$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: f1NXhCmSz/wpvMoUlRphFfKtruojtTEe42xOUJDq1IA= Subject key identifier: 49:31:C4:A6:25:16:DD:22:FA:03:94:9E:48:BB:2A:AE:C9:E0:D5:A4 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 04A7 Signing time: Wed 05 Nov 2025 00:02:10 +0000 Manifest this update: Wed 05 Nov 2025 00:02:10 +0000 Manifest next update: Wed 12 Nov 2025 00:02:10 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: Vjt6iUfDMNIoVJdku2SVixvFn6Unja6S6lNku72L6WY=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Nov 5 00:02:10 2025 GMT Not After : Nov 12 00:02:10 2025 GMT Subject: CN=690a9402-3c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:56:94:ae:56:0b:96:93:2b:0c:5e:af:1c: 1c:c1:ed:a0:46:ed:87:70:c9:e3:dc:f6:3a:7a:ba: 78:61:3d:ba:72:cb:49:69:f3:57:7c:0b:6c:2b:ac: 65:dc:6e:0d:1a:ee:3b:c6:36:c1:48:9a:cf:73:b5: 1e:1d:82:8e:b8:86:8e:48:99:17:81:6d:22:e5:d5: 13:17:6a:11:40:89:26:cf:4b:c8:4c:92:b2:06:6d: 0f:1f:06:df:a6:9e:62:d2:e5:e1:c7:6e:9c:b9:8e: 19:37:6a:6f:d7:0f:d3:b3:f3:da:a3:02:75:2d:22: 9e:95:51:9d:40:8b:3c:69:3d:15:36:eb:26:47:ce: 67:85:1c:de:71:e7:bf:d5:f9:8a:54:9a:09:e3:66: cf:33:df:d0:8d:27:3c:c5:1b:d3:db:13:1a:e5:a3: cd:bf:4b:a5:a7:4a:57:93:6c:20:9b:0e:92:e7:50: 56:21:92:1c:8e:03:4b:82:42:4b:d5:d4:12:b1:8e: 28:21:e4:0e:46:9e:5a:a7:7f:09:69:4a:fa:fe:98: e0:86:47:d8:13:cc:cf:90:b6:00:1d:85:9f:bc:59: dd:8f:32:50:c4:8a:10:99:44:d4:32:04:18:3b:8c: 43:0b:5c:18:dc:c8:4f:51:a0:30:83:f5:9d:09:48: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:31:C4:A6:25:16:DD:22:FA:03:94:9E:48:BB:2A:AE:C9:E0:D5:A4 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ac:6c:20:0c:54:4a:7b:4e:61:96:83:f8:dd:f4:17:6a:64: 54:ad:54:1e:22:88:f7:42:7d:5f:99:ed:c0:b6:c9:f6:b7:8d: f1:16:e9:c3:1c:90:42:17:d3:ec:db:43:17:c5:94:85:20:d0: 9b:e5:b5:e6:2f:73:b9:74:38:3b:87:30:27:2f:58:e1:1d:d6: f9:89:58:1f:e5:84:a1:98:4f:21:88:6f:0e:08:b1:35:02:90: 48:2b:00:85:bd:94:7d:af:a2:04:08:d5:52:f9:ba:7a:37:38: c4:9e:87:0f:53:4f:57:85:fb:ac:46:d6:8e:d8:6e:45:12:ac: 7e:58:f4:d0:c4:5e:e8:10:b1:9a:9d:ce:01:d6:cb:d5:ef:06: 68:6e:e1:c3:11:94:36:67:31:b8:b1:4a:ab:b3:34:73:50:5c: 2e:13:e7:1a:46:c9:84:4a:cf:11:ab:49:27:08:3a:dc:7b:7e: 28:63:06:b2:e0:b6:e1:ae:ec:f4:e9:84:87:e7:69:0a:32:da: 95:84:9e:72:2b:76:65:60:c0:47:8b:3f:2f:db:c6:bc:da:5b: 70:8e:66:16:46:8d:83:48:5e:d6:e7:04:31:a3:32:66:49:52: 4f:a0:82:f2:ff:5d:94:88:19:74:77:dc:1f:04:57:5f:25:86: 47:d4:09:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUxMTA1MDAwMjEwWhcNMjUxMTEyMDAwMjEwWjAYMRYwFAYD VQQDEw02OTBhOTQwMi0zYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmRWlK5WC5aTKwxerxwcwe2gRu2HcMnj3PY6erp4YT26cstJafNXfAtsK6xl 3G4NGu47xjbBSJrPc7UeHYKOuIaOSJkXgW0i5dUTF2oRQIkmz0vITJKyBm0PHwbf pp5i0uXhx26cuY4ZN2pv1w/Ts/PaowJ1LSKelVGdQIs8aT0VNusmR85nhRzecee/ 1fmKVJoJ42bPM9/QjSc8xRvT2xMa5aPNv0ulp0pXk2wgmw6S51BWIZIcjgNLgkJL 1dQSsY4oIeQORp5ap38JaUr6/pjghkfYE8zPkLYAHYWfvFndjzJQxIoQmUTUMgQY O4xDC1wY3MhPUaAwg/WdCUgBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkxxKYl Ft0i+gOUnki7Kq7J4NWkMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjrGwgDFRKe05hloP43fQXamRUrVQeIoj3Qn1fme3Atsn2t43xFunD HJBCF9Ps20MXxZSFINCb5bXmL3O5dDg7hzAnL1jhHdb5iVgf5YShmE8hiG8OCLE1 ApBIKwCFvZR9r6IECNVS+bp6NzjEnocPU09XhfusRtaO2G5FEqx+WPTQxF7oELGa nc4B1svV7wZobuHDEZQ2ZzG4sUqrszRzUFwuE+caRsmESs8Rq0knCDrce34oYway 4Lbhruz06YSH52kKMtqVhJ5yK3ZlYMBHiz8v28a82ltwjmYWRo2DSF7W5wQxozJm SVJPoILy/12UiBl0d9wfBFdfJYZH1Alr -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:47 2025 by rpki-client