$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: XgnIR0u3/gw9uoR9V0PzJg9d9cOYB/ZbGZHf9yrUWu8= Subject key identifier: AE:14:CA:C2:53:B4:6D:34:7C:9B:BB:C1:75:B7:7A:F2:DD:72:B2:B6 Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 05:22:34 +0000 Manifest this update: Mon 03 Nov 2025 05:22:33 +0000 Manifest next update: Mon 10 Nov 2025 05:22:33 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: kxrdZxteJ9H9HwUgQjAbKsOMMvWnZSCgDUQtAh0hyxg=) 2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: oKvufsvZ365M3eiTvHVz+l4Cs1W/yryEEt8TEPNakIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Nov 3 05:22:33 2025 GMT Not After : Nov 10 05:22:33 2025 GMT Subject: CN=69083c19-2094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b7:fa:b4:1c:01:bc:cf:aa:8b:d5:8e:a6:ce: 8e:8e:7d:10:63:14:b4:ca:17:ff:dd:7f:9f:2d:79: 83:95:f9:0a:78:07:f8:ae:42:67:56:fc:6b:ef:ff: 9b:45:ba:45:a3:9b:84:bf:e6:5d:83:3d:73:f3:dd: 76:d7:b1:a7:bd:b3:1b:09:bd:a6:6b:a8:63:3d:d4: fc:2a:65:50:6a:84:4e:2b:0c:a4:ed:c4:f5:e4:f8: 5b:81:7a:14:e1:ed:8f:2c:3c:2d:ce:fe:bb:aa:e5: a6:0c:c2:96:e3:89:74:83:30:c8:d2:db:47:c7:b5: 0e:50:a7:f7:dd:9b:95:54:da:c8:74:2f:7f:51:b1: ce:5b:b4:8b:45:90:52:56:96:4d:8f:ca:6c:4f:51: 10:4d:69:77:9f:05:a3:7c:74:3a:41:75:19:bf:8d: 63:10:d3:72:c1:e1:c4:b9:6f:c1:31:7b:d2:6b:bf: 79:98:3a:a0:80:74:53:72:93:d0:4c:30:8b:aa:7d: e0:4b:b6:2d:9a:9f:c4:94:95:46:ae:b9:e6:5c:d7: 3d:6b:b2:65:e3:42:43:25:32:10:05:39:68:cb:d4: 33:f5:b2:f7:0b:5c:fd:f7:b7:5e:5d:4d:75:e1:78: b1:8f:64:f7:c3:b4:4e:ea:22:a8:d4:23:46:7f:05: 1f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:CA:C2:53:B4:6D:34:7C:9B:BB:C1:75:B7:7A:F2:DD:72:B2:B6 X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:73:90:bd:54:33:4b:3b:f4:49:f5:82:f4:d7:8b:47:13:e7: 1d:c6:b0:32:ec:58:49:72:41:18:2d:a6:a0:f9:58:af:e2:e1: fb:96:21:2b:57:17:84:7f:23:52:b4:2d:94:46:14:17:5a:65: 5e:60:8e:7e:a2:48:fa:e9:c0:4e:9f:de:8a:a6:db:d7:d5:87: fe:63:5c:43:a5:ec:e9:36:6e:54:3a:ab:d4:98:69:b6:66:51: df:4a:5d:52:67:fc:af:a1:3e:34:91:f3:01:54:9c:0b:d2:3e: 4c:29:e0:b3:d1:9d:37:eb:55:87:af:07:22:4e:cf:52:0e:72: 09:f7:7d:71:04:a2:72:69:55:bb:76:ac:d7:6c:53:87:26:e6: 1e:8c:66:42:e4:a7:a6:e7:f2:33:a9:0e:57:8b:e4:4f:a8:13: 87:60:f7:f2:b5:6f:80:e9:2c:a8:c1:90:67:c8:e7:ff:8c:53: 51:1a:3b:81:e6:bc:cd:33:28:6a:37:82:90:96:69:02:3c:4a: 7a:6f:6b:74:6f:b0:5e:f6:04:bf:b4:7b:66:5b:dc:61:5e:32: 2a:cf:03:b7:5d:cd:dc:57:1a:9a:d0:6a:ee:43:74:02:b0:3e: f1:fb:2d:db:d8:d1:0c:7b:7a:af:5b:e7:b6:ff:84:7b:d0:4d: a8:8d:b1:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjUxMTAzMDUyMjMzWhcNMjUxMTEwMDUyMjMzWjAYMRYwFAYD VQQDEw02OTA4M2MxOS0yMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rf6tBwBvM+qi9WOps6Ojn0QYxS0yhf/3X+fLXmDlfkKeAf4rkJnVvxr7/+b RbpFo5uEv+Zdgz1z891217GnvbMbCb2ma6hjPdT8KmVQaoROKwyk7cT15PhbgXoU 4e2PLDwtzv67quWmDMKW44l0gzDI0ttHx7UOUKf33ZuVVNrIdC9/UbHOW7SLRZBS VpZNj8psT1EQTWl3nwWjfHQ6QXUZv41jENNyweHEuW/BMXvSa795mDqggHRTcpPQ TDCLqn3gS7Ytmp/ElJVGrrnmXNc9a7Jl40JDJTIQBTloy9Qz9bL3C1z997deXU11 4Xixj2T3w7RO6iKo1CNGfwUfAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4UysJT tG00fJu7wXW3evLdcrK2MB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXc5C9VDNLO/RJ9YL014tHE+cdxrAy7FhJckEYLaag+Viv4uH7liEr VxeEfyNStC2URhQXWmVeYI5+okj66cBOn96KptvX1Yf+Y1xDpezpNm5UOqvUmGm2 ZlHfSl1SZ/yvoT40kfMBVJwL0j5MKeCz0Z0361WHrwciTs9SDnIJ931xBKJyaVW7 dqzXbFOHJuYejGZC5Kem5/IzqQ5Xi+RPqBOHYPfytW+A6SyowZBnyOf/jFNRGjuB 5rzNMyhqN4KQlmkCPEp6b2t0b7Be9gS/tHtmW9xhXjIqzwO3Xc3cVxqa0GruQ3QC sD7x+y3b2NEMe3qvW+e2/4R70E2ojbE7 -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:34 2025 by rpki-client