$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: 5jYuRFfx+kCndZV5Fh+R+gv2m3EHyd5uFwNLBIKk4uQ= Subject key identifier: F0:8E:24:14:F9:A5:A8:EA:79:3E:DD:34:69:71:98:D0:DF:74:F8:C2 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 01A3 Signing time: Mon 03 Nov 2025 03:27:26 +0000 Manifest this update: Mon 03 Nov 2025 03:27:26 +0000 Manifest next update: Mon 10 Nov 2025 03:27:26 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: YB556DE249ag0hyDakuOUj1OFTp1UBtlDCiy0Z6gEx8=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: TSmTCNrkei7m3TxkX8bukuyuYPbILQnCUPvPyNjgM5I=) 3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KrnQqDXD/GjL/9lZ4fC1ZX3TT1+IBpldk3tM8hf1uJU=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: I72Z1nd1GmnAZEnwp1LzVMVnE9PXjIpQpMnCm3khtZM=) 5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: kUXkV/NQKfLoHdA/qdA5T0SS9tU4x4Ty5BWOmAQ680w=) 6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: Bn478uLMn4OakQqoDBH/lvI3JDH9R/ce+WPtlw3F7PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Nov 3 03:27:26 2025 GMT Not After : Nov 10 03:27:26 2025 GMT Subject: CN=6908211e-e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:fa:c2:45:aa:89:5c:11:bd:6f:7f:43:54: c1:98:57:80:e9:b1:98:15:a0:f1:2f:cb:02:e5:d7: f8:c8:46:3f:fb:f8:e4:3c:b7:04:4b:26:f0:e1:c5: fb:2c:15:23:c2:e4:10:a8:2a:d9:80:e7:52:f5:d6: 3b:0a:bb:bb:ec:68:1a:aa:bc:f5:1e:76:0d:d3:f9: 49:72:d7:1b:33:23:10:a5:77:a8:da:f1:92:c5:d2: 9b:f4:7c:a4:cd:c9:d0:3f:dc:e3:8e:ba:5b:cb:51: 5c:04:e2:b8:bb:89:1f:c4:0b:86:de:8c:87:d1:6a: ee:a1:40:ad:83:b5:ff:3c:4e:78:eb:be:91:91:48: 10:d0:fc:3f:f3:3d:cf:69:4c:6e:86:b3:29:93:17: b4:d5:3c:93:57:31:1a:52:7e:70:12:49:2b:70:a0: 08:10:65:5d:10:67:16:06:e5:ec:97:ff:f2:78:3e: 00:f4:cc:47:a1:56:fd:76:05:b6:ee:0a:a0:c7:61: 0a:01:0a:c5:99:fd:54:4c:12:dc:ce:a2:4e:7a:d2: 07:ce:e4:f5:57:3c:c6:80:a4:10:77:c4:78:3a:60: 2b:d4:98:30:db:70:23:0b:8e:73:20:91:2d:6c:f2: 24:68:81:5b:37:1b:ac:d7:d1:5c:fe:60:a5:7d:7c: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8E:24:14:F9:A5:A8:EA:79:3E:DD:34:69:71:98:D0:DF:74:F8:C2 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:db:a6:18:e8:b2:0f:29:da:4a:96:2e:7f:de:99:c4:8f:be: 99:6b:b1:1a:e9:1a:a5:07:01:51:ca:36:63:dd:be:16:39:60: ce:4f:88:fc:a7:da:78:4f:95:ff:16:0e:e8:f6:7f:ab:4d:01: d4:7d:12:43:0d:ae:20:34:c1:9d:9b:a8:e9:bb:e9:53:ed:9a: 72:77:94:db:28:d3:55:12:a8:ec:80:61:01:2e:ca:6a:15:71: d3:c3:b1:ac:b6:46:bd:ab:28:e5:00:0d:4e:b0:39:2f:75:8d: d3:64:88:8e:c9:87:17:8c:77:48:f8:f5:02:05:55:73:46:16: 7f:96:b2:5c:b4:97:28:b6:57:67:8d:3d:60:03:d2:c1:ae:69: 22:cf:85:a8:60:ac:5a:de:1b:ff:a0:54:6d:8b:55:de:6e:e7: e6:ce:ef:3e:1c:07:bc:a6:54:b5:89:3e:50:90:04:1d:a8:36: df:8c:7a:a9:f3:64:e8:97:71:20:57:37:e2:06:e2:1c:0d:55: 14:3d:3b:97:b9:91:81:39:8d:b2:e0:52:0f:07:96:0e:96:60: 7a:d0:18:7e:44:17:ee:a5:ee:4c:76:06:3f:25:5f:13:54:87: ba:3b:49:5a:02:09:f8:a9:ed:c4:82:2f:17:3c:46:cc:c2:d6: 7a:25:fc:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUxMTAzMDMyNzI2WhcNMjUxMTEwMDMyNzI2WjAYMRYwFAYD VQQDEw02OTA4MjExZS1lNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnv6wkWqiVwRvW9/Q1TBmFeA6bGYFaDxL8sC5df4yEY/+/jkPLcESybw4cX7 LBUjwuQQqCrZgOdS9dY7Cru77Ggaqrz1HnYN0/lJctcbMyMQpXeo2vGSxdKb9Hyk zcnQP9zjjrpby1FcBOK4u4kfxAuG3oyH0WruoUCtg7X/PE54676RkUgQ0Pw/8z3P aUxuhrMpkxe01TyTVzEaUn5wEkkrcKAIEGVdEGcWBuXsl//yeD4A9MxHoVb9dgW2 7gqgx2EKAQrFmf1UTBLczqJOetIHzuT1VzzGgKQQd8R4OmAr1Jgw23AjC45zIJEt bPIkaIFbNxus19Fc/mClfXzhwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCOJBT5 pajqeT7dNGlxmNDfdPjCMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC526YY6LIPKdpKli5/3pnEj76Za7Ea6RqlBwFRyjZj3b4WOWDOT4j8 p9p4T5X/Fg7o9n+rTQHUfRJDDa4gNMGdm6jpu+lT7Zpyd5TbKNNVEqjsgGEBLspq FXHTw7Gstka9qyjlAA1OsDkvdY3TZIiOyYcXjHdI+PUCBVVzRhZ/lrJctJcotldn jT1gA9LBrmkiz4WoYKxa3hv/oFRti1Xebufmzu8+HAe8plS1iT5QkAQdqDbfjHqp 82Tol3EgVzfiBuIcDVUUPTuXuZGBOY2y4FIPB5YOlmB60Bh+RBfupe5MdgY/JV8T VIe6O0laAgn4qe3Egi8XPEbMwtZ6Jfx7 -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:10 2025 by rpki-client