$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: UvnDooI6NNVpcL97wHf/BvjrHOiZ8saACZgvm6Pe7oI= Subject key identifier: 25:CD:AF:6F:8B:8B:C1:E8:50:6B:93:97:C7:DE:5A:F8:C3:3D:B2:BB Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0A55 Signing time: Tue 04 Nov 2025 19:46:06 +0000 Manifest this update: Tue 04 Nov 2025 19:46:05 +0000 Manifest next update: Tue 11 Nov 2025 19:46:05 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: 3P1OC/tFHlltQlG0z2qfvyOjaEgAICcRwljOEx43I0k=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Nov 4 19:46:05 2025 GMT Not After : Nov 11 19:46:05 2025 GMT Subject: CN=690a57fd-2a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a1:08:b6:bb:a2:3b:c1:83:2a:f3:12:09:8a: 97:c9:06:de:44:f2:d8:c7:69:4c:bc:d5:e1:78:41: 9b:61:5c:97:52:83:2b:95:3b:72:e6:cf:06:ba:ed: 5d:f7:6f:65:1c:f0:1a:d9:c8:89:7f:38:56:dd:6c: 36:35:5e:95:9c:1c:74:fc:d5:b0:16:98:3e:35:63: 26:a9:49:b9:e9:b0:69:cd:77:47:8b:f1:df:d5:c2: 69:e6:43:bd:e4:76:4f:dd:33:28:5a:ce:f8:f3:e4: 97:f2:47:ea:9f:4e:d6:65:d6:76:60:cb:59:cc:fb: f8:c5:70:ff:54:ad:49:e5:3c:ef:2e:21:ce:6d:cc: fc:9a:fa:92:98:7d:a6:2f:a6:a5:78:ee:41:95:6e: ee:02:95:f0:c5:26:83:be:46:65:45:03:65:1c:df: b5:f1:81:e4:e4:e2:11:2a:f5:c4:0e:45:31:40:51: 5a:bf:72:42:76:d6:c1:73:e2:4d:21:48:65:c9:1b: 02:5b:8e:68:1f:07:3d:67:45:1f:42:f7:2a:93:a3: ca:75:26:fb:a5:c8:2b:5b:29:06:56:24:d2:8b:c1: 3a:4f:55:f7:7a:63:65:9f:6d:bb:99:82:e4:f0:59: 93:4f:dd:a5:62:30:91:ab:73:34:84:a4:3a:13:83: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:AF:6F:8B:8B:C1:E8:50:6B:93:97:C7:DE:5A:F8:C3:3D:B2:BB X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e6:80:f5:80:97:3a:a3:b9:23:5f:c7:3c:bf:de:33:54:5c: 70:55:44:78:56:fd:37:ee:0f:b9:03:a9:bc:28:fa:fe:d5:4e: a5:8f:0b:0a:ac:80:34:7e:63:a8:be:fc:81:4b:0a:f9:a1:6a: 26:ae:34:ab:ed:97:62:07:95:19:db:72:8d:5d:86:08:d0:cb: 9e:ae:af:04:94:ad:1d:e5:9d:c7:f1:6a:61:15:00:d7:72:0e: cb:0c:63:e1:97:3b:3c:fc:7d:41:00:a5:c5:1c:bb:c6:95:8f: ca:81:11:96:fa:cf:09:e3:63:dd:0d:4e:59:15:06:d6:d8:d0: 75:80:05:25:df:9a:05:4c:b5:d0:32:12:72:8a:ba:73:82:5f: f5:f2:c6:5e:cb:0c:ee:b4:f3:90:6a:7f:8d:e3:e0:c8:26:29: fc:b2:df:05:5d:f2:41:b2:45:37:0c:d3:a1:16:82:fb:71:7e: 12:81:1a:3e:e4:13:25:e5:73:ad:3e:64:15:34:b3:9c:85:3a: 76:43:0d:e4:59:f6:85:2d:09:1f:ea:8e:47:f5:df:59:f4:8b: 6b:80:73:57:61:b8:13:8c:68:e5:34:69:08:c1:a4:7f:a1:ca: f8:9e:aa:fd:b1:4d:22:eb:40:9b:a5:fe:57:e4:80:75:f2:17: 8f:18:b9:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUxMTA0MTk0NjA1WhcNMjUxMTExMTk0NjA1WjAYMRYwFAYD VQQDEw02OTBhNTdmZC0yYTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKEItruiO8GDKvMSCYqXyQbeRPLYx2lMvNXheEGbYVyXUoMrlTty5s8Guu1d 929lHPAa2ciJfzhW3Ww2NV6VnBx0/NWwFpg+NWMmqUm56bBpzXdHi/Hf1cJp5kO9 5HZP3TMoWs748+SX8kfqn07WZdZ2YMtZzPv4xXD/VK1J5TzvLiHObcz8mvqSmH2m L6aleO5BlW7uApXwxSaDvkZlRQNlHN+18YHk5OIRKvXEDkUxQFFav3JCdtbBc+JN IUhlyRsCW45oHwc9Z0UfQvcqk6PKdSb7pcgrWykGViTSi8E6T1X3emNln227mYLk 8FmTT92lYjCRq3M0hKQ6E4O4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXNr2+L i8HoUGuTl8feWvjDPbK7MB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK5oD1gJc6o7kjX8c8v94zVFxwVUR4Vv037g+5A6m8KPr+1U6ljwsK rIA0fmOovvyBSwr5oWomrjSr7ZdiB5UZ23KNXYYI0Muerq8ElK0d5Z3H8WphFQDX cg7LDGPhlzs8/H1BAKXFHLvGlY/KgRGW+s8J42PdDU5ZFQbW2NB1gAUl35oFTLXQ MhJyirpzgl/18sZeywzutPOQan+N4+DIJin8st8FXfJBskU3DNOhFoL7cX4SgRo+ 5BMl5XOtPmQVNLOchTp2Qw3kWfaFLQkf6o5H9d9Z9ItrgHNXYbgTjGjlNGkIwaR/ ocr4nqr9sU0i60Cbpf5X5IB18hePGLmx -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:27 2025 by rpki-client