$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: QmqEt8C3CpfKMGfwGV3mRwMg2G8Y7HDvNrrCgaDTTl4= Subject key identifier: 42:CD:D1:64:AD:2C:F2:67:9D:6B:43:69:78:A2:94:F3:4A:E4:EC:90 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 049F Signing time: Sun 19 Oct 2025 01:48:10 +0000 Manifest this update: Sun 19 Oct 2025 01:48:09 +0000 Manifest next update: Sun 26 Oct 2025 01:48:09 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: pzkZhEJbb1vxrkhUZXsIejyAy3FLn+sPs8ABzpI1QBg=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Oct 19 01:48:09 2025 GMT Not After : Oct 26 01:48:09 2025 GMT Subject: CN=68f44359-8fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:06:80:85:f8:7f:e0:7d:55:bf:b4:ac:be: 3a:ff:a7:ba:04:5d:5f:97:ae:b8:ed:98:62:20:74: b3:4f:6b:dd:5c:d8:44:59:18:60:15:c3:73:e8:e4: ce:50:ef:fe:cd:35:f8:7c:08:b6:b6:d3:31:cf:18: 3d:2c:9f:a1:01:78:4e:95:da:cf:c4:b8:8b:e9:a2: 58:be:e4:2d:4d:a2:a5:ac:eb:66:db:7c:0e:9e:8f: 3b:0e:6e:ac:35:df:9b:85:44:7b:d0:1d:3a:dd:8a: 64:79:b3:c2:fe:bb:8a:b8:3a:32:df:24:79:ab:2c: 13:05:79:74:90:dd:b4:d7:7c:d4:c2:62:8d:8b:00: c0:72:65:61:1d:37:e7:b9:9b:24:8d:02:60:b1:dc: f9:fc:f4:a2:75:7b:5d:30:11:d1:58:20:6e:be:93: cc:de:9c:73:e5:73:48:f5:3d:57:6d:6e:6c:79:13: 98:2b:4b:e7:8a:a3:5a:f2:2c:1d:55:a7:2a:ae:c6: cf:e9:90:eb:31:bb:c4:c4:40:1f:ae:17:94:ee:af: 8a:11:d7:34:1c:53:a3:ef:45:95:ea:77:18:f6:f1: 98:39:6e:9f:e0:3b:e9:57:3c:66:b4:83:15:1e:a6: 39:49:4c:ca:cf:b5:9f:36:4b:84:6d:98:34:88:b0: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CD:D1:64:AD:2C:F2:67:9D:6B:43:69:78:A2:94:F3:4A:E4:EC:90 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:8a:ec:df:d9:cb:9e:c6:37:5d:f9:4a:f0:c5:16:a7:2f: f1:82:c8:01:51:fb:1a:28:9a:22:f1:12:25:c3:71:17:61:62: 25:56:9b:57:d0:dd:e6:5c:2d:f5:f8:77:32:fc:c8:b6:5b:76: 14:2f:51:54:f0:1e:fd:59:31:19:e5:13:e3:01:3d:8e:c6:7c: db:01:25:a9:06:28:81:1c:72:2f:b4:b5:9b:ce:c6:ac:27:ff: e3:ce:be:99:02:38:e9:a7:b6:44:20:7c:29:36:83:15:a5:f8: 5d:9f:af:7f:16:39:4f:8f:bf:0e:6a:9f:0b:e8:7b:ed:54:70: 78:32:f0:d1:9d:a4:f9:28:11:41:cc:81:4a:90:44:b0:18:dd: f0:c6:12:46:d3:09:5e:bc:00:43:af:11:41:16:05:e5:f2:d3: 73:99:7b:54:3d:be:b4:43:06:2b:d2:1d:9f:33:d2:9d:2b:cd: b0:d4:87:01:43:f7:a1:f5:a1:bb:3b:03:25:35:67:22:bd:17: 31:0c:40:55:0b:77:32:8f:b7:57:b7:e7:3c:c2:01:25:b0:24: 9f:18:bc:e0:d8:ff:67:9f:a8:d5:2c:05:a6:b7:10:04:d5:66: 14:d8:5d:aa:e1:87:c4:79:19:80:51:53:59:43:00:24:28:ee: 9c:8e:28:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjUxMDE5MDE0ODA5WhcNMjUxMDI2MDE0ODA5WjAYMRYwFAYD VQQDEw02OGY0NDM1OS04ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIcGgIX4f+B9Vb+0rL46/6e6BF1fl6647ZhiIHSzT2vdXNhEWRhgFcNz6OTO UO/+zTX4fAi2ttMxzxg9LJ+hAXhOldrPxLiL6aJYvuQtTaKlrOtm23wOno87Dm6s Nd+bhUR70B063YpkebPC/ruKuDoy3yR5qywTBXl0kN2013zUwmKNiwDAcmVhHTfn uZskjQJgsdz5/PSidXtdMBHRWCBuvpPM3pxz5XNI9T1XbW5seROYK0vniqNa8iwd VacqrsbP6ZDrMbvExEAfrheU7q+KEdc0HFOj70WV6ncY9vGYOW6f4DvpVzxmtIMV HqY5SUzKz7WfNkuEbZg0iLDOFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELN0WSt LPJnnWtDaXiilPNK5OyQMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbYrs39nLnsY3XflK8MUWpy/xgsgBUfsaKJoi8RIlw3EXYWIlVptX 0N3mXC31+Hcy/Mi2W3YUL1FU8B79WTEZ5RPjAT2OxnzbASWpBiiBHHIvtLWbzsas J//jzr6ZAjjpp7ZEIHwpNoMVpfhdn69/FjlPj78Oap8L6HvtVHB4MvDRnaT5KBFB zIFKkESwGN3wxhJG0wlevABDrxFBFgXl8tNzmXtUPb60QwYr0h2fM9KdK82w1IcB Q/eh9aG7OwMlNWcivRcxDEBVC3cyj7dXt+c8wgElsCSfGLzg2P9nn6jVLAWmtxAE 1WYU2F2q4YfEeRmAUVNZQwAkKO6cjihu -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:35 2025 by rpki-client