$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: qGxufBrsy70IO3nt5nWCneYf7jWDE5tO5oftlItNyPE= Subject key identifier: 5F:B9:FC:CB:87:F5:C7:C3:D6:6D:CB:57:2A:EE:24:FF:E0:5A:8F:5C Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0E64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0E5B Signing time: Sat 18 Oct 2025 18:23:57 +0000 Manifest this update: Sat 18 Oct 2025 18:23:56 +0000 Manifest next update: Sat 25 Oct 2025 18:23:56 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: T2suVta6IXITvGZ2MskIwU702qqvO1vbhnCafl+nvZU=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NeUqjo2VYHUQAlZoEGW65z9tYOjTgZvuRZo90c+p6gU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3684 (0xe64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Oct 18 18:23:56 2025 GMT Not After : Oct 25 18:23:56 2025 GMT Subject: CN=68f3db3d-0121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:0d:33:3b:75:95:17:cd:05:e8:0c:8a:88: 28:3e:02:87:5c:0b:1c:5f:b9:bf:e8:17:b9:bb:64: d5:ee:b7:a6:65:9f:b8:57:58:e1:d0:8b:cf:86:eb: 9c:3f:43:8c:7a:01:e8:f9:54:f2:31:ae:be:76:87: 92:84:b8:6a:91:1e:2d:db:22:8f:b1:05:b2:53:65: 96:e1:fe:0a:8c:99:36:20:dc:cd:6f:49:ce:c6:9f: d8:a1:8d:c2:3b:67:cc:61:54:a4:27:8a:f2:b2:d0: cb:18:dd:b8:36:de:b3:55:aa:1c:18:ac:11:b6:a0: de:8d:aa:ac:2b:81:d0:80:d8:c4:19:ea:33:a8:95: 09:52:10:89:7e:3a:48:9b:7a:d5:03:29:06:51:e2: d3:fa:2b:fc:0d:dd:17:ca:8e:b7:d8:2e:b2:31:54: ae:20:36:4b:fe:c1:5c:7e:45:d1:95:40:e6:7f:fa: b8:ea:91:18:46:b9:f4:15:0e:99:3d:d7:ef:1d:b1: 0f:ef:42:60:98:d1:2b:76:31:9a:66:59:e9:9a:ce: 03:1a:47:6b:f1:51:a0:08:0f:71:8d:f6:12:00:b8: 89:93:99:92:9c:03:97:1a:97:09:78:d8:ac:c9:d5: 84:cd:4d:5b:15:d6:53:e2:ea:a9:25:2a:1a:e4:2e: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B9:FC:CB:87:F5:C7:C3:D6:6D:CB:57:2A:EE:24:FF:E0:5A:8F:5C X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:58:1c:17:78:8e:63:4f:8c:55:33:38:f4:38:c3:be:97: ca:6e:df:d8:00:79:7b:75:a4:84:91:9f:08:be:95:70:ea:b4: 1f:1d:81:a4:30:55:4a:2b:75:c8:d5:18:17:00:37:15:7e:20: 92:7e:01:f1:5a:5f:4e:f6:40:67:5c:d0:1a:5b:20:4a:d0:78: fb:84:18:14:cf:6a:3c:95:17:ac:b0:17:20:91:9c:5f:0d:f9: 3e:fd:fa:a8:87:5f:0c:43:47:fb:c0:c6:01:c5:8b:32:41:27: 4c:fd:d1:8f:50:2a:92:5c:69:b4:bd:b9:d2:0b:15:fa:f0:77: 73:df:62:eb:05:7c:19:30:40:c4:cc:98:ac:fb:51:b1:21:d8: 50:94:ce:27:b4:c5:00:de:be:1a:5f:6c:c2:71:0c:cd:72:10: 7f:73:23:97:62:b8:4f:64:88:9d:b8:d3:06:d9:ec:8c:25:fb: d6:31:bf:af:95:75:16:50:9a:dd:fd:54:a7:f1:e8:46:15:0f: 3c:0d:98:8f:d5:de:d2:33:ef:26:c6:3d:fa:85:93:ea:e8:94: b7:46:a7:8b:8e:43:5e:05:dc:91:76:a1:50:a1:e2:68:71:1a: ca:99:1a:2a:cf:1f:28:ac:db:fa:06:29:dd:28:87:30:b0:a0: a1:f5:df:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjUxMDE4MTgyMzU2WhcNMjUxMDI1MTgyMzU2WjAYMRYwFAYD VQQDEw02OGYzZGIzZC0wMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvusNMzt1lRfNBegMiogoPgKHXAscX7m/6Be5u2TV7remZZ+4V1jh0IvPhuuc P0OMegHo+VTyMa6+doeShLhqkR4t2yKPsQWyU2WW4f4KjJk2INzNb0nOxp/YoY3C O2fMYVSkJ4rystDLGN24Nt6zVaocGKwRtqDejaqsK4HQgNjEGeozqJUJUhCJfjpI m3rVAykGUeLT+iv8Dd0Xyo632C6yMVSuIDZL/sFcfkXRlUDmf/q46pEYRrn0FQ6Z PdfvHbEP70JgmNErdjGaZlnpms4DGkdr8VGgCA9xjfYSALiJk5mSnAOXGpcJeNis ydWEzU1bFdZT4uqpJSoa5C4m7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+5/MuH 9cfD1m3LVyruJP/gWo9cMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1SFgcF3iOY0+MVTM49DjDvpfKbt/YAHl7daSEkZ8IvpVw6rQfHYGk MFVKK3XI1RgXADcVfiCSfgHxWl9O9kBnXNAaWyBK0Hj7hBgUz2o8lRessBcgkZxf Dfk+/fqoh18MQ0f7wMYBxYsyQSdM/dGPUCqSXGm0vbnSCxX68Hdz32LrBXwZMEDE zJis+1GxIdhQlM4ntMUA3r4aX2zCcQzNchB/cyOXYrhPZIiduNMG2eyMJfvWMb+v lXUWUJrd/VSn8ehGFQ88DZiP1d7SM+8mxj36hZPq6JS3RqeLjkNeBdyRdqFQoeJo cRrKmRoqzx8orNv6BindKIcwsKCh9d9k -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:50 2025 by rpki-client