$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: fxIs17SEu+I0xNm5DRk6fFZ6lSA1xV1xfmb7SI1UHz8= Subject key identifier: E0:82:14:76:B1:56:05:74:E8:AB:E4:73:BC:9F:74:D9:AF:9F:94:31 Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 03D2 Signing time: Wed 05 Nov 2025 00:43:24 +0000 Manifest this update: Wed 05 Nov 2025 00:43:23 +0000 Manifest next update: Wed 12 Nov 2025 00:43:23 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: xu1xg40oZbUnK6qlfJZYCvWRy/cobFPwDfr8ri4DBKc=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: 3k13Zb4rUCPiQVhmHXmV79sBuRx9W6om0fkw2CRWuLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Nov 5 00:43:23 2025 GMT Not After : Nov 12 00:43:23 2025 GMT Subject: CN=690a9dab-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:e6:41:94:4e:32:32:f4:6f:f3:73:96:ea: 4e:fa:98:f8:ef:79:78:e3:3e:7f:bc:fe:51:9c:29: f7:ce:c8:58:ac:7f:39:64:d9:b7:67:63:4d:4f:bc: a4:ea:74:f3:e3:86:fd:e7:a8:93:66:8a:45:e6:d0: bd:75:8e:37:82:5d:24:c0:28:d1:ad:4e:4b:43:ca: 91:e9:f2:bb:61:e9:31:c9:f1:5e:43:66:d0:46:02: 92:e2:f0:ae:cf:42:87:93:2a:51:85:d4:f5:25:f1: e2:c2:0f:3b:10:ba:f5:a0:cd:3b:34:22:aa:1f:5b: 50:d9:f1:ce:3c:ad:78:1c:eb:88:9f:e7:93:db:f2: 5f:7c:bc:13:04:88:35:0b:f2:d2:1a:89:d9:f1:a2: d6:a5:91:f2:3b:e2:f2:4c:e6:5d:9b:cb:3a:2d:7b: dc:c1:de:0d:95:eb:22:8a:99:e7:fb:0a:cf:4d:0a: 6f:f0:a6:0c:bd:51:46:a3:4a:71:02:73:b3:59:7b: ac:ed:c3:c4:81:66:fc:4c:6f:cb:2f:1d:42:0f:74: 75:6a:74:50:31:c5:aa:b9:79:2f:42:56:e8:09:4e: fd:ae:03:bb:4e:4b:25:5f:18:fc:5b:6c:33:b8:20: 0a:33:b1:5f:d0:40:b4:e8:8c:1e:2a:de:55:34:66: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:82:14:76:B1:56:05:74:E8:AB:E4:73:BC:9F:74:D9:AF:9F:94:31 X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:5e:63:ab:80:33:f7:c1:c8:19:b7:d6:f9:04:ef:54:f6:97: 34:ce:ee:6a:a1:87:43:7f:34:85:7b:e1:9d:e0:c6:d4:b9:ce: 0e:4b:da:0e:aa:29:5b:be:1c:ee:76:9e:46:72:ec:01:c0:97: 89:90:29:31:dc:e8:13:40:c8:2f:91:c9:83:a2:b8:5c:58:ef: 0a:cc:ce:de:2b:87:8d:7d:b4:f5:ec:fd:84:12:f8:1d:34:cc: 04:a7:c9:bc:b0:c4:79:31:31:21:a6:82:ab:7b:fa:d4:f6:60: e6:ec:de:f2:24:74:fd:fe:2b:32:ee:48:75:96:95:aa:22:5b: b2:52:0b:33:f8:56:70:bc:9b:26:87:8e:fa:4f:f7:be:b3:cf: 18:87:d9:f8:6d:e6:9c:ee:42:bd:af:60:3b:4e:60:31:27:50: b8:96:3c:85:63:79:70:0d:23:1e:0e:3b:13:38:6e:d0:b2:a8: e6:31:64:4c:12:38:d4:64:7d:71:27:21:80:95:b6:14:39:89: c9:38:de:28:0b:19:5c:0b:b9:19:97:69:6a:07:83:89:07:5b: 2b:f5:81:43:c6:d0:61:17:d2:88:93:bc:c8:02:5a:b7:8e:f7: 84:66:83:9c:cc:57:3a:8c:58:be:64:69:02:d4:be:ba:33:e6: a7:be:be:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjUxMTA1MDA0MzIzWhcNMjUxMTEyMDA0MzIzWjAYMRYwFAYD VQQDEw02OTBhOWRhYi1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c3mQZROMjL0b/NzlupO+pj473l44z5/vP5RnCn3zshYrH85ZNm3Z2NNT7yk 6nTz44b956iTZopF5tC9dY43gl0kwCjRrU5LQ8qR6fK7YekxyfFeQ2bQRgKS4vCu z0KHkypRhdT1JfHiwg87ELr1oM07NCKqH1tQ2fHOPK14HOuIn+eT2/JffLwTBIg1 C/LSGonZ8aLWpZHyO+LyTOZdm8s6LXvcwd4Nlesiipnn+wrPTQpv8KYMvVFGo0px AnOzWXus7cPEgWb8TG/LLx1CD3R1anRQMcWquXkvQlboCU79rgO7TkslXxj8W2wz uCAKM7Ff0EC06IweKt5VNGb4XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCCFHax VgV06Kvkc7yfdNmvn5QxMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZXmOrgDP3wcgZt9b5BO9U9pc0zu5qoYdDfzSFe+Gd4MbUuc4OS9oO qilbvhzudp5GcuwBwJeJkCkx3OgTQMgvkcmDorhcWO8KzM7eK4eNfbT17P2EEvgd NMwEp8m8sMR5MTEhpoKre/rU9mDm7N7yJHT9/isy7kh1lpWqIluyUgsz+FZwvJsm h476T/e+s88Yh9n4beac7kK9r2A7TmAxJ1C4ljyFY3lwDSMeDjsTOG7QsqjmMWRM EjjUZH1xJyGAlbYUOYnJON4oCxlcC7kZl2lqB4OJB1sr9YFDxtBhF9KIk7zIAlq3 jveEZoOczFc6jFi+ZGkC1L66M+anvr5c -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:04 2025 by rpki-client