$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: jP5lI0v4e5MkFjU0RS8bgtmhQYbMApMs/r0K2DCz3/k= Subject key identifier: 62:7B:5C:06:12:CA:C4:F0:E4:57:70:99:8D:42:40:C3:0B:8A:8D:92 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: 019A Signing time: Sun 19 Oct 2025 06:08:19 +0000 Manifest this update: Sun 19 Oct 2025 06:08:19 +0000 Manifest next update: Sun 26 Oct 2025 06:08:19 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: iKnDA3j51F06Qnvc8ahMQVaFj37XFKiRzQjsn/AMnCI=) 2: F5E4AAFA2A2711F0A842B012C4F9AE02.roa (hash: H1nmQizGEmHz5b1T7forLlMV8zzneRcv/1eW8nb3RPQ=) 3: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Oct 19 06:08:19 2025 GMT Not After : Oct 26 06:08:19 2025 GMT Subject: CN=68f48053-c7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:fb:be:91:04:f9:7f:3c:f0:d3:02:16:c2: fe:5a:fa:01:ba:8b:a5:90:1b:9c:7e:11:44:ee:5b: e4:1e:c5:f8:70:cb:4d:25:70:aa:32:12:91:f2:ae: a6:be:94:34:b5:f7:24:d2:8c:67:da:6a:eb:fa:ed: 73:cf:f5:30:65:21:0f:33:0e:00:27:22:b3:64:84: ee:b7:f8:34:ca:5c:62:ea:91:c5:c1:f5:d3:ae:5e: a9:53:ca:ff:2a:6b:af:c7:7d:13:f7:6d:03:ed:1c: f6:d8:79:5a:a5:71:e5:a6:bf:10:b0:b0:b6:96:13: 88:62:09:ab:94:30:09:fc:eb:ad:56:26:f4:d7:a0: e7:f7:b4:7a:45:da:f5:7b:ea:27:5f:df:41:71:23: 46:bd:0d:b2:18:b4:de:95:e4:64:a5:57:28:98:a0: 8d:1c:c9:5f:60:e3:8f:f2:d2:58:16:71:09:28:51: 37:4a:df:cd:07:e5:37:75:8a:a4:68:13:39:d3:da: 5e:83:d7:e2:1c:06:4c:e8:1b:a8:14:f2:f2:d5:79: 0c:3d:4d:4f:81:db:89:e4:09:6e:99:c3:13:de:3b: 0c:46:ac:cf:94:b0:32:0b:17:cc:15:82:4c:ea:ee: ae:b6:ff:80:8d:6e:d0:c5:3f:1e:12:07:6b:d6:80: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:5C:06:12:CA:C4:F0:E4:57:70:99:8D:42:40:C3:0B:8A:8D:92 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:7f:a8:f3:d3:8c:bd:8a:04:3b:80:e9:85:9e:44:84:ed: bd:e8:f7:ea:4f:11:af:93:25:a0:be:2c:90:aa:e6:40:7b:c3: 94:05:67:d6:e5:c2:2c:76:11:d7:98:48:3f:0d:b2:66:e2:82: 38:5a:54:f8:75:e9:34:f9:c0:ef:87:56:ac:c2:e8:03:97:87: e5:37:22:8c:c3:b9:89:b3:a3:0b:28:72:12:25:92:e2:d1:82: 0f:5d:66:8b:94:41:94:0d:e0:6d:28:25:3f:62:03:90:53:80: f8:80:88:41:a1:f0:17:ad:3d:b6:fc:35:ed:34:72:19:b7:5a: a1:d0:58:d6:7e:d2:68:0d:a1:d2:7c:67:6c:cf:ed:2a:7a:97: 34:a6:b8:a3:da:64:8d:03:01:bd:22:44:f3:cf:5a:ca:c9:f7: 5f:de:2b:e0:04:4e:72:70:03:ce:2d:b7:83:87:14:a0:67:91: 45:22:1a:f0:9f:21:06:a4:b9:92:52:3f:b9:75:69:9c:20:95: 34:71:eb:0c:32:5f:b7:21:66:c0:83:da:36:d9:87:82:96:8d: 40:51:1d:d7:b4:fc:07:d9:e8:8b:61:fa:5e:23:7d:a9:87:57: 1c:20:fe:57:64:96:f0:a2:e5:a8:a5:90:68:18:96:75:9a:26: 57:ba:61:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjUxMDE5MDYwODE5WhcNMjUxMDI2MDYwODE5WjAYMRYwFAYD VQQDEw02OGY0ODA1My1jN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQX7vpEE+X888NMCFsL+WvoBuoulkBucfhFE7lvkHsX4cMtNJXCqMhKR8q6m vpQ0tfck0oxn2mrr+u1zz/UwZSEPMw4AJyKzZITut/g0ylxi6pHFwfXTrl6pU8r/ Kmuvx30T920D7Rz22HlapXHlpr8QsLC2lhOIYgmrlDAJ/OutVib016Dn97R6Rdr1 e+onX99BcSNGvQ2yGLTeleRkpVcomKCNHMlfYOOP8tJYFnEJKFE3St/NB+U3dYqk aBM509peg9fiHAZM6BuoFPLy1XkMPU1PgduJ5AlumcMT3jsMRqzPlLAyCxfMFYJM 6u6utv+AjW7QxT8eEgdr1oDkAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ7XAYS ysTw5FdwmY1CQMMLio2SMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1o3+o89OMvYoEO4DphZ5EhO296PfqTxGvkyWgviyQquZAe8OUBWfW 5cIsdhHXmEg/DbJm4oI4WlT4dek0+cDvh1aswugDl4flNyKMw7mJs6MLKHISJZLi 0YIPXWaLlEGUDeBtKCU/YgOQU4D4gIhBofAXrT22/DXtNHIZt1qh0FjWftJoDaHS fGdsz+0qepc0prij2mSNAwG9IkTzz1rKyfdf3ivgBE5ycAPOLbeDhxSgZ5FFIhrw nyEGpLmSUj+5dWmcIJU0cesMMl+3IWbAg9o22YeClo1AUR3XtPwH2eiLYfpeI32p h1ccIP5XZJbwouWopZBoGJZ1miZXumEB -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:20 2025 by rpki-client