$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json) Hash identifier: ReUQmaGUyA8b6Jq0oye/S5AwXad28CjOAUZyn1jrLhU= Subject key identifier: 22:D3:B3:45:BD:30:6E:D3:03:A0:0C:67:C1:8E:34:2C:4F:57:FB:CD Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Certificate serial: 1032 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft Manifest number: 1032 Signing time: Sat 18 Oct 2025 17:59:10 +0000 Manifest this update: Sat 18 Oct 2025 17:59:09 +0000 Manifest next update: Sat 25 Oct 2025 17:59:09 +0000 Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: Zp6JPAnpHqe1STabAKT8MBCUi7WZQOTfYNbhiXc2VPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4146 (0x1032) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA Validity Not Before: Oct 18 17:59:09 2025 GMT Not After : Oct 25 17:59:09 2025 GMT Subject: CN=68f3d56d-b888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:37:41:0d:11:41:b6:c1:f1:50:af:7b:d2: a9:8d:f0:ec:2d:3f:3f:30:e6:db:3b:ed:70:ee:59: 3c:60:74:ca:55:54:f4:60:8f:53:dd:65:92:ba:02: bb:40:86:c3:cf:ba:77:53:12:e1:fb:dc:2e:8b:7f: 73:95:02:35:05:5e:84:19:d2:c1:78:eb:f8:bf:dd: a3:0e:0d:34:7f:4c:46:aa:be:c7:16:06:0f:1c:43: 2f:f1:02:ba:6d:61:26:2a:24:83:94:7d:e2:88:d4: bb:fe:ef:e3:a2:d8:12:de:cd:9e:6c:f6:d8:e2:0e: 19:95:59:8d:52:65:fa:ae:14:f4:53:33:d4:42:2d: 47:51:ff:31:b9:36:fe:bc:02:26:78:4e:9e:fd:1b: cc:cd:f0:cf:d8:d4:54:f9:bc:9f:ab:c3:2b:4c:fa: 32:c6:84:5b:a8:82:d9:01:93:37:94:35:d5:7b:e2: 42:be:39:26:82:b9:dd:45:e0:bd:9a:e8:2c:67:2a: bd:9a:52:98:f6:47:8a:00:67:f1:c4:69:7d:49:8e: 78:2c:64:a1:6d:7c:bb:44:61:eb:26:fc:2d:b4:1e: c3:e7:cd:04:14:ec:05:c2:84:00:96:f0:36:d5:17: f5:c6:e3:4a:06:5e:83:c0:33:e1:7d:09:18:02:99: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:B3:45:BD:30:6E:D3:03:A0:0C:67:C1:8E:34:2C:4F:57:FB:CD X509v3 Authority Key Identifier: keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:21:82:e7:f3:57:99:8b:77:1d:50:8e:49:46:30:f1:e7:f3: 76:83:8d:4d:3e:28:b8:1a:3c:b0:f1:3b:8c:a1:76:7c:fb:15: 67:de:05:33:6f:aa:b9:09:39:a5:26:2e:7b:77:f7:86:9a:70: fb:37:8d:e6:0d:fb:7f:2f:d8:9c:d2:26:72:ca:ef:25:da:1f: 23:4c:0d:4e:c8:4d:e4:0e:a7:5f:32:d0:e3:6c:93:b4:f1:1e: 63:14:8b:bb:ac:f9:f5:e5:34:5a:b9:d9:36:9f:3d:12:b7:ba: bb:fc:0d:45:39:0d:d7:5f:fb:0c:97:c9:51:12:e2:0b:a3:a0: 78:5f:32:f7:08:be:21:f6:30:f4:61:81:21:72:aa:a7:50:7f: e7:fe:47:51:6f:98:7d:fe:df:e6:7f:a5:04:8a:36:61:91:2a: c0:c5:f3:57:a9:74:41:0e:b7:a6:60:c3:7e:e8:2b:45:03:0e: 41:c8:b8:a0:a9:67:6c:84:28:00:17:e8:df:af:73:7f:95:5b: c3:c0:69:21:5e:9e:3a:a2:ee:39:dc:80:c5:65:7c:53:40:89: d6:4a:06:34:8d:4e:ca:eb:e7:c8:2c:b0:c2:33:b5:8d:31:d6: cf:9f:00:7e:72:8a:e2:fd:7d:eb:10:d0:b1:e6:e9:0b:77:90: 36:be:03:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUExNjExMTAvBgNVBAUTKDkwMkIzRUIzQ0Q0OEQwOUFBMEExMEM5QjJDQjI4MEQw QTBDRDJEQkEwHhcNMjUxMDE4MTc1OTA5WhcNMjUxMDI1MTc1OTA5WjAYMRYwFAYD VQQDEw02OGYzZDU2ZC1iODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohY3QQ0RQbbB8VCve9KpjfDsLT8/MObbO+1w7lk8YHTKVVT0YI9T3WWSugK7 QIbDz7p3UxLh+9wui39zlQI1BV6EGdLBeOv4v92jDg00f0xGqr7HFgYPHEMv8QK6 bWEmKiSDlH3iiNS7/u/jotgS3s2ebPbY4g4ZlVmNUmX6rhT0UzPUQi1HUf8xuTb+ vAImeE6e/RvMzfDP2NRU+byfq8MrTPoyxoRbqILZAZM3lDXVe+JCvjkmgrndReC9 mugsZyq9mlKY9keKAGfxxGl9SY54LGShbXy7RGHrJvwttB7D580EFOwFwoQAlvA2 1Rf1xuNKBl6DwDPhfQkYApk1tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLTs0W9 MG7TA6AMZ8GONCxPV/vNMB8GA1UdIwQYMBaAFJArPrPNSNCaoKEMmyyygNCgzS26 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTE2MS9CMDdCMkFCODRC MTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBKcWdvUXliTExLQTBLRE5M Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDcy1zODFJMEpxZ29ReWJMTEtBMEtETkxiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTE2MS9CMDdCMkFCODRCMTAxMUU5QUFFM0VFNDNDNEY5QUUwMi9rQ3MtczgxSTBK cWdvUXliTExLQTBLRE5MYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0IYLn81eZi3cdUI5JRjDx5/N2g41NPii4Gjyw8TuMoXZ8+xVn3gUz b6q5CTmlJi57d/eGmnD7N43mDft/L9ic0iZyyu8l2h8jTA1OyE3kDqdfMtDjbJO0 8R5jFIu7rPn15TRaudk2nz0St7q7/A1FOQ3XX/sMl8lREuILo6B4XzL3CL4h9jD0 YYEhcqqnUH/n/kdRb5h9/t/mf6UEijZhkSrAxfNXqXRBDremYMN+6CtFAw5ByLig qWdshCgAF+jfr3N/lVvDwGkhXp46ou453IDFZXxTQInWSgY0jU7K6+fILLDCM7WN MdbPnwB+cori/X3rENCx5ukLd5A2vgOF -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:00 2025 by rpki-client