$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: ntWjjLCboY1/qL5lcNZytgjzZJAVZHjdmSi6+mriMFs= Subject key identifier: 23:05:BD:C3:0C:34:B7:FD:5E:45:12:AB:F6:A0:A9:B3:D6:7D:45:69 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: 01DE Signing time: Wed 05 Nov 2025 02:51:04 +0000 Manifest this update: Wed 05 Nov 2025 02:51:03 +0000 Manifest next update: Wed 12 Nov 2025 02:51:03 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: rf1WsLe0D1eX3UZFE/TjzcZIb2KUpct7+RS5cXCPtak=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: Nov 5 02:51:03 2025 GMT Not After : Nov 12 02:51:03 2025 GMT Subject: CN=690abb98-4bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:a2:b7:57:b7:29:a5:6d:d9:14:b4:86:82: 0b:6d:45:40:1a:21:0d:71:a9:f9:0e:e4:9f:e2:c0: 83:e5:b7:82:b3:7a:4b:c8:88:4d:95:36:50:c0:66: 7d:6a:4d:23:b4:b9:87:43:a0:5f:0b:21:a1:b8:6b: 67:85:ab:3c:ca:5c:f8:d6:3f:c5:0b:8c:00:af:74: fd:8c:ba:1c:33:fd:27:a3:7b:a1:20:e8:d8:a4:d7: fb:05:10:7a:e8:be:a5:d5:38:29:ba:77:d2:25:e0: d3:2f:5f:71:4d:da:ff:6b:6b:11:5c:2d:e7:45:64: d6:af:a2:6e:64:4d:5f:a9:7c:37:d3:13:cd:37:8f: 5b:82:30:62:b5:7b:27:02:12:8f:a8:2b:7d:7f:3e: 40:67:60:24:49:59:21:06:25:c5:33:ad:37:6a:7f: 9d:e9:6a:c6:e5:9e:0e:7b:a6:21:4a:51:43:ba:52: 8b:de:0c:2a:98:ae:95:c6:13:a9:00:f2:9e:7e:d8: 14:f5:db:05:a8:a8:15:18:07:e1:fb:24:83:79:b9: 54:4a:7f:50:09:73:da:5a:2a:66:25:2c:72:b6:3e: d4:68:61:e0:07:04:6b:be:b7:1a:57:65:76:b8:c8: 38:e9:7e:51:9c:b1:f3:37:86:5b:57:9c:f2:cc:86: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:05:BD:C3:0C:34:B7:FD:5E:45:12:AB:F6:A0:A9:B3:D6:7D:45:69 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:e1:b2:63:89:e3:7f:9c:b3:ff:0c:b2:08:fc:48:4c:33: 2f:1d:42:e2:82:7f:cc:35:dd:72:fd:60:22:bd:8b:cf:6f:fd: 22:99:7c:24:59:78:b3:76:fd:b1:8b:df:b2:51:70:38:7e:1f: 50:70:21:c8:e6:1e:32:44:5f:64:cf:fd:a8:d2:9e:52:f2:33: 76:5a:c5:25:4d:e4:8a:18:1d:6c:83:aa:1d:32:8d:87:07:d9: fc:34:a6:45:ba:ec:12:c2:5f:05:71:4e:e7:cc:c3:4f:a5:19: a0:92:95:ed:59:78:ff:9e:b4:d4:3d:58:9f:5c:49:e6:2d:de: bb:d8:77:cc:69:3f:30:f6:26:ad:62:42:66:3b:7e:7a:f3:c8: 44:a9:a4:c4:b9:08:1e:c3:88:0f:4b:30:f8:71:f3:ca:8b:8a: 2d:f6:a1:76:27:7c:9e:5a:6f:22:59:c3:f2:92:cc:ac:c6:a4: 13:26:36:98:6d:f6:49:13:36:e8:b0:92:8b:2e:a9:e3:95:92: 1d:52:30:ef:6d:7f:a6:54:5d:76:8b:05:a8:09:70:65:96:87: c2:be:96:63:ae:7f:f8:cf:4f:89:b9:c0:3c:ee:66:37:65:97: 7e:bb:14:31:e2:e4:b8:44:42:ff:13:0c:af:59:7e:27:96:eb: 2a:e1:5f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjUxMTA1MDI1MTAzWhcNMjUxMTEyMDI1MTAzWjAYMRYwFAYD VQQDEw02OTBhYmI5OC00YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsg6it1e3KaVt2RS0hoILbUVAGiENcan5DuSf4sCD5beCs3pLyIhNlTZQwGZ9 ak0jtLmHQ6BfCyGhuGtnhas8ylz41j/FC4wAr3T9jLocM/0no3uhIOjYpNf7BRB6 6L6l1TgpunfSJeDTL19xTdr/a2sRXC3nRWTWr6JuZE1fqXw30xPNN49bgjBitXsn AhKPqCt9fz5AZ2AkSVkhBiXFM603an+d6WrG5Z4Oe6YhSlFDulKL3gwqmK6VxhOp APKeftgU9dsFqKgVGAfh+ySDeblUSn9QCXPaWipmJSxytj7UaGHgBwRrvrcaV2V2 uMg46X5RnLHzN4ZbV5zyzIa6TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMFvcMM NLf9XkUSq/agqbPWfUVpMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHueGyY4njf5yz/wyyCPxITDMvHULign/MNd1y/WAivYvPb/0imXwk WXizdv2xi9+yUXA4fh9QcCHI5h4yRF9kz/2o0p5S8jN2WsUlTeSKGB1sg6odMo2H B9n8NKZFuuwSwl8FcU7nzMNPpRmgkpXtWXj/nrTUPVifXEnmLd672HfMaT8w9iat YkJmO35688hEqaTEuQgew4gPSzD4cfPKi4ot9qF2J3yeWm8iWcPyksysxqQTJjaY bfZJEzbosJKLLqnjlZIdUjDvbX+mVF12iwWoCXBllofCvpZjrn/4z0+JucA87mY3 ZZd+uxQx4uS4REL/EwyvWX4nlusq4V9y -----END CERTIFICATE-----Generated at Wed Nov 5 22:06:17 2025 by rpki-client