$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft File: kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json) Hash identifier: g9HePizJnmZAIBOmc9gJNWRMCCzJJbJ9xOb9HHh8bDY= Subject key identifier: FB:65:87:C9:CB:E7:80:D2:AC:3D:D7:9E:F1:D4:E2:3C:C3:CF:02:BC Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 Certificate issuer: /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft Manifest number: D8 Signing time: Mon 03 Nov 2025 05:35:39 +0000 Manifest this update: Mon 03 Nov 2025 05:35:39 +0000 Manifest next update: Mon 10 Nov 2025 05:35:39 +0000 Files and hashes: 1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: woolKpdpW3vgIAjS3NbmIbEYNXIfWq/MbAqnk0sIVlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066 Validity Not Before: Nov 3 05:35:39 2025 GMT Not After : Nov 10 05:35:39 2025 GMT Subject: CN=69083f2b-b5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:f2:ef:da:e7:6a:6e:fd:f6:f1:88:f5:7c: e5:16:d3:4e:d7:59:77:18:5f:8b:d5:5a:55:93:fa: 01:f6:86:1e:28:15:db:52:24:38:06:73:fc:f7:6d: 0b:c7:b6:1a:bb:ab:70:c7:94:76:ee:16:3f:39:84: 18:4a:95:f1:5b:45:6e:2e:4b:82:a7:5d:2b:b2:d9: 71:e6:d5:39:0c:c3:db:a9:21:31:0c:1f:fd:34:fa: d6:bb:75:37:96:9d:74:78:79:f8:75:e2:74:61:fd: f1:01:ab:4f:b1:97:3e:4b:e7:2f:68:92:b4:d6:3d: 4b:d6:f7:fe:8c:bb:a2:ee:38:e2:c1:f0:30:3d:41: 13:da:a2:c6:7f:e0:de:14:96:f7:dc:b3:ea:ca:c7: 8b:b4:ab:92:1a:e9:f6:e8:b0:87:c2:ab:b5:7c:cd: 7a:74:aa:86:70:8a:59:65:8e:ed:7d:68:7a:b9:5e: ae:42:bd:e0:8a:a6:21:ff:bb:6f:96:b3:d2:d4:b3: ee:7e:37:31:0e:b3:35:5c:d4:67:3e:6e:a3:d1:56: 3e:cd:78:0e:bd:8f:84:65:6c:45:fd:af:a7:37:f8: d6:b6:b5:ba:cb:5b:ff:89:79:ac:ad:df:5c:0f:18: 96:58:19:db:1a:28:2e:9b:1d:62:a3:2c:46:3f:14: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:87:C9:CB:E7:80:D2:AC:3D:D7:9E:F1:D4:E2:3C:C3:CF:02:BC X509v3 Authority Key Identifier: keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d8:86:a0:61:e5:85:c6:6f:af:15:83:80:3d:6c:69:e3:4d: ba:69:f8:b4:8c:57:2a:e6:e6:2c:94:ff:3e:a2:db:5a:89:b5: 26:26:44:dd:7b:2b:fb:1e:b6:3f:e9:ef:74:28:2f:c3:c8:81: 22:e6:c2:c3:30:a4:69:82:eb:a0:61:27:b1:e9:04:bc:6a:31: 17:22:5d:f5:f1:44:41:ff:f4:a7:5f:5a:ca:d5:a9:77:21:9d: 20:2a:48:ad:5a:e6:42:81:7a:e4:f4:ce:5f:33:c6:c2:2f:77: 54:5e:38:d7:b2:82:e1:36:60:c0:65:a2:ef:02:1c:ba:84:bc: 5c:70:23:f4:59:fe:11:c3:58:b8:c9:04:43:f8:9c:3d:69:e1: 40:40:cd:66:a1:81:dc:fd:5d:cd:30:2a:5f:b3:ac:fe:96:eb: 96:65:50:f0:31:c6:12:60:08:f5:1a:7b:6e:e9:a8:fb:d2:2d: bd:ee:9e:ac:2d:48:bc:4a:5e:db:ba:6a:46:f1:6a:91:3d:57: fb:9b:c8:19:96:36:3a:25:b1:04:7e:be:8d:8e:4e:1f:42:79: c5:22:73:e4:e3:fd:dc:44:10:fe:dc:d4:6c:79:1e:34:7e:b0: 9c:79:cd:a1:01:c3:9a:15:89:28:04:9b:fc:1b:f5:39:2a:af: 4c:70:5c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDkxNDZCNzgyRUI4MjQ2N0IxOUQ4QjQxRDFDQzQwRUJG MDQ4OTkwNjYwHhcNMjUxMTAzMDUzNTM5WhcNMjUxMTEwMDUzNTM5WjAYMRYwFAYD VQQDEw02OTA4M2YyYi1iNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3zy79rnam799vGI9XzlFtNO11l3GF+L1VpVk/oB9oYeKBXbUiQ4BnP8920L x7Yau6twx5R27hY/OYQYSpXxW0VuLkuCp10rstlx5tU5DMPbqSExDB/9NPrWu3U3 lp10eHn4deJ0Yf3xAatPsZc+S+cvaJK01j1L1vf+jLui7jjiwfAwPUET2qLGf+De FJb33LPqyseLtKuSGun26LCHwqu1fM16dKqGcIpZZY7tfWh6uV6uQr3giqYh/7tv lrPS1LPufjcxDrM1XNRnPm6j0VY+zXgOvY+EZWxF/a+nN/jWtrW6y1v/iXmsrd9c DxiWWBnbGigumx1ioyxGPxRfhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtlh8nL 54DSrD3XnvHU4jzDzwK8MB8GA1UdIwQYMBaAFJFGt4LrgkZ7Gdi0HRzEDr8EiZBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9EMEM1RjRFMjZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Juc1oyTFFkSE1RT3Z3U0pr R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVYTNndXVDUm5zWjJMUWRITVFPdndTSmtHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9EMEM1RjRFMjZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9rVWEzZ3V1Q1Ju c1oyTFFkSE1RT3Z3U0prR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW2IagYeWFxm+vFYOAPWxp4026afi0jFcq5uYslP8+ottaibUmJkTd eyv7HrY/6e90KC/DyIEi5sLDMKRpguugYSex6QS8ajEXIl318URB//SnX1rK1al3 IZ0gKkitWuZCgXrk9M5fM8bCL3dUXjjXsoLhNmDAZaLvAhy6hLxccCP0Wf4Rw1i4 yQRD+Jw9aeFAQM1moYHc/V3NMCpfs6z+luuWZVDwMcYSYAj1Gntu6aj70i297p6s LUi8Sl7bumpG8WqRPVf7m8gZljY6JbEEfr6Njk4fQnnFInPk4/3cRBD+3NRseR40 frCcec2hAcOaFYkoBJv8G/U5Kq9McFxw -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:31 2025 by rpki-client