$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: kQp+RoFt9FT4ayrx5Gcvv3d01MkiT0LKDKQM+ffyGcQ= Subject key identifier: BA:87:4F:5E:5D:9A:48:90:1D:4A:3F:26:9D:51:F1:37:42:E0:2E:D0 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 12E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 12DE Signing time: Sun 02 Nov 2025 17:03:07 +0000 Manifest this update: Sun 02 Nov 2025 17:03:07 +0000 Manifest next update: Sun 09 Nov 2025 17:03:07 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: pKfvbkmhWSuQzebOmzwm5HugO/M9WWlA6FXz8a8YPKA=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 5zlqj6GK47olsPE9aBVBN8+5zKhiZg/+BGK9Rsv0oWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4838 (0x12e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: Nov 2 17:03:07 2025 GMT Not After : Nov 9 17:03:07 2025 GMT Subject: CN=69078ecb-9d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:6e:bf:68:11:ba:b9:90:c9:0d:ef:b9:a2: 66:cc:69:dc:1e:7c:9e:ed:d0:2e:07:48:0a:85:a8: d3:e1:ac:77:84:8c:9f:90:ed:a4:31:86:54:16:4c: 2c:b6:94:e4:a7:55:c5:25:68:c3:57:d6:f9:2d:0e: 5c:37:92:ff:62:2f:8b:21:e1:57:d9:20:17:35:1b: 56:4d:c5:a7:66:d1:e2:50:92:08:9f:36:43:cd:71: 3c:ff:8f:00:ba:b0:43:2a:92:31:5a:d8:aa:2d:f8: ee:75:84:f2:7a:eb:08:d6:d8:a4:37:a8:98:69:d1: d7:80:bf:2d:ec:ce:41:63:a9:28:31:41:6b:40:bb: 24:b7:76:fa:b5:59:d9:91:d6:ed:72:87:78:2a:22: ef:0f:c5:b3:94:e9:32:91:2b:2d:49:8b:dd:9c:1e: 48:46:f2:93:b4:ef:94:02:53:81:7a:74:d6:09:5a: 80:fd:92:a2:68:06:8f:0f:57:24:26:d4:77:d4:a7: 26:8e:71:2c:97:9f:3c:61:d3:9c:b7:5d:45:98:45: c0:3c:47:3e:aa:93:67:06:0f:a0:70:82:4b:5a:35: ab:ca:6d:1d:b5:86:20:59:f9:24:54:d6:72:de:d3: e4:d8:10:8b:89:e3:44:d9:7b:5e:72:ff:bb:ca:11: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:87:4F:5E:5D:9A:48:90:1D:4A:3F:26:9D:51:F1:37:42:E0:2E:D0 X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c7:97:50:88:87:6e:be:e5:e9:28:c6:d8:90:7d:34:72:a8: 37:01:a3:94:3a:f2:b8:e7:6b:77:35:f2:36:7e:4d:fb:af:05: 8e:c9:fd:58:6a:a6:a8:c0:13:c9:c9:3e:b6:b9:83:a7:8c:63: ef:f4:22:30:68:c0:e4:2f:2b:80:db:f3:1d:0d:1d:6b:86:ef: 92:79:e9:de:44:48:4a:2f:96:40:68:5a:5d:16:a5:6d:fa:a7: c1:6e:fd:6e:fe:e7:be:a3:dd:c8:71:2e:fb:91:e6:48:78:d3: 96:2a:26:c0:a2:1d:af:b2:e9:77:2d:33:5e:34:e3:14:14:38: ed:78:38:3e:4a:23:5f:a2:24:fd:6a:44:28:01:e7:23:93:a0: 3b:71:6f:4a:b9:95:da:3e:b9:7e:b1:3f:6a:42:fa:f5:64:06: b7:df:8b:9c:28:ab:e8:59:0d:24:f8:62:6c:73:85:33:63:c8: ed:e4:50:6e:00:f1:7c:c1:a9:4b:30:f1:6a:7a:d2:7b:f1:c4: 61:58:ec:79:9b:c5:4a:ad:70:69:41:d9:c4:21:a9:8c:a4:0c: 7d:c7:df:29:c7:15:cf:ce:15:ed:ff:c1:5b:a5:6f:ef:75:1d: be:c1:54:45:00:ac:f1:d2:19:5e:b8:ce:c2:67:b8:e8:4d:cf: d0:f5:3c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjUxMTAyMTcwMzA3WhcNMjUxMTA5MTcwMzA3WjAYMRYwFAYD VQQDEw02OTA3OGVjYi05ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v9uv2gRurmQyQ3vuaJmzGncHnye7dAuB0gKhajT4ax3hIyfkO2kMYZUFkws tpTkp1XFJWjDV9b5LQ5cN5L/Yi+LIeFX2SAXNRtWTcWnZtHiUJIInzZDzXE8/48A urBDKpIxWtiqLfjudYTyeusI1tikN6iYadHXgL8t7M5BY6koMUFrQLskt3b6tVnZ kdbtcod4KiLvD8WzlOkykSstSYvdnB5IRvKTtO+UAlOBenTWCVqA/ZKiaAaPD1ck JtR31KcmjnEsl588YdOct11FmEXAPEc+qpNnBg+gcIJLWjWrym0dtYYgWfkkVNZy 3tPk2BCLieNE2Xtecv+7yhFTkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqHT15d mkiQHUo/Jp1R8TdC4C7QMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7x5dQiIduvuXpKMbYkH00cqg3AaOUOvK452t3NfI2fk37rwWOyf1Y aqaowBPJyT62uYOnjGPv9CIwaMDkLyuA2/MdDR1rhu+SeeneREhKL5ZAaFpdFqVt +qfBbv1u/ue+o93IcS77keZIeNOWKibAoh2vsul3LTNeNOMUFDjteDg+SiNfoiT9 akQoAecjk6A7cW9KuZXaPrl+sT9qQvr1ZAa334ucKKvoWQ0k+GJsc4UzY8jt5FBu APF8walLMPFqetJ78cRhWOx5m8VKrXBpQdnEIamMpAx9x98pxxXPzhXt/8FbpW/v dR2+wVRFAKzx0hleuM7CZ7joTc/Q9Tye -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:40 2025 by rpki-client