$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: ScqDA/ADuED9Ggo3V9DYNICOj0diy23E3VjgVLz0oQc= Subject key identifier: C6:87:71:52:0D:DE:DA:47:53:7D:26:C0:EC:F5:DA:25:2D:6C:66:5A Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 070C Signing time: Tue 04 Nov 2025 21:59:55 +0000 Manifest this update: Tue 04 Nov 2025 21:59:55 +0000 Manifest next update: Tue 11 Nov 2025 21:59:55 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: C76+n1oaq+N7Oz+yuRkChhAo+Ogv/LHlbllj5usqbMU=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Nov 4 21:59:55 2025 GMT Not After : Nov 11 21:59:55 2025 GMT Subject: CN=690a775b-4c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:1f:fe:b8:68:72:23:c2:95:ce:dc:07:1f: 1d:f2:0c:c4:b5:6f:62:c5:b5:86:8a:d8:43:3d:b6: ae:3e:0b:4b:aa:a3:c8:79:f8:ff:b5:65:62:cc:9b: fe:8e:4f:69:47:1a:c9:7e:8c:54:d5:3d:2e:84:05: ae:21:f5:ec:f4:47:5c:f6:0b:10:b5:77:56:ce:d1: 5f:12:15:80:38:63:95:44:56:42:51:cd:43:f5:ad: f5:46:9e:f8:03:8e:70:44:57:44:5e:4b:e3:a5:aa: a6:9d:9d:67:94:5c:65:97:5a:e1:a0:15:2b:05:e6: 06:e3:9f:a2:a0:46:3a:b3:84:47:72:48:6b:9b:a9: ba:9e:b3:e7:27:3d:70:ca:7d:a9:45:ba:ba:06:7d: 13:86:09:c8:57:cb:0a:68:cf:89:6a:b2:1c:ba:b3: ba:6c:e6:28:15:d7:bd:3d:fd:64:68:af:63:e4:96: ec:de:8d:19:d2:8e:f4:8f:80:6e:4b:be:92:8d:14: d2:20:f2:ae:38:a4:d5:de:6d:65:bf:44:47:28:52: 5e:0c:2c:15:12:cb:e0:8d:93:78:02:ce:64:7f:29: 92:6f:1e:a4:de:32:84:bf:ce:72:11:30:ad:b9:ab: a5:e4:3e:2e:e3:da:49:5a:82:04:b9:90:3f:78:97: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:87:71:52:0D:DE:DA:47:53:7D:26:C0:EC:F5:DA:25:2D:6C:66:5A X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:21:0d:7c:cf:29:6e:3e:43:f5:b5:3c:09:39:4b:28:5f:7a: 4c:a8:18:da:1d:23:5e:1a:67:c3:a6:78:e6:07:17:fd:6f:45: 56:e3:d8:c6:d1:69:c1:1d:07:02:ef:38:c6:82:fc:89:59:9d: bd:91:54:ff:53:c9:3c:00:66:d2:2d:2d:17:43:4d:7c:a5:5c: da:61:98:63:20:ec:40:0d:48:fd:95:62:11:fb:29:6c:2f:d3: 76:9d:df:01:14:12:c8:72:83:59:d3:04:00:5b:af:c2:af:0b: 2b:67:22:ad:f8:7c:30:9e:c9:2a:9c:3a:fa:0b:57:37:54:78: f1:b9:22:fc:d9:f6:fe:ae:e2:db:6c:b4:a9:bc:3d:2a:70:61: 5e:97:8e:ed:14:d6:a6:b6:e0:02:d3:3f:db:74:8d:b2:4b:db: c7:96:dd:3e:d5:ae:22:4f:82:9c:19:7a:ee:ab:9e:69:c1:b9: 60:c3:56:6d:b1:e8:e2:e5:dc:38:9a:0d:f9:0e:1c:95:f4:5e: 06:ba:a6:2b:e3:04:5e:03:09:7e:40:c7:a9:4d:35:29:96:92: 18:6f:99:aa:c5:05:ba:b8:c1:2e:bf:05:cc:65:35:d2:24:59: 7c:28:8d:d1:e4:2b:9d:ad:2c:01:c7:f7:69:d1:d5:b6:75:52: a8:a8:99:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUxMTA0MjE1OTU1WhcNMjUxMTExMjE1OTU1WjAYMRYwFAYD VQQDEw02OTBhNzc1Yi00YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvwf/rhociPClc7cBx8d8gzEtW9ixbWGithDPbauPgtLqqPIefj/tWVizJv+ jk9pRxrJfoxU1T0uhAWuIfXs9Edc9gsQtXdWztFfEhWAOGOVRFZCUc1D9a31Rp74 A45wRFdEXkvjpaqmnZ1nlFxll1rhoBUrBeYG45+ioEY6s4RHckhrm6m6nrPnJz1w yn2pRbq6Bn0ThgnIV8sKaM+JarIcurO6bOYoFde9Pf1kaK9j5Jbs3o0Z0o70j4Bu S76SjRTSIPKuOKTV3m1lv0RHKFJeDCwVEsvgjZN4As5kfymSbx6k3jKEv85yETCt uaul5D4u49pJWoIEuZA/eJfxbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaHcVIN 3tpHU30mwOz12iUtbGZaMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrIQ18zyluPkP1tTwJOUsoX3pMqBjaHSNeGmfDpnjmBxf9b0VW49jG 0WnBHQcC7zjGgvyJWZ29kVT/U8k8AGbSLS0XQ018pVzaYZhjIOxADUj9lWIR+yls L9N2nd8BFBLIcoNZ0wQAW6/CrwsrZyKt+HwwnskqnDr6C1c3VHjxuSL82fb+ruLb bLSpvD0qcGFel47tFNamtuAC0z/bdI2yS9vHlt0+1a4iT4KcGXruq55pwblgw1Zt seji5dw4mg35DhyV9F4GuqYr4wReAwl+QMepTTUplpIYb5mqxQW6uMEuvwXMZTXS JFl8KI3R5CudrSwBx/dp0dW2dVKoqJmr -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:49 2025 by rpki-client