$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json) Hash identifier: lKJzFEwdZI16yLlXBBv8DGNlk818pfs35SCiO4VxLHs= Subject key identifier: 17:6D:04:B9:8F:53:40:84:E7:3E:A2:99:F6:A2:9C:9A:B8:E5:2C:64 Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft Manifest number: 0A4C Signing time: Sat 18 Oct 2025 20:40:44 +0000 Manifest this update: Sat 18 Oct 2025 20:40:44 +0000 Manifest next update: Sat 25 Oct 2025 20:40:44 +0000 Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: F31gUguCTe4b9cAes01RV/5hY2F6ROBCnAkUyR2VIN8=) 2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2643 (0xa53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Oct 18 20:40:44 2025 GMT Not After : Oct 25 20:40:44 2025 GMT Subject: CN=68f3fb4c-0fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:89:d6:1a:b4:37:77:d1:68:48:b9:13:f8: 05:7f:ed:4a:0a:0c:06:2a:cd:42:6d:c9:b8:21:5a: 27:20:78:e7:df:f9:ce:e9:d4:f4:91:ff:11:cf:30: 47:86:d6:ab:90:25:9a:07:ef:62:00:d0:56:41:ca: b0:89:a8:20:62:fb:20:82:93:64:cb:2d:6c:e0:49: f4:48:8b:a4:9a:07:d3:a7:d9:88:dd:da:01:78:18: b3:56:e5:aa:a8:a9:72:94:18:6b:3a:4c:10:2d:64: 01:22:5d:b8:86:be:07:11:37:2e:2f:1c:11:e5:84: 3d:61:15:9d:eb:bc:af:7e:78:55:f4:f1:87:13:fa: 34:be:fb:b0:6f:17:c2:1c:9d:cd:08:76:f0:e8:b1: cf:f2:f9:a7:a1:8c:7b:6a:9e:8b:8d:0b:6d:e9:2a: fb:b3:3c:b1:31:fb:bf:2b:03:89:f6:60:36:ca:69: 80:59:06:80:e0:d7:68:cc:d5:ff:5b:e1:99:6a:3e: 5d:2d:ad:7d:b7:f0:35:2d:56:20:24:17:c3:cc:95: 14:a6:65:5d:a0:51:2f:d7:69:b5:70:ba:4e:df:61: 33:a1:e0:10:f3:bc:86:ea:50:b5:f0:56:31:4f:7f: 7c:eb:8a:b9:f8:a8:06:fa:ea:27:96:fc:e9:75:2f: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6D:04:B9:8F:53:40:84:E7:3E:A2:99:F6:A2:9C:9A:B8:E5:2C:64 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:56:6f:ed:c7:fd:04:f4:cf:22:d1:7a:de:26:ed:bc:2c:b6: 06:62:4a:d7:80:21:1c:dd:a4:0f:d8:99:07:ae:94:69:15:11: 46:96:6d:84:d5:15:db:a8:6d:32:08:d9:47:74:ad:d1:43:b9: ab:d9:10:82:27:f8:f2:71:45:2f:bd:f3:34:b5:fd:35:76:31: 39:de:88:26:3e:3a:04:5e:be:30:39:45:7d:b5:bf:ac:e3:bc: 93:ea:bc:55:b8:6b:9c:18:9f:46:d8:01:0a:d7:7e:2f:89:d0: a6:43:ca:90:b6:ca:cc:8b:da:fe:89:34:6a:b6:46:5c:f6:51: 63:44:b0:df:15:48:78:2c:0c:59:97:0c:e6:d9:ee:44:ec:72: fc:ce:df:b6:db:aa:1e:df:ce:9d:7a:a2:89:a7:f9:47:8d:a7: 26:f9:11:ac:3a:a1:91:82:96:e3:1f:44:f1:44:38:d8:3d:e8: 0b:99:f6:90:5a:83:49:88:a3:72:82:22:ab:77:5f:09:80:3a: a1:d1:c3:ad:76:0f:e3:d2:5d:20:7f:c8:50:ca:64:57:3e:5d: d2:63:db:7b:9a:67:41:65:a9:46:04:6b:e8:49:2e:2c:ea:a5: f5:87:17:98:9a:55:ec:b0:d7:45:c0:e7:7e:a4:5a:b4:c7:e7: 1b:1e:3b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUxMDE4MjA0MDQ0WhcNMjUxMDI1MjA0MDQ0WjAYMRYwFAYD VQQDEw02OGYzZmI0Yy0wZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXGJ1hq0N3fRaEi5E/gFf+1KCgwGKs1Cbcm4IVonIHjn3/nO6dT0kf8RzzBH htarkCWaB+9iANBWQcqwiaggYvsggpNkyy1s4En0SIukmgfTp9mI3doBeBizVuWq qKlylBhrOkwQLWQBIl24hr4HETcuLxwR5YQ9YRWd67yvfnhV9PGHE/o0vvuwbxfC HJ3NCHbw6LHP8vmnoYx7ap6LjQtt6Sr7szyxMfu/KwOJ9mA2ymmAWQaA4NdozNX/ W+GZaj5dLa19t/A1LVYgJBfDzJUUpmVdoFEv12m1cLpO32EzoeAQ87yG6lC18FYx T39864q5+KgG+uonlvzpdS96rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdtBLmP U0CE5z6imfainJq45SxkMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTRFMS80QTBDQjZGODc1NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4 eWJ5Q0YxM0s0MGVzbHNwSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChVm/tx/0E9M8i0XreJu28LLYGYkrXgCEc3aQP2JkHrpRpFRFGlm2E 1RXbqG0yCNlHdK3RQ7mr2RCCJ/jycUUvvfM0tf01djE53ogmPjoEXr4wOUV9tb+s 47yT6rxVuGucGJ9G2AEK134vidCmQ8qQtsrMi9r+iTRqtkZc9lFjRLDfFUh4LAxZ lwzm2e5E7HL8zt+226oe386deqKJp/lHjacm+RGsOqGRgpbjH0TxRDjYPegLmfaQ WoNJiKNygiKrd18JgDqh0cOtdg/j0l0gf8hQymRXPl3SY9t7mmdBZalGBGvoSS4s 6qX1hxeYmlXssNdFwOd+pFq0x+cbHjtZ -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:25 2025 by rpki-client