$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: 19jAzL4Q4zHM4NoQZ30OUnCeW5SdVBlvoQXILdshmYg= Subject key identifier: 31:F0:D8:BC:22:15:9C:E5:14:FE:F5:F6:3E:BB:55:FA:17:89:FB:52 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1AB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A93 Signing time: Sun 02 Nov 2025 16:21:27 +0000 Manifest this update: Sun 02 Nov 2025 16:21:27 +0000 Manifest next update: Sun 09 Nov 2025 16:21:27 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: 5t8aDrnlt8H8CwdkZ0OBHOpXClwOdF1CiL22hO3FFtE=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Nov 2 16:21:27 2025 GMT Not After : Nov 9 16:21:27 2025 GMT Subject: CN=69078507-4f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:8e:93:05:d9:72:58:ba:98:a4:48:7a:7f: 4b:63:70:2f:6d:8b:fd:a9:eb:fc:1a:94:81:28:d5: 0e:f4:1a:c7:8a:19:47:c5:89:c8:4f:ce:87:92:2a: 81:86:2d:58:ea:11:81:6a:ba:7b:58:d4:c0:b9:49: 5c:5e:f1:80:69:b1:26:e9:f4:5c:aa:fc:47:aa:06: 43:15:9e:87:ae:dd:ff:44:50:e6:30:55:75:68:0f: 5d:77:23:af:45:2e:b7:87:93:d5:a4:3a:ee:d2:9c: 48:74:42:08:aa:95:c0:23:3f:30:a8:f6:5d:54:50: 97:a2:e5:58:53:9e:58:3c:ed:6d:7e:92:bf:5a:55: 13:75:77:99:d0:f9:f1:90:44:bb:1f:d9:38:87:c9: 4b:f1:7b:c4:c4:8f:89:ae:c2:31:22:ee:6f:63:65: b0:5c:1f:70:e4:51:e9:39:38:9c:da:93:62:a6:ab: 33:90:c4:08:27:53:98:75:a2:89:fa:c7:00:81:8a: 1d:48:31:7f:3a:fd:ba:04:bc:04:df:57:96:3c:db: 90:df:0c:94:d8:12:5a:5d:87:61:be:f5:1e:44:a1: 15:3f:0e:0d:7e:05:84:60:9b:1b:29:28:68:29:66: bf:98:2b:53:5a:3c:7f:88:06:35:dc:1b:d1:6b:52: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F0:D8:BC:22:15:9C:E5:14:FE:F5:F6:3E:BB:55:FA:17:89:FB:52 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a3:af:cd:0d:5e:61:82:b3:31:7b:7f:cc:d7:51:c7:d2:d4: 64:83:c2:ae:44:2e:39:7f:26:4b:3e:2c:1e:de:4c:55:b2:9c: 56:24:36:7d:13:3d:69:28:27:b5:4e:b2:1d:83:fa:13:54:f4: 44:48:26:48:cb:d7:ac:b1:e1:96:c8:a9:35:3c:74:a5:5e:9f: 82:7e:6f:6d:07:ad:e5:17:8c:ff:80:d6:46:eb:15:1e:35:fb: 5f:7a:81:9b:90:f2:a2:96:15:56:61:96:c7:ed:a2:f9:44:86: 4f:e3:4d:f2:5f:f6:a7:8b:70:24:75:ed:a3:48:05:d9:78:09: e9:c9:b5:44:df:1f:63:9d:c6:17:4e:1f:b8:31:11:ed:2c:e4: 57:f5:4b:e9:91:8e:e7:99:50:b8:b7:68:90:1d:0c:b6:ba:69: b6:0f:1f:95:d2:58:b7:1f:1e:62:03:b0:72:aa:38:f6:ba:99: e6:a8:be:61:b0:04:ba:a8:1a:e0:90:02:c0:1a:5f:aa:72:8d: f1:8f:5d:05:96:4c:27:86:bd:f6:ba:6f:17:19:29:2a:d6:38: 41:e0:10:92:e7:b3:87:a4:22:b5:22:62:71:df:4b:e6:7c:e7: 19:41:0a:7d:a2:27:dd:0d:0b:1e:0c:f9:2f:22:40:d3:69:e9: cf:5b:33:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUxMTAyMTYyMTI3WhcNMjUxMTA5MTYyMTI3WjAYMRYwFAYD VQQDEw02OTA3ODUwNy00ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo+OkwXZcli6mKRIen9LY3AvbYv9qev8GpSBKNUO9BrHihlHxYnIT86HkiqB hi1Y6hGBarp7WNTAuUlcXvGAabEm6fRcqvxHqgZDFZ6Hrt3/RFDmMFV1aA9ddyOv RS63h5PVpDru0pxIdEIIqpXAIz8wqPZdVFCXouVYU55YPO1tfpK/WlUTdXeZ0Pnx kES7H9k4h8lL8XvExI+JrsIxIu5vY2WwXB9w5FHpOTic2pNipqszkMQIJ1OYdaKJ +scAgYodSDF/Ov26BLwE31eWPNuQ3wyU2BJaXYdhvvUeRKEVPw4NfgWEYJsbKSho KWa/mCtTWjx/iAY13BvRa1L9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHw2Lwi FZzlFP719j67VfoXiftSMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7o6/NDV5hgrMxe3/M11HH0tRkg8KuRC45fyZLPiwe3kxVspxWJDZ9 Ez1pKCe1TrIdg/oTVPRESCZIy9esseGWyKk1PHSlXp+Cfm9tB63lF4z/gNZG6xUe NftfeoGbkPKilhVWYZbH7aL5RIZP403yX/ani3Akde2jSAXZeAnpybVE3x9jncYX Th+4MRHtLORX9UvpkY7nmVC4t2iQHQy2umm2Dx+V0li3Hx5iA7Byqjj2upnmqL5h sAS6qBrgkALAGl+qco3xj10Flkwnhr32um8XGSkq1jhB4BCS57OHpCK1ImJx30vm fOcZQQp9oifdDQseDPkvIkDTaenPWzON -----END CERTIFICATE-----Generated at Tue Nov 4 08:14:00 2025 by rpki-client