$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft File: K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft (raw, json) Hash identifier: Avuz7BGZQUlj5HRMku6u5JFr516m7GGQ5k/8ehejKnc= Subject key identifier: 71:0C:D2:A0:58:FB:0F:92:D3:6F:A3:86:3E:13:28:B8:EC:B1:D6:EF Authority key identifier: 2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 Certificate issuer: /CN=A9140E40/serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Certificate serial: 21E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft Manifest number: 21E2 Signing time: Mon 20 Oct 2025 16:06:18 +0000 Manifest this update: Mon 20 Oct 2025 16:06:17 +0000 Manifest next update: Mon 27 Oct 2025 16:06:17 +0000 Files and hashes: 1: K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl (hash: SNDOFSPjDgxSDj6u6ZM3A/HdsV35FSOEQvtq9Oy0JIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8674 (0x21e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E40, serialNumber=2B94EBA478E9D112B1E50A0DE330D2AD858E1CD0 Validity Not Before: Oct 20 16:06:17 2025 GMT Not After : Oct 27 16:06:17 2025 GMT Subject: CN=68f65df9-4090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f0:4a:68:33:d6:b1:4f:c9:da:d0:6b:11:f7: 3b:7c:1d:ad:53:47:a7:d0:2c:6f:24:bf:1d:46:b0: 6b:bf:aa:de:4d:93:df:05:53:23:de:a7:ff:40:3c: 6b:f6:e1:fe:4e:67:1b:5c:9b:49:95:40:cd:c2:89: 09:44:39:a3:cb:87:35:01:66:a3:04:10:e7:a7:9d: de:3e:91:70:dd:f1:f0:a2:f2:a9:16:9b:cb:9d:2e: 7b:3f:2f:9b:83:85:0d:28:85:2e:43:86:b2:1c:c1: c9:89:0a:2c:f4:4d:d3:6e:99:42:02:28:ba:49:27: 07:7a:12:76:23:ec:4d:38:db:52:d4:a3:cd:20:43: 13:f1:7c:64:72:b1:74:1f:42:0c:91:dd:34:34:5a: 9f:26:0c:3e:4f:85:82:3e:b5:79:0a:ce:34:90:d0: 13:6f:b3:ef:44:e6:73:47:0f:51:c3:eb:a6:7c:cb: 73:5f:4c:a9:be:cc:6d:9c:2d:76:83:28:84:c5:ff: 3e:ef:1f:b5:3c:54:fe:c7:73:54:c7:a3:7c:33:0d: c4:fa:15:01:1c:e6:ed:65:16:9f:b1:5f:cd:00:37: 65:5b:e2:15:11:ce:d4:6e:ba:11:7f:c3:f1:b2:2c: 3c:65:5b:53:b6:ec:62:c2:88:1a:48:e1:48:80:53: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0C:D2:A0:58:FB:0F:92:D3:6F:A3:86:3E:13:28:B8:EC:B1:D6:EF X509v3 Authority Key Identifier: keyid:2B:94:EB:A4:78:E9:D1:12:B1:E5:0A:0D:E3:30:D2:AD:85:8E:1C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5TrpHjp0RKx5QoN4zDSrYWOHNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E40/E3611BD6D38B11E58392F54DC4F9AE02/K5TrpHjp0RKx5QoN4zDSrYWOHNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ac:65:92:a8:72:b4:3d:9c:02:da:8a:06:d5:e8:6e:52:e9: 27:44:40:2f:d5:05:b8:62:f9:63:a4:c6:a1:30:85:07:69:12: 3c:9e:fb:cc:34:1f:23:f4:28:2c:da:14:6e:2a:9f:59:e9:62: 26:e9:33:92:27:43:89:11:e1:cf:d5:5b:e1:d9:67:6d:6c:45: e8:cd:73:e4:f3:3c:2a:a4:47:9e:03:93:5b:19:85:bf:a6:32: 29:38:e7:3b:01:13:15:24:e7:bb:6e:fc:66:80:62:82:9d:ec: 12:79:cd:22:96:c3:68:b8:98:3e:86:89:20:1e:71:15:7e:26: 4a:49:65:b6:2c:1e:77:74:ae:f0:44:5d:78:74:8a:09:96:55: ce:68:d7:52:a5:67:1b:03:99:c3:63:37:ed:db:79:d3:ba:8f: f3:0d:2d:5f:0d:10:84:bd:45:5f:29:18:1c:fd:75:4a:25:dc: 50:52:89:ef:14:e5:b5:2d:a9:00:c6:25:95:d3:b6:2c:30:67: 84:4c:b5:66:03:09:59:6e:06:ec:c1:c9:06:c2:59:53:17:a8: 3c:92:2e:fb:34:f2:28:1b:49:d2:30:f0:c6:b7:a9:a3:a3:d3: 1b:6b:69:66:b4:0c:a9:4d:e4:03:f5:2e:55:33:e1:79:ed:f1: 3c:94:a9:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDAxMTAvBgNVBAUTKDJCOTRFQkE0NzhFOUQxMTJCMUU1MEEwREUzMzBEMkFE ODU4RTFDRDAwHhcNMjUxMDIwMTYwNjE3WhcNMjUxMDI3MTYwNjE3WjAYMRYwFAYD VQQDEw02OGY2NWRmOS00MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fBKaDPWsU/J2tBrEfc7fB2tU0en0CxvJL8dRrBrv6reTZPfBVMj3qf/QDxr 9uH+TmcbXJtJlUDNwokJRDmjy4c1AWajBBDnp53ePpFw3fHwovKpFpvLnS57Py+b g4UNKIUuQ4ayHMHJiQos9E3TbplCAii6SScHehJ2I+xNONtS1KPNIEMT8XxkcrF0 H0IMkd00NFqfJgw+T4WCPrV5Cs40kNATb7PvROZzRw9Rw+umfMtzX0ypvsxtnC12 gyiExf8+7x+1PFT+x3NUx6N8Mw3E+hUBHObtZRafsV/NADdlW+IVEc7UbroRf8Px siw8ZVtTtuxiwogaSOFIgFNr6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEM0qBY +w+S02+jhj4TKLjssdbvMB8GA1UdIwQYMBaAFCuU66R46dESseUKDeMw0q2FjhzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0MC9FMzYxMUJENkQz OEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBSS3g1UW9ONHpEU3JZV09I TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1VHJwSGpwMFJLeDVRb040ekRTcllXT0hOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0MC9FMzYxMUJENkQzOEIxMUU1ODM5MkY1NERDNEY5QUUwMi9LNVRycEhqcDBS S3g1UW9ONHpEU3JZV09ITkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTrGWSqHK0PZwC2ooG1ehuUuknREAv1QW4YvljpMahMIUHaRI8nvvM NB8j9Cgs2hRuKp9Z6WIm6TOSJ0OJEeHP1Vvh2WdtbEXozXPk8zwqpEeeA5NbGYW/ pjIpOOc7ARMVJOe7bvxmgGKCnewSec0ilsNouJg+hokgHnEVfiZKSWW2LB53dK7w RF14dIoJllXOaNdSpWcbA5nDYzft23nTuo/zDS1fDRCEvUVfKRgc/XVKJdxQUonv FOW1LakAxiWV07YsMGeETLVmAwlZbgbswckGwllTF6g8ki77NPIoG0nSMPDGt6mj o9Mba2lmtAypTeQD9S5VM+F57fE8lKmH -----END CERTIFICATE-----Generated at Mon Oct 20 21:07:17 2025 by rpki-client