$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: 7rLvY9XMmp2s2o2x8VX0XHT3iCYTHajAEuT2AN8fqv0= Subject key identifier: 6E:C6:54:BF:FE:B2:73:3B:A0:63:9E:3E:9E:56:15:B1:2E:67:CD:B9 Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21E9 Signing time: Sun 02 Nov 2025 15:53:40 +0000 Manifest this update: Sun 02 Nov 2025 15:53:39 +0000 Manifest next update: Sun 09 Nov 2025 15:53:39 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: Ijgs+Sf7DQS0Sh3/OmAMQTmQBQrzmSIYs95ClX44usg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8681 (0x21e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Nov 2 15:53:39 2025 GMT Not After : Nov 9 15:53:39 2025 GMT Subject: CN=69077e84-6463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:06:dd:58:5b:68:7f:fb:c0:98:6c:a5:d9: 46:4d:7e:b1:14:63:17:eb:4c:10:ab:b7:e8:d4:70: da:06:3e:71:54:c1:82:a2:ac:e3:17:99:74:08:e4: 95:c6:54:dc:d1:85:3e:cc:c3:63:1c:5a:a8:1d:6a: e9:8f:63:a9:53:cb:cb:8a:d4:c8:ef:fa:46:3c:eb: e8:68:c9:26:35:f7:95:a6:1d:eb:94:00:df:b9:7d: 06:7a:65:7a:d3:54:44:bd:6a:7c:5f:d2:9e:28:e1: d9:93:cc:77:fc:4b:51:e4:3b:81:8f:d7:fd:43:c3: af:16:27:76:aa:7d:2e:0f:87:46:3e:79:c9:69:08: 92:e1:4e:5d:04:e4:07:64:09:d2:96:e8:6e:c8:cd: 5b:96:9a:9d:4c:1e:11:ac:f6:5a:a6:9b:b6:8b:aa: ac:f3:5d:a9:3b:83:df:d2:7b:2c:77:ab:be:fe:b3: 6e:75:eb:38:2f:25:40:69:2b:54:4a:db:bc:42:00: ba:d2:91:a5:9c:f8:00:ce:3e:80:b8:73:ad:db:76: 7a:d4:c3:ad:06:04:36:09:d2:89:c9:02:43:07:12: d7:2c:fe:cf:95:25:28:83:49:79:f2:a4:2d:7e:19: 79:55:d7:66:da:af:43:b8:dd:63:82:62:7c:49:33: 3d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C6:54:BF:FE:B2:73:3B:A0:63:9E:3E:9E:56:15:B1:2E:67:CD:B9 X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:84:61:a7:b8:3b:55:91:e2:a6:e9:73:9c:bd:1f:24:21: ad:bf:11:24:bb:13:7d:9b:1a:5a:4c:18:45:7d:fc:15:d1:be: da:69:98:50:a4:70:22:cc:16:f3:05:0a:05:52:15:e8:dd:08: f7:c5:3a:66:00:ad:a2:c1:bf:35:ad:e9:e3:93:da:6f:a9:b9: 9b:ec:97:e7:14:b5:54:30:f3:2c:e9:db:91:ef:35:e2:a7:50: 52:3d:75:33:8e:bd:31:70:e5:5f:a1:a2:7a:c7:7d:1e:3f:22: 96:1b:5d:76:59:3a:b7:ee:c8:69:8f:a9:9f:d9:3b:93:b2:e1: 3c:a2:de:dd:02:16:4b:44:5b:e7:50:b7:5a:69:ec:c2:f4:65: 4a:22:89:1a:fd:03:86:24:b3:ca:34:d2:7c:6b:90:ad:4a:0f: c9:84:ae:ff:f3:c2:ac:63:c8:ac:95:a6:ea:50:10:4d:69:4a: c7:ee:ee:f3:e0:e1:59:1e:5e:e2:a5:bc:c3:90:0b:63:c0:0d: 24:2c:88:e1:b3:7c:34:37:34:1b:ed:d3:d7:a3:52:55:04:28: c2:0b:3c:ec:9a:1d:50:66:09:56:ec:32:83:09:3b:c0:2d:73: 34:c8:9b:10:23:77:cb:37:95:f7:da:f1:97:a2:a0:51:70:67: 94:19:e8:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUxMTAyMTU1MzM5WhcNMjUxMTA5MTU1MzM5WjAYMRYwFAYD VQQDEw02OTA3N2U4NC02NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SsG3VhbaH/7wJhspdlGTX6xFGMX60wQq7fo1HDaBj5xVMGCoqzjF5l0COSV xlTc0YU+zMNjHFqoHWrpj2OpU8vLitTI7/pGPOvoaMkmNfeVph3rlADfuX0GemV6 01REvWp8X9KeKOHZk8x3/EtR5DuBj9f9Q8OvFid2qn0uD4dGPnnJaQiS4U5dBOQH ZAnSluhuyM1blpqdTB4RrPZappu2i6qs812pO4Pf0nssd6u+/rNudes4LyVAaStU Stu8QgC60pGlnPgAzj6AuHOt23Z61MOtBgQ2CdKJyQJDBxLXLP7PlSUog0l58qQt fhl5Vddm2q9DuN1jgmJ8STM9ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7GVL/+ snM7oGOePp5WFbEuZ825MB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbNIRhp7g7VZHipulznL0fJCGtvxEkuxN9mxpaTBhFffwV0b7aaZhQ pHAizBbzBQoFUhXo3Qj3xTpmAK2iwb81renjk9pvqbmb7JfnFLVUMPMs6duR7zXi p1BSPXUzjr0xcOVfoaJ6x30ePyKWG112WTq37shpj6mf2TuTsuE8ot7dAhZLRFvn ULdaaezC9GVKIoka/QOGJLPKNNJ8a5CtSg/JhK7/88KsY8islabqUBBNaUrH7u7z 4OFZHl7ipbzDkAtjwA0kLIjhs3w0NzQb7dPXo1JVBCjCCzzsmh1QZglW7DKDCTvA LXM0yJsQI3fLN5X32vGXoqBRcGeUGegy -----END CERTIFICATE-----Generated at Tue Nov 4 16:02:22 2025 by rpki-client