$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: G3QxNjckzJbCYVPjaXYrsMTCLjK2e4Y3e5buvpITIaM= Subject key identifier: BA:CF:DF:1F:22:26:36:F7:A8:3A:DE:61:34:66:EA:7D:4C:28:B2:EC Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 0584 Signing time: Tue 04 Nov 2025 23:22:05 +0000 Manifest this update: Tue 04 Nov 2025 23:22:05 +0000 Manifest next update: Tue 11 Nov 2025 23:22:05 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: Zfq8+kSFkqmzokCr9j2xqzTKRr9z5uy/QI8eXN3QDEY=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Nov 4 23:22:05 2025 GMT Not After : Nov 11 23:22:05 2025 GMT Subject: CN=690a8a9d-8e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:0c:3a:5c:85:0b:4d:dc:71:e4:5e:79:d8: 7d:c9:e0:65:7f:d7:db:ee:68:71:02:8e:00:79:99: 22:42:02:56:1f:65:4b:5f:6a:ef:18:f5:fb:db:a6: 2f:8f:b8:c8:ac:e3:b3:34:ef:13:06:ef:8e:66:4b: b2:3a:0f:f2:db:44:32:6c:be:3a:27:2c:c5:19:42: df:ce:30:1a:e9:2a:5e:6a:74:79:a2:1e:4f:05:9a: c9:42:b5:ee:b4:02:85:1c:1b:56:d3:d2:10:54:1d: ed:9b:74:13:86:b0:fd:c5:e0:60:02:86:7d:1b:8f: 9e:ef:f6:2c:b5:5d:e0:fe:ce:f4:57:08:c0:8a:22: d6:c6:dc:6a:e9:99:55:2c:60:9a:cd:b3:d2:82:97: a3:22:03:01:1f:87:55:f4:12:6d:7e:cf:02:f8:0b: fa:8e:4c:57:9c:6a:02:6a:d7:b0:1f:a0:14:de:3d: b2:d4:a5:f8:b1:8e:c6:66:f4:fa:06:66:1e:0a:23: dd:65:a0:90:d2:a1:f4:7f:df:fc:98:84:76:24:23: 5a:5b:44:5c:4c:3b:58:88:cb:8f:d1:98:f7:57:c5: 46:dd:b5:31:f6:67:41:74:f9:8f:d1:ea:be:9d:d1: af:5a:24:9a:99:86:70:cc:0a:bc:b3:93:09:f8:9e: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CF:DF:1F:22:26:36:F7:A8:3A:DE:61:34:66:EA:7D:4C:28:B2:EC X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2c:08:0e:e9:4c:99:c7:78:c0:ed:52:c8:6d:8e:f8:20:73: d7:19:70:73:36:5c:e8:17:9e:d3:cb:24:4d:78:10:cf:28:7e: f5:35:c5:60:ee:de:85:f4:4b:e5:0c:c9:7a:ce:7e:6f:b4:37: ce:66:d3:62:a3:c5:d8:1e:c0:5c:95:f8:9a:df:b5:20:48:b5: 27:fd:26:d0:81:3a:71:f8:b9:e4:8c:83:d9:6b:38:00:0f:9a: 36:50:a1:53:29:76:3b:1b:0d:15:e6:3d:6a:b4:60:c8:4c:74: 9c:8c:0c:c7:a0:e0:dd:d5:ca:1e:a1:e0:10:41:3c:33:67:e3: d7:14:65:95:11:f6:70:bb:01:13:5a:f6:a4:fb:16:70:a4:90: 86:26:b4:49:bc:ce:95:19:70:b3:ea:e4:5f:02:b8:54:88:e7: b8:02:9b:53:dc:fc:af:96:b9:ad:49:83:1b:2f:5d:4f:b1:f9: 83:12:7c:e3:90:f4:b2:37:ce:c8:d9:02:0a:72:d5:e6:06:30: d1:69:e6:8d:be:30:5d:0e:1a:b4:8c:f2:3c:8c:04:36:95:4f: db:42:61:47:87:03:39:c8:9f:aa:72:54:9a:c0:3d:a0:f4:cd: b4:68:5b:54:a3:52:23:44:83:17:5f:cf:88:f1:6b:9f:d3:35: 49:15:f6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjUxMTA0MjMyMjA1WhcNMjUxMTExMjMyMjA1WjAYMRYwFAYD VQQDEw02OTBhOGE5ZC04ZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lsMOlyFC03cceReedh9yeBlf9fb7mhxAo4AeZkiQgJWH2VLX2rvGPX726Yv j7jIrOOzNO8TBu+OZkuyOg/y20QybL46JyzFGULfzjAa6SpeanR5oh5PBZrJQrXu tAKFHBtW09IQVB3tm3QThrD9xeBgAoZ9G4+e7/YstV3g/s70VwjAiiLWxtxq6ZlV LGCazbPSgpejIgMBH4dV9BJtfs8C+Av6jkxXnGoCatewH6AU3j2y1KX4sY7GZvT6 BmYeCiPdZaCQ0qH0f9/8mIR2JCNaW0RcTDtYiMuP0Zj3V8VG3bUx9mdBdPmP0eq+ ndGvWiSamYZwzAq8s5MJ+J5EfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrP3x8i Jjb3qDreYTRm6n1MKLLsMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwLAgO6UyZx3jA7VLIbY74IHPXGXBzNlzoF57TyyRNeBDPKH71NcVg 7t6F9EvlDMl6zn5vtDfOZtNio8XYHsBclfia37UgSLUn/SbQgTpx+LnkjIPZazgA D5o2UKFTKXY7Gw0V5j1qtGDITHScjAzHoODd1coeoeAQQTwzZ+PXFGWVEfZwuwET Wvak+xZwpJCGJrRJvM6VGXCz6uRfArhUiOe4AptT3PyvlrmtSYMbL11PsfmDEnzj kPSyN87I2QIKctXmBjDRaeaNvjBdDhq0jPI8jAQ2lU/bQmFHhwM5yJ+qclSawD2g 9M20aFtUo1IjRIMXX8+I8Wuf0zVJFfYh -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:12 2025 by rpki-client