$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft File: Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json) Hash identifier: Bh9L0jFM6FTRK/Q8M9rG1yEmcM19iyAx+lr6LG16Q+c= Subject key identifier: E1:28:C7:67:E3:6E:32:0D:24:D7:DE:87:CD:72:44:B5:A2:D5:82:81 Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft Manifest number: 0146 Signing time: Mon 03 Nov 2025 04:19:43 +0000 Manifest this update: Mon 03 Nov 2025 04:19:42 +0000 Manifest next update: Mon 10 Nov 2025 04:19:42 +0000 Files and hashes: 1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: 37FihwNxogd7jKGr1Vff1/pbv97vwJBcAqHjY9xbEUY=) 2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7 Validity Not Before: Nov 3 04:19:42 2025 GMT Not After : Nov 10 04:19:42 2025 GMT Subject: CN=69082d5f-274c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:be:92:75:5b:49:6b:1b:73:87:7a:b1:c9: 63:fb:eb:c7:62:2e:e4:50:c6:04:e7:8b:89:fd:ce: bc:84:a5:60:8f:f2:02:78:1c:44:30:65:95:df:01: 64:a4:70:c5:f1:4f:5c:51:d8:38:2e:f5:0e:11:80: 1a:6b:16:ff:18:e0:f0:b3:78:7e:dd:4c:c4:37:c5: 07:48:65:62:5c:38:f4:73:14:ba:05:9a:f0:60:83: 17:57:4a:4e:87:5c:4f:c6:b2:63:49:7b:2c:a4:6c: cf:20:74:19:c6:be:ba:4c:1d:13:7c:7d:14:19:70: 59:1e:20:22:cc:f7:f9:fd:73:01:fd:80:fd:63:d4: 6d:eb:6d:f5:aa:7b:dd:16:0c:e0:dd:1e:01:c7:92: 72:36:c2:9b:d3:d7:6c:2c:00:ec:e5:44:61:f0:e9: 5e:48:0c:b3:15:00:95:ab:7e:58:d8:64:eb:09:3f: ca:51:28:f7:9e:41:b3:7a:1c:55:65:ba:57:7a:fe: a0:2f:c1:a4:2d:88:ab:f0:90:14:53:ac:f7:55:de: 86:59:96:f8:9b:ea:9a:2b:f6:16:1a:cd:25:5c:4a: 02:32:a6:b8:8e:97:43:d9:bd:40:d5:71:d0:50:bc: b7:67:5a:fa:45:fc:77:52:2b:c8:e0:18:19:2f:22: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:C7:67:E3:6E:32:0D:24:D7:DE:87:CD:72:44:B5:A2:D5:82:81 X509v3 Authority Key Identifier: keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a9:4c:a2:fc:17:61:21:40:47:d3:de:03:40:28:64:19:f8: 8f:56:23:f1:5e:e9:2c:a7:5d:ac:7f:b6:75:81:fe:2b:bb:94: a4:63:31:2f:0a:3a:dd:31:44:e0:70:fd:83:15:16:24:72:ec: 91:8a:2a:a8:6a:56:7b:9b:24:70:c8:f1:93:32:f7:47:b0:ad: 70:c5:95:b1:4f:e4:f2:06:00:b5:2f:6a:6e:aa:d2:df:8f:a3: df:54:9e:30:59:bb:8f:2c:1b:65:40:cb:8c:42:4e:cb:32:33: b5:73:84:02:a0:f2:81:f3:5a:dd:78:0e:73:d2:b4:6a:4d:3c: 54:2d:a1:8e:87:c0:d2:84:63:9c:72:5d:78:b5:79:92:9f:fa: 1c:2c:85:62:73:0d:5a:81:73:d9:13:44:52:ef:ba:ab:6a:63: 44:ad:d1:29:47:7e:16:18:fb:dd:3b:d3:07:ac:4b:f5:ac:98: 16:eb:01:32:86:de:35:8b:77:4d:6d:2d:ae:22:bf:96:6e:ae: 06:38:8f:66:a1:8d:38:bc:ad:99:91:e2:d6:0a:1f:db:c2:5b: 3b:40:98:7f:ce:d6:ea:53:99:ec:ee:09:3f:cd:4b:da:1f:8f: 3f:d4:70:7d:51:3d:8a:ed:78:6c:23:ee:83:8b:c3:0f:70:c2: 8c:f5:11:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5 MjNBQTc1QzcwHhcNMjUxMTAzMDQxOTQyWhcNMjUxMTEwMDQxOTQyWjAYMRYwFAYD VQQDEw02OTA4MmQ1Zi0yNzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwu+knVbSWsbc4d6sclj++vHYi7kUMYE54uJ/c68hKVgj/ICeBxEMGWV3wFk pHDF8U9cUdg4LvUOEYAaaxb/GODws3h+3UzEN8UHSGViXDj0cxS6BZrwYIMXV0pO h1xPxrJjSXsspGzPIHQZxr66TB0TfH0UGXBZHiAizPf5/XMB/YD9Y9Rt6231qnvd Fgzg3R4Bx5JyNsKb09dsLADs5URh8OleSAyzFQCVq35Y2GTrCT/KUSj3nkGzehxV ZbpXev6gL8GkLYir8JAUU6z3Vd6GWZb4m+qaK/YWGs0lXEoCMqa4jpdD2b1A1XHQ ULy3Z1r6Rfx3UivI4BgZLyLJfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEox2fj bjINJNfeh81yRLWi1YKBMB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1 NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6 ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhqUyi/BdhIUBH094DQChkGfiPViPxXuksp12sf7Z1gf4ru5SkYzEv CjrdMUTgcP2DFRYkcuyRiiqoalZ7myRwyPGTMvdHsK1wxZWxT+TyBgC1L2puqtLf j6PfVJ4wWbuPLBtlQMuMQk7LMjO1c4QCoPKB81rdeA5z0rRqTTxULaGOh8DShGOc cl14tXmSn/ocLIVicw1agXPZE0RS77qramNErdEpR34WGPvdO9MHrEv1rJgW6wEy ht41i3dNbS2uIr+Wbq4GOI9moY04vK2ZkeLWCh/bwls7QJh/ztbqU5ns7gk/zUva H48/1HB9UT2K7XhsI+6Di8MPcMKM9REH -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:59 2025 by rpki-client