$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft File: KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json) Hash identifier: /DGN7w3jCiIR/3dAwDaU6RswRTFVDWOVgbn3E+JtpbU= Subject key identifier: D8:C1:E5:AA:13:04:BC:E4:F9:4A:90:BB:4E:05:A5:5E:C2:B1:17:A7 Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 Certificate issuer: /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft Manifest number: 068E Signing time: Tue 04 Nov 2025 22:32:43 +0000 Manifest this update: Tue 04 Nov 2025 22:32:43 +0000 Manifest next update: Tue 11 Nov 2025 22:32:43 +0000 Files and hashes: 1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: MFrRw/MLZtijEz6r2Tyyrk1qWdNhZGRNBsubHxXPlew=) 2: 4092F17AE64811EFA0F37560C4F9AE02.roa (hash: MuDOs+UNP3qWV7q9sz+FoRMoZ33SC0+8rektpH4Ht5s=) 3: 698130FEE60411EFA2DC3057C4F9AE02.roa (hash: Vt5tMPro7Yd+AkFJe3Cnn+BsDTWCkJWM0XoIlmggi2I=) 4: 5C75E87C95F511EBA6D31767C4F9AE02.roa (hash: lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=) 5: 176E1D3E961411EB80BD4E1DC4F9AE02.roa (hash: guMsQztHXJe0nHYo+3sRzxnbrPq9rNiGro7Edp8V/SQ=) 6: 6CFB0FFCF65711EB8988A924C4F9AE02.roa (hash: 0e9NIIe4Eh6DQ3FvIOOg4nTVMnHbYlzq1N/yU/4pzQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753 Validity Not Before: Nov 4 22:32:43 2025 GMT Not After : Nov 11 22:32:43 2025 GMT Subject: CN=690a7f0b-773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:7d:a0:fd:c6:79:94:36:f0:f1:d8:fe:db: b8:13:8b:7e:73:a4:b6:7a:82:28:32:76:d5:b2:ad: 39:66:02:4f:b1:3a:14:1e:6c:ce:42:67:63:dc:64: 12:d0:b7:1b:a1:e0:61:1d:17:71:33:53:2a:13:fc: 83:7c:98:61:c8:b6:86:f5:be:eb:16:ac:7b:04:67: 1b:e3:c3:59:12:bf:c3:48:bf:c7:51:89:29:c5:12: 63:19:ec:d9:40:58:53:f8:ff:b8:f2:1c:51:a4:cc: da:96:a5:f2:cc:ba:8e:4e:ab:8b:36:d7:ba:62:14: 8d:a2:54:a3:6c:e7:72:64:98:66:a6:11:66:96:1e: 4a:a4:29:21:53:aa:9d:fb:f4:75:69:7e:b8:1f:b1: 51:65:2b:54:6c:1f:91:30:7b:f1:12:1e:7f:c2:bf: 76:1a:4c:39:f7:7d:b9:3a:e6:08:63:0c:a8:9c:11: 49:47:50:c9:dd:33:8a:7e:ac:76:f9:05:ea:31:41: 35:e9:e2:3e:10:72:08:b1:1f:84:1e:91:a5:f8:a9: b3:66:c3:90:af:2b:d4:74:80:f2:93:ab:c2:c6:fb: 89:fc:b1:82:d3:bb:e5:ef:3f:3c:95:c6:0c:1e:74: d6:62:dd:e5:e9:8c:59:66:17:2e:33:d7:b3:0b:9d: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:E5:AA:13:04:BC:E4:F9:4A:90:BB:4E:05:A5:5E:C2:B1:17:A7 X509v3 Authority Key Identifier: keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:83:df:00:2c:62:40:e1:3c:79:49:bd:f4:f3:74:15:be: 8c:34:12:12:db:53:0b:99:f4:41:7f:a3:86:49:8a:a6:9a:b4: 23:3d:2d:e1:88:f2:1e:ee:85:47:6e:66:d7:ee:67:84:59:64: 4d:36:be:cd:1f:77:40:6d:e6:d2:0d:3f:b7:30:ea:79:66:20: 04:ce:2e:0d:64:01:0f:82:44:c3:56:1b:80:d1:be:fd:b7:d0: cf:94:42:6c:4a:dd:a3:23:7c:00:24:5b:0b:9c:c3:1c:78:d6: a2:48:30:ad:8b:df:5d:bc:40:f4:f6:af:08:ac:cc:de:19:e2: c8:6f:75:42:76:78:97:5d:18:6d:44:c2:83:70:2b:39:e7:8e: 0f:a2:d3:63:da:69:5b:a2:37:f1:d5:5a:e1:5c:2d:f4:32:77: 03:4c:08:dd:96:47:63:97:4b:5d:0e:1a:31:68:4e:01:3b:53: 85:7c:20:b1:4a:e2:81:39:a1:8f:e2:cb:c6:dd:e3:aa:99:f4: a4:16:9b:b9:ae:46:e0:94:2e:cc:9b:45:68:4b:74:d0:92:84: 89:c4:96:96:04:ca:a1:9f:21:eb:e8:15:08:13:0e:5a:fc:17: 8d:20:4f:59:6e:08:bb:d8:18:76:77:64:ec:e2:8c:19:79:b2: 77:41:70:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFBQTAxMTAvBgNVBAUTKDJBRDUyNkRGRDlDN0U5MENBMzBDMzFGQ0E0RTE4MjUw MUI3MDA3NTMwHhcNMjUxMTA0MjIzMjQzWhcNMjUxMTExMjIzMjQzWjAYMRYwFAYD VQQDEw02OTBhN2YwYi03NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQp9oP3GeZQ28PHY/tu4E4t+c6S2eoIoMnbVsq05ZgJPsToUHmzOQmdj3GQS 0LcboeBhHRdxM1MqE/yDfJhhyLaG9b7rFqx7BGcb48NZEr/DSL/HUYkpxRJjGezZ QFhT+P+48hxRpMzalqXyzLqOTquLNte6YhSNolSjbOdyZJhmphFmlh5KpCkhU6qd +/R1aX64H7FRZStUbB+RMHvxEh5/wr92Gkw59325OuYIYwyonBFJR1DJ3TOKfqx2 +QXqMUE16eI+EHIIsR+EHpGl+KmzZsOQryvUdIDyk6vCxvuJ/LGC07vl7z88lcYM HnTWYt3l6YxZZhcuM9ezC50fwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjB5aoT BLzk+UqQu04FpV7CsRenMB8GA1UdIwQYMBaAFCrVJt/Zx+kMowwx/KThglAbcAdT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUFBMC8yMjgzOTZCQTk1 RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZReWpEREg4cE9HQ1VCdHdC MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0VW0zOW5INlF5akRESDhwT0dDVUJ0d0IxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUFBMC8yMjgzOTZCQTk1RjQxMUVCQjMxQjhGNjZDNEY5QUUwMi9LdFVtMzluSDZR eWpEREg4cE9HQ1VCdHdCMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB7YPfACxiQOE8eUm99PN0Fb6MNBIS21MLmfRBf6OGSYqmmrQjPS3h iPIe7oVHbmbX7meEWWRNNr7NH3dAbebSDT+3MOp5ZiAEzi4NZAEPgkTDVhuA0b79 t9DPlEJsSt2jI3wAJFsLnMMceNaiSDCti99dvED09q8IrMzeGeLIb3VCdniXXRht RMKDcCs5544PotNj2mlbojfx1VrhXC30MncDTAjdlkdjl0tdDhoxaE4BO1OFfCCx SuKBOaGP4svG3eOqmfSkFpu5rkbglC7Mm0VoS3TQkoSJxJaWBMqhnyHr6BUIEw5a /BeNIE9Zbgi72Bh2d2Ts4owZebJ3QXDb -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:20 2025 by rpki-client