$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft File: kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json) Hash identifier: fQlcf5465WLyFt6PDI8OSpqQkk6b82FCSByzk5XWrAg= Subject key identifier: 20:FF:F3:39:23:94:E3:33:BA:AA:B6:69:4A:0C:55:99:40:49:A1:DA Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 Certificate issuer: /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft Manifest number: 049E Signing time: Wed 05 Nov 2025 00:03:28 +0000 Manifest this update: Wed 05 Nov 2025 00:03:27 +0000 Manifest next update: Wed 12 Nov 2025 00:03:27 +0000 Files and hashes: 1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: KXBxTcCPQQ4H/JzqjArcyCU6ZvfOinXXUffFtpGyOiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29 Validity Not Before: Nov 5 00:03:27 2025 GMT Not After : Nov 12 00:03:27 2025 GMT Subject: CN=690a9450-ca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:4c:33:37:28:c7:19:7f:9f:c8:86:4a:97: 9e:70:2d:d1:ef:32:11:2d:1f:5b:7b:54:ea:9b:b0: 1a:b6:7a:2e:f8:6b:3c:d9:21:16:1a:40:4f:d0:f7: 5e:45:74:29:4f:d4:18:11:d8:68:07:89:eb:f4:0a: 5d:cc:bf:03:20:07:9f:64:ee:4e:1e:42:f3:d8:fd: 35:97:d6:1d:1f:36:71:70:ac:76:d9:43:01:4c:e8: b0:d1:04:e4:51:e3:fb:75:7d:bc:b2:d5:d2:79:70: 0a:75:70:f8:2c:c8:92:22:99:50:38:08:2d:69:82: df:d3:f6:6e:9b:12:8a:51:02:51:7e:63:8e:a2:2c: 4b:d6:37:e0:6e:94:12:8a:c6:43:c6:49:aa:96:93: 88:97:de:d2:ee:2b:86:1b:3d:45:33:ea:06:31:34: 13:7e:46:f9:cd:3e:6a:5b:1a:0e:ba:de:66:f7:57: 65:ad:ed:fe:ed:ca:b0:f9:d1:c5:6a:e4:0a:9a:51: 19:5c:4b:3a:b2:2b:45:43:62:0f:47:db:3b:60:7e: 10:1f:57:2c:ce:df:ef:43:ef:42:e9:f0:a0:ef:d2: 5d:7b:b5:c9:21:ef:e8:33:c2:c7:3e:04:19:d3:81: 0f:1b:1a:e7:70:6b:03:e3:7b:f8:ab:ab:dd:f9:3a: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:F3:39:23:94:E3:33:BA:AA:B6:69:4A:0C:55:99:40:49:A1:DA X509v3 Authority Key Identifier: keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:83:2e:a6:cd:66:a7:1e:d1:f4:cc:0c:6b:3a:14:c9:5d:04: 47:c3:6c:20:9b:8e:53:e9:a2:7a:c7:8a:b2:5f:12:7f:a8:24: d0:70:e2:1a:10:f5:61:f9:30:64:e8:2a:c5:29:8b:82:20:bf: de:0d:df:c7:d8:98:9c:cf:21:1c:7f:95:2e:15:a8:bd:a9:50: ee:ae:35:d7:cc:32:a0:d2:69:49:6c:b8:06:b6:d7:c5:10:01: 8f:ce:3a:9f:f6:62:ee:ee:4d:bb:59:1e:a6:74:23:27:85:ae: b1:4c:ab:ee:5f:0c:3a:df:ff:d1:13:63:45:ff:58:d0:dd:74: bb:40:a1:21:6a:2a:dd:15:ed:fd:14:8b:42:c5:6c:2f:a9:ac: 27:c9:09:ac:b7:33:15:b2:42:9f:7f:ed:93:f3:a9:07:b3:da: 85:03:29:a0:a8:f3:49:00:f0:13:f3:78:d6:43:a0:73:2c:c8: a7:16:06:a1:d2:3a:7a:7d:c8:4a:f1:04:ea:cc:2e:92:85:d5: 93:b6:70:ab:b3:3c:19:ad:83:c5:97:0c:7e:94:66:1b:93:15: 58:bd:00:eb:6f:f7:b0:b3:e8:07:ad:1f:28:e8:d4:29:cf:0c: 66:16:81:ed:de:6c:9c:38:8f:3d:e3:97:1d:62:30:ab:c0:09: b2:16:dc:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxMDYxMTAvBgNVBAUTKDkwOTQzRUI4RUFENDRDMzZFREM5OTEwMzFCRkY4OEI4 QUI2NTVBMjkwHhcNMjUxMTA1MDAwMzI3WhcNMjUxMTEyMDAwMzI3WjAYMRYwFAYD VQQDEw02OTBhOTQ1MC1jYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmVMMzcoxxl/n8iGSpeecC3R7zIRLR9be1Tqm7Aatnou+Gs82SEWGkBP0Pde RXQpT9QYEdhoB4nr9ApdzL8DIAefZO5OHkLz2P01l9YdHzZxcKx22UMBTOiw0QTk UeP7dX28stXSeXAKdXD4LMiSIplQOAgtaYLf0/ZumxKKUQJRfmOOoixL1jfgbpQS isZDxkmqlpOIl97S7iuGGz1FM+oGMTQTfkb5zT5qWxoOut5m91dlre3+7cqw+dHF auQKmlEZXEs6sitFQ2IPR9s7YH4QH1cszt/vQ+9C6fCg79Jde7XJIe/oM8LHPgQZ 04EPGxrncGsD43v4q6vd+TpT3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD/8zkj lOMzuqq2aUoMVZlASaHaMB8GA1UdIwQYMBaAFJCUPrjq1Ew27cmRAxv/iLirZVop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTEwNi85NjE3QzA2RTUz NjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVREYnR5WkVER18tSXVLdGxX aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tKUS11T3JVVERidHlaRURHXy1JdUt0bFdpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTEwNi85NjE3QzA2RTUzNjkxMUVDQTRBNkJDNzhDNEY5QUUwMi9rSlEtdU9yVVRE YnR5WkVER18tSXVLdGxXaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMgy6mzWanHtH0zAxrOhTJXQRHw2wgm45T6aJ6x4qyXxJ/qCTQcOIa EPVh+TBk6CrFKYuCIL/eDd/H2JiczyEcf5UuFai9qVDurjXXzDKg0mlJbLgGttfF EAGPzjqf9mLu7k27WR6mdCMnha6xTKvuXww63//RE2NF/1jQ3XS7QKEhairdFe39 FItCxWwvqawnyQmstzMVskKff+2T86kHs9qFAymgqPNJAPAT83jWQ6BzLMinFgah 0jp6fchK8QTqzC6ShdWTtnCrszwZrYPFlwx+lGYbkxVYvQDrb/ews+gHrR8o6NQp zwxmFoHt3mycOI8945cdYjCrwAmyFtyJ -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:27 2025 by rpki-client