$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: puTd7eqKl4e43Aad3v1nsajc/nfey2rkOyD0W5BUsOo= Subject key identifier: FF:84:C9:A4:7B:52:6D:46:00:EE:A9:9B:A6:C2:2C:1C:05:7A:50:76 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0147 Signing time: Mon 03 Nov 2025 04:21:25 +0000 Manifest this update: Mon 03 Nov 2025 04:21:24 +0000 Manifest next update: Mon 10 Nov 2025 04:21:24 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: 1L8XHFMSfqAXYi8tMOL0vQ9slgf7bZV41qfbU8ItSw0=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Nov 3 04:21:24 2025 GMT Not After : Nov 10 04:21:24 2025 GMT Subject: CN=69082dc5-76fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:00:83:f0:f5:4c:db:4d:b5:54:b1:93:4d: 9f:3b:82:87:47:b2:38:2e:e6:88:ae:4f:f2:63:47: 89:ae:29:ab:0f:74:cd:83:be:54:23:c6:44:f0:07: 7b:b4:57:7f:82:c4:2e:2e:0d:ed:3a:c5:e6:89:37: 0d:88:7c:b9:45:67:5f:24:a3:3b:e6:34:09:bb:b5: a9:40:a0:2d:88:0e:90:31:bd:28:bf:61:46:97:32: 05:73:a2:f0:2e:3a:35:fb:5e:b6:18:06:8b:04:88: 02:29:ef:7b:5b:b7:35:d0:d0:73:49:ff:c2:35:77: fa:3c:51:f5:e5:0c:fc:80:3e:b6:ea:e4:57:a7:31: b2:eb:87:9e:32:5d:0d:dc:e4:90:c7:ed:4a:dc:b7: 92:2e:18:ed:9e:93:51:88:14:10:ed:95:db:10:0b: e3:89:26:70:34:d3:75:3d:ff:d3:10:d2:de:c3:4f: 46:f0:66:53:05:c8:43:1f:d4:88:82:d4:6c:68:0a: 27:5f:dd:d0:70:f0:b0:34:5b:8b:66:59:6d:d7:55: 09:21:a7:9e:58:37:6a:89:45:07:8c:b0:fc:39:2a: 45:81:28:9b:0b:ae:2a:36:6f:d2:90:f3:79:a2:66: 03:8c:fd:55:73:9c:86:ab:b6:31:60:86:fb:51:ba: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:C9:A4:7B:52:6D:46:00:EE:A9:9B:A6:C2:2C:1C:05:7A:50:76 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7c:d2:7b:bd:6c:18:4c:b4:2d:1a:50:50:10:74:98:cb:f5: 7e:aa:06:82:8c:37:bb:00:60:46:fa:3c:cf:d5:f4:f7:ae:bb: 36:0c:21:a2:c3:70:55:5c:76:5b:71:e7:9a:78:1d:5d:c6:69: 26:36:ab:c4:e0:81:44:2c:11:cf:cf:86:2a:aa:d6:a6:49:82: 19:b8:f2:1b:5c:ec:2c:83:e1:d0:58:13:9c:e9:c3:a3:df:dd: 4c:2b:58:96:85:db:de:89:a1:e4:d4:90:97:4f:c9:4a:07:6c: ae:f2:91:d0:38:04:8b:20:26:b0:8f:99:d2:ad:53:e2:ef:19: b2:82:c8:a0:f6:44:f3:fb:96:1b:06:01:4c:08:83:6e:27:2b: aa:9c:bf:02:bc:08:2d:6c:13:c9:5c:c1:a6:7a:05:01:02:a0: 59:6b:f7:b2:d5:d5:35:11:55:c6:f4:8f:de:d1:97:12:c8:ea: 32:e0:cd:75:ff:68:56:8c:be:9d:39:fa:c0:44:d4:6d:59:8d: 60:13:69:75:0b:4c:11:b5:36:60:b4:ef:10:dd:53:c5:2e:71: 94:33:01:8d:bd:b2:9f:60:ce:2e:fb:a1:1b:db:0e:08:80:62: 26:d0:e2:d0:8e:36:52:25:bd:28:79:7f:03:99:17:5c:5d:cb: 99:5a:c1:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUxMTAzMDQyMTI0WhcNMjUxMTEwMDQyMTI0WjAYMRYwFAYD VQQDEw02OTA4MmRjNS03NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmAAg/D1TNtNtVSxk02fO4KHR7I4LuaIrk/yY0eJrimrD3TNg75UI8ZE8Ad7 tFd/gsQuLg3tOsXmiTcNiHy5RWdfJKM75jQJu7WpQKAtiA6QMb0ov2FGlzIFc6Lw Ljo1+162GAaLBIgCKe97W7c10NBzSf/CNXf6PFH15Qz8gD626uRXpzGy64eeMl0N 3OSQx+1K3LeSLhjtnpNRiBQQ7ZXbEAvjiSZwNNN1Pf/TENLew09G8GZTBchDH9SI gtRsaAonX93QcPCwNFuLZllt11UJIaeeWDdqiUUHjLD8OSpFgSibC64qNm/SkPN5 omYDjP1Vc5yGq7YxYIb7UbpNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+EyaR7 Um1GAO6pm6bCLBwFelB2MB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAifNJ7vWwYTLQtGlBQEHSYy/V+qgaCjDe7AGBG+jzP1fT3rrs2DCGi w3BVXHZbceeaeB1dxmkmNqvE4IFELBHPz4YqqtamSYIZuPIbXOwsg+HQWBOc6cOj 391MK1iWhdveiaHk1JCXT8lKB2yu8pHQOASLICawj5nSrVPi7xmygsig9kTz+5Yb BgFMCINuJyuqnL8CvAgtbBPJXMGmegUBAqBZa/ey1dU1EVXG9I/e0ZcSyOoy4M11 /2hWjL6dOfrARNRtWY1gE2l1C0wRtTZgtO8Q3VPFLnGUMwGNvbKfYM4u+6Eb2w4I gGIm0OLQjjZSJb0oeX8DmRdcXcuZWsFL -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:09 2025 by rpki-client