$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: 1CCQ/JQSXCu+AAXdeJqn/Nhabs9g+DUUtWul32j/Aw8= Subject key identifier: 32:18:35:8B:8A:8E:66:B5:9D:3B:75:E0:8C:9F:9D:A9:21:73:EB:58 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E63 Signing time: Sun 02 Nov 2025 17:45:32 +0000 Manifest this update: Sun 02 Nov 2025 17:45:32 +0000 Manifest next update: Sun 09 Nov 2025 17:45:32 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: qCxC4yZE5V8QX3mqk595nD8+ddgHpHVsr7xWOn97xCE=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3692 (0xe6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Nov 2 17:45:32 2025 GMT Not After : Nov 9 17:45:32 2025 GMT Subject: CN=690798bc-8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:d5:eb:1a:1e:52:57:0c:b9:b9:b6:70:88: d0:db:c3:d3:84:85:8b:c4:24:69:db:25:b2:26:e6: f6:99:00:56:03:35:8a:4f:b4:a1:de:8a:a6:c7:a9: 4a:0f:ef:f0:98:6f:57:5c:b6:ce:4b:fd:96:d9:5f: 8d:8a:a1:bc:c8:eb:9b:56:ec:d3:e9:a7:34:68:d4: 0a:36:75:c9:8d:e1:14:91:ac:91:90:37:b6:fb:b1: 73:4a:0f:8a:1f:aa:f9:45:9e:f0:c7:0c:39:de:4a: 74:88:ab:e0:01:c1:5a:5a:99:32:81:76:72:ae:5b: b2:ca:c6:49:82:c1:46:8b:b5:62:0a:06:fe:77:28: 11:3c:0e:d3:f5:94:22:03:78:7f:d0:f7:7f:36:3a: 4b:3c:48:64:10:24:85:c1:3f:22:3f:b0:cb:4f:77: 94:1c:28:42:26:86:b1:64:12:47:39:8b:d2:7d:d5: 16:e7:cf:a8:ec:aa:3d:99:41:e7:c2:91:40:86:82: 1c:f2:ab:09:d4:54:b3:d1:93:b7:f2:cf:98:de:47: 7e:22:2b:7a:5b:d9:ec:a8:53:75:79:d4:86:f2:24: 9f:74:07:3b:9a:27:08:fc:f5:e3:e7:b1:7a:eb:90: 75:ae:41:2f:e2:71:9f:88:3c:ad:8d:99:0d:f0:6a: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:35:8B:8A:8E:66:B5:9D:3B:75:E0:8C:9F:9D:A9:21:73:EB:58 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:44:fa:4a:53:5e:4d:18:68:a5:5b:e6:04:68:bd:25:b7:83: 53:7d:45:30:78:fa:a3:b7:4a:ce:83:dc:5a:12:da:75:7e:fb: 6a:94:46:9a:f3:bd:5f:ca:43:3d:92:8a:50:08:1c:05:76:b7: 1d:ca:03:4b:a8:af:dc:09:66:91:4d:1a:2d:3d:28:30:68:32: 89:33:8c:0f:97:40:35:f7:77:bd:56:e8:12:96:da:d0:a1:74: 94:5d:e4:12:f1:2d:1d:25:77:5b:8c:76:7e:50:eb:30:2c:5f: 52:9f:45:d4:61:0a:11:d9:e8:1a:26:63:6b:b0:e9:87:af:ef: 4d:a4:20:0b:57:da:cf:62:0a:07:45:66:cc:80:19:7b:3c:6b: 69:8c:08:3c:73:44:d0:2a:af:3c:fa:48:f8:d6:7c:3d:2c:fc: 60:49:33:6c:76:56:00:28:a7:51:af:d8:21:a7:c6:d1:ab:36: 12:ac:43:ac:97:55:bb:5b:d7:a0:27:ec:4c:d1:ed:78:39:26: 25:d1:58:9a:a3:06:f1:ca:a3:89:a6:f5:d4:12:2d:f1:e8:0e: 2d:e5:64:4b:f0:9e:27:ca:22:89:df:36:57:c3:ed:a2:84:21: 7b:77:e9:0e:95:05:1b:be:d6:cc:10:4f:18:18:b3:67:2e:04: a5:b4:10:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUxMTAyMTc0NTMyWhcNMjUxMTA5MTc0NTMyWjAYMRYwFAYD VQQDEw02OTA3OThiYy04ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KPV6xoeUlcMubm2cIjQ28PThIWLxCRp2yWyJub2mQBWAzWKT7Sh3oqmx6lK D+/wmG9XXLbOS/2W2V+NiqG8yOubVuzT6ac0aNQKNnXJjeEUkayRkDe2+7FzSg+K H6r5RZ7wxww53kp0iKvgAcFaWpkygXZyrluyysZJgsFGi7ViCgb+dygRPA7T9ZQi A3h/0Pd/NjpLPEhkECSFwT8iP7DLT3eUHChCJoaxZBJHOYvSfdUW58+o7Ko9mUHn wpFAhoIc8qsJ1FSz0ZO38s+Y3kd+Iit6W9nsqFN1edSG8iSfdAc7micI/PXj57F6 65B1rkEv4nGfiDytjZkN8GqECwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIYNYuK jma1nTt14Iyfnakhc+tYMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChRPpKU15NGGilW+YEaL0lt4NTfUUwePqjt0rOg9xaEtp1fvtqlEaa 871fykM9kopQCBwFdrcdygNLqK/cCWaRTRotPSgwaDKJM4wPl0A193e9VugSltrQ oXSUXeQS8S0dJXdbjHZ+UOswLF9Sn0XUYQoR2egaJmNrsOmHr+9NpCALV9rPYgoH RWbMgBl7PGtpjAg8c0TQKq88+kj41nw9LPxgSTNsdlYAKKdRr9ghp8bRqzYSrEOs l1W7W9egJ+xM0e14OSYl0ViaowbxyqOJpvXUEi3x6A4t5WRL8J4nyiKJ3zZXw+2i hCF7d+kOlQUbvtbMEE8YGLNnLgSltBBu -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:49 2025 by rpki-client