$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: 5PMLVSNuLI9IlTVaTjnjb3jckBh7pEQ3eaecJgRT8Os= Subject key identifier: 60:5C:ED:22:BB:40:0C:EC:B2:CA:04:1A:1C:A5:F8:AD:D3:E8:E9:FF Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 0188 Signing time: Mon 03 Nov 2025 03:57:00 +0000 Manifest this update: Mon 03 Nov 2025 03:57:00 +0000 Manifest next update: Mon 10 Nov 2025 03:57:00 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: BgIIdTr3fuNTx9C+TlNi/Da72/j+qHDkyat3HQ1GYVo=) 2: 11A28878915611EE83F61C41C4F9AE02.roa (hash: 0DyvesGS9JiJBxSgGWdTCs5ap0e8SUR4oSJ/LQG2GvQ=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: 47CtM1yN1CdjUlF4SY8eSFCkgrsejSEAp2dNpEZ2S0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Nov 3 03:57:00 2025 GMT Not After : Nov 10 03:57:00 2025 GMT Subject: CN=6908280c-a2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:13:d3:30:ef:ff:78:a8:7a:4a:de:86:a0: 95:cb:cc:41:e7:69:4a:29:c1:56:70:7c:39:81:35: 8a:a7:18:a6:f8:9a:bd:15:54:04:ca:b9:83:c9:e8: c4:f3:73:f8:ae:21:53:f7:a5:ce:61:87:b2:7d:98: e9:35:b8:a7:57:4d:aa:00:1c:38:74:e2:47:db:47: ab:f1:40:e4:c8:4e:63:ec:0f:b6:5e:f4:05:84:71: ca:ae:cc:a9:64:e2:00:7c:48:75:56:ce:dc:42:70: 6b:1c:18:f5:1f:9d:a2:7a:0f:f6:63:a1:73:6a:a9: 71:3a:0a:ea:6d:04:8b:c3:94:0c:2b:17:5d:5a:d4: c3:d2:69:f6:66:e7:14:2b:d8:b4:34:d3:2f:48:ad: 0b:e9:cd:75:81:9e:ab:65:58:85:b9:a1:99:04:ef: e1:b6:a0:a7:87:76:4a:3c:53:b3:5e:7d:af:a3:fe: ec:0e:1f:70:d6:18:74:24:7d:d0:12:f6:6e:fd:ef: d9:a3:48:46:23:44:62:78:48:27:34:8e:9c:4b:19: 81:b7:6b:3f:ac:04:19:cf:5b:93:cb:d4:74:d6:24: eb:9d:c0:21:30:24:f7:63:68:70:34:18:5f:64:97: 07:4f:b5:31:0d:51:e3:58:af:93:95:aa:b4:78:94: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:ED:22:BB:40:0C:EC:B2:CA:04:1A:1C:A5:F8:AD:D3:E8:E9:FF X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4e:ad:b4:cc:be:0f:96:f8:78:10:7c:0a:f3:dd:be:ba:5d: df:f7:4c:70:af:7e:e0:5f:99:ff:b3:35:0c:4b:45:26:35:d5: 0c:ce:c3:43:65:f0:1b:93:15:7f:0b:88:9d:38:62:56:59:38: 88:ad:fe:ff:26:39:14:3b:8a:75:20:7e:c4:81:52:cc:35:63: 69:4a:84:47:f5:4a:5c:f5:dd:76:09:58:b8:4d:11:8a:a7:3f: 99:c7:8f:30:85:65:5c:24:bc:dd:1d:2d:fe:f9:62:d0:b9:f9: e5:23:ff:51:c8:78:ed:52:45:30:0b:49:8d:b1:48:5b:06:c8: b5:e4:d2:71:ee:5e:87:24:e7:63:56:e0:96:66:1c:d3:de:c0: 4d:db:25:41:4f:ef:bc:61:3a:f1:11:20:a7:3c:56:eb:7a:fc: 38:3a:df:d3:9a:ea:fe:58:4e:93:c3:77:fb:8f:a5:a9:b5:42: 7d:b4:cf:f5:35:18:fb:f0:f6:73:28:1a:97:03:04:b7:1e:30: 33:22:b5:e7:ce:e1:77:0e:5f:92:28:5e:83:5f:2c:b5:ca:76: 32:f7:36:eb:e8:fb:81:82:48:0b:22:e0:b8:2b:94:77:34:d9: fb:f9:1d:7e:7f:cf:5a:5f:d4:80:4a:a0:9f:07:f6:42:ac:ca: 59:f0:b1:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUxMTAzMDM1NzAwWhcNMjUxMTEwMDM1NzAwWjAYMRYwFAYD VQQDEw02OTA4MjgwYy1hMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriIT0zDv/3ioekrehqCVy8xB52lKKcFWcHw5gTWKpxim+Jq9FVQEyrmDyejE 83P4riFT96XOYYeyfZjpNbinV02qABw4dOJH20er8UDkyE5j7A+2XvQFhHHKrsyp ZOIAfEh1Vs7cQnBrHBj1H52ieg/2Y6FzaqlxOgrqbQSLw5QMKxddWtTD0mn2ZucU K9i0NNMvSK0L6c11gZ6rZViFuaGZBO/htqCnh3ZKPFOzXn2vo/7sDh9w1hh0JH3Q EvZu/e/Zo0hGI0RieEgnNI6cSxmBt2s/rAQZz1uTy9R01iTrncAhMCT3Y2hwNBhf ZJcHT7UxDVHjWK+Tlaq0eJQ3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBc7SK7 QAzsssoEGhyl+K3T6On/MB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Tq20zL4Plvh4EHwK892+ul3f90xwr37gX5n/szUMS0UmNdUMzsND ZfAbkxV/C4idOGJWWTiIrf7/JjkUO4p1IH7EgVLMNWNpSoRH9Upc9d12CVi4TRGK pz+Zx48whWVcJLzdHS3++WLQufnlI/9RyHjtUkUwC0mNsUhbBsi15NJx7l6HJOdj VuCWZhzT3sBN2yVBT++8YTrxESCnPFbrevw4Ot/Tmur+WE6Tw3f7j6WptUJ9tM/1 NRj78PZzKBqXAwS3HjAzIrXnzuF3Dl+SKF6DXyy1ynYy9zbr6PuBgkgLIuC4K5R3 NNn7+R1+f89aX9SASqCfB/ZCrMpZ8LH4 -----END CERTIFICATE-----Generated at Tue Nov 4 15:56:30 2025 by rpki-client