$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft File: k1ndLhIU62ulYiqzyAtqkhZoDMw.mft (raw, json) Hash identifier: yQ2earVejYXoJF3wNkqZfPgsDHwW/yxSufVedav0NXk= Subject key identifier: B9:AB:AC:C4:8D:55:C5:65:E1:98:31:DF:CA:A1:41:FE:0D:17:43:91 Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft Manifest number: 0643 Signing time: Sun 19 Oct 2025 00:16:04 +0000 Manifest this update: Sun 19 Oct 2025 00:16:04 +0000 Manifest next update: Sun 26 Oct 2025 00:16:04 +0000 Files and hashes: 1: k1ndLhIU62ulYiqzyAtqkhZoDMw.crl (hash: 9m95g+8/g4X7koc/oluOqLDMXcxh1JaKseT4dwmdum8=) 2: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (hash: My0gxkPTiPIufgJL4YRuXb9RXfxXNWfL0lWpF2RiHBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC Validity Not Before: Oct 19 00:16:04 2025 GMT Not After : Oct 26 00:16:04 2025 GMT Subject: CN=68f42dc4-d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:c6:38:43:3f:65:54:ff:e0:be:28:b4:19: 6e:a9:62:c7:d8:88:1d:0e:01:94:a1:55:59:ca:f7: 38:9d:86:b0:67:91:81:68:ef:b6:59:2a:fb:dd:16: 11:34:54:83:a2:0d:5e:98:ad:f4:58:cc:2e:22:bc: 04:34:87:e8:b9:9c:8d:b9:28:63:10:33:3e:91:13: fb:76:61:61:1a:5c:ff:87:b5:0c:6a:76:51:8b:fa: 03:44:1c:e5:b6:a8:67:b9:a5:8e:8f:1d:aa:d5:f6: 51:8b:83:82:9e:a4:89:75:ed:00:52:2d:43:9f:82: 9c:e2:22:f9:d8:bd:7d:5d:dd:e3:5b:5b:b3:2d:8a: de:6a:78:c9:84:51:63:c7:15:10:79:e9:3a:e6:a4: 8a:ce:86:14:93:83:8e:02:a8:14:3d:08:79:4c:e5: f8:5a:e4:fa:44:c9:4d:81:33:5e:6c:0c:0d:67:00: 93:17:4b:f9:57:ae:4f:89:2f:e7:60:e9:df:49:f0: 00:0c:0a:3d:c4:b4:6a:41:b1:bd:e7:5a:5c:b1:34: e4:d8:b2:a9:39:7b:53:17:20:61:5f:7c:02:4a:7e: a1:62:90:83:e3:73:05:8b:b6:ca:47:63:1c:ff:5d: 9b:13:1e:7e:b2:1a:a4:99:85:41:a7:4b:c7:83:d5: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:AC:C4:8D:55:C5:65:E1:98:31:DF:CA:A1:41:FE:0D:17:43:91 X509v3 Authority Key Identifier: keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:43:26:37:78:f0:6d:7a:f4:41:27:27:ee:d8:17:fa:2c:8f: 11:42:e1:93:93:46:84:be:11:89:57:36:0a:eb:12:ea:5d:1f: 40:e9:40:5b:da:90:0a:86:6f:6e:5c:9b:11:a1:ff:04:3c:05: bb:4a:be:23:c2:cc:4f:d5:77:f5:56:98:58:4d:3c:cf:b6:85: 63:f9:53:c2:2a:87:4e:8f:fb:4c:6d:f9:73:44:b3:f5:de:d9: db:5b:36:b5:10:87:43:79:85:5c:c3:26:fb:82:eb:72:c2:05: 44:ab:ae:70:4d:10:69:1e:a6:7c:ef:2f:8b:38:bf:7b:8f:1d: 97:37:4f:e6:51:33:42:ca:c8:07:5f:c1:ed:8b:8c:5b:58:20: 80:8b:64:33:e6:9b:b3:a6:e7:4d:10:08:96:fd:a5:db:0d:b7: a6:a2:75:f4:da:19:bc:21:81:24:4c:2f:75:75:4c:61:78:d2: d7:19:dd:17:71:e1:ec:b6:39:81:85:f5:7b:2c:67:c6:03:fe: 21:0e:79:66:1b:95:09:15:62:c9:f9:35:76:83:de:fe:3c:54: f5:12:6d:0c:40:d1:33:91:d7:d5:7c:e1:f2:35:03:ac:88:6c: 96:5d:47:45:0a:88:b8:78:79:c4:c6:d0:c9:ee:0f:b2:8b:ca: 35:09:65:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JCRTYxMTAvBgNVBAUTKDkzNTlERDJFMTIxNEVCNkJBNTYyMkFCM0M4MEI2QTky MTY2ODBDQ0MwHhcNMjUxMDE5MDAxNjA0WhcNMjUxMDI2MDAxNjA0WjAYMRYwFAYD VQQDEw02OGY0MmRjNC1kMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUjGOEM/ZVT/4L4otBluqWLH2IgdDgGUoVVZyvc4nYawZ5GBaO+2WSr73RYR NFSDog1emK30WMwuIrwENIfouZyNuShjEDM+kRP7dmFhGlz/h7UManZRi/oDRBzl tqhnuaWOjx2q1fZRi4OCnqSJde0AUi1Dn4Kc4iL52L19Xd3jW1uzLYreanjJhFFj xxUQeek65qSKzoYUk4OOAqgUPQh5TOX4WuT6RMlNgTNebAwNZwCTF0v5V65PiS/n YOnfSfAADAo9xLRqQbG951pcsTTk2LKpOXtTFyBhX3wCSn6hYpCD43MFi7bKR2Mc /12bEx5+shqkmYVBp0vHg9Vm3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmrrMSN VcVl4Zgx38qhQf4NF0ORMB8GA1UdIwQYMBaAFJNZ3S4SFOtrpWIqs8gLapIWaAzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkJFNi9BMDk3RjBENEFE MzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYydWxZaXF6eUF0cWtoWm9E TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2sxbmRMaElVNjJ1bFlpcXp5QXRxa2hab0RNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkJFNi9BMDk3RjBENEFEMzAxMUVCQjEyN0I2MjNDNEY5QUUwMi9rMW5kTGhJVTYy dWxZaXF6eUF0cWtoWm9ETXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDQyY3ePBtevRBJyfu2Bf6LI8RQuGTk0aEvhGJVzYK6xLqXR9A6UBb 2pAKhm9uXJsRof8EPAW7Sr4jwsxP1Xf1VphYTTzPtoVj+VPCKodOj/tMbflzRLP1 3tnbWza1EIdDeYVcwyb7gutywgVEq65wTRBpHqZ87y+LOL97jx2XN0/mUTNCysgH X8Hti4xbWCCAi2Qz5puzpudNEAiW/aXbDbemonX02hm8IYEkTC91dUxheNLXGd0X ceHstjmBhfV7LGfGA/4hDnlmG5UJFWLJ+TV2g97+PFT1Em0MQNEzkdfVfOHyNQOs iGyWXUdFCoi4eHnExtDJ7g+yi8o1CWVR -----END CERTIFICATE-----Generated at Tue Oct 21 01:04:16 2025 by rpki-client