$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: OG3IYuKxWaVyu9576GogxjuStpTEt+Gpt1fsr+IQ5zA= Subject key identifier: 59:6F:6F:5C:2F:B4:13:F9:82:01:DC:89:41:76:3A:07:CC:B7:96:5A Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 99 Signing time: Mon 03 Nov 2025 06:26:42 +0000 Manifest this update: Mon 03 Nov 2025 06:26:41 +0000 Manifest next update: Mon 10 Nov 2025 06:26:41 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: eiiJ8iKkij9W6KDfF0GQxokmoQ1yz3Di7heqVUS/EC4=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Nov 3 06:26:41 2025 GMT Not After : Nov 10 06:26:41 2025 GMT Subject: CN=69084b22-c48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:d9:78:67:8c:aa:6b:8d:39:be:c6:58:4e: b6:ac:3b:34:4e:14:72:0f:f3:c1:da:40:64:a5:22: 7b:07:40:79:bc:37:97:98:cf:56:e1:1a:f9:e6:dd: c4:6a:55:9a:a9:66:aa:21:80:0e:8b:c6:f6:18:a0: f1:1b:29:4f:5d:91:71:5d:8a:eb:a2:98:87:6f:e5: 0f:3e:db:cc:a2:3d:20:6e:1e:cd:78:b0:07:9e:f2: 1a:6d:69:9d:79:d9:11:47:95:4a:55:1e:56:df:71: ae:d7:5e:ac:a6:1f:eb:fb:e4:c7:63:2f:35:59:a9: 06:a7:c9:d6:33:04:b6:4a:ff:bd:8c:98:72:f9:fb: 3d:c4:7d:c1:aa:1c:44:b8:ab:05:53:2a:42:0f:87: 82:47:25:1b:dc:5d:58:5e:dc:46:20:2c:45:50:5e: 43:16:91:78:8b:f6:29:6d:0b:66:f6:f7:ec:00:ff: d6:76:81:0d:98:71:25:78:a0:a5:0c:71:e2:61:b1: de:a2:4a:6e:26:ef:56:2d:58:fd:8e:c6:50:a5:85: e0:ce:e5:80:f3:60:ec:49:32:53:fd:1c:a5:94:70: a9:f5:16:cd:7d:14:20:be:78:ba:8c:14:9d:16:a1: 2f:44:0e:f5:50:b8:ea:74:5b:a5:e3:6f:e2:b6:76: eb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6F:6F:5C:2F:B4:13:F9:82:01:DC:89:41:76:3A:07:CC:B7:96:5A X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:24:80:2d:34:53:5c:c6:78:6e:d2:7a:57:9d:2b:41:4d:77: 45:33:55:95:a6:c9:96:f2:99:3d:1c:39:c9:d5:19:10:68:72: 73:1b:24:71:00:56:10:a4:87:a3:c2:d9:11:54:34:55:89:a7: 00:31:8d:bf:60:35:09:21:39:e9:c1:18:dd:40:8f:86:29:9e: 73:12:a3:42:50:9e:1d:ad:d3:59:18:8f:e3:02:66:67:e3:8e: f8:9b:13:d7:14:05:40:f9:5a:39:b9:2d:32:69:42:8d:9f:59: 14:6f:fb:c7:b2:cb:9e:e8:01:bb:fd:41:ac:d9:c0:65:38:17: 67:85:93:02:fa:fd:73:7b:07:87:7c:98:c8:84:ae:96:80:5e: 22:af:39:75:0f:f3:58:1d:03:6d:47:63:dd:89:41:da:d3:e2: a0:13:d2:b6:15:3b:fc:a9:68:06:59:50:33:c1:69:9d:37:05: 72:8b:71:37:a7:e4:81:7f:f7:93:14:9e:ed:51:76:4f:6f:f5: fa:ba:0a:ca:52:d0:d8:1f:05:2a:e9:6f:08:ae:ba:eb:b6:fd: 1c:39:9c:b7:42:51:7d:71:eb:8c:d1:7f:a2:60:54:c3:56:5f: d1:1a:4b:c3:07:bf:3a:72:e4:7b:e2:d5:66:15:2e:93:41:64: b1:5f:98:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjUxMTAzMDYyNjQxWhcNMjUxMTEwMDYyNjQxWjAYMRYwFAYD VQQDEw02OTA4NGIyMi1jNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rzZeGeMqmuNOb7GWE62rDs0ThRyD/PB2kBkpSJ7B0B5vDeXmM9W4Rr55t3E alWaqWaqIYAOi8b2GKDxGylPXZFxXYrropiHb+UPPtvMoj0gbh7NeLAHnvIabWmd edkRR5VKVR5W33Gu116sph/r++THYy81WakGp8nWMwS2Sv+9jJhy+fs9xH3BqhxE uKsFUypCD4eCRyUb3F1YXtxGICxFUF5DFpF4i/YpbQtm9vfsAP/WdoENmHEleKCl DHHiYbHeokpuJu9WLVj9jsZQpYXgzuWA82DsSTJT/RyllHCp9RbNfRQgvni6jBSd FqEvRA71ULjqdFul42/itnbrbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlvb1wv tBP5ggHciUF2OgfMt5ZaMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeJIAtNFNcxnhu0npXnStBTXdFM1WVpsmW8pk9HDnJ1RkQaHJzGyRx AFYQpIejwtkRVDRViacAMY2/YDUJITnpwRjdQI+GKZ5zEqNCUJ4drdNZGI/jAmZn 4474mxPXFAVA+Vo5uS0yaUKNn1kUb/vHssue6AG7/UGs2cBlOBdnhZMC+v1zeweH fJjIhK6WgF4irzl1D/NYHQNtR2PdiUHa0+KgE9K2FTv8qWgGWVAzwWmdNwVyi3E3 p+SBf/eTFJ7tUXZPb/X6ugrKUtDYHwUq6W8Irrrrtv0cOZy3QlF9ceuM0X+iYFTD Vl/RGkvDB786cuR74tVmFS6TQWSxX5h/ -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:33 2025 by rpki-client