$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json) Hash identifier: BtYeOUNTfGpHBFoR3Q5vKuXSXjx0zo/VvXU5ijUdAJI= Subject key identifier: BF:55:5B:C8:1F:F8:27:26:B8:28:7C:B5:C8:F9:81:76:9D:83:D4:13 Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft Manifest number: 04B4 Signing time: Tue 04 Nov 2025 23:59:01 +0000 Manifest this update: Tue 04 Nov 2025 23:59:00 +0000 Manifest next update: Tue 11 Nov 2025 23:59:00 +0000 Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: dz/DHwzTNTSB8bf2ZE2RUd9c+Ubl+wnUbN6SUF8b/s0=) 2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363 Validity Not Before: Nov 4 23:59:00 2025 GMT Not After : Nov 11 23:59:00 2025 GMT Subject: CN=690a9345-f1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:d6:3d:d0:7c:4a:dc:ca:bf:e5:b5:92:d2: 5c:a9:9d:ef:36:9b:e6:8e:49:36:fe:55:ea:cd:53: ac:a5:b0:62:ce:e7:30:5b:19:1a:a4:7a:e4:9c:09: 80:a6:5c:34:f0:cd:d0:04:43:aa:af:0e:95:55:8c: 26:fe:b9:dd:de:75:e8:55:1b:eb:54:ec:11:59:88: 68:1b:e0:94:31:3f:d5:04:00:ad:e6:b0:d7:56:99: f4:5a:53:99:c6:06:a4:0b:22:c4:a0:c8:45:19:95: 04:39:bc:57:e9:1c:96:c9:77:c0:87:46:ef:a7:aa: 50:6b:62:cf:0d:52:31:05:44:59:cc:3e:33:58:1e: 62:43:90:f3:5c:90:65:65:78:b5:85:02:db:7f:bf: db:a0:f2:0d:66:db:f6:d7:6f:8f:3f:18:04:5e:79: 31:9a:d0:9b:a6:b2:54:7e:68:52:c5:7d:92:81:ec: 57:e3:ac:b6:4a:59:81:2c:4b:b5:f7:fe:aa:6b:bc: 6d:d6:5f:ea:01:61:fe:33:84:3e:99:e1:69:ca:ef: cd:0a:e7:78:76:2c:d2:1f:2d:79:52:79:7a:8a:8a: 87:08:f6:5b:36:2e:46:40:75:29:7a:87:84:a3:25: fc:b4:bc:50:a9:17:26:bf:3f:50:bd:80:d0:99:96: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:55:5B:C8:1F:F8:27:26:B8:28:7C:B5:C8:F9:81:76:9D:83:D4:13 X509v3 Authority Key Identifier: keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:77:fe:ee:0a:83:9c:21:4f:43:f1:72:95:a6:36:a5:b0:b9: 41:83:ee:30:7e:d4:b8:31:7a:d4:79:b4:67:6e:af:2b:e5:7d: a0:0d:6e:d3:9a:e9:5d:6d:4e:7e:a8:74:0a:6f:b0:bc:e3:65: 70:7a:8d:c5:43:7b:e8:24:07:79:e7:59:31:2f:fb:33:3a:67: e5:6c:be:a6:cc:19:d9:99:9a:a0:de:bb:26:6c:13:73:e5:84: 5f:b3:fc:a6:2e:fb:25:66:00:b9:6d:bc:3a:5f:db:5d:79:7a: 45:50:b0:ef:13:51:c1:c0:30:2e:92:d9:47:cb:73:3b:a2:be: 54:36:8b:87:27:a4:3a:52:ce:fd:19:c1:6a:c2:bb:de:4c:ea: 1f:c0:5c:1f:bb:35:58:ab:a5:bc:b6:e8:1d:7f:0b:3f:d6:fc: 70:65:ba:31:68:38:56:e1:34:3f:d5:8b:68:59:ba:40:5b:7b: 76:4c:90:43:81:f2:4c:26:0b:0c:9d:3d:29:12:c4:9d:4c:8a: 27:b6:ae:30:f6:8a:e5:58:68:43:c8:ad:bd:4d:6d:bf:13:b0: 56:d4:b9:28:1b:40:54:84:71:32:68:34:aa:0c:1a:a6:54:5a: 05:20:04:bd:b4:9a:eb:f3:10:3e:29:6f:be:70:6b:b0:cb:73: c4:99:0a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCQkExMTAvBgNVBAUTKDJCNDRDODg5MUFBRTJCOEExRkRCNDhFQkY0QTU3RTk4 OUFFQjczNjMwHhcNMjUxMTA0MjM1OTAwWhcNMjUxMTExMjM1OTAwWjAYMRYwFAYD VQQDEw02OTBhOTM0NS1mMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukjWPdB8StzKv+W1ktJcqZ3vNpvmjkk2/lXqzVOspbBizucwWxkapHrknAmA plw08M3QBEOqrw6VVYwm/rnd3nXoVRvrVOwRWYhoG+CUMT/VBACt5rDXVpn0WlOZ xgakCyLEoMhFGZUEObxX6RyWyXfAh0bvp6pQa2LPDVIxBURZzD4zWB5iQ5DzXJBl ZXi1hQLbf7/boPINZtv212+PPxgEXnkxmtCbprJUfmhSxX2SgexX46y2SlmBLEu1 9/6qa7xt1l/qAWH+M4Q+meFpyu/NCud4dizSHy15Unl6ioqHCPZbNi5GQHUpeoeE oyX8tLxQqRcmvz9QvYDQmZbgBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9VW8gf +CcmuCh8tcj5gXadg9QTMB8GA1UdIwQYMBaAFCtEyIkariuKH9tI6/Slfpia63Nj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkJCQS9GOTEzQzBCQTRD NDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0b2YyMGpyOUtWLW1KcnJj Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0swVElpUnF1SzRvZjIwanI5S1YtbUpycmMyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkJCQS9GOTEzQzBCQTRDNDIxMUVDOTY2NThBMzFDNEY5QUUwMi9LMFRJaVJxdUs0 b2YyMGpyOUtWLW1KcnJjMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbd/7uCoOcIU9D8XKVpjalsLlBg+4wftS4MXrUebRnbq8r5X2gDW7T muldbU5+qHQKb7C842Vweo3FQ3voJAd551kxL/szOmflbL6mzBnZmZqg3rsmbBNz 5YRfs/ymLvslZgC5bbw6X9tdeXpFULDvE1HBwDAuktlHy3M7or5UNouHJ6Q6Us79 GcFqwrveTOofwFwfuzVYq6W8tugdfws/1vxwZboxaDhW4TQ/1YtoWbpAW3t2TJBD gfJMJgsMnT0pEsSdTIontq4w9orlWGhDyK29TW2/E7BW1LkoG0BUhHEyaDSqDBqm VFoFIAS9tJrr8xA+KW++cGuwy3PEmQps -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:08 2025 by rpki-client