$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json) Hash identifier: pcmXOLFcqD7GJhvQNHqSzDO3orDrwxDwDjNd1z+O1cI= Subject key identifier: F0:C7:31:47:5C:DB:CE:C3:F7:CF:AD:A5:1B:00:1A:05:88:17:F9:BD Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft Manifest number: 34F6 Signing time: Mon 20 Oct 2025 14:24:48 +0000 Manifest this update: Mon 20 Oct 2025 14:24:47 +0000 Manifest next update: Mon 27 Oct 2025 14:24:47 +0000 Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: xk4NM6isEyfQzd7i+EsQZK1G8k6W7WXAWA+JwaFF+XE=) 2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2 Validity Not Before: Oct 20 14:24:47 2025 GMT Not After : Oct 27 14:24:47 2025 GMT Subject: CN=68f64630-1c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:86:ce:61:55:f9:cb:fe:93:a5:8e:f9:c3: 34:e4:84:97:c8:b8:cd:02:b4:63:3d:29:b2:fe:66: b2:d9:9f:43:bf:07:26:4f:97:69:46:34:eb:5f:5c: ba:17:f7:17:a1:31:c6:49:e8:a8:6b:52:58:cc:c8: fe:14:b2:16:b6:f2:42:7b:49:92:db:55:fd:cc:05: 74:64:e6:c2:5c:e4:c9:d3:c4:9a:c9:cf:01:d7:3a: 0b:88:bf:fe:e6:2b:3f:10:59:8a:f1:02:0e:74:22: 0a:a7:90:68:08:86:83:42:e9:d1:73:a9:65:3a:20: 28:02:46:a2:6f:0c:28:63:4e:3a:84:97:ad:d2:61: 30:fa:39:7f:bd:d2:36:09:fb:b4:77:4d:34:00:46: 08:96:1d:3a:59:00:3c:ee:7e:f1:5a:64:f9:28:53: 50:2c:3e:26:38:8c:fc:83:b6:cf:5c:e6:e8:50:29: 72:13:5b:45:f8:0b:7f:49:10:d6:88:15:19:b6:19: 00:f2:b7:11:8a:e3:e7:6b:15:81:68:7e:4d:78:3d: 72:36:37:60:5c:16:f3:24:ff:aa:e9:97:de:25:0b: 6c:d1:e7:52:bf:c4:64:04:ec:bb:14:4d:aa:91:80: 26:b2:d5:23:4e:f4:96:dd:71:86:19:6d:c7:14:ea: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C7:31:47:5C:DB:CE:C3:F7:CF:AD:A5:1B:00:1A:05:88:17:F9:BD X509v3 Authority Key Identifier: keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:62:4f:a3:85:3e:06:ba:4c:78:a9:c6:33:f9:d6:57:ea: e8:21:ae:e9:00:fd:ac:a0:40:50:8a:24:ee:9e:73:96:23:73: 73:2f:3d:16:e5:fe:c6:b4:eb:61:3b:9f:5d:b2:98:db:c1:6d: 91:66:9b:30:16:9d:16:f7:9d:3d:28:0a:51:d4:72:4c:4c:f5: 60:16:f7:78:87:53:c9:03:24:47:0e:83:c4:0d:68:a4:e6:77: a6:7a:10:e2:85:4f:04:0d:2d:01:79:06:ca:47:5a:b8:76:fc: ab:b1:81:e4:7d:b2:8d:b0:d3:4b:3e:1c:1e:3a:95:fc:1f:aa: 61:6d:a3:af:e0:30:3c:3c:38:9e:0c:59:b7:74:9d:f8:2d:64: c2:13:d4:52:a8:f0:b9:0a:d0:0c:9c:cd:82:d9:7c:07:39:5c: 59:65:aa:3e:de:2a:5b:78:65:69:10:fc:9b:67:a4:82:a6:81: b1:e7:0b:4f:f1:61:7b:cf:2f:f5:25:bc:2f:f0:c7:b3:55:f0: 30:cf:36:6f:f0:15:c2:23:b6:02:bb:5e:95:ca:77:f0:e5:1a: 6d:33:50:b0:eb:5d:f5:4f:0f:bb:e8:f9:ac:74:40:26:70:58: a2:1e:38:39:26:1f:d8:13:df:3b:97:69:c4:cd:77:5c:ca:4e: 4e:d4:e3:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDJCNTM3NUYyRDA2MDc1NDZENTFGNjUxMUY2MUJDNEEx ODk3NEZERTIwHhcNMjUxMDIwMTQyNDQ3WhcNMjUxMDI3MTQyNDQ3WjAYMRYwFAYD VQQDEw02OGY2NDYzMC0xYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp2GzmFV+cv+k6WO+cM05ISXyLjNArRjPSmy/may2Z9DvwcmT5dpRjTrX1y6 F/cXoTHGSeioa1JYzMj+FLIWtvJCe0mS21X9zAV0ZObCXOTJ08Sayc8B1zoLiL/+ 5is/EFmK8QIOdCIKp5BoCIaDQunRc6llOiAoAkaibwwoY046hJet0mEw+jl/vdI2 Cfu0d000AEYIlh06WQA87n7xWmT5KFNQLD4mOIz8g7bPXOboUClyE1tF+At/SRDW iBUZthkA8rcRiuPnaxWBaH5NeD1yNjdgXBbzJP+q6ZfeJQts0edSv8RkBOy7FE2q kYAmstUjTvSW3XGGGW3HFOpmCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDHMUdc 287D98+tpRsAGgWIF/m9MB8GA1UdIwQYMBaAFCtTdfLQYHVG1R9lEfYbxKGJdP3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS8wNUM0QzBBNDFE ODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RVYlZIMlVSOWh2RW9ZbDBf ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTjE4dEJnZFViVkgyVVI5aHZFb1lsMF9lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS8wNUM0QzBBNDFEODQxMUUyQjBDNUEzRDkwOEIwMkNEMi9LMU4xOHRCZ2RV YlZIMlVSOWh2RW9ZbDBfZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu22JPo4U+BrpMeKnGM/nWV+roIa7pAP2soEBQiiTunnOWI3NzLz0W 5f7GtOthO59dspjbwW2RZpswFp0W9509KApR1HJMTPVgFvd4h1PJAyRHDoPEDWik 5nemehDihU8EDS0BeQbKR1q4dvyrsYHkfbKNsNNLPhweOpX8H6phbaOv4DA8PDie DFm3dJ34LWTCE9RSqPC5CtAMnM2C2XwHOVxZZao+3ipbeGVpEPybZ6SCpoGx5wtP 8WF7zy/1Jbwv8MezVfAwzzZv8BXCI7YCu16Vynfw5RptM1Cw6131Tw+76PmsdEAm cFiiHjg5Jh/YE987l2nEzXdcyk5O1OPf -----END CERTIFICATE-----Generated at Tue Oct 21 01:36:49 2025 by rpki-client