$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: vBQp68teA5bY8xNleMwhgkkqFH5SlLqvJuizdnm7UN0= Subject key identifier: 31:FC:BD:F4:15:66:95:DF:DE:DF:34:08:60:08:1C:63:52:D3:BE:74 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0A8C Signing time: Sat 18 Oct 2025 20:34:11 +0000 Manifest this update: Sat 18 Oct 2025 20:34:10 +0000 Manifest next update: Sat 25 Oct 2025 20:34:10 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: HjZIbAbqBdWhVrnmkPbIP+1DBhnKoR4uwt+QNQCD+og=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Oct 18 20:34:10 2025 GMT Not After : Oct 25 20:34:10 2025 GMT Subject: CN=68f3f9c3-de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:ac:d2:20:26:c3:68:40:d8:02:40:84:29: 2a:e1:e2:e3:9f:34:7c:0a:e0:a0:62:20:3d:7c:b8: 1d:f8:c7:53:80:3f:87:1f:06:a2:ca:11:8d:88:38: 36:89:c6:2b:f9:77:98:9b:92:a4:aa:28:b3:dd:4a: 03:d9:1a:85:b1:ef:a4:e7:10:7a:3d:06:e8:c3:f4: 61:88:e5:81:45:45:fd:a9:43:d8:51:a9:7a:40:73: 2d:64:14:19:b9:75:09:8a:7e:89:3b:54:b1:30:89: 85:6c:4c:ee:0d:5b:3f:88:12:96:09:f6:7f:1b:a8: 68:0f:9c:e4:69:52:35:92:75:a1:3e:a5:c7:7a:7e: 50:8e:40:9a:0b:85:ed:4b:69:26:94:5f:4b:c7:2e: 32:10:66:76:0f:2e:62:61:f8:d9:86:0d:55:56:00: 05:05:fd:c6:52:f4:29:d4:72:9a:76:26:8c:6b:3b: 29:dd:b6:0c:3c:43:e6:96:ba:0c:01:87:3d:af:ac: 0d:d8:08:94:e1:6c:02:a7:ad:be:63:f2:eb:a8:15: e7:a1:9f:27:b4:f8:7b:60:7b:85:ba:22:d6:66:c8: bc:52:ed:3e:4b:ff:01:d4:53:a6:18:3f:54:a0:e7: 91:10:7a:eb:5e:78:22:9c:3c:5f:e4:1c:15:39:2c: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:BD:F4:15:66:95:DF:DE:DF:34:08:60:08:1C:63:52:D3:BE:74 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:26:3c:7c:c6:52:e1:58:4f:41:cf:86:e7:be:ce:24:ef:d6: ae:fb:30:6f:b4:4b:88:c8:67:62:96:0a:48:59:60:e3:26:d0: 8d:b6:ba:a6:25:08:e7:67:a1:3b:5e:13:8b:1e:83:b0:5f:6d: 67:4a:36:bd:d5:72:b8:6d:d2:a2:2f:5e:d1:89:6a:40:71:65: 47:f2:46:53:f7:f6:a1:22:eb:a2:e1:43:e8:29:33:c4:32:cd: 6f:7b:30:af:4e:c9:c6:fe:8e:a9:b0:f2:bb:ca:36:2e:26:a1: fa:ab:15:a2:2a:31:27:96:0a:86:b9:48:24:87:bd:e3:df:79: 8c:2d:a0:9c:d0:c6:f5:5e:87:8f:47:9f:c1:13:ef:f7:3d:db: c6:89:eb:a2:cb:c2:79:a4:e9:5a:b4:00:6c:00:8c:7f:98:83: d9:9f:a4:de:bb:76:54:17:df:07:21:da:9b:78:4f:20:0e:31: 59:b0:2b:25:78:d1:46:ae:67:3a:8c:82:8b:ce:7e:26:64:87: 48:c5:c7:84:5b:f5:82:eb:e0:de:a0:1a:fb:11:3c:72:c9:fd: 1e:85:3c:80:24:76:9d:29:d6:fe:61:e1:bf:16:dd:3a:09:56: 7f:8f:46:e9:b6:a4:17:cf:51:fc:5f:20:d9:3e:65:d4:64:ca: 47:24:f2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUxMDE4MjAzNDEwWhcNMjUxMDI1MjAzNDEwWjAYMRYwFAYD VQQDEw02OGYzZjljMy1kZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3+s0iAmw2hA2AJAhCkq4eLjnzR8CuCgYiA9fLgd+MdTgD+HHwaiyhGNiDg2 icYr+XeYm5Kkqiiz3UoD2RqFse+k5xB6PQbow/RhiOWBRUX9qUPYUal6QHMtZBQZ uXUJin6JO1SxMImFbEzuDVs/iBKWCfZ/G6hoD5zkaVI1knWhPqXHen5QjkCaC4Xt S2kmlF9Lxy4yEGZ2Dy5iYfjZhg1VVgAFBf3GUvQp1HKadiaMazsp3bYMPEPmlroM AYc9r6wN2AiU4WwCp62+Y/LrqBXnoZ8ntPh7YHuFuiLWZsi8Uu0+S/8B1FOmGD9U oOeREHrrXnginDxf5BwVOSwLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH8vfQV ZpXf3t80CGAIHGNS0750MB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoJjx8xlLhWE9Bz4bnvs4k79au+zBvtEuIyGdilgpIWWDjJtCNtrqm JQjnZ6E7XhOLHoOwX21nSja91XK4bdKiL17RiWpAcWVH8kZT9/ahIuui4UPoKTPE Ms1vezCvTsnG/o6psPK7yjYuJqH6qxWiKjEnlgqGuUgkh73j33mMLaCc0Mb1XoeP R5/BE+/3PdvGieuiy8J5pOlatABsAIx/mIPZn6Teu3ZUF98HIdqbeE8gDjFZsCsl eNFGrmc6jIKLzn4mZIdIxceEW/WC6+DeoBr7ETxyyf0ehTyAJHadKdb+YeG/Ft06 CVZ/j0bptqQXz1H8XyDZPmXUZMpHJPK3 -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:44 2025 by rpki-client