$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: YzR7qgId71TgHBTrdil7tWyFiYA/6Ipty3ovvlhMCDA= Subject key identifier: 46:C3:90:57:92:8C:81:18:AB:CE:F2:A6:2B:44:24:52:67:68:BE:9E Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02C3 Signing time: Wed 05 Nov 2025 01:29:53 +0000 Manifest this update: Wed 05 Nov 2025 01:29:53 +0000 Manifest next update: Wed 12 Nov 2025 01:29:53 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: GZqqeQdikp+azxHl7ig6kYBL+kbuuQpbZWVwSKC9MFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Nov 5 01:29:53 2025 GMT Not After : Nov 12 01:29:53 2025 GMT Subject: CN=690aa891-4ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:e3:34:11:0b:a6:77:f7:8e:ae:9d:44:8d: 4c:9a:dc:ac:5f:f8:43:d4:6b:59:a8:48:7f:b7:82: 83:b9:e2:94:62:39:05:7f:6d:aa:1d:cb:a1:ee:89: 3d:d3:5b:72:05:33:dd:10:bf:f3:c4:f6:49:72:5f: e9:89:62:e6:4e:a1:68:7c:df:df:12:9f:60:96:15: fc:e0:2d:3d:34:b9:e4:43:ce:cc:15:98:44:fb:2e: b9:a6:20:0b:96:3f:36:b4:18:40:33:d7:11:25:1e: dc:77:fb:44:ea:b6:13:53:ee:5e:7f:56:d2:2a:00: a1:47:8c:b8:02:cf:19:0c:ea:69:e2:d8:16:8a:00: 0a:13:92:0c:eb:43:29:ea:26:27:7c:25:68:9f:1e: ae:0f:1b:24:e6:bc:89:6e:61:f9:4b:31:8d:46:86: 53:e8:a2:86:44:26:cd:9b:4d:71:99:89:25:44:90: 17:91:96:b6:1a:a2:99:23:6f:df:62:6f:31:88:e8: c7:42:96:24:f3:2c:74:83:38:3a:24:81:dc:92:78: bc:a7:3c:95:ac:d6:fd:7b:d9:fc:0a:60:27:89:30: e9:f6:1c:65:a0:0b:76:b4:c6:5a:c0:35:31:ff:b5: 54:b7:f1:a6:97:df:94:6c:3c:d2:cb:27:26:49:4e: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C3:90:57:92:8C:81:18:AB:CE:F2:A6:2B:44:24:52:67:68:BE:9E X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:be:84:25:57:3a:21:9f:2e:32:6e:35:8f:6e:69:9b:cf:66: ac:c5:13:60:08:fd:b5:c5:6d:31:e7:92:2e:7d:d4:1c:99:40: 18:d7:d8:44:90:0f:c2:12:96:4c:bf:d2:8b:ea:3d:11:6e:56: 82:b8:66:ba:9e:b2:ec:18:8f:72:e2:86:ac:7f:a0:7d:3e:22: 2b:a2:60:7b:66:1f:86:fb:5a:ab:3b:e1:57:82:e7:35:a0:71: 57:1f:43:51:9b:91:bb:96:a2:3a:ca:3b:d6:59:56:5f:a7:a8: 9d:08:55:73:ec:fa:11:5e:a5:0a:53:57:11:26:df:71:3a:c7: 2b:1c:54:40:a7:54:9c:56:75:b4:82:01:2f:c4:47:19:d5:96: 93:3d:2a:1f:b8:cb:14:6b:d8:98:cf:d8:b4:4d:58:88:2f:63: 28:73:b3:4f:f6:c1:a6:04:0c:4c:df:53:46:01:b1:08:0b:49: bb:b4:0e:af:ed:97:17:f5:af:0a:49:75:f3:97:62:48:ac:f8: f5:4c:46:13:79:91:5a:3b:b5:bb:05:0d:47:7e:3a:7a:d4:b5: 8e:5e:ad:81:0e:b2:9b:7b:84:96:5e:e8:ff:fb:41:5d:cf:23: 12:f7:1c:2b:b6:46:dd:c1:7e:fd:f0:90:4f:a2:78:a1:7b:e6: f0:02:c9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUxMTA1MDEyOTUzWhcNMjUxMTEyMDEyOTUzWjAYMRYwFAYD VQQDEw02OTBhYTg5MS00YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+rjNBELpnf3jq6dRI1MmtysX/hD1GtZqEh/t4KDueKUYjkFf22qHcuh7ok9 01tyBTPdEL/zxPZJcl/piWLmTqFofN/fEp9glhX84C09NLnkQ87MFZhE+y65piAL lj82tBhAM9cRJR7cd/tE6rYTU+5ef1bSKgChR4y4As8ZDOpp4tgWigAKE5IM60Mp 6iYnfCVonx6uDxsk5ryJbmH5SzGNRoZT6KKGRCbNm01xmYklRJAXkZa2GqKZI2/f Ym8xiOjHQpYk8yx0gzg6JIHckni8pzyVrNb9e9n8CmAniTDp9hxloAt2tMZawDUx /7VUt/Gml9+UbDzSyycmSU4YcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbDkFeS jIEYq87ypitEJFJnaL6eMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKvoQlVzohny4ybjWPbmmbz2asxRNgCP21xW0x55IufdQcmUAY19hE kA/CEpZMv9KL6j0RblaCuGa6nrLsGI9y4oasf6B9PiIromB7Zh+G+1qrO+FXguc1 oHFXH0NRm5G7lqI6yjvWWVZfp6idCFVz7PoRXqUKU1cRJt9xOscrHFRAp1ScVnW0 ggEvxEcZ1ZaTPSofuMsUa9iYz9i0TViIL2Moc7NP9sGmBAxM31NGAbEIC0m7tA6v 7ZcX9a8KSXXzl2JIrPj1TEYTeZFaO7W7BQ1Hfjp61LWOXq2BDrKbe4SWXuj/+0Fd zyMS9xwrtkbdwX798JBPonihe+bwAsku -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:24 2025 by rpki-client