$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: V9cDp6Ri2bXA8fwhkWEqQiH13GVMqF1ErNV42YLObSc= Subject key identifier: 89:D3:F1:C2:EB:00:20:0B:1C:D1:08:81:F0:F3:67:5C:C6:25:2D:35 Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 0662 Signing time: Sat 18 Oct 2025 22:41:08 +0000 Manifest this update: Sat 18 Oct 2025 22:41:07 +0000 Manifest next update: Sat 25 Oct 2025 22:41:07 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: 9ELwRUwPArLdnIoeLbkBsirZUrkM0+L7Jp2vXdcfun4=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: r8ZqDCZQUEDaJuodGigdg5730ebRMN80tyK9bKpWQ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Oct 18 22:41:07 2025 GMT Not After : Oct 25 22:41:07 2025 GMT Subject: CN=68f41783-f245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:f9:bc:49:bd:9f:94:fd:19:18:4a:3a:a7: c7:62:f3:95:b2:6e:36:63:00:79:78:e9:9d:14:de: 66:92:2e:84:63:05:82:ad:86:8b:08:fd:ec:9c:9c: c5:3f:f2:9d:26:51:7e:54:7b:e8:23:88:a1:e4:ee: 4e:bb:c1:d1:3d:70:72:d1:16:20:5a:a4:a6:71:02: b9:2c:a1:f3:0f:e3:d5:10:12:2b:1a:a8:2c:d7:bf: 65:63:29:d1:50:2c:ba:25:3b:e3:9f:7f:b5:d4:05: c0:a1:00:09:cc:3b:18:cf:09:31:5c:ca:71:af:de: 5b:b5:4c:8c:d5:cc:39:17:b4:98:04:ad:61:35:9e: 12:69:b8:f5:e6:a1:cd:54:c4:4f:6f:58:ee:46:e2: 84:f4:4c:66:d8:46:62:1b:05:9d:a7:f1:68:6b:45: f2:d0:8f:86:5e:6b:a4:f2:ad:65:6f:1f:d4:a7:a5: 21:42:41:e6:37:11:d7:6a:11:a3:37:82:b6:b7:d7: ee:ab:23:9c:dd:1c:ab:ea:6e:75:56:13:ef:88:73: ab:d7:70:94:ab:e2:be:b7:f7:e6:3e:4d:31:1f:7c: 09:59:1b:dd:29:59:29:4a:c5:58:f8:ae:be:5f:ea: b4:e6:7b:df:c6:bb:a9:31:5b:1b:8a:92:e4:72:b0: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D3:F1:C2:EB:00:20:0B:1C:D1:08:81:F0:F3:67:5C:C6:25:2D:35 X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:fe:d5:40:87:88:18:5f:d1:04:66:b8:0c:f2:3f:80:d7:05: 48:4d:ef:41:64:7b:97:1f:c2:cd:df:f8:9a:21:3e:83:37:80: d0:18:0c:55:53:a6:3d:c2:db:0e:3a:07:d7:61:e8:62:2b:13: 4f:ae:d5:5c:dd:d1:d2:20:c7:82:d6:5a:ef:4e:bd:9a:72:93: 84:e9:ec:fd:c4:c0:0c:fc:c4:d1:e2:cd:3c:0c:47:a3:13:69: 9c:db:ac:73:48:4c:c1:e4:f6:c5:0e:99:df:fe:ad:4f:a5:3c: dd:04:12:32:6f:0d:e7:07:28:a6:ce:4b:5b:1d:19:09:5d:d5: bd:04:8d:17:f6:e8:cc:49:fc:1c:3b:7f:dc:31:c0:85:91:fd: 00:a3:2a:ac:82:3b:ef:2f:e6:ca:74:67:4a:40:93:af:22:c5: d1:35:e3:28:54:04:0a:fc:87:cf:c5:3e:4a:7e:b7:fe:bb:1f: ef:e5:58:db:00:3e:b9:49:ce:51:bb:b9:dd:43:ca:fc:19:6b: 2d:61:80:57:f7:fd:b6:f8:75:b6:5d:84:23:ae:08:08:48:5c: fd:17:e5:c8:b0:fe:17:f1:b4:de:a1:59:cb:05:6c:c1:44:0f: dd:18:b0:8e:bb:1d:a1:3c:c7:1f:de:12:2e:e1:91:7a:ab:0c: c1:cb:e6:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjUxMDE4MjI0MTA3WhcNMjUxMDI1MjI0MTA3WjAYMRYwFAYD VQQDEw02OGY0MTc4My1mMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMn5vEm9n5T9GRhKOqfHYvOVsm42YwB5eOmdFN5mki6EYwWCrYaLCP3snJzF P/KdJlF+VHvoI4ih5O5Ou8HRPXBy0RYgWqSmcQK5LKHzD+PVEBIrGqgs179lYynR UCy6JTvjn3+11AXAoQAJzDsYzwkxXMpxr95btUyM1cw5F7SYBK1hNZ4Sabj15qHN VMRPb1juRuKE9Exm2EZiGwWdp/Foa0Xy0I+GXmuk8q1lbx/Up6UhQkHmNxHXahGj N4K2t9fuqyOc3Ryr6m51VhPviHOr13CUq+K+t/fmPk0xH3wJWRvdKVkpSsVY+K6+ X+q05nvfxrupMVsbipLkcrCcfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInT8cLr ACALHNEIgfDzZ1zGJS01MB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDq/tVAh4gYX9EEZrgM8j+A1wVITe9BZHuXH8LN3/iaIT6DN4DQGAxV U6Y9wtsOOgfXYehiKxNPrtVc3dHSIMeC1lrvTr2acpOE6ez9xMAM/MTR4s08DEej E2mc26xzSEzB5PbFDpnf/q1PpTzdBBIybw3nByimzktbHRkJXdW9BI0X9ujMSfwc O3/cMcCFkf0AoyqsgjvvL+bKdGdKQJOvIsXRNeMoVAQK/IfPxT5Kfrf+ux/v5Vjb AD65Sc5Ru7ndQ8r8GWstYYBX9/22+HW2XYQjrggISFz9F+XIsP4X8bTeoVnLBWzB RA/dGLCOux2hPMcf3hIu4ZF6qwzBy+YI -----END CERTIFICATE-----Generated at Tue Oct 21 06:57:50 2025 by rpki-client