$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: VYmao/Lz1/G4ms4+Qm+kWvIkaXH8kK1Ut5Mp6/cp6Is= Subject key identifier: ED:5B:63:CC:C9:66:BE:A7:E8:D6:97:13:82:C0:0D:2C:EF:2A:48:3F Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0227 Signing time: Wed 05 Nov 2025 02:09:24 +0000 Manifest this update: Wed 05 Nov 2025 02:09:23 +0000 Manifest next update: Wed 12 Nov 2025 02:09:23 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: GQXekxVvG06+fuK5ZCkSoh0OLv92kq/jAnhaa3o3ioU=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: Nov 5 02:09:23 2025 GMT Not After : Nov 12 02:09:23 2025 GMT Subject: CN=690ab1d3-7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:2a:d5:15:6a:86:4a:79:d3:10:fb:e8:dd: a5:3b:0d:35:19:16:cd:65:73:0b:76:92:6b:6a:8e: cc:43:24:31:47:14:8a:0a:55:5d:15:96:5c:f5:4f: d6:0d:f9:10:b5:2a:ab:77:fc:e7:e9:ed:83:bb:c6: 14:8d:df:94:77:0a:82:81:59:25:dd:68:fb:d1:84: 94:2e:22:a7:e7:4f:4a:d5:81:2a:e2:7d:8c:ac:05: 66:b3:35:d9:a5:b6:3c:de:4f:1c:25:3d:b7:1d:15: be:ec:94:96:c7:dd:78:6c:c7:fe:c7:66:d7:55:6c: 5a:20:d9:d9:00:1e:08:c7:98:39:29:df:e9:79:3e: bd:c2:13:c5:44:d2:a1:95:e5:92:07:00:ee:34:9b: 25:1a:b6:7b:ab:b1:ca:96:60:66:d0:4f:65:c2:40: b5:a3:45:bc:ca:e8:72:b1:7c:c7:ba:2e:90:9f:81: 1e:5b:a8:43:2e:6f:9b:17:c8:1e:c1:37:1e:5a:03: e5:07:9a:e9:45:c0:1d:7c:1d:32:fa:a1:40:75:30: 10:84:c7:79:2e:70:4d:1b:5c:55:61:19:36:72:39: 99:11:8a:22:bb:db:e1:d3:6e:5a:ed:e2:4f:cf:7a: 4a:62:b0:3a:65:60:9b:f3:95:0c:0f:1f:62:98:16: 90:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:63:CC:C9:66:BE:A7:E8:D6:97:13:82:C0:0D:2C:EF:2A:48:3F X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:04:3b:ac:9e:98:c8:c4:36:d7:b1:52:73:17:8c:5a:81:e5: ec:5d:7c:b2:e6:37:9b:c2:fa:73:2f:12:46:53:00:00:fe:3e: fb:8d:16:8f:05:4a:e0:ec:42:c6:69:04:8c:ea:c9:8b:4f:4e: ce:b8:77:2c:4e:31:aa:9b:0f:50:27:9d:a1:df:29:46:54:34: 8c:b1:0f:d3:d6:27:c1:f0:0d:38:e8:83:52:15:24:dc:df:7e: e7:6d:0c:9b:c2:94:3f:ea:a7:ea:a4:49:fe:5d:76:f5:b5:ca: 3e:ca:cc:8b:4c:74:2a:7b:7e:82:83:ca:bb:91:13:56:ee:82: 49:0a:3c:ad:51:97:68:d7:7f:bd:6e:cc:47:c9:b0:83:f4:55: 4c:e7:48:d4:26:08:06:7d:a7:5c:d2:9d:08:d6:5e:d3:c8:9a: 26:7e:8d:2a:d2:c2:ec:c0:96:9d:e3:4a:40:db:2f:8a:82:ce: ae:27:6c:32:40:23:07:9e:00:91:12:8a:99:a6:cf:71:3a:06: b2:15:f0:22:12:10:49:fe:80:c9:99:b1:60:4c:8e:d3:e9:07: 68:22:01:96:b0:ec:e3:39:9c:b3:32:1d:6d:b1:cf:c9:e1:23: ce:af:77:b1:33:f6:b9:56:24:97:86:cf:ef:f3:14:4b:67:56: 24:eb:4c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjUxMTA1MDIwOTIzWhcNMjUxMTEyMDIwOTIzWjAYMRYwFAYD VQQDEw02OTBhYjFkMy03MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0Eq1RVqhkp50xD76N2lOw01GRbNZXMLdpJrao7MQyQxRxSKClVdFZZc9U/W DfkQtSqrd/zn6e2Du8YUjd+UdwqCgVkl3Wj70YSULiKn509K1YEq4n2MrAVmszXZ pbY83k8cJT23HRW+7JSWx914bMf+x2bXVWxaINnZAB4Ix5g5Kd/peT69whPFRNKh leWSBwDuNJslGrZ7q7HKlmBm0E9lwkC1o0W8yuhysXzHui6Qn4EeW6hDLm+bF8ge wTceWgPlB5rpRcAdfB0y+qFAdTAQhMd5LnBNG1xVYRk2cjmZEYoiu9vh025a7eJP z3pKYrA6ZWCb85UMDx9imBaQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1bY8zJ Zr6n6NaXE4LADSzvKkg/MB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHBDusnpjIxDbXsVJzF4xageXsXXyy5jebwvpzLxJGUwAA/j77jRaP BUrg7ELGaQSM6smLT07OuHcsTjGqmw9QJ52h3ylGVDSMsQ/T1ifB8A046INSFSTc 337nbQybwpQ/6qfqpEn+XXb1tco+ysyLTHQqe36Cg8q7kRNW7oJJCjytUZdo13+9 bsxHybCD9FVM50jUJggGfadc0p0I1l7TyJomfo0q0sLswJad40pA2y+Kgs6uJ2wy QCMHngCREoqZps9xOgayFfAiEhBJ/oDJmbFgTI7T6QdoIgGWsOzjOZyzMh1tsc/J 4SPOr3exM/a5ViSXhs/v8xRLZ1Yk60yc -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:11 2025 by rpki-client