$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: UP0avYXeVvq/UuSGkasgG9bmGNFhDa5ris56Dw2oR5Q= Subject key identifier: 63:46:39:A0:26:CB:7B:C1:74:BB:43:55:52:33:2B:15:37:D2:F5:2B Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: 40 Signing time: Sun 19 Oct 2025 10:56:19 +0000 Manifest this update: Sun 19 Oct 2025 10:56:18 +0000 Manifest next update: Sun 26 Oct 2025 10:56:18 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: xc07TmwCnZAdjxfmUrMW2PW/e3fGF65lvRhtR9bWHbE=) 2: EAAC1A669E5C11F0B2B86856C4F9AE02.roa (hash: 3ivuXSavI1grPWsZeIczoxpu8ztBxvr+RSbjIfz05CY=) 3: E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa (hash: 9HHR5FNxgt2P/Pdw8ubx9aLKafeL5xLqLydwvJefiRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Oct 19 10:56:18 2025 GMT Not After : Oct 26 10:56:18 2025 GMT Subject: CN=68f4c3d2-2a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:9f:09:77:f8:08:b1:84:06:6c:fd:5a:e6: d8:e1:46:09:78:c7:ee:4d:fb:86:94:d1:44:9f:ce: b6:21:43:c8:03:c5:db:fc:1f:c8:68:a7:58:3d:57: f0:78:ec:7d:9e:38:a9:de:34:b0:23:09:d1:af:4c: 4c:06:e4:ea:fe:d0:35:2d:32:58:e7:6c:4b:c1:d2: bd:50:64:83:98:c4:06:0d:d5:50:fa:e6:4a:35:ab: a2:b2:96:92:78:6a:5b:b3:4d:3a:cd:a4:68:f5:8e: 51:cb:72:0a:8d:e3:66:11:85:89:43:53:a7:11:a8: c2:83:46:67:e1:3f:83:62:47:d5:ee:d1:4d:ab:27: aa:fb:5c:29:a6:3d:00:12:63:0a:c0:b1:18:14:ea: 7a:72:6d:37:4a:80:11:db:63:e9:bd:13:c5:e9:9a: 36:f2:df:13:6b:cb:38:63:82:20:b8:10:cf:b1:2d: 36:f1:b5:22:dc:4f:c8:09:05:ff:fd:19:bb:f9:3e: 66:e8:84:e0:b0:28:f7:2c:bf:57:2d:da:9d:96:9c: a3:ae:38:fc:67:b7:86:ed:65:b6:c6:5e:22:cd:59: 05:e3:04:85:4d:27:d7:e7:85:88:e7:b0:c7:62:0c: 32:0d:ac:83:d7:8b:83:22:3d:58:b8:c8:5a:a1:61: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:39:A0:26:CB:7B:C1:74:BB:43:55:52:33:2B:15:37:D2:F5:2B X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:95:84:32:42:30:1c:ed:96:b1:a9:9f:c5:fb:65:8c:08: c8:ea:eb:f2:a9:10:ec:cc:58:ab:18:a7:10:2f:1b:c9:ab:fb: 92:e9:25:67:19:50:00:fe:49:0b:f9:25:a9:04:f6:7b:e2:4e: 52:ee:8e:fe:fc:65:3c:d1:e8:8e:a8:2c:7e:de:f5:3d:dd:9c: e2:5f:05:93:29:45:43:6d:b8:26:5e:6c:3f:04:d4:e0:6b:43: b3:c2:2b:23:ab:42:25:af:cb:f0:7c:46:14:6b:45:71:6b:e0: c6:ef:15:a3:16:57:39:91:3c:ec:ea:f7:d4:3e:dd:14:db:94: f7:bd:e2:14:8d:13:32:96:e1:b6:d0:5c:65:ec:5a:9f:85:7b: 26:51:28:5f:3f:e7:7b:de:6d:3a:87:27:2c:81:37:f5:18:d5: 48:fd:9c:5f:97:ee:b2:a9:53:e4:ed:ec:90:e1:91:d4:41:c1: 96:a4:6d:f0:d9:1c:7d:ef:c9:79:20:3f:70:db:f5:83:ce:aa: ae:ab:ee:33:5f:1a:3a:32:bd:fb:be:8a:b7:74:eb:4c:df:b6: 47:b6:d7:8b:9a:be:7a:f5:b3:a6:0b:d3:ed:5a:05:31:b4:be: f6:14:0d:b6:cb:79:cd:ce:2f:6b:a3:71:be:d7:37:20:ce:78: 21:07:ba:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTEwMTkxMDU2MThaFw0yNTEwMjYxMDU2MThaMBgxFjAUBgNV BAMTDTY4ZjRjM2QyLTJhM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDATJ8Jd/gIsYQGbP1a5tjhRgl4x+5N+4aU0USfzrYhQ8gDxdv8H8hop1g9V/B4 7H2eOKneNLAjCdGvTEwG5Or+0DUtMljnbEvB0r1QZIOYxAYN1VD65ko1q6KylpJ4 aluzTTrNpGj1jlHLcgqN42YRhYlDU6cRqMKDRmfhP4NiR9Xu0U2rJ6r7XCmmPQAS YwrAsRgU6npybTdKgBHbY+m9E8Xpmjby3xNryzhjgiC4EM+xLTbxtSLcT8gJBf/9 Gbv5PmbohOCwKPcsv1ct2p2WnKOuOPxnt4btZbbGXiLNWQXjBIVNJ9fnhYjnsMdi DDINrIPXi4MiPVi4yFqhYSUlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY0Y5oCbL e8F0u0NVUjMrFTfS9SswHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG RTlGLzIzMDI3MTI0NTE3MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEt Z0FOUTJocHJnOFhicTZUTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhclYQyQjAc7ZaxqZ/F+2WMCMjq6/KpEOzMWKsYpxAvG8mr+5LpJWcZ UAD+SQv5JakE9nviTlLujv78ZTzR6I6oLH7e9T3dnOJfBZMpRUNtuCZebD8E1OBr Q7PCKyOrQiWvy/B8RhRrRXFr4MbvFaMWVzmRPOzq99Q+3RTblPe94hSNEzKW4bbQ XGXsWp+FeyZRKF8/53vebTqHJyyBN/UY1Uj9nF+X7rKpU+Tt7JDhkdRBwZakbfDZ HH3vyXkgP3Db9YPOqq6r7jNfGjoyvfu+ird060zftke214uavnr1s6YL0+1aBTG0 vvYUDbbLec3OL2ujcb7XNyDOeCEHuuA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:18 2025 by rpki-client