$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: R+IbF05om7sjNgauVdE5jmuO64F/pc8nCSM/L0+sv3I= Subject key identifier: 42:45:BD:F1:CF:7B:03:30:48:76:08:5E:41:CB:17:63:14:54:F1:21 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 05EB Signing time: Sun 19 Oct 2025 00:36:26 +0000 Manifest this update: Sun 19 Oct 2025 00:36:25 +0000 Manifest next update: Sun 26 Oct 2025 00:36:25 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: qPs9nIAtjz/VXNC1qLlqFOR6QJsIBACQH3UN+b677DQ=) 2: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=) 3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=) 4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=) 5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Oct 19 00:36:25 2025 GMT Not After : Oct 26 00:36:25 2025 GMT Subject: CN=68f4328a-4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:93:c8:55:aa:85:b1:ab:4b:23:53:dc:a7: d2:a6:b6:0c:f7:e4:78:6f:95:f0:54:24:24:16:d0: ee:c7:f2:1b:6a:b3:09:ac:ec:3b:0e:0f:90:7f:a8: 22:bf:d1:62:32:72:1f:6c:95:b2:8d:a9:dd:4d:06: d5:02:f2:43:18:ce:23:ee:2b:ab:c6:39:d6:10:a3: e6:fa:17:f7:92:aa:e0:2e:d0:a2:85:ec:b1:4b:c4: 70:79:69:e1:56:fa:69:7c:b3:d3:a1:23:19:57:a7: 20:73:8a:fb:b3:64:2c:ec:06:24:7d:83:21:0a:4b: ec:a4:b3:72:df:39:8f:ca:d8:23:fa:84:70:7b:e3: ae:81:3e:4f:fa:1c:87:6a:44:a1:1d:7e:3a:ba:bf: dc:fe:0c:8c:b0:7b:e6:1c:9a:df:e2:a3:ed:f4:6b: 44:55:23:a7:4d:ff:e6:f1:3e:c3:c2:db:16:9a:22: 0a:26:2f:bb:22:5b:9f:5a:12:20:79:26:d3:de:fd: 3c:de:49:e6:ff:e1:10:25:5f:dc:f3:74:36:56:21: 47:94:a9:b7:3a:e2:61:75:bf:d0:16:10:e1:63:3b: df:97:39:37:4f:c9:17:16:33:a2:cd:44:f0:d6:1d: bd:b2:a2:74:a0:87:1f:b2:5e:d0:1f:aa:6d:a6:20: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:45:BD:F1:CF:7B:03:30:48:76:08:5E:41:CB:17:63:14:54:F1:21 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6c:ec:d7:88:78:d3:36:d2:77:bf:4e:f0:4f:42:62:74:e1: 3f:5e:60:79:69:f7:ae:a0:1a:7e:dc:de:54:04:0f:35:bf:ca: d7:e3:7d:03:fe:52:59:80:c3:15:c1:13:98:c3:9a:35:b4:da: a8:78:e1:8c:3d:9b:49:d4:29:e3:00:ab:7e:2d:be:d6:90:6e: 67:7e:36:d0:ae:0c:f4:ee:9a:b3:6a:44:d6:00:d0:36:f9:eb: 2d:26:e7:04:53:32:f0:f9:0b:10:d9:0c:4a:4e:c3:30:5f:3d: 76:4a:01:46:e3:75:42:91:be:fa:c0:43:50:1a:4d:2a:7f:18: cf:ae:a4:f7:cb:86:47:ba:dd:9c:36:a8:3f:a8:04:14:67:2c: 6e:4c:c9:23:23:a2:ce:2b:3c:11:90:07:6a:f6:62:3f:b2:b4: 1d:97:ad:6c:a6:7a:44:ac:e2:05:21:e6:60:af:c1:26:39:07: d7:34:dc:eb:73:92:bb:4e:9c:02:26:8a:35:11:e9:29:ed:01: a9:bf:f3:b4:19:a6:37:e5:54:76:9d:72:f2:f1:a4:a1:25:0d: 46:6c:a0:98:43:83:0c:c9:79:d0:f9:6a:d5:e2:9c:c3:c8:af: 9d:f1:5a:9d:b1:2d:24:25:37:d6:0e:ab:54:15:69:df:f8:03: 88:74:83:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUxMDE5MDAzNjI1WhcNMjUxMDI2MDAzNjI1WjAYMRYwFAYD VQQDEw02OGY0MzI4YS00NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApviTyFWqhbGrSyNT3KfSprYM9+R4b5XwVCQkFtDux/IbarMJrOw7Dg+Qf6gi v9FiMnIfbJWyjandTQbVAvJDGM4j7iurxjnWEKPm+hf3kqrgLtCiheyxS8RweWnh VvppfLPToSMZV6cgc4r7s2Qs7AYkfYMhCkvspLNy3zmPytgj+oRwe+OugT5P+hyH akShHX46ur/c/gyMsHvmHJrf4qPt9GtEVSOnTf/m8T7DwtsWmiIKJi+7IlufWhIg eSbT3v083knm/+EQJV/c83Q2ViFHlKm3OuJhdb/QFhDhYzvflzk3T8kXFjOizUTw 1h29sqJ0oIcfsl7QH6ptpiAt2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJFvfHP ewMwSHYIXkHLF2MUVPEhMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBObOzXiHjTNtJ3v07wT0JidOE/XmB5afeuoBp+3N5UBA81v8rX430D /lJZgMMVwROYw5o1tNqoeOGMPZtJ1CnjAKt+Lb7WkG5nfjbQrgz07pqzakTWANA2 +estJucEUzLw+QsQ2QxKTsMwXz12SgFG43VCkb76wENQGk0qfxjPrqT3y4ZHut2c Nqg/qAQUZyxuTMkjI6LOKzwRkAdq9mI/srQdl61spnpErOIFIeZgr8EmOQfXNNzr c5K7TpwCJoo1Eekp7QGpv/O0GaY35VR2nXLy8aShJQ1GbKCYQ4MMyXnQ+WrV4pzD yK+d8VqdsS0kJTfWDqtUFWnf+AOIdIPD -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:01 2025 by rpki-client