$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: XHeeTyHrrkiKIIQMrnvkzSxZQhfGpKZnU4OU8DonSlI= Subject key identifier: EC:D4:E5:AE:EC:9B:CA:C3:5D:DA:53:DA:3B:82:21:69:68:5B:0B:93 Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 045F Signing time: Sat 25 Oct 2025 03:12:47 +0000 Manifest this update: Sat 25 Oct 2025 03:12:46 +0000 Manifest next update: Sat 01 Nov 2025 03:12:46 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: rkc419AeSVtX8lQ9MJKaa7UbOd9kMSu/lYWS1B6593o=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Oct 25 03:12:46 2025 GMT Not After : Nov 1 03:12:46 2025 GMT Subject: CN=68fc402f-3151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:61:80:a6:f5:61:69:87:b4:11:8a:1b:db: 12:ff:ce:60:1e:77:c0:1a:e5:b4:61:57:d8:56:5b: 89:13:a3:c6:23:1a:ca:75:99:30:31:d3:b1:a6:38: 08:99:04:cb:87:ed:5e:1c:67:9b:39:11:c9:31:30: ab:f5:18:23:67:97:4a:1b:a8:fb:5b:4e:14:c1:17: 93:75:01:d6:56:6f:77:17:eb:4a:a2:fb:b3:23:51: 83:15:2f:15:52:80:2f:08:64:55:26:96:e8:29:bb: c5:0e:b9:c3:a6:2a:5b:d2:91:91:35:74:8c:af:c4: 84:23:af:68:c3:a6:01:b8:28:36:5c:77:df:db:a5: 3d:6b:a3:51:64:32:cd:0f:a5:80:ab:ef:90:01:54: 55:9a:75:cc:f3:00:8c:3a:46:cb:8d:08:7a:ec:7e: d6:7a:a5:07:6c:85:86:08:8f:85:68:2f:be:a0:64: a6:d2:31:f5:ec:ad:7f:c1:5c:96:84:0b:d7:76:38: f2:e8:dd:93:b7:0e:0f:b3:75:45:27:7c:23:21:b5: f8:57:70:5b:09:20:f1:13:7c:1e:79:2e:52:48:d7: 3f:dd:65:b2:48:f0:e1:0b:7b:3f:ff:d8:ed:f0:53: bd:29:6f:8d:bd:f8:f2:a9:19:61:3b:4e:a0:13:54: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D4:E5:AE:EC:9B:CA:C3:5D:DA:53:DA:3B:82:21:69:68:5B:0B:93 X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c6:1c:d2:73:34:d3:61:c0:85:bc:50:1f:82:b8:03:69:d8: 63:a1:87:21:65:17:1b:b0:ea:6a:39:45:29:3e:06:64:61:de: c3:0d:d1:26:de:86:53:25:65:10:38:cd:8d:ce:26:19:48:31: 74:cb:c8:68:ea:71:22:4f:08:94:ff:64:b4:13:0e:52:18:f6: 10:51:50:45:a5:9d:79:7b:1b:21:a8:c0:ad:c9:20:3c:50:74: 0f:04:3e:8c:ce:73:aa:db:1c:12:2f:b4:44:55:cf:fa:25:1e: 0d:84:c7:6a:60:e0:60:c8:d6:56:9b:09:70:04:76:bf:ee:34: 3c:0a:c9:98:5a:72:39:fa:7e:c7:83:fa:3d:f3:2a:39:be:ea: 53:c2:a5:90:59:11:2d:3e:2c:cb:35:8c:b1:91:0f:35:36:52: e2:09:72:37:31:ca:20:03:cb:4b:41:ef:1b:cc:07:5c:16:88: e4:3a:91:fd:f9:1d:78:45:22:de:7e:42:ad:9a:50:5d:49:7e: 49:67:5f:00:1c:9b:bb:cd:e8:4a:11:e1:d4:5c:99:e9:6d:c9: 57:fb:84:6e:6c:f9:d8:22:90:ba:83:7d:65:b6:12:52:b4:42: b2:0e:1b:87:80:62:50:5b:0a:7b:32:9b:9e:b8:33:0e:14:75: bd:0e:2f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUxMDI1MDMxMjQ2WhcNMjUxMTAxMDMxMjQ2WjAYMRYwFAYD VQQDEw02OGZjNDAyZi0zMTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslZhgKb1YWmHtBGKG9sS/85gHnfAGuW0YVfYVluJE6PGIxrKdZkwMdOxpjgI mQTLh+1eHGebORHJMTCr9RgjZ5dKG6j7W04UwReTdQHWVm93F+tKovuzI1GDFS8V UoAvCGRVJpboKbvFDrnDpipb0pGRNXSMr8SEI69ow6YBuCg2XHff26U9a6NRZDLN D6WAq++QAVRVmnXM8wCMOkbLjQh67H7WeqUHbIWGCI+FaC++oGSm0jH17K1/wVyW hAvXdjjy6N2Ttw4Ps3VFJ3wjIbX4V3BbCSDxE3weeS5SSNc/3WWySPDhC3s//9jt 8FO9KW+NvfjyqRlhO06gE1Qu5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzU5a7s m8rDXdpT2juCIWloWwuTMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWxhzSczTTYcCFvFAfgrgDadhjoYchZRcbsOpqOUUpPgZkYd7DDdEm 3oZTJWUQOM2NziYZSDF0y8ho6nEiTwiU/2S0Ew5SGPYQUVBFpZ15exshqMCtySA8 UHQPBD6MznOq2xwSL7REVc/6JR4NhMdqYOBgyNZWmwlwBHa/7jQ8CsmYWnI5+n7H g/o98yo5vupTwqWQWREtPizLNYyxkQ81NlLiCXI3McogA8tLQe8bzAdcFojkOpH9 +R14RSLefkKtmlBdSX5JZ18AHJu7zehKEeHUXJnpbclX+4RubPnYIpC6g31lthJS tEKyDhuHgGJQWwp7MpueuDMOFHW9Di+D -----END CERTIFICATE-----Generated at Sun Oct 26 08:47:47 2025 by rpki-client