$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: u6ghzFqI4mUqP3oXvyfCRZQ4L/4+JYSlYuvIWeo2Lvg= Subject key identifier: A3:6A:78:DA:87:47:67:DC:2B:B2:EF:C0:04:6B:64:10:86:98:CB:06 Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 05:16:55 +0000 Manifest this update: Mon 03 Nov 2025 05:16:55 +0000 Manifest next update: Mon 10 Nov 2025 05:16:55 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: ops+hgqH1uIT9ybRLXjayesGN+/TJVXf+806mWMFWyQ=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: +ehd8KtxPwFaqFNVmOCKeYgOq8q50OL3e4iQXY+Px88=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: IYR9mQ1VQUiO08kcI4RHdp/FLN6UHawsT13ESG27pvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Nov 3 05:16:55 2025 GMT Not After : Nov 10 05:16:55 2025 GMT Subject: CN=69083ac7-0c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:3a:bd:cf:7b:de:04:33:80:85:52:1b:69: 2e:0b:b2:2d:88:b3:d1:d4:fc:e2:32:06:b0:d5:0e: da:22:6a:1c:07:18:45:e1:04:dc:d5:e6:c7:c6:8c: 68:3c:61:b4:9c:e5:73:be:77:22:94:9b:00:d2:f7: b3:df:e7:57:f0:86:1b:16:39:91:24:f0:a9:94:c7: fb:f4:a0:63:13:ab:dd:75:0e:24:65:aa:87:09:f1: e3:d0:4b:ef:8d:9d:3e:0c:dd:fd:2a:f3:0e:bc:8e: 87:6a:89:53:5f:e7:51:7f:6c:f9:e7:39:62:9e:64: 1f:0d:7c:20:13:cc:a5:8b:b1:e5:f5:5f:53:74:eb: a7:a7:a1:2b:a2:6b:2f:52:47:17:cb:73:42:b8:e6: 6b:0c:1a:e3:17:f2:25:eb:50:6e:54:7c:99:d8:7f: f7:cb:2a:05:b7:e6:9e:70:fb:4d:71:cb:54:93:fd: 9c:b3:63:2a:46:b6:82:3a:1a:75:47:65:e0:3b:a8: 99:9f:8d:8c:5d:5f:07:ae:00:bc:6a:8c:0e:be:29: f8:74:79:94:e8:87:0b:07:53:46:13:ba:34:77:ef: db:eb:ef:90:0a:1c:98:13:fb:a8:8a:fb:32:0d:7c: 45:07:55:fc:42:05:cd:68:5e:5a:c1:e2:a6:23:2b: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6A:78:DA:87:47:67:DC:2B:B2:EF:C0:04:6B:64:10:86:98:CB:06 X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b2:b3:75:51:e7:5f:61:42:e5:2a:70:03:6b:47:33:4f:28: 43:9f:ae:6f:a4:b1:65:b9:75:e0:95:ff:46:32:19:2b:bf:91: d3:ac:01:e9:6e:65:d2:dd:67:8c:8f:0f:0d:01:7e:e4:95:7a: a0:00:97:d3:08:c7:15:25:6f:56:b4:c4:d8:17:e7:b3:36:5a: 6d:7c:3d:38:71:c7:34:71:71:76:2b:03:e5:8c:93:73:92:bf: a4:64:01:a5:db:f4:0e:16:3a:a6:43:8b:38:2c:01:83:56:04: 50:67:97:71:c8:35:a2:9a:34:72:32:cf:88:06:5d:a7:6a:c7: 68:d8:40:5b:6b:fa:10:83:ac:cb:d8:92:65:80:41:14:5a:50: f1:12:26:37:08:df:90:f9:c8:fd:fd:8f:37:55:47:48:dd:85: ff:c8:dc:4a:f2:3e:19:a9:ef:d7:58:81:ab:e7:06:d6:cf:a9: 92:28:0c:8d:1e:0d:b0:11:e6:1b:1f:27:bb:8e:fa:a3:d9:45: 80:55:0c:a1:44:ce:83:06:eb:0e:c7:40:ea:66:73:42:65:96: cc:f6:e5:f8:f1:b3:68:6f:7c:6c:d1:65:e2:9d:1d:6c:44:7e: c0:03:09:fc:88:e4:42:16:6f:7f:92:e9:30:4f:fc:09:be:c3: d4:ad:06:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjUxMTAzMDUxNjU1WhcNMjUxMTEwMDUxNjU1WjAYMRYwFAYD VQQDEw02OTA4M2FjNy0wYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Qw6vc973gQzgIVSG2kuC7ItiLPR1PziMgaw1Q7aImocBxhF4QTc1ebHxoxo PGG0nOVzvncilJsA0vez3+dX8IYbFjmRJPCplMf79KBjE6vddQ4kZaqHCfHj0Evv jZ0+DN39KvMOvI6HaolTX+dRf2z55zlinmQfDXwgE8yli7Hl9V9TdOunp6Eromsv UkcXy3NCuOZrDBrjF/Il61BuVHyZ2H/3yyoFt+aecPtNcctUk/2cs2MqRraCOhp1 R2XgO6iZn42MXV8HrgC8aowOvin4dHmU6IcLB1NGE7o0d+/b6++QChyYE/uoivsy DXxFB1X8QgXNaF5aweKmIyu2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNqeNqH R2fcK7LvwARrZBCGmMsGMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdsrN1UedfYULlKnADa0czTyhDn65vpLFluXXglf9GMhkrv5HTrAHp bmXS3WeMjw8NAX7klXqgAJfTCMcVJW9WtMTYF+ezNlptfD04ccc0cXF2KwPljJNz kr+kZAGl2/QOFjqmQ4s4LAGDVgRQZ5dxyDWimjRyMs+IBl2nasdo2EBba/oQg6zL 2JJlgEEUWlDxEiY3CN+Q+cj9/Y83VUdI3YX/yNxK8j4Zqe/XWIGr5wbWz6mSKAyN Hg2wEeYbHye7jvqj2UWAVQyhRM6DBusOx0DqZnNCZZbM9uX48bNob3xs0WXinR1s RH7AAwn8iORCFm9/kukwT/wJvsPUrQYg -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:29 2025 by rpki-client