$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft File: kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json) Hash identifier: O/de2rZo0MZFLNPwadF8Gv2phrOQQWSMctZN9huuepc= Subject key identifier: C5:D5:6D:97:B6:D3:E2:D9:9E:A1:8D:2A:2E:82:3B:07:B0:A4:AD:0A Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7 Certificate issuer: /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7 Certificate serial: 0293 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft Manifest number: 028F Signing time: Wed 05 Nov 2025 01:40:43 +0000 Manifest this update: Wed 05 Nov 2025 01:40:43 +0000 Manifest next update: Wed 12 Nov 2025 01:40:43 +0000 Files and hashes: 1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: 9xIk+CkFTo9VSaXP4p6XMZeVg0Lta27NqXY2WHhiN3A=) 2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: NNo4SAwO23W3h7iwFhvtQVGgAhn5LQhxSRbEa+xKr7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7 Validity Not Before: Nov 5 01:40:43 2025 GMT Not After : Nov 12 01:40:43 2025 GMT Subject: CN=690aab1b-cc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:e7:8b:d7:fb:54:02:5b:57:d0:66:68:92: b8:19:42:13:bb:76:65:40:62:87:3e:e8:b5:a2:10: ac:e0:80:fe:90:ab:f2:e5:6e:6a:fa:a8:e3:92:f4: 61:72:3b:c4:c6:aa:b5:92:1f:58:05:81:0b:e5:7c: bb:21:74:d0:90:c0:01:06:1f:f0:a8:30:46:5d:ea: 68:20:21:09:27:8e:c5:92:51:2b:4d:5d:81:61:0f: 24:62:e5:4a:9f:c0:72:0f:64:c2:3e:18:d0:36:e3: b1:3f:5b:d3:ac:e6:b0:85:80:f2:e3:ec:d6:64:1f: ef:df:f1:3a:71:49:74:b2:1c:fc:08:95:46:cd:74: 09:6d:9d:2e:c0:92:c1:c8:78:63:7d:f1:7d:33:31: 07:7e:65:2f:5e:73:39:c6:54:7f:74:d1:00:ca:1e: d9:ff:87:26:64:d2:8c:72:df:82:b7:cc:85:4a:c2: 3a:d1:8a:a0:72:bb:f0:8c:05:66:b7:48:44:5a:a2: 3e:60:86:3c:b5:3a:94:13:32:29:e8:02:42:d5:35: 91:8f:de:90:62:59:4d:49:5a:cf:f7:9d:08:82:eb: 80:6e:d9:6c:51:a0:bb:42:e6:46:34:64:65:5d:5a: 0a:b2:34:f2:36:2c:43:cf:68:ec:e8:c0:8a:f5:0f: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:6D:97:B6:D3:E2:D9:9E:A1:8D:2A:2E:82:3B:07:B0:A4:AD:0A X509v3 Authority Key Identifier: keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9b:a7:50:c5:91:ee:df:5f:01:e0:f3:30:9c:79:44:94:4f: 91:74:23:04:68:5b:2e:9d:8f:3f:b8:c9:e4:37:1d:90:25:15: fe:8f:2f:c8:e5:8f:80:fe:c1:2a:d5:31:7e:15:e1:72:42:6c: b5:9f:43:06:fc:9c:81:3f:f4:29:f6:ae:13:4a:14:16:28:73: f5:44:11:5a:52:b2:27:72:b7:62:8a:36:c5:da:35:08:d4:2d: fd:fa:bb:50:63:b7:12:5d:d3:66:2e:22:e6:26:78:49:b4:b2: 59:4b:da:58:12:0a:19:6c:8a:b1:aa:50:13:84:93:81:42:88: 7b:34:0b:87:5f:8d:06:ef:29:31:e3:33:90:b6:8d:1a:e3:65: 3a:f8:67:53:b0:d7:54:51:20:9f:0c:57:17:fd:a6:6d:c2:63: ef:a6:69:ba:57:32:03:26:d5:ad:a2:64:94:71:65:83:c0:20: 20:53:69:a5:53:97:8f:10:fa:6f:16:10:0f:e9:13:49:f0:8f: 75:87:a9:44:51:e5:18:b0:69:71:db:96:81:21:b9:ea:af:87: ca:17:36:fb:dc:75:cc:66:65:b5:1c:3d:1d:38:81:5c:0f:3d: b9:fc:f3:48:61:ab:bc:8f:48:0f:61:ac:6d:73:20:59:4a:de: 36:ec:35:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0ODgxMTAvBgNVBAUTKDkwM0EzODQzNjc5QTBCMTA1RENBNDg1QzNENjQ4RjNE MTEyNzJGQjcwHhcNMjUxMTA1MDE0MDQzWhcNMjUxMTEyMDE0MDQzWjAYMRYwFAYD VQQDEw02OTBhYWIxYi1jYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAll/ni9f7VAJbV9BmaJK4GUITu3ZlQGKHPui1ohCs4ID+kKvy5W5q+qjjkvRh cjvExqq1kh9YBYEL5Xy7IXTQkMABBh/wqDBGXepoICEJJ47FklErTV2BYQ8kYuVK n8ByD2TCPhjQNuOxP1vTrOawhYDy4+zWZB/v3/E6cUl0shz8CJVGzXQJbZ0uwJLB yHhjffF9MzEHfmUvXnM5xlR/dNEAyh7Z/4cmZNKMct+Ct8yFSsI60YqgcrvwjAVm t0hEWqI+YIY8tTqUEzIp6AJC1TWRj96QYllNSVrP950IguuAbtlsUaC7QuZGNGRl XVoKsjTyNixDz2js6MCK9Q86WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXVbZe2 0+LZnqGNKi6COwewpK0KMB8GA1UdIwQYMBaAFJA6OENnmgsQXcpIXD1kjz0RJy+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTQ4OC9GODg2OThDQTI0 MDUxMUVEQjk4N0I4MjNDNEY5QUUwMi9rRG80UTJlYUN4QmR5a2hjUFdTUFBSRW5M N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tEbzRRMmVhQ3hCZHlraGNQV1NQUFJFbkw3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTQ4OC9GODg2OThDQTI0MDUxMUVEQjk4N0I4MjNDNEY5QUUwMi9rRG80UTJlYUN4 QmR5a2hjUFdTUFBSRW5MN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCm6dQxZHu318B4PMwnHlElE+RdCMEaFsunY8/uMnkNx2QJRX+jy/I 5Y+A/sEq1TF+FeFyQmy1n0MG/JyBP/Qp9q4TShQWKHP1RBFaUrIncrdiijbF2jUI 1C39+rtQY7cSXdNmLiLmJnhJtLJZS9pYEgoZbIqxqlAThJOBQoh7NAuHX40G7ykx 4zOQto0a42U6+GdTsNdUUSCfDFcX/aZtwmPvpmm6VzIDJtWtomSUcWWDwCAgU2ml U5ePEPpvFhAP6RNJ8I91h6lEUeUYsGlx25aBIbnqr4fKFzb73HXMZmW1HD0dOIFc Dz25/PNIYau8j0gPYaxtcyBZSt427DX1 -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:11 2025 by rpki-client