$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json) Hash identifier: +XuUKhhI1gY1mFgwDhKvo0wS3Jl1FdpHBArPAlapRPY= Subject key identifier: DD:95:A4:DE:D6:7D:68:A6:1B:B4:D1:DE:86:A3:47:8B:8E:2B:0D:99 Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft Manifest number: 1F Signing time: Sun 19 Oct 2025 11:20:17 +0000 Manifest this update: Sun 19 Oct 2025 11:20:17 +0000 Manifest next update: Sun 26 Oct 2025 11:20:17 +0000 Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: 7N151GOf0jc282XxRxsAkiaC6dNxuQWAy2pkCkAnqzY=) 2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: 8dKxmjrD276AcnRHkqC+TGlsqBHgEpXfogCpAno8Nm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E Validity Not Before: Oct 19 11:20:17 2025 GMT Not After : Oct 26 11:20:17 2025 GMT Subject: CN=68f4c971-6ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:d9:56:f0:f9:d8:c7:36:ee:51:b1:b8:98: f3:49:5e:8e:b9:49:d9:4b:35:38:4c:38:8f:f0:6f: 18:ea:5c:13:7c:3a:3c:4e:02:e6:3b:8a:57:46:55: 96:33:28:23:f1:54:5b:da:80:29:b4:76:2b:48:65: 5c:2a:65:70:5e:6f:94:68:1c:e3:9f:d9:96:d6:d6: 26:84:df:26:f9:e5:20:03:eb:d9:b1:05:12:bf:41: 34:9f:db:29:a3:5d:25:d9:ce:ae:5e:e6:9e:e7:fa: 53:35:e7:12:88:22:30:cf:a3:04:dd:a9:be:f5:75: ca:5e:0c:05:0f:42:f3:8a:4b:4e:e9:11:cb:6c:fc: 78:5e:5c:79:97:ca:11:2b:fc:7a:3f:45:2b:82:cf: 43:80:d6:08:19:62:2b:0e:91:c7:35:bb:3e:f1:22: 7e:35:ca:87:5a:f2:fe:ee:28:a9:21:90:50:7a:a0: b4:ec:ca:0c:da:4a:d9:56:70:8b:76:c3:6f:72:af: fd:fb:ff:85:a3:93:32:59:b2:1c:5e:bc:e0:a2:86: 74:73:99:24:33:99:bd:18:8c:6a:f2:b8:ef:fe:4c: 41:68:d2:88:ab:3a:05:fa:77:87:2b:21:cb:33:7e: 44:b8:7a:26:bc:f7:ec:53:14:7f:e1:b4:02:38:88: 3a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:A4:DE:D6:7D:68:A6:1B:B4:D1:DE:86:A3:47:8B:8E:2B:0D:99 X509v3 Authority Key Identifier: keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:63:b2:db:87:45:be:a0:9b:12:85:27:b5:15:6b:a4:f0:65: 8d:f8:8f:ad:86:35:ef:3b:48:80:e8:61:a3:d1:f4:01:68:be: 61:a2:a2:83:5b:5f:2c:e1:4d:87:cc:44:e4:bf:d6:c1:16:c4: b1:a5:6e:b5:90:d1:65:42:56:53:97:ee:78:75:82:e4:c5:72: ad:cd:da:4f:13:54:6e:df:6b:30:6d:91:60:eb:54:d1:6f:24: 30:1a:e2:7f:fd:db:84:64:92:d3:df:57:1a:9f:53:68:13:fe: c6:65:e8:f7:13:fd:00:35:a1:fe:7a:5f:9f:2e:86:66:10:a9: 24:64:65:59:c0:4c:31:2d:35:ce:7e:e6:13:e1:43:8e:e7:30: 19:47:13:1f:e5:a3:0d:56:92:e3:e2:4a:c7:4f:1d:0e:0f:88: a1:33:25:b4:0d:8e:b1:5b:d8:1d:c0:b1:61:2e:e2:11:03:59: b6:78:44:d9:6e:a6:25:27:58:42:1c:19:46:30:d0:7a:11:69: 93:05:9c:b7:07:5d:86:4b:f8:72:ce:1a:5f:90:73:a0:b7:fa: 3d:5b:be:56:55:af:f0:30:3b:bf:20:3f:a1:cd:ef:10:2d:ce: b6:fb:98:c7:94:8a:62:3e:1c:ce:dc:51:df:98:38:9b:2d:74: 0b:97:80:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB RDNCNkUwRTAeFw0yNTEwMTkxMTIwMTdaFw0yNTEwMjYxMTIwMTdaMBgxFjAUBgNV BAMTDTY4ZjRjOTcxLTZlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv9tlW8PnYxzbuUbG4mPNJXo65SdlLNThMOI/wbxjqXBN8OjxOAuY7ildGVZYz KCPxVFvagCm0ditIZVwqZXBeb5RoHOOf2ZbW1iaE3yb55SAD69mxBRK/QTSf2ymj XSXZzq5e5p7n+lM15xKIIjDPowTdqb71dcpeDAUPQvOKS07pEcts/HheXHmXyhEr /Ho/RSuCz0OA1ggZYisOkcc1uz7xIn41yoda8v7uKKkhkFB6oLTsygzaStlWcIt2 w29yr/37/4WjkzJZshxevOCihnRzmSQzmb0YjGryuO/+TEFo0oirOgX6d4crIcsz fkS4eia89+xTFH/htAI4iDqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3ZWk3tZ9 aKYbtNHehqNHi44rDZkwHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NzYwLzdENTMxNDIwN0UzRjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhz cm9lNmFWSVNuUUswN2JnNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGZjstuHRb6gmxKFJ7UVa6TwZY34j62GNe87SIDoYaPR9AFovmGiooNb XyzhTYfMROS/1sEWxLGlbrWQ0WVCVlOX7nh1guTFcq3N2k8TVG7fazBtkWDrVNFv JDAa4n/924RkktPfVxqfU2gT/sZl6PcT/QA1of56X58uhmYQqSRkZVnATDEtNc5+ 5hPhQ47nMBlHEx/low1WkuPiSsdPHQ4PiKEzJbQNjrFb2B3AsWEu4hEDWbZ4RNlu piUnWEIcGUYw0HoRaZMFnLcHXYZL+HLOGl+Qc6C3+j1bvlZVr/AwO78gP6HN7xAt zrb7mMeUimI+HM7cUd+YOJstdAuXgFE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:39 2025 by rpki-client