$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json) Hash identifier: aQJ9fgSUPtgiRyTD6nQ4S8orN/GvEfhYHnE46YZXcOY= Subject key identifier: D8:30:D2:6A:B9:64:A9:5A:3C:21:44:5E:09:72:1D:C2:F3:0A:3D:13 Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft Manifest number: 041C Signing time: Wed 05 Nov 2025 00:27:48 +0000 Manifest this update: Wed 05 Nov 2025 00:27:48 +0000 Manifest next update: Wed 12 Nov 2025 00:27:48 +0000 Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: b4k2hR8tkiRQbvcR/uVKpFRQhQsuk0Tp6UpvSRB9tP0=) 2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: l0TDwbIQKnn22v377SYBCTiXJEwlU244XaVGT+AApO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C Validity Not Before: Nov 5 00:27:48 2025 GMT Not After : Nov 12 00:27:48 2025 GMT Subject: CN=690a9a04-b236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:fc:6e:0e:11:69:15:83:86:7d:09:d7:2f: 7b:8c:a0:11:fa:bb:25:94:38:ef:c6:12:af:2b:a1: 82:44:40:65:89:85:b5:15:6e:93:39:10:3e:5e:eb: 24:9b:f5:45:60:60:90:cb:f3:ef:ca:87:14:f3:39: c9:18:8f:f5:88:c9:c5:64:4c:30:87:1a:b1:6b:d9: 04:ac:7a:f9:58:a7:e9:75:4a:d5:f1:8d:1d:e8:4c: 89:a2:3b:a4:93:86:65:6a:86:4a:06:35:9f:3a:a4: 2b:fd:43:e9:b3:53:0d:79:2a:ed:d5:d2:7b:ae:35: e2:d2:1c:7b:17:b1:43:fd:24:73:4d:31:22:58:59: 2e:4a:35:40:43:82:1e:4f:f5:d1:ce:44:9e:9d:84: f7:22:54:97:55:5a:61:d9:31:a7:51:36:c8:39:2e: 7e:a0:a4:70:5d:1d:48:b0:a5:b3:df:bf:b3:9b:6d: 58:ae:3c:91:0d:2f:3e:fa:d7:75:1b:f1:fb:ca:d6: 0a:52:3b:4a:3e:fc:fd:a4:a5:fb:ab:79:74:3e:77: 96:ff:ad:be:e6:f9:ef:15:a4:75:21:d0:3f:9c:1b: f2:4f:19:5d:a0:4a:a3:0c:bd:54:72:73:bc:e2:ae: ae:f1:9c:2d:38:b4:84:48:ae:21:42:e8:a1:4e:f9: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:D2:6A:B9:64:A9:5A:3C:21:44:5E:09:72:1D:C2:F3:0A:3D:13 X509v3 Authority Key Identifier: keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:81:ba:6e:ce:9b:e0:48:f3:5a:94:27:85:6a:8d:d7:5f:fe: b2:3b:0f:82:c7:c8:3b:55:ed:3c:a4:1d:d7:38:1e:77:97:2e: 4b:f8:92:d1:f7:34:19:b4:0a:91:0e:a9:56:c8:23:3f:50:ce: 17:bc:41:43:7f:4f:9e:d4:9b:f6:be:fb:5b:60:90:bb:5f:da: 1d:2a:67:1a:f6:7e:4e:77:32:a1:a5:2f:6b:d1:0f:33:fb:ba: 9f:56:7e:7f:31:62:15:39:2c:0a:3b:e2:57:e2:91:1f:71:13: f6:cb:75:fa:63:45:fb:9e:ca:90:47:d8:cb:3d:de:24:b9:52: 0d:96:aa:a1:72:25:cd:86:be:f8:f7:d0:88:26:1f:f2:f6:95: b6:e2:ce:3a:37:7d:10:ba:5b:f4:f3:0a:df:97:7d:78:75:b6: 28:94:7b:4e:58:78:8d:ce:a9:84:1c:8b:60:5b:95:d9:9d:7a: e2:62:d7:bc:33:3e:d9:43:2b:52:5f:a3:16:39:1b:f9:2e:20: d4:f5:2a:98:77:24:24:1c:24:31:c6:6c:86:69:f1:ad:b6:7f: 85:91:4a:d9:db:17:68:b5:51:bb:76:f2:0a:21:52:11:a1:25: 7f:e7:e5:1a:12:a4:95:76:fb:61:52:df:49:0a:66:b4:a9:dd: 66:b7:a2:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD QUMxMjhCNEMwHhcNMjUxMTA1MDAyNzQ4WhcNMjUxMTEyMDAyNzQ4WjAYMRYwFAYD VQQDEw02OTBhOWEwNC1iMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BH8bg4RaRWDhn0J1y97jKAR+rsllDjvxhKvK6GCREBliYW1FW6TORA+Xusk m/VFYGCQy/PvyocU8znJGI/1iMnFZEwwhxqxa9kErHr5WKfpdUrV8Y0d6EyJojuk k4ZlaoZKBjWfOqQr/UPps1MNeSrt1dJ7rjXi0hx7F7FD/SRzTTEiWFkuSjVAQ4Ie T/XRzkSenYT3IlSXVVph2TGnUTbIOS5+oKRwXR1IsKWz37+zm21YrjyRDS8++td1 G/H7ytYKUjtKPvz9pKX7q3l0PneW/62+5vnvFaR1IdA/nBvyTxldoEqjDL1UcnO8 4q6u8ZwtOLSESK4hQuihTvlakQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgw0mq5 ZKlaPCFEXglyHcLzCj0TMB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4 OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcyOS8xMzEyRjkwODg4OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3 VlJWMko5NXlGT25Ld1NpMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbgbpuzpvgSPNalCeFao3XX/6yOw+Cx8g7Ve08pB3XOB53ly5L+JLR 9zQZtAqRDqlWyCM/UM4XvEFDf0+e1Jv2vvtbYJC7X9odKmca9n5OdzKhpS9r0Q8z +7qfVn5/MWIVOSwKO+JX4pEfcRP2y3X6Y0X7nsqQR9jLPd4kuVINlqqhciXNhr74 99CIJh/y9pW24s46N30Qulv08wrfl314dbYolHtOWHiNzqmEHItgW5XZnXriYte8 Mz7ZQytSX6MWORv5LiDU9SqYdyQkHCQxxmyGafGttn+FkUrZ2xdotVG7dvIKIVIR oSV/5+UaEqSVdvthUt9JCma0qd1mt6JH -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:37 2025 by rpki-client