$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: Ig4Mdwrb2qUTZoinLWEJTTAi6qbQoeFvX9coB8Ul9EU= Subject key identifier: B7:8B:8B:3F:D0:39:FE:39:4C:24:F1:A5:2F:0B:47:45:39:5F:8E:A0 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 0A25 Signing time: Sun 02 Nov 2025 19:43:15 +0000 Manifest this update: Sun 02 Nov 2025 19:43:15 +0000 Manifest next update: Sun 09 Nov 2025 19:43:15 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: x6tHp8seDBMxCYnJNwB/TkuNEh9b7JgIwVhUzFF490A=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Nov 2 19:43:15 2025 GMT Not After : Nov 9 19:43:15 2025 GMT Subject: CN=6907b453-83de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:52:9b:2c:fc:ae:77:f2:ec:1e:30:03:6f: ed:8e:87:5e:f6:1c:87:e1:fd:b5:cc:8e:20:63:b5: 81:09:ec:8b:d2:74:b2:9d:56:14:f7:74:71:22:65: 6c:59:23:a3:c6:29:f9:f5:ce:f0:c5:45:4f:2f:68: 00:8c:84:25:78:c9:a1:0e:22:13:7a:5a:45:c4:7a: d1:55:3e:97:2e:26:b2:e5:83:a3:ae:fa:bc:7d:e6: d6:b3:07:c1:b3:c3:7a:9f:98:62:2a:34:d4:c4:aa: 49:1b:54:0b:70:20:ca:d8:97:6b:54:7f:07:aa:08: e2:69:84:8b:74:a7:f9:6e:fb:7b:44:7b:b2:43:84: 55:32:16:1f:d7:8b:99:e5:2f:fb:ef:9b:86:b0:9c: 1c:7f:8c:64:7d:64:43:4c:40:8e:2b:26:38:69:68: 76:be:f8:d2:be:68:d4:8a:56:00:71:41:b0:45:f1: a3:a5:36:dd:1b:92:21:38:9c:7f:3a:96:e6:21:60: 4d:fd:9b:75:7b:17:7d:3d:87:65:51:4e:aa:80:1d: 1f:73:14:c0:da:58:bc:ba:cf:fd:c6:a2:b1:2e:af: a1:db:22:55:43:ce:82:7c:7a:ca:fe:45:c1:6f:e9: ef:d1:30:c8:79:76:27:b4:1c:c7:c5:25:a7:ce:09: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8B:8B:3F:D0:39:FE:39:4C:24:F1:A5:2F:0B:47:45:39:5F:8E:A0 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:63:9f:4a:c4:f6:b9:d9:e4:9a:1c:8e:ff:41:9e:94:52:77: cb:37:4d:9c:62:8a:dd:8d:ef:e7:02:3d:26:88:d7:47:1b:f0: c3:24:7f:f3:06:a8:9e:46:1d:56:c7:b1:d0:d9:27:e1:9e:b1: ae:78:2e:3b:fc:3a:1d:e8:20:a2:41:e2:6f:1e:d8:10:ca:80: 41:c9:06:20:e1:ed:01:de:3b:70:14:a0:e0:0a:9a:60:b3:19: e6:86:de:81:8e:13:f0:6c:70:b2:0c:e5:12:56:1a:3c:79:d9: 12:52:52:2e:2a:a9:da:98:1b:f2:3c:a5:c9:d3:cc:c6:64:55: 1b:6c:ba:fd:ff:f0:c9:c1:6d:84:56:43:b9:84:12:d1:a6:44: cb:fd:cc:2a:ed:e1:15:6c:14:37:4f:2b:26:fa:8c:36:a8:6e: 2c:07:f0:ea:24:93:96:9a:bb:7a:64:25:10:52:6e:68:1b:fb: 1a:4c:e0:49:80:54:35:32:ab:15:bd:e0:cb:64:a9:47:01:3a: 06:45:fe:11:6a:0a:29:9b:ac:65:13:55:56:0b:61:bc:fb:8c: f4:98:e6:64:90:f1:0b:cc:80:02:07:43:9e:90:e6:19:cb:3f: 58:99:2a:b5:21:22:f1:dd:28:da:c3:7e:82:b2:ab:cd:45:f4: 2d:d9:62:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUxMTAyMTk0MzE1WhcNMjUxMTA5MTk0MzE1WjAYMRYwFAYD VQQDEw02OTA3YjQ1My04M2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3NSmyz8rnfy7B4wA2/tjode9hyH4f21zI4gY7WBCeyL0nSynVYU93RxImVs WSOjxin59c7wxUVPL2gAjIQleMmhDiITelpFxHrRVT6XLiay5YOjrvq8febWswfB s8N6n5hiKjTUxKpJG1QLcCDK2JdrVH8HqgjiaYSLdKf5bvt7RHuyQ4RVMhYf14uZ 5S/775uGsJwcf4xkfWRDTECOKyY4aWh2vvjSvmjUilYAcUGwRfGjpTbdG5IhOJx/ OpbmIWBN/Zt1exd9PYdlUU6qgB0fcxTA2li8us/9xqKxLq+h2yJVQ86CfHrK/kXB b+nv0TDIeXYntBzHxSWnzgneiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeLiz/Q Of45TCTxpS8LR0U5X46gMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUY59KxPa52eSaHI7/QZ6UUnfLN02cYordje/nAj0miNdHG/DDJH/z BqieRh1Wx7HQ2SfhnrGueC47/Dod6CCiQeJvHtgQyoBByQYg4e0B3jtwFKDgCppg sxnmht6BjhPwbHCyDOUSVho8edkSUlIuKqnamBvyPKXJ08zGZFUbbLr9//DJwW2E VkO5hBLRpkTL/cwq7eEVbBQ3Tysm+ow2qG4sB/DqJJOWmrt6ZCUQUm5oG/saTOBJ gFQ1MqsVveDLZKlHAToGRf4Ragopm6xlE1VWC2G8+4z0mOZkkPELzIACB0OekOYZ yz9YmSq1ISLx3Sjaw36CsqvNRfQt2WIF -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:54 2025 by rpki-client