$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft File: kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json) Hash identifier: jFlUc3/WteSq7+5jOUd3ej/T1cpwjRf9lnqKcjgZ5YI= Subject key identifier: 6D:B0:EA:70:D8:3C:CC:84:18:24:AC:B3:F4:63:15:60:5F:0D:98:1B Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D Certificate issuer: /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Certificate serial: 0465 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft Manifest number: 045D Signing time: Sun 19 Oct 2025 02:04:40 +0000 Manifest this update: Sun 19 Oct 2025 02:04:40 +0000 Manifest next update: Sun 26 Oct 2025 02:04:40 +0000 Files and hashes: 1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: Ag1aasv8Gtgq+hmdFE6UNjBO9AQmmuYZzO/XVMcSynM=) 2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: c0Qo/V4Zd6PI/SmvO+fxR2cS+G3poh+IiHb3vxBLGEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1125 (0x465) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D Validity Not Before: Oct 19 02:04:40 2025 GMT Not After : Oct 26 02:04:40 2025 GMT Subject: CN=68f44738-b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:42:5c:ba:17:a3:ec:e3:f5:de:91:f9:3d: ef:2a:68:fb:0b:d5:8e:22:59:57:78:7a:6e:fd:c6: b0:2c:ff:32:08:55:a9:2c:ff:c5:aa:e7:bb:f2:68: 6a:35:22:0b:ec:fa:8b:d0:5d:6a:d9:43:1a:15:f0: 0b:b4:1d:91:a6:8f:19:93:91:a8:a2:c8:41:9e:d8: bc:18:4e:cc:9f:c4:4f:d1:db:a7:a3:7c:f8:45:1d: 29:8f:d2:fa:40:83:4a:f3:11:f5:b3:c6:04:da:b7: 4f:e1:78:64:7e:c5:8a:5d:e7:cf:50:40:c8:05:4d: 07:08:54:e7:e8:ef:78:27:8b:51:fd:a7:b5:11:52: ab:0f:47:c1:aa:a2:ab:a9:f7:fc:d0:16:80:d7:03: 38:df:e0:9c:0c:d4:2b:e3:1c:3a:e9:c0:8e:83:81: 4b:45:e2:1b:b3:f6:3c:c8:6f:76:eb:23:54:d4:f1: 4d:77:f8:91:47:2e:d0:ad:19:c8:cb:e1:ef:84:f3: 43:36:cb:39:4a:d2:e1:86:42:c6:15:0f:f0:21:e7: e4:f9:ab:6d:3d:c2:74:ab:12:b5:54:79:99:cf:ae: da:c2:3c:1d:45:ad:7e:29:cf:31:b3:97:6d:df:0c: ec:87:82:74:f0:7b:14:29:0e:bb:5a:d1:ea:7a:d7: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:EA:70:D8:3C:CC:84:18:24:AC:B3:F4:63:15:60:5F:0D:98:1B X509v3 Authority Key Identifier: keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:c3:bc:d8:49:2c:d2:2a:a4:f1:04:b4:7c:74:2c:f8:77:c7: 8d:d0:e3:10:2a:3a:e8:3f:f7:8f:2d:13:b7:aa:9c:21:6b:7f: 45:58:1a:ae:59:7e:63:d4:2b:f5:d1:96:d3:68:d8:91:b8:3a: fb:14:50:68:4f:8c:41:ea:f3:19:87:44:80:cf:c1:cc:52:6d: 2d:74:88:d2:38:34:fa:4d:2c:a3:68:6a:28:f9:5d:cc:54:56: 61:31:c3:d3:7b:f0:14:84:5c:9f:13:ff:00:f0:f7:54:b4:2d: ee:4f:9a:1f:bc:d8:e5:04:c9:99:53:38:29:e1:9f:85:1a:ce: ed:e1:f0:d4:7f:74:e7:72:8c:57:37:26:40:9e:11:1f:46:b4: b2:91:05:9d:ba:8a:1b:bf:40:09:01:ac:be:39:e9:bc:84:cb: 62:54:c2:5c:9a:56:51:87:8e:83:80:95:6c:16:c8:65:58:2f: 16:33:68:86:dd:89:9c:fd:d3:c5:29:92:7a:30:50:d2:14:58: db:48:38:61:26:8c:51:51:c2:d7:a0:68:77:bd:69:c7:ae:a2: 80:99:e1:10:d8:c7:8d:50:c4:1d:6f:53:a9:c0:09:6d:d0:fb: d9:a6:69:51:23:5b:be:8a:eb:1c:ca:67:a1:1a:f9:72:9c:ad: e9:d3:e2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMjgxMTAvBgNVBAUTKDkwRDhBNjk2QzcyQzNDNUMwNjJEOEYwMDI2MTA1RkZE Q0QwMUNGOEQwHhcNMjUxMDE5MDIwNDQwWhcNMjUxMDI2MDIwNDQwWjAYMRYwFAYD VQQDEw02OGY0NDczOC1iODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDBCXLoXo+zj9d6R+T3vKmj7C9WOIllXeHpu/cawLP8yCFWpLP/Fque78mhq NSIL7PqL0F1q2UMaFfALtB2Rpo8Zk5GooshBnti8GE7Mn8RP0duno3z4RR0pj9L6 QINK8xH1s8YE2rdP4XhkfsWKXefPUEDIBU0HCFTn6O94J4tR/ae1EVKrD0fBqqKr qff80BaA1wM43+CcDNQr4xw66cCOg4FLReIbs/Y8yG926yNU1PFNd/iRRy7QrRnI y+HvhPNDNss5StLhhkLGFQ/wIefk+attPcJ0qxK1VHmZz67awjwdRa1+Kc8xs5dt 3wzsh4J08HsUKQ67WtHqetecrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2w6nDY PMyEGCSss/RjFWBfDZgbMB8GA1UdIwQYMBaAFJDYppbHLDxcBi2PACYQX/3NAc+N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMyOC8zQTAxNjQ3NjZE NTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BGd0dMWThBSmhCZl9jMEJ6 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOaW1sc2NzUEZ3R0xZOEFKaEJmX2MwQno0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMyOC8zQTAxNjQ3NjZENTIxMUVDQUM2MUJCMTdDNEY5QUUwMi9rTmltbHNjc1BG d0dMWThBSmhCZl9jMEJ6NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvw7zYSSzSKqTxBLR8dCz4d8eN0OMQKjroP/ePLRO3qpwha39FWBqu WX5j1Cv10ZbTaNiRuDr7FFBoT4xB6vMZh0SAz8HMUm0tdIjSODT6TSyjaGoo+V3M VFZhMcPTe/AUhFyfE/8A8PdUtC3uT5ofvNjlBMmZUzgp4Z+FGs7t4fDUf3TncoxX NyZAnhEfRrSykQWduoobv0AJAay+Oem8hMtiVMJcmlZRh46DgJVsFshlWC8WM2iG 3Ymc/dPFKZJ6MFDSFFjbSDhhJoxRUcLXoGh3vWnHrqKAmeEQ2MeNUMQdb1OpwAlt 0PvZpmlRI1u+iuscymehGvlynK3p0+Iz -----END CERTIFICATE-----Generated at Mon Oct 20 07:47:00 2025 by rpki-client