$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft File: kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json) Hash identifier: uubYaLNBNPKekwi/7LQpj1E/geYwAWXhaf57+uT50yw= Subject key identifier: 5E:B9:2A:AF:EF:F4:47:6B:43:37:B6:E4:51:C3:4D:1E:9F:7D:58:95 Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA Certificate issuer: /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft Manifest number: 02BB Signing time: Sun 19 Oct 2025 03:35:39 +0000 Manifest this update: Sun 19 Oct 2025 03:35:38 +0000 Manifest next update: Sun 26 Oct 2025 03:35:38 +0000 Files and hashes: 1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: 7sJ9HTrfC8s83YxZ6k5IiIVz06b2M+YsvA4i6A4BFU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA Validity Not Before: Oct 19 03:35:38 2025 GMT Not After : Oct 26 03:35:38 2025 GMT Subject: CN=68f45c8a-25d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:d5:89:09:22:55:4e:cd:c0:ac:61:f5:b0: 29:c4:67:e9:cc:6d:ae:88:af:8f:73:36:74:e4:cf: fb:86:85:cf:68:a7:8e:8e:1d:39:46:5b:d4:f6:f9: d2:d7:1b:05:e6:48:1d:93:f1:bf:c9:72:17:45:4a: 9d:38:74:61:c7:04:8e:c0:04:c6:1f:18:a7:ab:f5: e1:8c:cc:53:64:38:ef:7d:81:9f:51:3a:04:43:69: fa:39:22:fc:4f:f6:a3:5b:33:cc:65:be:8d:7f:8b: 43:1f:af:ca:ef:04:79:53:7d:f7:9a:1e:70:11:7d: b6:8b:52:d3:7e:92:29:c2:f9:c8:c2:28:a0:64:a3: bd:e8:15:3d:9b:e0:bd:19:a8:41:99:89:d3:a3:68: e4:a7:61:99:4f:f0:27:9a:b3:a3:e4:53:b4:81:71: bd:57:c2:01:3d:a1:bd:44:8e:2b:04:b6:44:51:46: 07:a1:a5:b8:62:da:31:c5:d1:ba:bc:1f:ee:be:40: 20:b6:a9:98:fb:aa:df:a0:2a:93:f8:cb:e7:db:bb: 15:46:a8:f8:0a:e2:e5:0c:4d:34:49:03:b9:e1:95: 8b:e7:c9:f3:ff:37:92:83:29:a3:98:01:35:fa:ed: 65:8c:69:61:19:5f:2a:cf:db:15:19:35:a9:36:a6: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B9:2A:AF:EF:F4:47:6B:43:37:B6:E4:51:C3:4D:1E:9F:7D:58:95 X509v3 Authority Key Identifier: keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:55:15:00:d6:ab:97:34:85:bd:18:c0:98:fd:3f:99:1f:17: 91:e3:43:fc:37:b1:a7:ca:84:eb:64:79:1e:b7:75:cd:bb:0d: 24:e8:b5:64:c8:79:fb:19:a9:c4:d3:a7:c4:f4:bc:50:73:dc: ca:bd:94:1e:14:01:a8:75:15:b7:ea:0f:8b:69:73:36:45:f2: d3:e2:d9:e5:d0:21:95:59:98:69:a9:42:87:8e:85:2c:84:ce: fd:9e:85:f7:2c:48:70:b7:4d:b6:2a:e6:8e:47:98:a7:ea:1c: 20:84:46:99:08:49:6c:30:b7:b5:3d:9a:31:bf:4a:ef:94:9e: d8:69:ba:45:01:65:c4:b9:a2:73:a0:35:28:5a:c1:17:4b:b1: 75:07:89:d8:01:58:b9:23:a9:45:d4:3b:13:3e:b4:cd:7a:2e: a2:a0:c6:8f:0e:6c:4f:e7:f3:34:67:2d:09:c6:f8:4c:64:df: 81:d7:25:c8:3c:88:da:43:fc:34:d2:86:e0:28:ae:a5:b3:ba: 1a:aa:69:e7:75:cf:6e:8c:11:72:2c:1e:77:0c:01:43:05:b3: 75:65:32:99:43:d9:bd:28:5b:2c:5d:45:f6:64:69:f4:09:03: 7b:be:aa:94:58:4a:3b:86:18:c1:16:c9:ec:5a:81:78:26:f8: b8:01:dc:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDkwMUE0M0M5QzQ4MDg2NzE3RURCQ0UyNTVDMDJBMkYw MzUzREFBRkEwHhcNMjUxMDE5MDMzNTM4WhcNMjUxMDI2MDMzNTM4WjAYMRYwFAYD VQQDEw02OGY0NWM4YS0yNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztnViQkiVU7NwKxh9bApxGfpzG2uiK+PczZ05M/7hoXPaKeOjh05RlvU9vnS 1xsF5kgdk/G/yXIXRUqdOHRhxwSOwATGHxinq/XhjMxTZDjvfYGfUToEQ2n6OSL8 T/ajWzPMZb6Nf4tDH6/K7wR5U333mh5wEX22i1LTfpIpwvnIwiigZKO96BU9m+C9 GahBmYnTo2jkp2GZT/AnmrOj5FO0gXG9V8IBPaG9RI4rBLZEUUYHoaW4YtoxxdG6 vB/uvkAgtqmY+6rfoCqT+Mvn27sVRqj4CuLlDE00SQO54ZWL58nz/zeSgymjmAE1 +u1ljGlhGV8qz9sVGTWpNqaDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF65Kq/v 9EdrQze25FHDTR6ffViVMB8GA1UdIwQYMBaAFJAaQ8nEgIZxftvOJVwCovA1Par6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81MEMxQkY5MjBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhuRi0yODRsWEFLaThEVTlx dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCcER5Y1NBaG5GLTI4NGxYQUtpOERVOXF2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81MEMxQkY5MjBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9rQnBEeWNTQWhu Ri0yODRsWEFLaThEVTlxdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0VRUA1quXNIW9GMCY/T+ZHxeR40P8N7GnyoTrZHket3XNuw0k6LVk yHn7GanE06fE9LxQc9zKvZQeFAGodRW36g+LaXM2RfLT4tnl0CGVWZhpqUKHjoUs hM79noX3LEhwt022KuaOR5in6hwghEaZCElsMLe1PZoxv0rvlJ7YabpFAWXEuaJz oDUoWsEXS7F1B4nYAVi5I6lF1DsTPrTNei6ioMaPDmxP5/M0Zy0JxvhMZN+B1yXI PIjaQ/w00obgKK6ls7oaqmnndc9ujBFyLB53DAFDBbN1ZTKZQ9m9KFssXUX2ZGn0 CQN7vqqUWEo7hhjBFsnsWoF4Jvi4AdzP -----END CERTIFICATE-----Generated at Tue Oct 21 08:13:59 2025 by rpki-client