$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: nldyxmQfI3lC/Vy8B5G4PdAfmafGfDRKqlbHZNlXE8Q= Subject key identifier: F0:15:A9:A5:3F:B0:C6:8C:A1:CA:46:2D:09:C3:4C:84:F5:9B:61:43 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 014E Signing time: Sun 19 Oct 2025 06:35:29 +0000 Manifest this update: Sun 19 Oct 2025 06:35:28 +0000 Manifest next update: Sun 26 Oct 2025 06:35:28 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: k0fZ2vN99E6rgHHj+KQfzD0K63XfJnlZ4+yXVCzvaG4=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: LLGlR1swQUGpHRHzrbzk96I6Zx3kb8thD/xfxQf3uHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Oct 19 06:35:28 2025 GMT Not After : Oct 26 06:35:28 2025 GMT Subject: CN=68f486b0-656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:b0:e7:96:a7:d5:52:a7:4b:f1:a7:cf:36: 21:e6:f7:02:92:60:6d:07:59:bc:7a:37:0f:a0:3b: 13:ef:d2:0f:7d:24:ab:7b:45:9d:b4:92:56:24:e3: a1:1d:6c:7f:6e:a2:a8:b2:1b:3a:31:e5:8c:f0:dd: f0:af:e9:b5:8c:3c:71:67:3c:61:e3:0e:c2:1e:8b: 6a:84:16:1c:e8:2b:0a:29:ef:f0:91:6f:ff:d8:15: d6:cb:90:c6:ca:70:f9:64:9d:7f:5e:59:5e:47:fb: 27:87:22:ee:85:29:01:8a:37:d3:9d:16:2d:0d:00: 3f:f0:6f:78:fe:84:53:a8:45:9c:4c:c0:4b:74:a0: 77:78:6a:6c:07:5c:be:04:2a:4c:81:b6:95:a2:12: 45:ec:8a:42:e0:aa:69:3f:1d:22:2f:46:4b:f3:38: 71:4f:84:1a:62:b1:7e:04:d1:40:9b:4f:78:e8:4a: ac:29:fb:fe:3d:fd:c4:af:7a:85:60:77:b1:87:43: ef:1b:fa:49:95:a6:6e:f1:05:0e:75:54:fb:d9:32: 5c:6f:ec:8b:04:ae:f7:c7:9e:22:4f:1d:79:58:c6: d1:66:67:16:b2:5d:c2:5b:3b:d0:9a:f7:f0:93:d9: 9f:eb:32:2e:ce:a3:4c:27:2a:79:17:c0:7b:59:c5: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:15:A9:A5:3F:B0:C6:8C:A1:CA:46:2D:09:C3:4C:84:F5:9B:61:43 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:19:06:c7:b4:36:e1:5b:a6:2f:f6:e2:22:22:a1:45:40:fb: 05:53:cb:f7:94:8b:e4:f2:7c:c6:ba:a2:fb:f3:45:ac:ec:d4: 59:c7:b8:bd:3a:f1:7b:c9:70:f0:85:cb:cc:71:d9:a8:d4:c6: f0:3a:ab:70:99:ae:21:ad:d2:86:fe:d1:71:db:32:64:36:97: 7b:43:f3:6a:88:72:ea:fd:8e:ed:7a:ff:40:75:74:f4:46:1a: a7:4e:ae:51:fc:1f:b2:1f:85:5b:39:c5:60:67:96:11:4e:2f: 40:0c:45:90:bc:15:c3:2c:58:81:cf:22:7d:5e:62:4a:e0:4f: 3c:cc:3a:f7:5e:cc:5d:98:aa:9d:90:0a:b8:38:a2:4a:0c:2d: 58:6c:df:eb:67:fe:37:12:42:2a:e5:97:7e:1e:84:1b:0e:54: 33:0f:d0:cf:0c:7a:14:a2:59:c8:51:6f:90:02:46:8c:8d:2a: 50:f8:3a:d2:35:12:90:6e:c1:f2:d8:cc:9a:b6:6b:dd:87:5d: 2e:86:6c:9c:f5:d4:8e:48:d4:d0:e8:3b:6b:79:31:ab:e6:09: dd:06:47:f2:03:f4:d0:45:18:b2:cc:03:ea:99:4e:5e:21:67: ac:0e:e7:ab:3c:e9:07:b7:eb:0c:16:ba:dd:ad:66:f1:77:09: d4:83:5d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjUxMDE5MDYzNTI4WhcNMjUxMDI2MDYzNTI4WjAYMRYwFAYD VQQDEw02OGY0ODZiMC02NTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJew55an1VKnS/GnzzYh5vcCkmBtB1m8ejcPoDsT79IPfSSre0WdtJJWJOOh HWx/bqKoshs6MeWM8N3wr+m1jDxxZzxh4w7CHotqhBYc6CsKKe/wkW//2BXWy5DG ynD5ZJ1/XlleR/snhyLuhSkBijfTnRYtDQA/8G94/oRTqEWcTMBLdKB3eGpsB1y+ BCpMgbaVohJF7IpC4KppPx0iL0ZL8zhxT4QaYrF+BNFAm0946EqsKfv+Pf3Er3qF YHexh0PvG/pJlaZu8QUOdVT72TJcb+yLBK73x54iTx15WMbRZmcWsl3CWzvQmvfw k9mf6zIuzqNMJyp5F8B7WcUVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAVqaU/ sMaMocpGLQnDTIT1m2FDMB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBGQbHtDbhW6Yv9uIiIqFFQPsFU8v3lIvk8nzGuqL780Ws7NRZx7i9 OvF7yXDwhcvMcdmo1MbwOqtwma4hrdKG/tFx2zJkNpd7Q/NqiHLq/Y7tev9AdXT0 RhqnTq5R/B+yH4VbOcVgZ5YRTi9ADEWQvBXDLFiBzyJ9XmJK4E88zDr3XsxdmKqd kAq4OKJKDC1YbN/rZ/43EkIq5Zd+HoQbDlQzD9DPDHoUolnIUW+QAkaMjSpQ+DrS NRKQbsHy2Myatmvdh10uhmyc9dSOSNTQ6DtreTGr5gndBkfyA/TQRRiyzAPqmU5e IWesDuerPOkHt+sMFrrdrWbxdwnUg10q -----END CERTIFICATE-----Generated at Mon Oct 20 16:53:44 2025 by rpki-client