$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: AMlxtayTdDhL/FrYTgd+iGS9n9FM5Q/nsPVni+egLUM= Subject key identifier: 17:DD:F7:FE:BC:4E:6D:B6:18:57:A2:93:85:F2:17:F7:F7:46:84:F8 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: 01D6 Signing time: Sun 19 Oct 2025 05:14:43 +0000 Manifest this update: Sun 19 Oct 2025 05:14:42 +0000 Manifest next update: Sun 26 Oct 2025 05:14:42 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: cPSWC6iZ71BvB15yyGJX2TyXna8nehXiXuLUw6ieGY0=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: Oct 19 05:14:42 2025 GMT Not After : Oct 26 05:14:42 2025 GMT Subject: CN=68f473c3-880f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:e6:28:67:e8:a1:80:40:a4:8e:fc:11:0f: 93:5d:c1:8c:6c:5c:7b:ed:4f:ba:9e:72:ed:20:f0: 62:06:a2:18:fe:1a:10:9c:26:ec:8b:9d:20:e7:fc: 62:a1:5b:1b:40:22:2a:fc:ba:6a:a8:7b:ec:ee:d1: ba:cf:e2:56:3f:8d:68:c7:49:80:52:73:35:67:10: f0:f2:b4:07:44:c4:3f:39:03:ce:55:61:72:35:2d: 9a:80:55:e2:23:85:a0:eb:47:f6:b8:85:2e:42:e3: 0d:9c:40:15:36:32:14:fd:ae:d1:5f:f5:5d:ab:ac: ec:d8:51:b8:b1:67:e8:45:c1:41:55:72:3b:d5:69: 48:0e:9a:19:2c:32:97:f9:ab:89:4b:ff:1a:ae:b4: 2f:af:aa:fd:d2:d6:d8:dc:0b:c8:72:95:7f:40:7e: ca:58:d4:20:5e:9c:33:b7:3f:6f:e3:9b:62:61:03: 90:3e:a0:1a:18:82:9d:b5:b1:47:b8:d1:78:8f:c9: 6c:c6:a5:c0:66:32:4b:58:e6:16:73:4e:b4:f9:7b: bf:b5:d0:eb:c8:b8:d4:af:cd:2b:6b:0f:d3:e2:cd: 4f:82:44:33:6f:e4:c1:c7:83:bf:7a:69:ee:33:1a: 57:50:a4:75:7f:ff:63:b1:cb:8c:5b:18:ea:e2:15: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:F7:FE:BC:4E:6D:B6:18:57:A2:93:85:F2:17:F7:F7:46:84:F8 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:37:66:f9:7b:06:d7:93:91:35:31:e9:32:3c:9f:4d:f1:3f: 66:1a:65:9d:26:f6:f3:cf:42:e3:10:9b:cf:9f:48:00:c1:dd: 7d:4c:bc:a0:f6:4b:3a:93:44:28:66:a2:e3:79:00:26:b5:b8: 34:7a:b1:69:26:f1:44:59:7d:1c:1e:87:75:98:62:84:f5:bf: a1:52:2d:cc:02:06:98:a7:64:66:e3:b9:66:cd:3f:49:d5:46: 6e:f4:fa:ef:1d:22:f8:8e:99:5d:26:ef:99:b5:d1:e4:51:42: ef:65:49:c2:83:e1:79:ec:d6:f7:6d:56:f8:67:91:db:39:60: 8c:90:35:4c:75:2b:f8:e0:29:5c:51:19:74:d1:fa:1b:a0:bb: 7d:91:7a:37:81:2b:3f:47:0a:2c:3e:99:cf:a6:ce:d5:10:24: 27:c5:be:31:33:11:d4:ea:7e:f3:89:fc:56:76:01:8d:59:38: ed:e0:4e:ac:a2:70:ca:bf:8f:67:91:ff:4a:c7:29:b2:7b:7c: cf:a1:42:bb:e8:a1:27:33:81:cd:74:26:86:29:2b:3e:e7:ce: 33:86:c7:21:a6:cf:0d:b2:bb:4d:e6:d6:62:e2:3c:98:01:07: 7b:e2:38:0c:63:fd:4b:df:88:75:e6:4b:12:60:7e:c9:53:a1: 52:d6:f9:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjUxMDE5MDUxNDQyWhcNMjUxMDI2MDUxNDQyWjAYMRYwFAYD VQQDEw02OGY0NzNjMy04ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyavmKGfooYBApI78EQ+TXcGMbFx77U+6nnLtIPBiBqIY/hoQnCbsi50g5/xi oVsbQCIq/LpqqHvs7tG6z+JWP41ox0mAUnM1ZxDw8rQHRMQ/OQPOVWFyNS2agFXi I4Wg60f2uIUuQuMNnEAVNjIU/a7RX/Vdq6zs2FG4sWfoRcFBVXI71WlIDpoZLDKX +auJS/8arrQvr6r90tbY3AvIcpV/QH7KWNQgXpwztz9v45tiYQOQPqAaGIKdtbFH uNF4j8lsxqXAZjJLWOYWc060+Xu/tdDryLjUr80raw/T4s1PgkQzb+TBx4O/emnu MxpXUKR1f/9jscuMWxjq4hW5oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfd9/68 Tm22GFeik4XyF/f3RoT4MB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBN2b5ewbXk5E1MekyPJ9N8T9mGmWdJvbzz0LjEJvPn0gAwd19TLyg 9ks6k0QoZqLjeQAmtbg0erFpJvFEWX0cHod1mGKE9b+hUi3MAgaYp2Rm47lmzT9J 1UZu9PrvHSL4jpldJu+ZtdHkUULvZUnCg+F57Nb3bVb4Z5HbOWCMkDVMdSv44Clc URl00foboLt9kXo3gSs/RwosPpnPps7VECQnxb4xMxHU6n7zifxWdgGNWTjt4E6s onDKv49nkf9Kxymye3zPoUK76KEnM4HNdCaGKSs+584zhschps8NsrtN5tZi4jyY AQd74jgMY/1L34h15ksSYH7JU6FS1vmB -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:22 2025 by rpki-client