$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: pnE13SnzMNzHZu5/fHKZ7s+HelhFdULdseVyriAJd4g= Subject key identifier: 42:4F:E5:EA:BA:2A:47:5C:C0:5C:8F:F7:68:52:B6:23:3E:C2:CF:DB Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 01D6 Signing time: Mon 03 Nov 2025 02:47:13 +0000 Manifest this update: Mon 03 Nov 2025 02:47:12 +0000 Manifest next update: Mon 10 Nov 2025 02:47:12 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: AvgBfF3IE79tzba62QzIA7NODeJTs4dzZlWjkO0Q660=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: D711Z8aFp5S41gq5GTKSZhCq3zfbGCfPqwt5JDMk3xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: Nov 3 02:47:12 2025 GMT Not After : Nov 10 02:47:12 2025 GMT Subject: CN=690817b0-730f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:8d:4c:3f:ea:75:41:25:dd:b1:a8:88:79: df:fb:ac:c3:00:23:7a:ba:5e:96:c0:6f:0b:90:6f: 53:96:aa:8e:0f:63:c5:f8:03:10:0c:0b:39:04:d3: 84:8a:8b:0c:55:df:80:d8:47:41:1f:84:a3:87:ce: 7f:15:09:e0:b4:b8:33:fd:0d:96:e2:94:12:af:1a: 22:4f:cf:aa:61:cc:38:f8:d2:ef:6e:14:de:c7:09: 63:20:4f:fe:e9:60:45:8b:b7:bc:a3:7e:bc:ad:47: cf:0d:41:36:55:8b:20:48:be:fc:71:c9:62:b7:e8: 2d:16:71:65:44:c2:a9:8f:bb:ff:9e:79:b2:09:8b: 13:74:e3:d3:42:48:a3:ad:b2:85:51:e1:22:ab:6f: e8:8b:d1:7c:67:73:eb:78:39:e3:85:6f:e9:91:ab: a7:da:c9:1a:60:28:19:1f:38:2d:7b:a7:ac:14:b0: 83:ad:2f:de:a7:1f:8e:d7:9b:5e:52:1e:22:1d:91: f0:f6:d3:26:b2:0c:d2:3c:da:67:8f:a8:7b:62:e1: 78:5f:6e:6f:cb:0d:c3:9f:c9:79:15:30:74:82:21: 25:9f:ec:b3:05:a3:a9:61:24:18:d8:4f:4c:45:28: 47:93:90:d0:eb:e1:78:8a:ae:f9:c5:91:52:c6:40: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:E5:EA:BA:2A:47:5C:C0:5C:8F:F7:68:52:B6:23:3E:C2:CF:DB X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:60:3e:a9:4b:1a:1e:db:15:1d:a9:15:f8:04:fa:5b:2a:0b: 27:d3:43:cf:aa:34:da:82:60:64:20:1c:aa:2e:1d:83:d5:c9: e0:60:e4:d9:ae:08:a9:df:23:20:6c:1c:ef:ff:19:d8:78:b7: 28:bb:97:ae:e0:fa:60:d3:c4:59:ec:2b:e1:5c:84:d7:0b:9b: be:a2:ac:57:16:90:e3:5e:79:63:d7:4b:93:0c:23:92:56:4d: 9d:42:55:b4:e1:ae:91:27:00:51:34:77:2d:63:f8:f4:56:23: 77:61:08:ac:8d:47:e9:7b:68:6a:3a:3c:07:cc:cb:da:1d:7e: b7:66:17:00:86:3c:7a:57:7d:74:63:93:19:3d:de:df:49:ef: b6:ac:8c:d0:db:57:9a:d8:74:c9:6e:93:bb:b6:1e:17:a4:28: 32:e2:8a:08:a4:a2:56:1b:1f:41:8c:48:56:35:c5:df:20:69: 9b:4a:59:ce:6b:da:95:86:b1:46:02:b1:d9:9d:5c:f1:3b:80: 9b:c6:a1:ed:e1:c6:12:c8:54:da:ae:43:6a:52:9a:eb:35:27: 7e:f2:28:ce:bc:38:c5:26:4b:c7:05:da:e0:37:e6:0a:2b:65: 7e:36:5b:5a:04:ce:b1:96:51:f6:87:23:3c:fe:70:32:d1:ed: 47:ed:23:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjUxMTAzMDI0NzEyWhcNMjUxMTEwMDI0NzEyWjAYMRYwFAYD VQQDEw02OTA4MTdiMC03MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqciNTD/qdUEl3bGoiHnf+6zDACN6ul6WwG8LkG9TlqqOD2PF+AMQDAs5BNOE iosMVd+A2EdBH4Sjh85/FQngtLgz/Q2W4pQSrxoiT8+qYcw4+NLvbhTexwljIE/+ 6WBFi7e8o368rUfPDUE2VYsgSL78cclit+gtFnFlRMKpj7v/nnmyCYsTdOPTQkij rbKFUeEiq2/oi9F8Z3PreDnjhW/pkaun2skaYCgZHzgte6esFLCDrS/epx+O15te Uh4iHZHw9tMmsgzSPNpnj6h7YuF4X25vyw3Dn8l5FTB0giEln+yzBaOpYSQY2E9M RShHk5DQ6+F4iq75xZFSxkCELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJP5eq6 KkdcwFyP92hStiM+ws/bMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEYD6pSxoe2xUdqRX4BPpbKgsn00PPqjTagmBkIByqLh2D1cngYOTZ rgip3yMgbBzv/xnYeLcou5eu4Ppg08RZ7CvhXITXC5u+oqxXFpDjXnlj10uTDCOS Vk2dQlW04a6RJwBRNHctY/j0ViN3YQisjUfpe2hqOjwHzMvaHX63ZhcAhjx6V310 Y5MZPd7fSe+2rIzQ21ea2HTJbpO7th4XpCgy4ooIpKJWGx9BjEhWNcXfIGmbSlnO a9qVhrFGArHZnVzxO4CbxqHt4cYSyFTarkNqUprrNSd+8ijOvDjFJkvHBdrgN+YK K2V+NltaBM6xllH2hyM8/nAy0e1H7SO+ -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:51 2025 by rpki-client