$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json) Hash identifier: SH35VL1/awQ0X+lfADwKg61myGpSQyPAGIq3yAYkTfE= Subject key identifier: 6D:FF:12:88:57:EC:CF:91:F3:EF:70:CF:AA:E5:A4:44:67:07:FA:16 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft Manifest number: 026C Signing time: Wed 05 Nov 2025 02:21:25 +0000 Manifest this update: Wed 05 Nov 2025 02:21:24 +0000 Manifest next update: Wed 12 Nov 2025 02:21:24 +0000 Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: vnB5ioG8y0wptY3ksvHdryMV50dqVSZ9xUXVRct113U=) 2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Nov 5 02:21:24 2025 GMT Not After : Nov 12 02:21:24 2025 GMT Subject: CN=690ab4a5-2a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dc:7a:b2:89:74:2e:e1:fd:15:3c:b7:00:82: 45:a7:04:29:48:21:4c:7d:af:6c:39:a7:7a:9d:94: 0d:92:27:4c:39:71:41:2c:a4:29:b6:7e:4c:97:9b: 47:9a:32:a6:2d:29:59:0d:d2:c6:67:03:ba:71:96: 30:63:a3:b8:8d:5a:09:20:66:c9:36:05:2d:f5:c2: f1:a9:be:85:f5:ab:5e:95:20:af:5e:9b:20:b3:8f: 15:b2:f4:3f:3b:c2:e1:63:06:1e:cd:b3:bb:07:f8: 96:e5:f5:64:7c:55:a0:fe:7a:0c:5a:38:64:60:0c: d0:ed:39:75:62:79:0e:35:66:59:44:1a:63:a1:d4: 09:24:0c:29:35:4e:50:55:55:96:e9:8e:92:2f:60: 03:66:9a:11:b9:74:3e:c4:54:f5:2d:1a:b0:f7:3f: 21:3f:46:9c:c9:ac:7c:5c:13:e6:21:d6:82:73:a4: 5b:86:fd:78:b2:99:b7:a9:5c:35:d9:b3:42:e9:1d: 0b:2e:26:40:b6:32:cb:1a:c0:70:38:64:59:21:27: c2:df:50:a9:f6:40:91:73:16:c8:54:93:c3:07:40: d1:66:26:36:78:0d:1b:ec:58:c0:e0:64:8a:71:61: bd:50:3a:80:17:3e:60:ce:fb:ca:00:4b:3f:c5:df: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FF:12:88:57:EC:CF:91:F3:EF:70:CF:AA:E5:A4:44:67:07:FA:16 X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7b:fd:e7:02:1d:d4:36:5c:9f:0a:f1:0c:7b:34:9b:37:c6: ef:13:fd:b0:2e:cb:3d:c1:8d:18:f0:a3:13:74:de:ac:4f:8d: 45:62:2b:f9:18:bb:6c:da:3b:9f:b7:8d:6b:ee:d5:e6:bf:cc: f6:ba:2c:e6:94:94:64:74:7a:6e:2b:d4:e0:15:a5:42:f2:e8: d8:b7:8f:4c:51:30:31:1d:dd:ad:b2:01:ad:c3:5d:ca:ad:0c: 26:48:ba:1e:86:4c:bb:c0:cc:00:72:08:79:54:75:56:43:29: b4:94:27:6c:9d:ea:e0:5b:38:c3:f5:52:12:82:0a:bb:ae:61: 08:f4:69:e4:5b:9a:48:a2:10:0c:84:4e:d4:f8:9c:10:0c:7b: dc:17:59:18:c6:48:ea:f8:78:c5:03:51:a5:12:c5:08:bf:6f: d2:4b:37:f2:3c:50:18:2f:25:6d:91:39:18:68:44:0d:75:f1: 55:e7:54:a5:45:39:f0:07:40:7c:d1:a1:e9:39:e7:1b:0c:c7: 24:d7:5a:97:da:23:9c:82:a7:50:00:4d:ed:3a:d7:fc:bd:43: 5b:40:d0:db:3a:fd:a2:aa:24:50:eb:0e:89:b2:b5:cc:a3:96: 79:f9:70:8e:b9:99:94:e2:96:5a:6f:6d:27:73:eb:5c:19:5f: 6b:4a:d5:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTExMDUwMjIxMjRaFw0yNTExMTIwMjIxMjRaMBgxFjAUBgNV BAMTDTY5MGFiNGE1LTJhN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz3HqyiXQu4f0VPLcAgkWnBClIIUx9r2w5p3qdlA2SJ0w5cUEspCm2fkyXm0ea MqYtKVkN0sZnA7pxljBjo7iNWgkgZsk2BS31wvGpvoX1q16VIK9emyCzjxWy9D87 wuFjBh7Ns7sH+Jbl9WR8VaD+egxaOGRgDNDtOXVieQ41ZllEGmOh1AkkDCk1TlBV VZbpjpIvYANmmhG5dD7EVPUtGrD3PyE/RpzJrHxcE+Yh1oJzpFuG/XiymbepXDXZ s0LpHQsuJkC2MssawHA4ZFkhJ8LfUKn2QJFzFshUk8MHQNFmJjZ4DRvsWMDgZIpx Yb1QOoAXPmDO+8oASz/F3z4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbf8SiFfs z5Hz73DPquWkRGcH+hYwHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTRCL0MxNDAxNkI0OEQ3RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJW TmdZSEV6UnlSR3UtWlJicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFF7/ecCHdQ2XJ8K8Qx7NJs3xu8T/bAuyz3BjRjwoxN03qxPjUViK/kY u2zaO5+3jWvu1ea/zPa6LOaUlGR0em4r1OAVpULy6Ni3j0xRMDEd3a2yAa3DXcqt DCZIuh6GTLvAzAByCHlUdVZDKbSUJ2yd6uBbOMP1UhKCCruuYQj0aeRbmkiiEAyE TtT4nBAMe9wXWRjGSOr4eMUDUaUSxQi/b9JLN/I8UBgvJW2RORhoRA118VXnVKVF OfAHQHzRoek55xsMxyTXWpfaI5yCp1AATe061/y9Q1tA0Ns6/aKqJFDrDomytcyj lnn5cI65mZTillpvbSdz61wZX2tK1bI= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:44 2025 by rpki-client