$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: BwL2KKOXgVt+lAaJKxXYBqmw5m39x/YprJlrFb1P+OU= Subject key identifier: 05:5B:AF:F8:9D:58:AA:E2:D6:9A:56:C6:01:7D:E9:86:86:43:E4:1B Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A31 Signing time: Tue 04 Nov 2025 16:13:51 +0000 Manifest this update: Tue 04 Nov 2025 16:13:51 +0000 Manifest next update: Tue 11 Nov 2025 16:13:51 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: 8ecED7zOQanYQKwfr9BpuvvirLz+gHtaFkASIcFqW0s=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Nov 4 16:13:51 2025 GMT Not After : Nov 11 16:13:51 2025 GMT Subject: CN=690a263f-bab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:7e:9a:49:17:f8:d5:81:af:7b:f7:b6:5b: e5:65:c6:01:00:e8:76:cc:40:53:05:79:1f:e8:c8: ca:0a:97:06:d9:19:28:da:7e:79:ac:d2:86:85:94: 2c:58:97:52:cd:99:26:0d:b3:6f:9d:fb:83:5e:cd: 2c:47:fc:db:6a:b1:ac:de:e8:2c:f6:38:5b:2d:58: f2:0b:fa:9c:25:22:35:3d:15:da:df:f4:87:3e:1f: 93:4c:3a:5b:4c:0a:a7:91:6b:94:51:62:d9:8d:9c: bf:10:99:45:13:be:fe:a1:17:07:c0:a2:8c:10:94: fe:b4:7f:8e:8f:4d:68:97:19:39:6b:31:55:37:81: 7d:28:99:5b:8e:91:b6:68:ab:ff:08:cd:02:71:fa: 7c:c0:ae:98:a7:15:5d:41:fc:bb:59:5f:ef:1e:66: 2d:9b:74:5b:98:1b:2e:aa:db:20:0f:9b:9f:fc:ca: b6:ba:de:98:49:77:49:27:08:c4:ef:31:ae:4a:f9: 59:e6:c4:44:1a:91:ba:c3:3f:22:b2:56:9a:8a:e1: 70:d4:c8:f5:e9:03:3e:bf:61:d5:83:aa:bc:59:45: 58:69:a4:91:1c:9e:dd:8f:35:49:60:1a:f7:8c:ec: 20:fd:2b:d0:ca:fa:77:ae:28:43:c8:86:4e:9d:7c: cb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:AF:F8:9D:58:AA:E2:D6:9A:56:C6:01:7D:E9:86:86:43:E4:1B X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:cb:d4:a3:87:52:42:1c:fc:9b:30:26:48:cc:05:ab:8f:7d: 94:16:f8:91:cc:1e:f0:60:31:06:66:a2:69:aa:81:a3:f1:de: 34:68:76:2f:82:02:b3:01:fe:72:45:41:e1:36:7f:54:e6:65: 3e:8a:fc:52:f1:fd:ee:02:f5:44:9a:63:06:10:62:dd:9a:04: c8:30:cf:77:aa:45:a6:36:82:2f:ac:c4:1a:f4:e1:2b:e2:45: 06:48:9e:f0:07:87:a8:18:c1:3f:3f:64:77:fa:2f:11:0a:28: 63:58:74:d0:a6:e4:03:af:46:01:4d:4b:85:c5:2b:8e:ce:e1: 30:0a:32:45:62:79:02:db:e1:d0:01:c0:8c:7b:92:b4:87:b3: 3b:aa:ea:29:d7:a0:1c:d7:97:49:79:e0:de:aa:63:5f:ed:0a: d2:5c:15:a1:41:f2:57:fa:ec:b8:8f:65:5d:a8:9e:81:0f:ce: e8:55:7f:74:e7:12:d4:80:50:f0:ab:2f:17:4d:b0:0b:14:16: 80:98:84:cc:79:17:a7:82:24:98:51:68:b9:61:55:ef:3c:17: d8:9b:87:72:1e:00:46:8f:a4:74:61:a0:97:2f:c9:89:62:6f: 74:8a:3e:42:9c:0b:dc:55:52:ce:54:91:db:63:66:8c:a4:16: 4e:0e:57:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUxMTA0MTYxMzUxWhcNMjUxMTExMTYxMzUxWjAYMRYwFAYD VQQDEw02OTBhMjYzZi1iYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsN+mkkX+NWBr3v3tlvlZcYBAOh2zEBTBXkf6MjKCpcG2Rko2n55rNKGhZQs WJdSzZkmDbNvnfuDXs0sR/zbarGs3ugs9jhbLVjyC/qcJSI1PRXa3/SHPh+TTDpb TAqnkWuUUWLZjZy/EJlFE77+oRcHwKKMEJT+tH+Oj01olxk5azFVN4F9KJlbjpG2 aKv/CM0Ccfp8wK6YpxVdQfy7WV/vHmYtm3RbmBsuqtsgD5uf/Mq2ut6YSXdJJwjE 7zGuSvlZ5sREGpG6wz8islaaiuFw1Mj16QM+v2HVg6q8WUVYaaSRHJ7djzVJYBr3 jOwg/SvQyvp3rihDyIZOnXzLzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVbr/id WKri1ppWxgF96YaGQ+QbMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJy9Sjh1JCHPybMCZIzAWrj32UFviRzB7wYDEGZqJpqoGj8d40aHYv ggKzAf5yRUHhNn9U5mU+ivxS8f3uAvVEmmMGEGLdmgTIMM93qkWmNoIvrMQa9OEr 4kUGSJ7wB4eoGME/P2R3+i8RCihjWHTQpuQDr0YBTUuFxSuOzuEwCjJFYnkC2+HQ AcCMe5K0h7M7quop16Ac15dJeeDeqmNf7QrSXBWhQfJX+uy4j2VdqJ6BD87oVX90 5xLUgFDwqy8XTbALFBaAmITMeRengiSYUWi5YVXvPBfYm4dyHgBGj6R0YaCXL8mJ Ym90ij5CnAvcVVLOVJHbY2aMpBZODldI -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:30 2025 by rpki-client