$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: Pv6CusFVEC9S4p7L/dqibK2jZJfQOnydXjvuwXjq1xU= Subject key identifier: 7E:99:15:1E:D4:7B:F2:9A:41:1D:0B:32:4B:67:6C:CC:E1:E0:D6:69 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0CAC Signing time: Sat 18 Oct 2025 18:54:21 +0000 Manifest this update: Sat 18 Oct 2025 18:54:20 +0000 Manifest next update: Sat 25 Oct 2025 18:54:20 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: cKKzY/34po8FiFWtQxpE/6FzUz/i5dvOzQzyyYEQ6nM=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: dvi0NiJsfBapKtj0ISklbEMBQ4R3yCT+QGTIlcMVI/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Oct 18 18:54:20 2025 GMT Not After : Oct 25 18:54:20 2025 GMT Subject: CN=68f3e25c-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:79:43:e0:81:c0:6e:a3:a1:41:db:28:dc: 88:ab:26:fc:5c:02:82:54:a2:b9:73:a4:89:1c:d9: 6d:63:59:c1:39:e5:32:0e:f1:14:fe:ee:b4:6b:d0: b1:5d:b4:62:b4:ef:ae:dd:ee:47:db:18:f7:87:55: 91:ff:e7:59:c6:32:70:74:90:74:22:75:f2:1e:d3: d8:3d:4a:85:9a:fa:7a:b8:4b:b3:33:4b:e9:f7:74: 21:9a:3f:10:d9:f0:1a:e2:91:23:31:fd:da:03:fc: d3:e3:72:59:cd:df:0b:1b:7a:55:25:10:c9:c7:bd: 85:99:a9:1a:92:f5:a5:62:6c:45:33:28:e0:28:02: 73:38:e4:fc:65:d4:b1:11:21:6b:04:85:20:8d:36: 97:48:04:91:69:53:f4:1f:54:4b:2e:53:20:6e:9a: 92:da:69:eb:db:c6:2a:3e:a4:19:30:26:5d:fc:c9: d8:f5:72:7a:69:a2:58:8b:03:84:52:e3:f7:4a:d1: 48:6b:7c:dd:50:30:96:28:35:90:0e:2e:8f:76:c2: 7a:38:5b:dc:10:be:86:9c:2d:cf:0c:2c:81:d7:e4: 4f:76:7e:e0:a9:6b:89:9c:b4:ac:81:f5:a9:7d:19: 87:66:29:69:9c:bc:85:27:ae:37:9d:ef:cb:6b:83: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:99:15:1E:D4:7B:F2:9A:41:1D:0B:32:4B:67:6C:CC:E1:E0:D6:69 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:a1:8e:63:2f:af:ea:37:4d:1a:7f:59:7c:b5:23:d6:64: cf:b1:54:2d:39:e3:e0:62:11:0f:4b:e5:fb:34:a4:f0:9b:8f: 54:d7:5c:4f:96:67:51:95:6c:37:31:cf:cd:a2:ae:0a:67:42: 6c:af:83:72:f2:88:a9:36:1a:d5:05:5a:e7:53:ed:d8:3c:64: 35:fa:a5:3a:08:82:6b:d3:99:96:f0:50:68:47:3b:88:42:e8: 50:66:94:de:c0:90:47:fd:7b:7b:4e:63:96:74:29:cf:73:49: 90:fb:f5:39:a0:cd:c9:9e:b9:5d:66:47:b4:93:be:36:33:07: 60:c7:56:41:64:dd:a0:69:44:6f:72:c5:d6:eb:31:55:fc:f7: 5a:3a:c6:44:cc:d1:59:93:70:01:67:7a:a1:70:e1:b4:6d:d2: 54:89:b7:ef:6c:87:66:cb:8d:54:c0:9b:d5:dd:da:97:ec:80: 33:74:57:a0:ed:aa:f9:3f:b0:f0:7f:9b:44:6a:46:c4:05:00: 0e:11:65:0f:be:6c:e1:89:7b:a0:4d:89:43:15:01:96:00:e4: c1:df:23:30:ed:de:88:0b:94:6c:0b:2c:13:9f:72:cf:45:7e: 29:d8:ec:a5:bb:2d:f1:f1:e4:64:74:3f:b5:ea:fd:80:14:c3: 67:9d:88:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjUxMDE4MTg1NDIwWhcNMjUxMDI1MTg1NDIwWjAYMRYwFAYD VQQDEw02OGYzZTI1Yy04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7N5Q+CBwG6joUHbKNyIqyb8XAKCVKK5c6SJHNltY1nBOeUyDvEU/u60a9Cx XbRitO+u3e5H2xj3h1WR/+dZxjJwdJB0InXyHtPYPUqFmvp6uEuzM0vp93Qhmj8Q 2fAa4pEjMf3aA/zT43JZzd8LG3pVJRDJx72FmakakvWlYmxFMyjgKAJzOOT8ZdSx ESFrBIUgjTaXSASRaVP0H1RLLlMgbpqS2mnr28YqPqQZMCZd/MnY9XJ6aaJYiwOE UuP3StFIa3zdUDCWKDWQDi6PdsJ6OFvcEL6GnC3PDCyB1+RPdn7gqWuJnLSsgfWp fRmHZilpnLyFJ643ne/La4M31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6ZFR7U e/KaQR0LMktnbMzh4NZpMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJaGOYy+v6jdNGn9ZfLUj1mTPsVQtOePgYhEPS+X7NKTwm49U11xP lmdRlWw3Mc/Noq4KZ0Jsr4Ny8oipNhrVBVrnU+3YPGQ1+qU6CIJr05mW8FBoRzuI QuhQZpTewJBH/Xt7TmOWdCnPc0mQ+/U5oM3JnrldZke0k742Mwdgx1ZBZN2gaURv csXW6zFV/PdaOsZEzNFZk3ABZ3qhcOG0bdJUibfvbIdmy41UwJvV3dqX7IAzdFeg 7ar5P7Dwf5tEakbEBQAOEWUPvmzhiXugTYlDFQGWAOTB3yMw7d6IC5RsCywTn3LP RX4p2Oyluy3x8eRkdD+16v2AFMNnnYjh -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:57 2025 by rpki-client