$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: gFGDfMopiSiDGlXj2qtAzbBrX/ivRXu86xoLRpb0Gf4= Subject key identifier: BF:27:E3:1C:73:D6:9E:0B:06:B4:3B:22:96:48:CF:8F:F1:DE:53:B3 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 066E Signing time: Sun 02 Nov 2025 22:34:49 +0000 Manifest this update: Sun 02 Nov 2025 22:34:49 +0000 Manifest next update: Sun 09 Nov 2025 22:34:49 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: BXTbGGkxBPsKtQN+XZ915rJ0dRbas4x3mect+HQM+1A=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Nov 2 22:34:49 2025 GMT Not After : Nov 9 22:34:49 2025 GMT Subject: CN=6907dc89-c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:77:2d:ab:35:45:0c:8b:db:c5:01:f2:3b: 9d:42:1c:51:f4:46:3f:4a:79:48:f8:34:27:e6:54: d8:8b:5e:7a:42:48:e7:65:72:38:c2:c0:57:13:2b: 56:07:b5:1f:20:a0:b0:be:8e:76:00:58:01:e7:3b: f4:ea:1e:37:a0:57:f3:da:33:1c:6f:52:40:4d:fa: 74:04:b5:ef:9f:9e:e3:ea:a0:88:96:64:56:16:0f: 8f:19:2e:54:95:2b:18:f2:54:13:8c:97:e8:f4:40: 37:f8:91:46:52:c2:e4:30:c7:d3:21:fc:27:e8:0c: 3a:fd:ab:cb:a6:01:4f:63:b2:c1:5a:7e:2a:cb:84: 70:0d:c7:2e:7b:a0:12:b2:44:d3:07:e5:e9:d9:4a: df:a5:0c:7f:53:c7:ce:6f:59:43:a0:08:7d:4f:da: 0c:e3:f8:9e:7c:d0:3f:bc:db:8b:8c:94:1e:a5:1b: 33:46:ee:e9:92:79:32:63:1d:02:7b:6a:b7:4a:0d: cd:e4:1d:a9:d4:4e:53:0a:83:02:b4:07:7b:1a:82: 96:25:57:6b:91:76:7b:e4:fe:86:00:73:a3:60:1c: 49:86:a4:32:2c:69:ef:ce:3d:ea:22:11:2c:3b:be: a6:3b:1a:95:a6:73:fb:a7:da:ac:f0:37:20:33:7d: e0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:E3:1C:73:D6:9E:0B:06:B4:3B:22:96:48:CF:8F:F1:DE:53:B3 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:14:c4:48:2b:35:73:dd:f3:54:bd:b9:c5:52:a9:4c:70: bc:aa:c8:7b:37:79:a5:41:25:1d:25:cb:eb:a3:51:05:b8:63: 2d:8f:38:53:a1:c0:ba:6c:0e:8b:e9:fa:0a:d5:b0:11:33:f6: 4c:7f:c3:da:0e:9b:e3:4f:71:a0:f7:5e:d6:1a:da:45:38:e2: 76:51:aa:06:6a:aa:f0:5f:42:71:9c:18:df:84:5b:c1:52:f1: f5:c1:9f:4c:27:47:fd:76:08:6c:bb:6a:ad:f6:a1:25:14:03: 85:bd:ba:5b:79:f7:b4:58:eb:ca:aa:43:92:73:52:f0:a3:2b: 91:34:8a:2c:bf:81:26:5e:bc:26:48:fe:4b:4f:4f:1f:4b:59: 0e:c8:68:0f:c8:d8:90:6e:12:7a:46:ab:4e:d4:31:e7:78:62: 84:85:4f:9d:2c:df:34:01:e7:23:b9:a8:54:fb:a7:af:71:08: 47:cf:39:d6:da:f2:9a:98:cb:18:08:cd:9d:1d:25:21:ae:bb: 15:e4:ba:c7:d6:ed:42:1a:6f:cd:a1:2c:eb:e3:7f:3f:8f:d8: 36:b6:30:ed:41:f5:3b:31:6c:ba:71:95:f8:c8:44:71:08:db: d4:2c:6f:49:df:03:15:31:01:fe:ef:77:48:70:dd:00:5e:d8: 13:24:ad:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUxMTAyMjIzNDQ5WhcNMjUxMTA5MjIzNDQ5WjAYMRYwFAYD VQQDEw02OTA3ZGM4OS1jMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gN3Las1RQyL28UB8judQhxR9EY/SnlI+DQn5lTYi156QkjnZXI4wsBXEytW B7UfIKCwvo52AFgB5zv06h43oFfz2jMcb1JATfp0BLXvn57j6qCIlmRWFg+PGS5U lSsY8lQTjJfo9EA3+JFGUsLkMMfTIfwn6Aw6/avLpgFPY7LBWn4qy4RwDccue6AS skTTB+Xp2UrfpQx/U8fOb1lDoAh9T9oM4/iefNA/vNuLjJQepRszRu7pknkyYx0C e2q3Sg3N5B2p1E5TCoMCtAd7GoKWJVdrkXZ75P6GAHOjYBxJhqQyLGnvzj3qIhEs O76mOxqVpnP7p9qs8DcgM33gtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8n4xxz 1p4LBrQ7IpZIz4/x3lOzMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPWhTESCs1c93zVL25xVKpTHC8qsh7N3mlQSUdJcvro1EFuGMtjzhT ocC6bA6L6foK1bARM/ZMf8PaDpvjT3Gg917WGtpFOOJ2UaoGaqrwX0JxnBjfhFvB UvH1wZ9MJ0f9dghsu2qt9qElFAOFvbpbefe0WOvKqkOSc1LwoyuRNIosv4EmXrwm SP5LT08fS1kOyGgPyNiQbhJ6RqtO1DHneGKEhU+dLN80AecjuahU+6evcQhHzznW 2vKamMsYCM2dHSUhrrsV5LrH1u1CGm/NoSzr438/j9g2tjDtQfU7MWy6cZX4yERx CNvULG9J3wMVMQH+73dIcN0AXtgTJK0E -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:56 2025 by rpki-client