$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: WVOiv8kt+yLVSDGeXZHbx5faHARGVfnpTDReoNGznqg= Subject key identifier: CB:BF:EE:4C:35:F0:5C:8E:8A:C8:50:ED:07:16:D3:04:36:2F:DC:9E Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 01F4 Signing time: Mon 03 Nov 2025 02:29:26 +0000 Manifest this update: Mon 03 Nov 2025 02:29:26 +0000 Manifest next update: Mon 10 Nov 2025 02:29:26 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: G57waovAc2TDs3BubI4hBkeLqpzXhDTWGcu0hJCY52U=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: /EEXvT665opKL7OI/mui0sN2NqpuGn4U8tvIvrJ8aw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Nov 3 02:29:26 2025 GMT Not After : Nov 10 02:29:26 2025 GMT Subject: CN=69081386-53fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:31:3e:69:35:62:54:ba:40:b9:3a:9f:b2: 8d:7f:71:d7:a0:f7:49:38:a5:d2:47:ef:3b:3a:9f: d0:3f:c1:3c:c6:10:3f:cb:65:79:5b:cc:86:00:3b: 83:d7:ee:7b:01:03:dc:9d:50:03:7a:52:48:7c:e6: 17:41:65:35:f4:16:91:8a:1c:37:ec:03:70:b7:45: 91:65:c7:3e:2f:07:8e:34:7b:58:79:cf:cd:dc:a5: 5a:b6:41:a9:4b:af:1d:ec:16:4c:53:72:0c:2e:b9: df:a4:04:21:8a:33:dc:2d:b7:1e:ea:a0:75:2e:ac: 5d:66:ee:4c:12:22:bc:1f:2c:6b:8a:bd:61:2a:dc: 12:f4:e0:71:09:32:9f:a9:af:ec:f0:4e:a7:3d:14: 3c:9d:8f:cf:09:a2:2c:a7:ac:2e:de:d8:2c:95:8d: 13:7b:b0:37:1b:29:c7:7e:98:94:73:b9:c1:71:6b: 6a:9f:11:63:82:75:0f:59:7a:5a:aa:1f:6b:a7:8e: dd:3a:6e:cd:5d:96:88:28:c1:49:fd:c2:51:fb:85: 41:4e:05:4a:95:bd:36:92:15:c3:04:82:b9:bc:95: fa:62:ca:60:1a:b9:bd:88:14:01:ca:e4:24:2a:01: 09:37:8b:08:eb:65:1f:c3:8f:40:33:7a:ff:d9:7c: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BF:EE:4C:35:F0:5C:8E:8A:C8:50:ED:07:16:D3:04:36:2F:DC:9E X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e7:b8:dd:38:5e:2d:dd:a8:1b:01:1a:27:27:f6:26:3c:82: 45:6f:4d:4e:db:4c:d5:36:7a:f1:e0:a9:d8:c8:36:2c:d3:0b: 27:3e:6a:13:a2:ea:61:aa:26:49:8e:08:03:8d:6f:db:7e:06: 0c:8d:10:f4:41:14:bc:ea:53:fc:f1:5b:2d:9b:17:fd:7e:ad: b1:82:ed:5d:a2:e3:2c:df:59:f2:2e:e0:0f:64:ba:7c:d3:34: bb:22:1e:62:5f:f6:27:0d:95:73:2c:80:c7:8f:84:eb:35:e4: 1f:9c:e0:e3:7c:c4:d2:c7:c7:fc:4e:54:63:ce:5c:9a:34:1f: 18:6b:5c:1d:7e:13:f7:51:56:88:a6:40:56:1c:21:91:bd:81: 18:ab:02:ac:f0:2a:c7:c3:8b:1b:6f:7c:db:c7:63:cc:3e:7e: 2d:63:3b:4a:78:bb:68:c1:89:08:fe:4a:14:b0:b6:7b:52:18: 67:41:f0:aa:14:47:23:bc:c1:cc:25:bc:22:cf:c5:44:46:08: 89:0a:3d:3f:d6:44:3c:04:d1:e3:1a:95:d8:95:60:e0:e1:27: 58:c5:7a:e3:21:ae:80:15:30:c1:d4:7e:d2:b7:74:bd:43:a9: 16:98:d3:2c:8a:57:22:71:6a:4a:b9:6b:ce:18:8f:84:b7:ba: 00:e2:53:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjUxMTAzMDIyOTI2WhcNMjUxMTEwMDIyOTI2WjAYMRYwFAYD VQQDEw02OTA4MTM4Ni01M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdAxPmk1YlS6QLk6n7KNf3HXoPdJOKXSR+87Op/QP8E8xhA/y2V5W8yGADuD 1+57AQPcnVADelJIfOYXQWU19BaRihw37ANwt0WRZcc+LweONHtYec/N3KVatkGp S68d7BZMU3IMLrnfpAQhijPcLbce6qB1LqxdZu5MEiK8Hyxrir1hKtwS9OBxCTKf qa/s8E6nPRQ8nY/PCaIsp6wu3tgslY0Te7A3GynHfpiUc7nBcWtqnxFjgnUPWXpa qh9rp47dOm7NXZaIKMFJ/cJR+4VBTgVKlb02khXDBIK5vJX6YspgGrm9iBQByuQk KgEJN4sI62Ufw49AM3r/2Xw56QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMu/7kw1 8FyOishQ7QcW0wQ2L9yeMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB757jdOF4t3agbARonJ/YmPIJFb01O20zVNnrx4KnYyDYs0wsnPmoT ouphqiZJjggDjW/bfgYMjRD0QRS86lP88Vstmxf9fq2xgu1douMs31nyLuAPZLp8 0zS7Ih5iX/YnDZVzLIDHj4TrNeQfnODjfMTSx8f8TlRjzlyaNB8Ya1wdfhP3UVaI pkBWHCGRvYEYqwKs8CrHw4sbb3zbx2PMPn4tYztKeLtowYkI/koUsLZ7UhhnQfCq FEcjvMHMJbwiz8VERgiJCj0/1kQ8BNHjGpXYlWDg4SdYxXrjIa6AFTDB1H7St3S9 Q6kWmNMsilcicWpKuWvOGI+Et7oA4lMW -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:44 2025 by rpki-client