$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft File: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json) Hash identifier: oqmREGOQTqgteqSV+vAtSkTwPS7oWxAfu4OEbjffTJA= Subject key identifier: F5:5F:26:28:89:F9:93:D9:46:4A:6D:C3:39:B3:D4:48:75:DF:6D:69 Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 Certificate issuer: /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft Manifest number: 0161 Signing time: Sun 19 Oct 2025 06:45:59 +0000 Manifest this update: Sun 19 Oct 2025 06:45:58 +0000 Manifest next update: Sun 26 Oct 2025 06:45:58 +0000 Files and hashes: 1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: Z+A+/x/0NNKK42fMEfxoTSXLIlF4pOC2O0aBqosmDhU=) 2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: BrMg7LC27FVuPN/a8T84kbw3q38OJLbwQWRqwjiM6nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25 Validity Not Before: Oct 19 06:45:58 2025 GMT Not After : Oct 26 06:45:58 2025 GMT Subject: CN=68f48927-8457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:8a:fc:c4:29:e1:1b:88:cd:f9:8a:10:08: 51:a8:df:f1:91:08:bf:c3:0f:56:15:32:c1:65:0e: 03:0b:7a:01:4d:24:bd:9b:50:31:6a:fc:46:b2:67: ab:f3:54:61:9c:35:db:e7:4d:54:0d:60:d3:06:20: 74:37:5a:6c:87:7d:7a:d3:77:ac:cf:fb:60:72:3a: 3c:f8:8b:ea:2d:79:f6:95:8b:72:e1:04:a2:8a:d6: 49:cd:c8:11:8b:f0:c4:21:c0:e3:40:c9:b5:cc:01: 0e:1f:a1:7c:80:e0:e0:e7:03:a4:8e:09:4d:dc:18: be:13:41:59:b3:33:ce:a0:e4:61:ab:40:ce:89:7d: c4:74:7a:b1:13:26:bb:36:d0:9a:c4:70:5a:90:2f: 13:95:b5:a7:a4:4d:c1:c6:83:b1:e4:49:49:0c:e2: d1:75:81:1d:85:af:91:52:82:5e:5c:89:ad:a7:8a: d0:05:b7:a0:2b:23:86:f8:31:08:70:15:c7:9d:26: f5:64:63:5c:43:2c:93:18:1b:f4:3b:59:6a:08:db: a6:4a:b7:71:05:31:ac:52:44:14:f2:46:66:4c:6e: 2d:f2:c3:b5:6d:80:c2:d4:e2:6a:9c:83:0c:b9:1b: f5:15:e7:4c:a6:32:df:d4:e3:a7:52:f5:55:9d:0b: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5F:26:28:89:F9:93:D9:46:4A:6D:C3:39:B3:D4:48:75:DF:6D:69 X509v3 Authority Key Identifier: keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:31:1f:1c:6b:5e:a9:9d:ea:18:5a:53:75:21:26:fe:1e:03: f6:f9:36:c5:84:23:92:e5:1b:68:54:48:54:42:07:25:c0:73: 64:fb:e6:35:d6:05:f8:b0:37:c1:45:95:96:2a:03:57:4d:6c: ea:bf:74:02:1f:d3:88:7b:f5:5f:3f:1e:eb:71:ce:8b:62:d7: 45:95:b8:15:b8:b2:4b:95:6a:c0:00:82:b4:8b:8d:18:a5:5c: 13:68:29:2f:ca:aa:8b:be:80:84:53:98:81:a2:42:f1:9c:68: 55:f9:f9:fe:c4:6b:5d:7c:33:38:4f:f0:1b:20:34:00:39:5c: 62:e6:eb:75:5f:fa:de:22:8b:90:2d:24:73:f3:6f:a9:78:35: 4b:1f:ee:4a:04:c2:f4:09:5c:51:fa:62:04:fe:d3:14:02:ec: 66:4c:d2:9d:01:ba:0f:1e:4d:13:ba:8e:5e:3a:93:69:0d:3c: 9d:57:0f:b6:84:44:31:8f:92:cb:79:72:e1:14:db:8b:a7:ab: 29:3b:7e:3d:2c:e3:a9:40:ff:21:a3:d1:07:12:30:34:f9:63: 9d:5f:15:e0:3e:fe:97:ef:1f:50:a2:5e:56:30:6d:7b:ab:c8: 1c:55:8f:08:2d:5a:ec:bb:b6:26:08:8a:26:52:e3:a8:58:51: ed:e0:52:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczNzgxMTAvBgNVBAUTKDkwQjlCQUJENzQyQjI3NTc0M0ZCNzE1RTEzNTk3NTYz OEU5QzJGMjUwHhcNMjUxMDE5MDY0NTU4WhcNMjUxMDI2MDY0NTU4WjAYMRYwFAYD VQQDEw02OGY0ODkyNy04NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCSK/MQp4RuIzfmKEAhRqN/xkQi/ww9WFTLBZQ4DC3oBTSS9m1AxavxGsmer 81RhnDXb501UDWDTBiB0N1psh31603esz/tgcjo8+IvqLXn2lYty4QSiitZJzcgR i/DEIcDjQMm1zAEOH6F8gODg5wOkjglN3Bi+E0FZszPOoORhq0DOiX3EdHqxEya7 NtCaxHBakC8TlbWnpE3BxoOx5ElJDOLRdYEdha+RUoJeXImtp4rQBbegKyOG+DEI cBXHnSb1ZGNcQyyTGBv0O1lqCNumSrdxBTGsUkQU8kZmTG4t8sO1bYDC1OJqnIMM uRv1FedMpjLf1OOnUvVVnQtYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVfJiiJ +ZPZRkptwzmz1Eh1321pMB8GA1UdIwQYMBaAFJC5ur10KydXQ/txXhNZdWOOnC8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzM3OC8wQTg4QzdGMjkz RTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckoxZEQtM0ZlRTFsMVk0NmNM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMbTZ2WFFySjFkRC0zRmVFMWwxWTQ2Y0x5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzM3OC8wQTg4QzdGMjkzRTMxMUVFOTNDOEU1ODJDNEY5QUUwMi9rTG02dlhRckox ZEQtM0ZlRTFsMVk0NmNMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9MR8ca16pneoYWlN1ISb+HgP2+TbFhCOS5RtoVEhUQgclwHNk++Y1 1gX4sDfBRZWWKgNXTWzqv3QCH9OIe/VfPx7rcc6LYtdFlbgVuLJLlWrAAIK0i40Y pVwTaCkvyqqLvoCEU5iBokLxnGhV+fn+xGtdfDM4T/AbIDQAOVxi5ut1X/reIouQ LSRz82+peDVLH+5KBML0CVxR+mIE/tMUAuxmTNKdAboPHk0Tuo5eOpNpDTydVw+2 hEQxj5LLeXLhFNuLp6spO349LOOpQP8ho9EHEjA0+WOdXxXgPv6X7x9Qol5WMG17 q8gcVY8ILVrsu7YmCIomUuOoWFHt4FLl -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:13 2025 by rpki-client