$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: nblF6UKTzcv3QFnXS/Io9h7raeaB7DzDOC/D6c3LWF8= Subject key identifier: 6C:49:CE:C3:48:B1:DF:F9:F2:29:25:DD:FA:07:1C:6E:61:57:1E:ED Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 066A Signing time: Sun 02 Nov 2025 21:20:15 +0000 Manifest this update: Sun 02 Nov 2025 21:20:14 +0000 Manifest next update: Sun 09 Nov 2025 21:20:14 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: 4X58JQsm7r/cOB94t92jWA8PgJ3W5teZOjjNVxLG8Mc=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: r8ZqDCZQUEDaJuodGigdg5730ebRMN80tyK9bKpWQ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Nov 2 21:20:14 2025 GMT Not After : Nov 9 21:20:14 2025 GMT Subject: CN=6907cb0e-f498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:40:4a:ae:e0:1e:c0:3a:3b:cc:2a:31:9c: d3:4c:88:aa:33:ac:75:1b:69:aa:77:c7:b8:1d:a4: 27:20:a4:04:2d:79:7e:f2:99:09:69:d3:94:0d:03: 3b:c9:10:45:fc:38:67:f9:2a:5e:ed:c3:46:22:9b: 48:97:10:86:f2:8e:d9:70:40:f6:f1:32:7f:d7:9c: e7:b7:be:31:0f:17:c9:5b:d9:b9:d2:36:95:a3:d2: f4:e6:b4:0c:8f:5a:48:41:eb:e3:bb:d3:f8:cf:71: e1:7e:c9:8e:82:4e:11:03:eb:83:78:09:e7:9f:09: 1c:62:f1:66:d4:49:9b:f1:91:c5:f7:6f:50:14:cb: 26:44:8c:08:58:c4:e1:db:f6:4e:dc:0d:01:37:32: 4a:eb:ba:55:c2:ea:70:89:3f:20:83:da:02:1f:f8: 2c:b3:d5:54:e6:22:09:4e:07:6a:35:bd:cf:1f:5c: 9e:70:40:90:b6:27:8d:40:e5:36:98:3c:9d:47:aa: d1:dd:51:0b:31:4c:1e:9b:14:f6:2c:16:c4:b6:99: 46:e6:b6:61:36:6d:3b:57:92:48:dd:6b:8b:7f:96: d5:b6:83:9f:da:d8:f5:68:a2:59:9a:1f:b4:5b:b9: 0c:b8:5d:bb:f2:7c:f9:78:76:fe:25:e9:1c:8b:ef: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:CE:C3:48:B1:DF:F9:F2:29:25:DD:FA:07:1C:6E:61:57:1E:ED X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cd:f1:2d:a9:2d:5a:cc:95:ea:8e:fc:dc:45:ea:85:00:95: 03:5b:2a:99:b9:4e:47:54:e3:8a:cb:f7:7b:9b:80:f6:0e:4e: b5:7e:b4:d5:44:c9:53:6e:d3:f5:db:e0:c7:ec:56:4d:1a:a6: 57:1b:f3:1f:a3:5e:46:05:dd:be:f6:47:e2:0b:a8:92:3b:0f: 9d:00:ee:73:8c:78:1b:66:4f:0a:95:fa:65:bb:c4:0a:f9:8d: 78:07:32:58:9d:4b:aa:56:b2:05:d4:ae:02:30:cd:22:06:b3: 74:4b:a8:6b:52:c2:a9:c5:25:c2:35:33:83:63:02:eb:be:2a: 32:60:97:b4:e3:b1:bd:17:df:68:83:c6:54:97:da:11:ee:ef: 25:eb:63:42:59:72:25:29:41:5d:89:70:76:8a:b9:7e:34:84: 1d:c9:36:9e:43:69:1f:a4:5f:2f:c9:ce:11:35:33:75:3a:a8: 1a:76:47:1c:f3:11:b2:66:39:da:1e:3b:9f:0b:c4:ca:8d:58: 2a:c8:8a:fe:4b:c9:3e:a3:8f:93:4a:a7:35:4d:d3:54:a1:52: 04:73:94:b4:d7:90:29:45:a4:9d:43:2c:5e:50:c6:23:7f:52: 21:81:80:05:58:c6:90:e9:00:0c:5d:87:fc:b3:00:6a:37:c8: 79:25:1d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUxMTAyMjEyMDE0WhcNMjUxMTA5MjEyMDE0WjAYMRYwFAYD VQQDEw02OTA3Y2IwZS1mNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlpASq7gHsA6O8wqMZzTTIiqM6x1G2mqd8e4HaQnIKQELXl+8pkJadOUDQM7 yRBF/Dhn+Spe7cNGIptIlxCG8o7ZcED28TJ/15znt74xDxfJW9m50jaVo9L05rQM j1pIQevju9P4z3HhfsmOgk4RA+uDeAnnnwkcYvFm1Emb8ZHF929QFMsmRIwIWMTh 2/ZO3A0BNzJK67pVwupwiT8gg9oCH/gss9VU5iIJTgdqNb3PH1yecECQtieNQOU2 mDydR6rR3VELMUwemxT2LBbEtplG5rZhNm07V5JI3WuLf5bVtoOf2tj1aKJZmh+0 W7kMuF278nz5eHb+Jekci+/EvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxJzsNI sd/58ikl3foHHG5hVx7tMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdzfEtqS1azJXqjvzcReqFAJUDWyqZuU5HVOOKy/d7m4D2Dk61frTV RMlTbtP12+DH7FZNGqZXG/Mfo15GBd2+9kfiC6iSOw+dAO5zjHgbZk8Klfplu8QK +Y14BzJYnUuqVrIF1K4CMM0iBrN0S6hrUsKpxSXCNTODYwLrvioyYJe047G9F99o g8ZUl9oR7u8l62NCWXIlKUFdiXB2irl+NIQdyTaeQ2kfpF8vyc4RNTN1Oqgadkcc 8xGyZjnaHjufC8TKjVgqyIr+S8k+o4+TSqc1TdNUoVIEc5S015ApRaSdQyxeUMYj f1IhgYAFWMaQ6QAMXYf8swBqN8h5JR17 -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:30 2025 by rpki-client