$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: snM/cp+KCHWMS/eFGcDaMd+pdIwkr38+J5hdLIf+btk= Subject key identifier: A0:E2:B9:22:69:B4:B4:31:07:0C:76:67:21:94:B8:CD:F6:C9:09:D0 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05F2 Signing time: Sun 02 Nov 2025 22:56:40 +0000 Manifest this update: Sun 02 Nov 2025 22:56:39 +0000 Manifest next update: Sun 09 Nov 2025 22:56:39 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: qI8qfPS/x1dfCsecm/HA8NnZIfS7ppFMNjbP3gufqcc=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Nov 2 22:56:39 2025 GMT Not After : Nov 9 22:56:39 2025 GMT Subject: CN=6907e1a7-06fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:3b:01:c9:4c:1a:4b:4c:6e:4d:d7:7d:46: 37:f5:70:6b:12:b2:02:3e:d9:5e:9e:d3:ed:1b:0d: 1c:58:76:62:ed:75:9e:b6:8a:6a:21:77:f3:af:3c: 35:15:d8:b8:c9:86:6a:a6:b6:ab:af:0a:30:54:51: b6:04:9d:ec:c8:24:46:c8:af:fc:20:6c:3a:ad:8a: 70:ef:2b:e7:e6:e7:c5:45:da:da:66:91:8c:35:68: 62:7e:55:0c:9d:1a:bf:cf:d1:67:07:02:46:6a:58: 18:9e:f2:0f:39:55:48:59:3e:84:42:cb:64:2a:85: a7:b2:3b:1f:5a:f5:60:6f:19:8a:bf:9b:e8:01:5d: 2d:45:70:8d:7e:9f:d7:36:74:7d:55:50:a3:25:8a: 67:25:68:6e:30:ac:36:e4:d8:6d:93:bd:73:82:ba: b7:c5:dc:aa:c8:e1:ea:1d:94:d7:65:08:50:bf:b1: af:b8:ee:fe:5b:0f:1f:d9:88:0c:b9:d7:42:0b:ee: d0:f8:49:1c:f1:29:26:75:12:b2:58:70:81:5c:24: d0:af:49:b1:7d:67:6f:95:df:3a:79:ce:d2:64:ea: 66:31:fa:32:86:4f:7d:33:75:e9:37:ea:92:52:0c: a0:9a:a6:b9:97:f5:0d:a6:e6:65:4b:7e:f8:7b:23: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E2:B9:22:69:B4:B4:31:07:0C:76:67:21:94:B8:CD:F6:C9:09:D0 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:8a:26:61:b4:a9:bd:73:fd:95:9f:3f:d2:e9:8a:5d:ce:0c: 25:7e:ef:14:fc:56:c0:04:23:24:53:69:fb:a3:1c:2e:02:0f: be:5c:c5:18:00:fa:a0:ed:82:4b:a4:e0:2f:28:02:17:72:29: d8:a4:1a:6d:0b:a0:c6:9d:c8:ef:82:51:c9:c0:7e:9d:70:cc: 8f:6b:49:09:b0:d4:2a:c6:f3:bb:9e:e8:f8:10:b4:e7:0f:de: 27:57:ff:e9:23:08:1f:dd:c7:ca:77:ba:9b:cd:77:64:ba:6c: fa:e0:51:e1:09:da:a8:c4:33:c7:3c:fe:de:c3:f0:bf:d8:0b: 75:f0:08:df:9e:01:b2:2b:50:b7:e2:05:43:fc:6a:cf:58:c5: 75:bf:da:ad:19:dc:7d:b3:2e:e7:fa:a5:62:76:93:39:92:7e: 58:30:2a:e9:6a:ae:eb:1d:44:bf:2a:a2:7f:3f:f2:08:a8:5f: ac:45:4f:a6:02:17:f6:43:73:37:66:37:bf:b1:33:bd:b9:c3: ba:be:aa:eb:a6:ff:82:e5:d8:69:a9:b6:e9:a0:41:94:bc:8a: df:6b:34:90:e2:6b:52:ea:80:69:db:8a:35:85:7d:19:66:7a: 68:eb:f0:c6:03:30:6f:8b:a2:c7:f7:92:2b:a3:3d:ef:8b:32: f9:6b:54:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUxMTAyMjI1NjM5WhcNMjUxMTA5MjI1NjM5WjAYMRYwFAYD VQQDEw02OTA3ZTFhNy0wNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnk7AclMGktMbk3XfUY39XBrErICPtlentPtGw0cWHZi7XWetopqIXfzrzw1 Fdi4yYZqprarrwowVFG2BJ3syCRGyK/8IGw6rYpw7yvn5ufFRdraZpGMNWhiflUM nRq/z9FnBwJGalgYnvIPOVVIWT6EQstkKoWnsjsfWvVgbxmKv5voAV0tRXCNfp/X NnR9VVCjJYpnJWhuMKw25Nhtk71zgrq3xdyqyOHqHZTXZQhQv7GvuO7+Ww8f2YgM uddCC+7Q+Ekc8SkmdRKyWHCBXCTQr0mxfWdvld86ec7SZOpmMfoyhk99M3XpN+qS Ugygmqa5l/UNpuZlS374eyPf1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDiuSJp tLQxBwx2ZyGUuM32yQnQMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPiiZhtKm9c/2Vnz/S6Ypdzgwlfu8U/FbABCMkU2n7oxwuAg++XMUY APqg7YJLpOAvKAIXcinYpBptC6DGncjvglHJwH6dcMyPa0kJsNQqxvO7nuj4ELTn D94nV//pIwgf3cfKd7qbzXdkumz64FHhCdqoxDPHPP7ew/C/2At18AjfngGyK1C3 4gVD/GrPWMV1v9qtGdx9sy7n+qVidpM5kn5YMCrpaq7rHUS/KqJ/P/IIqF+sRU+m Ahf2Q3M3Zje/sTO9ucO6vqrrpv+C5dhpqbbpoEGUvIrfazSQ4mtS6oBp24o1hX0Z Znpo6/DGAzBvi6LH95Iroz3vizL5a1SB -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:27 2025 by rpki-client