$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft File: kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json) Hash identifier: lJTtWDYen9QR/nWSSOvZr8avXoFGJ+TevoMFfrcMdyM= Subject key identifier: D7:BB:C5:61:A7:2C:AD:B0:E8:76:21:FC:B3:2B:00:3A:DB:9E:7E:6F Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B Certificate issuer: /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 10:56:49 +0000 Manifest this update: Sun 19 Oct 2025 10:56:48 +0000 Manifest next update: Sun 26 Oct 2025 10:56:48 +0000 Files and hashes: 1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: wpQw0Xlrby7vKwpLsPkp+FtK24nABqAq/zLHPlLZQRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B Validity Not Before: Oct 19 10:56:48 2025 GMT Not After : Oct 26 10:56:48 2025 GMT Subject: CN=68f4c3f0-68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:38:97:f8:66:5c:8e:4a:64:20:86:78:45:f6: b7:b0:34:27:3a:7f:e9:c2:0b:a1:04:98:32:ac:a2: f9:17:1f:70:c5:28:cb:51:cc:2e:af:8a:52:79:18: 93:e4:fa:8e:8f:4b:8a:f3:12:e9:89:a4:2c:38:62: 87:96:ac:a3:f0:24:9e:72:90:12:60:40:cc:0e:5c: 1e:26:70:95:a5:7c:ef:7d:10:5a:52:71:09:f1:24: 7a:df:b5:92:cc:a0:70:46:80:14:6a:f2:f9:f8:65: 34:77:94:94:f5:97:47:93:0b:34:4d:bf:31:e8:f4: ee:89:b1:a0:50:ca:dc:58:e2:9e:60:f6:94:16:58: 62:d1:68:70:e6:1d:12:b0:ac:32:e6:4e:fb:21:bf: 7f:0b:4b:c8:2a:07:a0:8a:4a:63:8f:b3:db:07:d7: cc:b9:26:4a:27:d9:e1:e1:e2:ec:23:84:81:2a:bf: 08:c4:de:9d:38:12:2d:5f:a7:4c:ab:2d:b0:07:76: 0a:9c:a6:ce:62:bd:cf:c5:1e:a8:63:2c:ff:14:d1: d8:98:0d:da:8d:27:64:98:a8:7c:26:04:8a:2c:a9: 6d:eb:85:83:4b:b1:6e:9c:21:fc:27:d5:07:38:85: ca:9d:47:31:de:80:42:aa:b0:20:cc:c0:b2:a4:88: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:C5:61:A7:2C:AD:B0:E8:76:21:FC:B3:2B:00:3A:DB:9E:7E:6F X509v3 Authority Key Identifier: keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:74:45:ad:81:51:3b:4f:4b:bd:7a:d8:3f:76:d0:f6:0a:25: 30:4f:5d:6c:49:80:53:5c:2e:b8:1d:9f:1a:03:82:c8:e8:d5: ab:9d:69:98:c1:08:f1:c3:9e:c2:05:3f:fe:a8:71:15:af:36: 7c:6a:d8:d9:8e:ad:d6:81:ea:cf:1d:78:87:34:14:35:8f:fc: ec:84:b8:4f:54:a7:c2:65:70:84:05:ec:cf:97:8f:2f:35:f1: 34:db:f7:4c:2c:6b:85:9c:47:b5:ea:11:f2:cb:d2:94:13:ee: fb:89:d3:85:fd:d8:4a:23:c6:8b:86:94:79:c6:ab:89:73:51: fb:04:8c:4d:8a:8e:65:da:d2:07:36:85:c6:bb:8e:43:8a:4a: 33:42:08:db:46:3f:31:bd:69:e6:90:68:61:fb:17:de:30:d9: 8d:7d:76:35:9c:c0:c5:cb:96:7b:9e:4b:fe:3f:51:02:22:03: 56:b4:97:8e:50:3c:91:9b:f8:50:96:60:e8:f2:63:a1:12:38: 23:43:fb:d7:f5:02:f3:45:d6:ad:30:11:cb:32:83:c8:6b:b6: da:46:6c:e7:ab:10:15:da:76:f4:df:0f:25:16:61:5c:c0:95: 61:cd:d6:04:15:9b:3b:56:54:4a:bf:7f:83:55:2f:3a:1f:b1: c6:bf:40:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkZCQzExMC8GA1UEBRMoOTExRDUwNTU4RDlGRjA5MkI5QzczOUVBMTBBNUI1MzNF MkU5RkUzQjAeFw0yNTEwMTkxMDU2NDhaFw0yNTEwMjYxMDU2NDhaMBgxFjAUBgNV BAMTDTY4ZjRjM2YwLTY4ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClOJf4ZlyOSmQghnhF9rewNCc6f+nCC6EEmDKsovkXH3DFKMtRzC6vilJ5GJPk +o6PS4rzEumJpCw4YoeWrKPwJJ5ykBJgQMwOXB4mcJWlfO99EFpScQnxJHrftZLM oHBGgBRq8vn4ZTR3lJT1l0eTCzRNvzHo9O6JsaBQytxY4p5g9pQWWGLRaHDmHRKw rDLmTvshv38LS8gqB6CKSmOPs9sH18y5Jkon2eHh4uwjhIEqvwjE3p04Ei1fp0yr LbAHdgqcps5ivc/FHqhjLP8U0diYDdqNJ2SYqHwmBIosqW3rhYNLsW6cIfwn1Qc4 hcqdRzHegEKqsCDMwLKkiMRPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU17vFYacs rbDodiH8sysAOtuefm8wHwYDVR0jBBgwFoAUkR1QVY2f8JK5xznqEKW1M+Lp/jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRkJDL0E5RTEzMjU2NTJG NzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9q cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1IxUVZZMmY4Sks1eHpucUVLVzFNLUxwX2pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RkJDL0E5RTEzMjU2NTJGNzExRjBBNkZEOUQ0MkM0RjlBRTAyL2tSMVFWWTJmOEpL NXh6bnFFS1cxTS1McF9qcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG90Ra2BUTtPS7162D920PYKJTBPXWxJgFNcLrgdnxoDgsjo1audaZjB CPHDnsIFP/6ocRWvNnxq2NmOrdaB6s8deIc0FDWP/OyEuE9Up8JlcIQF7M+Xjy81 8TTb90wsa4WcR7XqEfLL0pQT7vuJ04X92EojxouGlHnGq4lzUfsEjE2KjmXa0gc2 hca7jkOKSjNCCNtGPzG9aeaQaGH7F94w2Y19djWcwMXLlnueS/4/UQIiA1a0l45Q PJGb+FCWYOjyY6ESOCND+9f1AvNF1q0wEcsyg8hrttpGbOerEBXadvTfDyUWYVzA lWHN1gQVmztWVEq/f4NVLzofsca/QDQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:16 2025 by rpki-client