$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: zUhjv1GKGPPN5Tw6/2X18O2DzIcFjUJteiXjrGcGmKI= Subject key identifier: EC:33:12:97:E7:53:0B:BF:21:E9:97:DF:A2:46:B7:9D:D4:60:6F:2F Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 0286 Signing time: Sun 19 Oct 2025 03:49:41 +0000 Manifest this update: Sun 19 Oct 2025 03:49:41 +0000 Manifest next update: Sun 26 Oct 2025 03:49:41 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: jD4FGT/H+KI0AaljL1OWp/6ed17O5H8Nqmt9L21plcQ=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: wBqvUEdJXS+W4twJcgw0kDbGssoYll+0BYZGvLl67rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: Oct 19 03:49:41 2025 GMT Not After : Oct 26 03:49:41 2025 GMT Subject: CN=68f45fd5-463a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:98:98:1f:22:d7:66:b3:5f:a9:1a:59:ef: 93:fc:b9:f9:08:0b:33:4f:ca:7f:87:d2:cb:f7:17: dd:a4:f9:2c:3b:da:7d:b7:87:0c:8f:09:2c:ed:fd: 34:f4:a5:04:12:bd:ec:e6:ad:f0:67:ca:58:66:a2: 60:9d:63:1d:07:dd:f8:26:28:4b:fa:b7:8c:52:76: 94:38:1f:30:41:02:5c:6f:56:b9:a4:80:90:28:e0: 21:56:fd:e0:1d:62:4b:85:65:be:4e:ca:13:98:33: a2:72:c4:b3:50:c1:ef:cc:3f:13:40:1d:40:7c:73: ef:df:b8:06:54:4d:1b:3c:0d:fe:a3:b3:d0:54:92: 5d:e4:15:13:04:23:22:60:12:9f:c7:34:bc:62:da: 6b:a5:fc:73:86:c6:c0:dc:bc:7d:48:20:ec:2b:8d: c0:d4:ef:02:ed:0c:81:1b:08:47:df:18:49:79:7b: eb:f2:ec:65:f4:1d:0f:26:a6:40:85:8f:2a:e4:60: 48:34:b5:82:f0:b8:81:04:bc:40:dd:72:15:30:4f: 7a:86:d9:f8:76:26:35:fb:f8:74:31:52:10:65:67: c2:b8:a1:eb:72:92:da:a7:9b:d1:f4:7e:46:42:9f: 98:bb:31:54:ba:b7:b8:54:2b:5d:1c:d3:64:58:0c: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:12:97:E7:53:0B:BF:21:E9:97:DF:A2:46:B7:9D:D4:60:6F:2F X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:7a:85:77:04:7f:72:5b:fe:26:41:7b:46:68:cc:12:ff: c4:c2:ae:e1:52:f3:10:3e:ce:6b:5d:54:73:04:b9:67:68:dd: e6:62:29:9f:a0:4f:6a:41:70:1d:6a:c6:4e:e4:64:0c:06:6a: 87:27:21:92:34:3e:07:a8:aa:4f:cf:e7:30:f3:4e:4a:0a:7a: d6:8c:d2:b5:d9:52:ba:72:44:52:d1:ae:4f:fa:23:0b:a0:cb: 5c:62:9a:4d:39:24:c2:e4:a7:97:16:bb:db:3e:2f:28:b5:7a: 61:77:62:61:d8:f0:40:ff:a5:ef:1e:27:b8:0d:c1:7d:00:11: ad:c3:24:4c:99:b3:85:4e:6f:0d:4a:e9:30:58:89:25:14:56: b9:e2:3b:ad:71:d8:a6:9a:48:67:e0:e8:bc:ae:af:8c:90:e3: a9:34:63:c6:89:e5:ee:62:c5:7c:7c:43:0c:d8:cd:c6:10:93: 58:5f:63:27:5e:ed:cf:78:84:f8:67:bb:dd:58:89:dd:1e:03: 3a:12:b3:93:4c:c9:1b:35:b0:f1:10:de:7e:78:23:ab:8b:d8: b8:e1:cf:8f:f7:20:f7:f9:13:e0:f2:2f:b3:a8:92:7c:e2:9c: c8:2f:bf:0c:4d:74:2b:d1:d2:c7:1f:62:e9:f2:8b:09:f6:0a: a7:15:23:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjUxMDE5MDM0OTQxWhcNMjUxMDI2MDM0OTQxWjAYMRYwFAYD VQQDEw02OGY0NWZkNS00NjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3j+YmB8i12azX6kaWe+T/Ln5CAszT8p/h9LL9xfdpPksO9p9t4cMjwks7f00 9KUEEr3s5q3wZ8pYZqJgnWMdB934JihL+reMUnaUOB8wQQJcb1a5pICQKOAhVv3g HWJLhWW+TsoTmDOicsSzUMHvzD8TQB1AfHPv37gGVE0bPA3+o7PQVJJd5BUTBCMi YBKfxzS8YtprpfxzhsbA3Lx9SCDsK43A1O8C7QyBGwhH3xhJeXvr8uxl9B0PJqZA hY8q5GBINLWC8LiBBLxA3XIVME96htn4diY1+/h0MVIQZWfCuKHrcpLap5vR9H5G Qp+YuzFUure4VCtdHNNkWAztZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwzEpfn Uwu/IemX36JGt53UYG8vMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNKXqFdwR/clv+JkF7RmjMEv/Ewq7hUvMQPs5rXVRzBLlnaN3mYimf oE9qQXAdasZO5GQMBmqHJyGSND4HqKpPz+cw805KCnrWjNK12VK6ckRS0a5P+iML oMtcYppNOSTC5KeXFrvbPi8otXphd2Jh2PBA/6XvHie4DcF9ABGtwyRMmbOFTm8N SukwWIklFFa54jutcdimmkhn4Oi8rq+MkOOpNGPGieXuYsV8fEMM2M3GEJNYX2Mn Xu3PeIT4Z7vdWIndHgM6ErOTTMkbNbDxEN5+eCOri9i44c+P9yD3+RPg8i+zqJJ8 4pzIL78MTXQr0dLHH2Lp8osJ9gqnFSPd -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:39 2025 by rpki-client