$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: 6/qIdkgWRJuDQsYVjoe1Y7ceIf6CCE3zswsCDQKISa8= Subject key identifier: 53:83:24:73:26:72:F5:7B:C0:99:D2:E6:67:CA:D2:15:D7:78:A8:53 Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 0A26 Signing time: Tue 04 Nov 2025 19:51:05 +0000 Manifest this update: Tue 04 Nov 2025 19:51:04 +0000 Manifest next update: Tue 11 Nov 2025 19:51:04 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: 6HJDy4/DG2DweYyTah4UeezfP2obD8tu/ARu03o4uw4=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: KpSjUunjUeMLLOQiLXWBsxc7UsA+gj+cxEsO4RdQ2oI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: Nov 4 19:51:04 2025 GMT Not After : Nov 11 19:51:04 2025 GMT Subject: CN=690a5929-ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:86:a6:66:9a:e8:63:ff:0f:24:b0:da:f4: f6:00:44:5e:c7:d4:30:40:67:8e:fb:74:0f:b8:5e: ca:03:c8:07:8b:c2:fb:a7:d8:a9:dc:c6:0c:41:53: ee:63:95:a4:ce:1e:8e:19:e6:2e:fc:01:1c:66:16: ea:e7:61:e7:d3:ed:a7:aa:a2:6c:e4:07:e5:62:8a: 5e:61:63:9c:d5:9e:c8:b9:04:eb:9d:e5:68:91:a8: 5e:5c:c2:c8:26:40:b1:39:b2:02:d1:c0:b0:af:03: 62:02:59:40:28:84:f7:c9:52:5f:37:46:5b:a9:9d: 6d:1d:dd:9e:d6:66:7a:ff:00:69:02:08:75:dd:14: 36:ec:0a:9a:bb:0e:4f:c0:a5:b4:bd:10:a8:46:87: 62:aa:45:3d:e3:7e:81:cb:ee:f4:c2:9b:81:6d:09: 7e:7a:14:51:38:d1:f7:db:22:85:08:a7:c7:87:ad: 56:e7:92:e5:60:d7:02:8a:21:3a:94:34:8d:09:a8: 4b:e9:17:14:7e:90:a2:82:3e:41:68:3b:fc:8c:8c: 44:21:2f:3b:e3:2c:a7:23:67:2a:70:dc:d8:b9:47: af:05:97:3a:1e:aa:3c:fa:29:5b:57:34:6e:88:f5: 66:87:0c:bf:be:6e:76:8a:01:71:08:6c:71:ba:0a: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:83:24:73:26:72:F5:7B:C0:99:D2:E6:67:CA:D2:15:D7:78:A8:53 X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dc:03:10:c0:2e:e7:16:97:63:85:47:93:c5:a0:30:ea:b8: ff:95:fe:d0:ba:1b:9a:94:d3:be:5f:a5:32:b6:78:7f:7c:46: 89:de:df:e3:54:38:44:e0:82:55:80:c6:dd:e4:06:e6:a2:59: 9a:40:37:23:ec:fb:ba:02:20:df:07:3a:4c:fa:7d:36:87:33: f9:cb:cb:bd:0f:05:c7:ba:df:6e:22:dc:6d:4e:99:7f:d9:86: 11:0f:6e:10:14:40:d0:19:55:6c:a8:4d:0e:be:bd:ee:e1:88: 67:33:de:16:7a:6e:7e:f7:a1:ea:32:4a:06:c6:5f:6a:92:2c: 9e:db:4e:21:73:0b:f5:c9:c4:af:d8:23:e9:97:a9:fc:d2:79: aa:3d:f0:7b:4e:ad:ba:ff:ad:fa:24:66:f6:c8:ec:d7:68:6d: 18:3c:8d:5d:08:73:ee:1d:6f:99:0d:90:5c:5d:e8:0c:07:c1: 9a:6f:dd:7b:0f:bd:1d:91:e9:e3:51:29:24:fc:da:ad:fb:76: 1d:7a:b5:05:31:f2:2d:06:93:48:d5:58:56:78:26:bb:e8:27: 9f:b0:52:5b:f0:ab:c2:82:50:b0:c3:15:f2:37:8a:f3:2c:37: 4d:ae:03:4d:e7:6c:ef:1f:76:f8:9d:0b:d5:9a:ff:12:0f:d0: e0:61:e9:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjUxMTA0MTk1MTA0WhcNMjUxMTExMTk1MTA0WjAYMRYwFAYD VQQDEw02OTBhNTkyOS1mZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvKGpmaa6GP/DySw2vT2AERex9QwQGeO+3QPuF7KA8gHi8L7p9ip3MYMQVPu Y5Wkzh6OGeYu/AEcZhbq52Hn0+2nqqJs5AflYopeYWOc1Z7IuQTrneVokaheXMLI JkCxObIC0cCwrwNiAllAKIT3yVJfN0ZbqZ1tHd2e1mZ6/wBpAgh13RQ27Aqauw5P wKW0vRCoRodiqkU9436By+70wpuBbQl+ehRRONH32yKFCKfHh61W55LlYNcCiiE6 lDSNCahL6RcUfpCigj5BaDv8jIxEIS874yynI2cqcNzYuUevBZc6Hqo8+ilbVzRu iPVmhwy/vm52igFxCGxxugrF0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFODJHMm cvV7wJnS5mfK0hXXeKhTMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK3AMQwC7nFpdjhUeTxaAw6rj/lf7QuhualNO+X6Uytnh/fEaJ3t/j VDhE4IJVgMbd5AbmolmaQDcj7Pu6AiDfBzpM+n02hzP5y8u9DwXHut9uItxtTpl/ 2YYRD24QFEDQGVVsqE0Ovr3u4YhnM94Wem5+96HqMkoGxl9qkiye204hcwv1ycSv 2CPpl6n80nmqPfB7Tq26/636JGb2yOzXaG0YPI1dCHPuHW+ZDZBcXegMB8Gab917 D70dkenjUSkk/Nqt+3YderUFMfItBpNI1VhWeCa76CefsFJb8KvCglCwwxXyN4rz LDdNrgNN52zvH3b4nQvVmv8SD9DgYel3 -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:55 2025 by rpki-client