$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: awhmPPVbmLU21yujujDuM14y2xBzWv8UfxOY9ndInys= Subject key identifier: B3:A1:08:35:48:A4:12:21:56:00:B7:D0:E5:35:21:70:86:04:3D:8D Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 49 Signing time: Mon 03 Nov 2025 07:21:01 +0000 Manifest this update: Mon 03 Nov 2025 07:21:00 +0000 Manifest next update: Mon 10 Nov 2025 07:21:00 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: h5IuckcIzblGth9D6Et/ICZC9+fx6pE0oeA8pres4oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Nov 3 07:21:00 2025 GMT Not After : Nov 10 07:21:00 2025 GMT Subject: CN=690857dd-d9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:4c:44:7c:3e:be:f5:99:75:9a:23:85:b1: a1:8f:0b:ff:c4:cb:d9:18:18:1b:73:89:8a:17:19: e5:a3:26:47:df:8b:b5:9a:df:9a:0c:31:a2:6f:bd: 7f:df:b8:4c:90:92:d5:35:27:ec:f1:e8:45:33:02: 5b:20:cf:3d:5c:cd:30:5e:93:b2:9c:f6:4c:0b:ad: 95:ac:f1:01:f1:96:31:b8:8d:1c:85:2f:5a:9f:ae: 34:4a:74:5d:4a:bf:3a:3d:ab:b6:99:14:46:32:15: c1:55:9d:bc:72:69:84:79:c7:43:4b:6b:d3:d0:88: f8:30:9e:95:65:34:4b:cb:fe:75:ca:79:47:39:b3: ba:06:75:72:e2:16:ac:91:0f:10:72:67:f0:7e:50: cb:d3:d9:f1:7c:10:e3:d9:e0:8d:a3:25:24:63:5a: 67:d2:86:42:67:a2:2c:fd:2b:30:d3:70:dd:a0:8b: 29:8c:fc:c0:20:14:57:52:f0:b9:b6:c0:a7:62:30: d6:82:b6:2f:63:3f:10:72:9f:5d:11:c1:2d:3e:18: 00:ae:d6:e0:ec:8c:d4:bd:e9:33:ef:91:67:35:85: bc:ac:db:2d:27:7c:e5:e9:9d:fc:51:bf:aa:ab:81: 27:e1:50:58:14:ab:9e:8f:11:64:b7:29:cc:89:7f: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A1:08:35:48:A4:12:21:56:00:B7:D0:E5:35:21:70:86:04:3D:8D X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1c:20:6c:7b:7e:8f:47:18:4f:92:66:19:61:65:65:7c:9b: a9:14:36:90:03:38:3f:c3:34:89:d2:f0:3a:bd:59:dc:b0:71: a7:bf:20:2d:cc:2f:ac:88:49:a9:22:7e:3a:e0:7c:99:c7:a2: 1e:99:8f:db:f1:95:81:e1:72:b3:b2:54:cc:25:f1:56:18:f9: d0:d4:9d:ae:44:5a:42:5e:b4:0a:33:98:28:e5:62:03:e0:c4: 79:26:70:4d:d5:8d:ef:d4:eb:16:a5:b5:32:34:2f:f7:1f:b7: 42:3d:b1:a7:db:5f:c2:b6:a5:55:7e:c2:52:9a:16:3d:56:9e: 21:85:a7:ab:5d:73:be:9f:68:45:90:03:df:ae:a5:7e:3a:d0: 9d:f7:36:36:b8:ac:5a:3b:75:0e:67:95:21:3d:8d:dc:af:09: a6:95:19:f7:ce:8b:5f:c6:6e:7a:f6:56:da:73:cb:a9:a3:ce: c9:95:ec:3f:a6:97:0a:16:17:ca:a9:64:45:f4:2e:d0:2b:9b: 83:52:b6:8a:72:af:cb:c2:cf:36:e3:95:0c:8d:12:07:fa:8b: 4c:3d:20:11:df:48:b8:4c:61:66:4f:c8:19:eb:2d:89:7a:8c: dd:77:2e:5d:98:cb:53:dc:76:fe:4b:13:06:22:ae:cf:5f:86: 15:a6:99:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNBNTExMC8GA1UEBRMoOTAyMUJFRkYzQjYzRUU3MjQ4QjkwRERBQTVEREJGQTdF MzEyMUNEOTAeFw0yNTExMDMwNzIxMDBaFw0yNTExMTAwNzIxMDBaMBgxFjAUBgNV BAMTDTY5MDg1N2RkLWQ5ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkAkxEfD6+9Zl1miOFsaGPC//Ey9kYGBtziYoXGeWjJkffi7Wa35oMMaJvvX/f uEyQktU1J+zx6EUzAlsgzz1czTBek7Kc9kwLrZWs8QHxljG4jRyFL1qfrjRKdF1K vzo9q7aZFEYyFcFVnbxyaYR5x0NLa9PQiPgwnpVlNEvL/nXKeUc5s7oGdXLiFqyR DxByZ/B+UMvT2fF8EOPZ4I2jJSRjWmfShkJnoiz9KzDTcN2giymM/MAgFFdS8Lm2 wKdiMNaCti9jPxByn10RwS0+GACu1uDsjNS96TPvkWc1hbys2y0nfOXpnfxRv6qr gSfhUFgUq56PEWS3KcyJf2+DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs6EINUik EiFWALfQ5TUhcIYEPY0wHwYDVR0jBBgwFoAUkCG+/ztj7nJIuQ3apd2/p+MSHNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0E1L0U1N0YzNTkyNEI3 NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0NHLV96dGo3bkpJdVEzYXBkMl9wLU1TSE5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0E1L0U1N0YzNTkyNEI3NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25K SXVRM2FwZDJfcC1NU0hOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAcIGx7fo9HGE+SZhlhZWV8m6kUNpADOD/DNInS8Dq9Wdywcae/IC3M L6yISakifjrgfJnHoh6Zj9vxlYHhcrOyVMwl8VYY+dDUna5EWkJetAozmCjlYgPg xHkmcE3Vje/U6xaltTI0L/cft0I9safbX8K2pVV+wlKaFj1WniGFp6tdc76faEWQ A9+upX460J33Nja4rFo7dQ5nlSE9jdyvCaaVGffOi1/Gbnr2Vtpzy6mjzsmV7D+m lwoWF8qpZEX0LtArm4NStopyr8vCzzbjlQyNEgf6i0w9IBHfSLhMYWZPyBnrLYl6 jN13Ll2Yy1Pcdv5LEwYirs9fhhWmmTM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:49 2025 by rpki-client