$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: HjgEFZnwLw7bMJlonPTgYQotQKW6PkQ88HzYDICCUcM= Subject key identifier: 81:94:25:7D:84:D5:10:54:63:9C:99:8C:1C:D3:C0:96:27:ED:E9:99 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: 92 Signing time: Sun 19 Oct 2025 09:46:49 +0000 Manifest this update: Sun 19 Oct 2025 09:46:48 +0000 Manifest next update: Sun 26 Oct 2025 09:46:48 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: 7BZaap6fY1xqVfLBFVGM1fV2qTk3srXVstN2FXgzdzk=) 2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: Td45KF7s5KJjDmYTPbjMG6cwXZMtoTfhOtwsLcRRVB4=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gzNobaLbEvK3FJ3mC0CiPYdWO820L9Sv8IKQdUKftFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Oct 19 09:46:48 2025 GMT Not After : Oct 26 09:46:48 2025 GMT Subject: CN=68f4b389-48ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:84:e2:e5:95:44:ed:10:99:bf:2e:4e:b6: 18:6f:66:14:7a:63:80:f7:71:11:cf:a8:99:4c:fd: 2f:43:0e:5a:d6:64:15:31:43:60:69:e8:2d:22:9e: 74:13:b5:e0:f3:2d:25:6a:7a:a9:a8:40:02:26:3e: eb:c0:e7:71:c0:aa:ee:30:26:a9:ad:1e:22:b1:26: 2d:9c:65:92:d0:06:af:d6:7d:ee:c7:88:e6:bc:7c: a2:5b:3b:72:5d:0d:7b:11:3b:98:8a:c1:fe:d8:8a: 43:66:fa:73:ce:34:bd:62:a8:6b:42:0e:11:e3:39: 6e:94:e3:67:cd:e9:c5:c6:0b:00:bb:d0:9b:2d:2c: 67:5a:45:1c:bb:d6:17:60:8b:85:32:8c:76:7a:2a: 8b:6c:7b:50:c8:d5:33:97:94:d4:7b:0e:e5:9d:dc: 18:cf:06:11:c5:90:f5:58:95:90:28:a6:79:6e:78: 88:42:71:62:56:b0:f1:e7:48:93:b1:f3:9f:70:ea: 6e:47:1a:d0:6b:2c:51:86:03:dd:02:cc:f3:f5:9d: dc:05:11:ff:e3:5e:3a:c6:75:15:a1:f1:f5:60:dd: 38:5d:82:c5:05:b2:32:cc:a4:75:5b:06:25:ea:99: 48:38:83:1b:64:e6:65:e0:2f:bc:03:2f:1b:5a:2a: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:94:25:7D:84:D5:10:54:63:9C:99:8C:1C:D3:C0:96:27:ED:E9:99 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:8e:41:d0:8a:15:62:ba:35:30:c5:d0:dd:02:53:b5:ff:67: 65:60:32:10:81:f0:5f:93:75:16:24:5d:98:11:9f:63:48:25: 62:f7:7b:90:d7:6c:31:e0:06:ba:55:91:9f:8b:df:11:42:9b: a4:2e:56:05:d7:d8:0b:c3:69:ea:62:f3:b4:3f:1b:d0:36:84: 66:ef:c9:ef:42:7c:d5:6a:15:6a:cf:9f:20:2d:09:29:28:80: 3a:9b:f3:7f:9f:16:cb:51:9e:b3:8a:0e:6d:28:83:4d:02:f3: 27:ab:be:ee:38:21:56:20:82:15:72:15:61:0d:f5:fe:8e:a9: 58:1b:d2:b1:fe:69:37:df:48:c4:46:f9:98:1a:0d:58:48:07: 4d:81:e7:b6:77:e9:04:a6:40:17:12:5c:1b:91:09:56:81:1e: fa:e0:80:77:b8:82:65:e5:5b:27:e6:d5:d7:4d:41:34:65:95: 1a:9a:d1:a7:9c:f7:dd:b2:6d:ff:ff:f1:fe:03:db:27:7b:f4: fe:bd:34:14:7f:02:54:14:05:6a:56:68:32:29:4f:30:b6:fd: 32:3b:8d:e9:d1:45:55:c0:5b:f8:70:9d:2d:95:ab:fe:36:62: b3:e9:05:4e:bf:ee:66:06:32:9e:42:19:4d:dd:43:28:8f:8c: 6a:d9:44:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjUxMDE5MDk0NjQ4WhcNMjUxMDI2MDk0NjQ4WjAYMRYwFAYD VQQDEw02OGY0YjM4OS00OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWqE4uWVRO0Qmb8uTrYYb2YUemOA93ERz6iZTP0vQw5a1mQVMUNgaegtIp50 E7Xg8y0lanqpqEACJj7rwOdxwKruMCaprR4isSYtnGWS0Aav1n3ux4jmvHyiWzty XQ17ETuYisH+2IpDZvpzzjS9YqhrQg4R4zlulONnzenFxgsAu9CbLSxnWkUcu9YX YIuFMox2eiqLbHtQyNUzl5TUew7lndwYzwYRxZD1WJWQKKZ5bniIQnFiVrDx50iT sfOfcOpuRxrQayxRhgPdAszz9Z3cBRH/4146xnUVofH1YN04XYLFBbIyzKR1WwYl 6plIOIMbZOZl4C+8Ay8bWirzxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGUJX2E 1RBUY5yZjBzTwJYn7emZMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWjkHQihViujUwxdDdAlO1/2dlYDIQgfBfk3UWJF2YEZ9jSCVi93uQ 12wx4Aa6VZGfi98RQpukLlYF19gLw2nqYvO0PxvQNoRm78nvQnzVahVqz58gLQkp KIA6m/N/nxbLUZ6zig5tKINNAvMnq77uOCFWIIIVchVhDfX+jqlYG9Kx/mk330jE RvmYGg1YSAdNgee2d+kEpkAXElwbkQlWgR764IB3uIJl5Vsn5tXXTUE0ZZUamtGn nPfdsm3///H+A9sne/T+vTQUfwJUFAVqVmgyKU8wtv0yO43p0UVVwFv4cJ0tlav+ NmKz6QVOv+5mBjKeQhlN3UMoj4xq2UQU -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:37 2025 by rpki-client