$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: A/qUWw4BAOQ8YiS7+2Kv78vA2Xp+qDPzc3OMlxbq7YE= Subject key identifier: 4A:CE:A9:A7:CC:83:A8:8F:2D:7F:8D:46:AE:11:77:99:7A:FE:C9:BD Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: 98 Signing time: Wed 05 Nov 2025 05:53:48 +0000 Manifest this update: Wed 05 Nov 2025 05:53:48 +0000 Manifest next update: Wed 12 Nov 2025 05:53:48 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: AvvVSk+5krEXJLLtwzdceKR8LKg3etibtck3JlrJy0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Nov 5 05:53:48 2025 GMT Not After : Nov 12 05:53:48 2025 GMT Subject: CN=690ae66c-ec87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:a0:f2:52:ab:0f:6b:45:34:83:f8:9b:60: 85:df:84:2a:c3:9f:29:dc:e8:a7:fd:ae:b9:f3:92: 20:dd:ab:31:5a:5d:b9:b8:df:04:a0:ea:48:70:30: 7a:30:e0:7c:89:6f:5a:75:00:98:42:32:41:a9:53: 92:9e:85:23:ec:bb:3f:31:70:b1:25:67:cd:62:1a: c2:0b:92:6a:da:41:99:c9:e1:33:b2:5c:74:24:69: 0e:4f:a1:ce:de:54:a2:3d:87:1c:c5:87:b1:48:b0: b4:5c:d4:b7:83:15:f9:c5:02:c6:98:ea:b7:11:a4: 37:68:5a:d9:e4:7b:b4:d2:4c:cc:42:e5:14:d6:95: 2a:4d:12:11:18:63:09:57:6a:6c:a0:e0:55:1f:2d: 4a:fb:af:de:b7:31:c2:88:7b:af:fb:2e:6b:b8:bf: d4:b5:4b:6b:38:2b:5f:33:66:a3:e9:c2:b9:9c:c6: 47:dd:3c:c9:fb:ec:ff:3d:cd:0c:12:f2:9f:ae:10: c1:5d:cc:66:98:0e:d8:ca:1c:a3:46:fa:f4:cf:70: 2a:41:a8:83:92:b2:dd:87:67:5b:b8:d5:14:43:c1: c1:8a:7d:84:2a:69:2c:70:a5:24:2f:0e:78:ee:11: d2:af:bf:b0:64:4e:c8:d2:3d:5a:d3:4c:1b:0d:ab: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CE:A9:A7:CC:83:A8:8F:2D:7F:8D:46:AE:11:77:99:7A:FE:C9:BD X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:eb:32:7a:d4:c4:bb:4a:02:0a:93:82:ca:cc:6c:50:61: 3f:36:28:c5:13:d0:50:0d:6f:50:a6:c3:ba:db:27:2d:41:52: 89:26:11:50:8f:56:ff:d4:ad:16:3c:61:73:21:66:b7:ae:6e: 76:d9:58:16:a8:41:54:ea:29:9e:20:52:3e:f4:7a:a3:88:30: 22:3d:59:78:04:dd:8a:45:5f:c0:92:97:6d:5a:d8:22:cc:51: 0b:63:79:12:5d:fd:2f:f6:cb:40:1a:b7:bd:d5:bf:00:5a:69: a1:51:5d:c4:f2:b1:b7:83:bf:7f:d4:65:6c:6f:38:ce:c2:db: 49:0c:da:08:7d:5b:18:1d:48:39:b7:bb:7c:b3:3d:7e:50:9a: 6c:d3:12:88:ed:76:fc:a1:43:92:83:fd:27:a4:3c:26:ba:00: ae:3f:ac:95:7f:4b:1c:8b:ee:18:d8:b7:98:87:e9:b5:68:1e: f9:6a:f8:30:79:ed:e4:2c:43:38:39:10:3f:de:21:ec:d7:f8: b7:da:59:dc:e2:9b:92:6e:aa:3c:a7:c6:96:8d:9b:c5:1f:a3: 6f:ff:c3:19:7c:09:b8:92:94:18:67:55:25:84:04:9f:bb:20: 36:42:2e:f7:6d:7b:17:ec:cc:a6:24:b3:cf:59:44:09:a3:fc: 7c:fb:1c:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDI4RURBN0I5NUQ1RThENDU2MkE3NTk3NEM2REQ3REE2 NEMyQTJBODYwHhcNMjUxMTA1MDU1MzQ4WhcNMjUxMTEyMDU1MzQ4WjAYMRYwFAYD VQQDEw02OTBhZTY2Yy1lYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWeg8lKrD2tFNIP4m2CF34Qqw58p3Oin/a6585Ig3asxWl25uN8EoOpIcDB6 MOB8iW9adQCYQjJBqVOSnoUj7Ls/MXCxJWfNYhrCC5Jq2kGZyeEzslx0JGkOT6HO 3lSiPYccxYexSLC0XNS3gxX5xQLGmOq3EaQ3aFrZ5Hu00kzMQuUU1pUqTRIRGGMJ V2psoOBVHy1K+6/etzHCiHuv+y5ruL/UtUtrOCtfM2aj6cK5nMZH3TzJ++z/Pc0M EvKfrhDBXcxmmA7YyhyjRvr0z3AqQaiDkrLdh2dbuNUUQ8HBin2EKmkscKUkLw54 7hHSr7+wZE7I0j1a00wbDav3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErOqafM g6iPLX+NRq4Rd5l6/sm9MB8GA1UdIwQYMBaAFCjtp7ldXo1FYqdZdMbdfaZMKiqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS9ENDA5RjgyQUQx NjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpVVmlwMWwweHQxOXBrd3FL b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS9ENDA5RjgyQUQxNjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpV VmlwMWwweHQxOXBrd3FLb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaAOsyetTEu0oCCpOCysxsUGE/NijFE9BQDW9QpsO62yctQVKJJhFQ j1b/1K0WPGFzIWa3rm522VgWqEFU6imeIFI+9HqjiDAiPVl4BN2KRV/AkpdtWtgi zFELY3kSXf0v9stAGre91b8AWmmhUV3E8rG3g79/1GVsbzjOwttJDNoIfVsYHUg5 t7t8sz1+UJps0xKI7Xb8oUOSg/0npDwmugCuP6yVf0sci+4Y2LeYh+m1aB75avgw ee3kLEM4ORA/3iHs1/i32lnc4puSbqo8p8aWjZvFH6Nv/8MZfAm4kpQYZ1UlhASf uyA2Qi73bXsX7MymJLPPWUQJo/x8+xy1 -----END CERTIFICATE-----Generated at Wed Nov 5 19:30:00 2025 by rpki-client