:37:4e:f4:60: 42:23:47:bd:5c:25:b2:16:97:71:f1:9f:a9:db:96: b5:14:73:44:7e:40:b4:e5:86:2c:c3:e3:45:30:26: ab:81:8f:e4:8a:09:59:ba:8c:90:a6:47:67:de:5c: 4e:80:24:6b:6a:e6:ff:2d:d8:b4:e7:29:8b:2a:dd: a0:1e:ec:ad:6a:ff:c9:67:f7:bf:e9:00:a0:15:90: 4b:94:1f:2f:50:c6:fe:17:3d:73:5d:c3:be:41:19: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:49:92:09:C7:4E:64:AA:17:AD:05:D4:F2:02:08:74:EA:A5:03 X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:47:ee:60:ca:97:b3:93:32:1f:af:7d:0c:91:01:a2:39:68: a5:65:4b:d3:84:2e:a1:28:db:c6:35:3a:82:ac:83:1d:76:3a: ac:b9:b4:7b:98:34:e5:ba:e3:bd:25:ff:12:09:6a:e8:f5:6b: ec:00:bc:4b:af:e4:b2:e0:6f:1a:9c:98:55:75:84:74:7e:4d: b5:76:d5:0f:2c:e5:80:d0:3b:71:e3:71:52:1b:5c:d7:1b:e8: 3b:22:1c:42:ed:e9:bf:3a:73:fb:91:f8:96:3c:8a:11:86:56: 38:11:63:0a:03:eb:15:64:b9:51:f5:b0:33:ea:18:35:45:e4: c1:b0:b3:e3:34:88:ec:9c:47:0a:fa:3f:8e:36:2d:f8:d0:f2: 8a:ad:37:8b:84:f1:37:56:61:bd:ea:cc:9a:1b:4e:f3:41:09: 43:8e:43:d7:19:1a:49:be:f7:0a:2e:8f:c3:59:71:2b:79:12: 56:ac:9f:ea:e0:31:8b:c6:d8:84:e3:1a:59:5d:e6:6f:d6:07: cd:c5:57:e1:a8:dd:e6:04:1c:c0:be:a1:6f:9c:91:62:23:8c: b6:3b:75:60:7c:92:b2:9a:bf:42:12:47:47:07:a4:90:cf:7b: 9b:8c:84:37:22:07:af:e7:ef:53:1b:19:76:be:1c:4a:10:be: 7f:aa:44:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjUxMTAyMjIxNDE5WhcNMjUxMTA5MjIxNDE5WjAYMRYwFAYD VQQDEw02OTA3ZDdiYi0zODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QvzzyfjGBmk7lxAggex0rZYHGyyO5nAVPxUirmKRjPpNi05Io0uiSNYBPta 7aCb5YmLAEiV3mW0zvx5iYb59uDNjcN4/Hl/S1QSI+lWr/F3NCYDxEwbIBqOSKj4 SWlUcTeKRKcWLMv1CgQlxJkic7DhHvLvO7yNMSKlIBh7XJJ82UQ7HtD+/DZZPwMq bAPBu7VBP1+cgBk/g+61or8BtjdO9GBCI0e9XCWyFpdx8Z+p25a1FHNEfkC05YYs w+NFMCargY/kiglZuoyQpkdn3lxOgCRraub/Ldi05ymLKt2gHuytav/JZ/e/6QCg FZBLlB8vUMb+Fz1zXcO+QRnb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUjSZIJ x05kqhetBdTyAgh06qUDMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeR+5gypezkzIfr30MkQGiOWilZUvThC6hKNvGNTqCrIMddjqsubR7 mDTluuO9Jf8SCWro9WvsALxLr+Sy4G8anJhVdYR0fk21dtUPLOWA0Dtx43FSG1zX G+g7IhxC7em/OnP7kfiWPIoRhlY4EWMKA+sVZLlR9bAz6hg1ReTBsLPjNIjsnEcK +j+ONi340PKKrTeLhPE3VmG96syaG07zQQlDjkPXGRpJvvcKLo/DWXEreRJWrJ/q 4DGLxtiE4xpZXeZv1gfNxVfhqN3mBBzAvqFvnJFiI4y2O3VgfJKymr9CEkdHB6SQ z3ubjIQ3Igev5+9TGxl2vhxKEL5/qkQh -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:28 2025 by rpki-client