$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: YHEACXa6hmHWL3khUJuMmuNbx77zJilhtHnTUf4vVbU= Subject key identifier: 2A:D1:89:F4:69:01:54:37:60:10:46:51:2B:E3:71:31:96:7A:51:18 Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: DF Signing time: Wed 05 Nov 2025 05:42:29 +0000 Manifest this update: Wed 05 Nov 2025 05:42:29 +0000 Manifest next update: Wed 12 Nov 2025 05:42:29 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: PuqNUxP02G8b7Pyl8Yqf6HXWTVDiWbwV9BuRsp9bg6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Nov 5 05:42:29 2025 GMT Not After : Nov 12 05:42:29 2025 GMT Subject: CN=690ae3c5-efcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:63:81:45:4c:47:1f:c5:86:55:b5:91:8b: 34:60:ee:03:09:90:5d:9f:0d:37:0f:48:ac:81:5f: 46:90:cb:1f:c8:f6:2d:4d:36:ac:0f:d0:62:ad:5b: fa:22:2a:ac:91:aa:06:b1:b5:d7:41:e3:7f:3f:bc: a3:d9:f4:09:ff:20:5e:c9:77:b9:a7:61:ce:a3:7f: 9f:06:84:58:0b:dc:df:d2:24:a9:03:66:52:84:67: 67:ca:3c:91:92:a4:43:15:11:70:43:db:61:9f:93: 26:d0:71:32:1b:9a:d0:2c:89:1f:52:9c:4f:1b:b1: 14:05:75:ab:a6:96:44:57:97:e9:0b:62:36:10:d9: 14:ea:3d:1f:e6:1e:08:eb:b1:3a:de:db:09:a9:74: 3e:f2:9e:01:ea:58:10:f9:00:e4:a4:5a:63:6c:7b: 10:06:c2:2c:5b:f9:0f:5f:ad:8e:65:31:d2:81:3e: 9d:db:d2:03:2a:19:d1:9c:36:47:12:45:ff:73:a8: ee:69:01:25:3c:0a:b9:67:51:56:d4:af:6b:78:d6: e3:19:71:c4:e6:8d:92:73:6b:ca:e0:32:b9:bd:fe: da:2c:8c:e3:ef:ba:ba:f9:3a:12:17:84:f2:84:f1: 8c:f2:aa:63:2f:fb:d0:3e:85:3f:43:79:3e:ed:bf: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:89:F4:69:01:54:37:60:10:46:51:2B:E3:71:31:96:7A:51:18 X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:6a:8e:e7:a9:fa:97:2a:b8:fa:04:1a:46:fa:0d:63:a5: 0d:2e:3d:c4:48:36:45:b5:9c:68:22:5f:db:34:07:12:d6:ed: b9:97:45:5b:ff:eb:25:3f:94:b1:a6:81:44:57:62:e8:71:b1: 12:e4:90:00:51:dd:3d:78:8d:9c:86:df:7c:97:df:57:27:ac: 05:39:b8:c1:3a:c1:b6:40:d3:cb:8c:eb:4c:74:37:6a:bd:46: e2:a4:19:f1:db:22:15:e9:60:42:a1:b2:32:63:ef:29:3a:cd: 96:32:d0:42:53:f2:a8:d4:c3:48:9b:e7:2c:c1:f9:bd:07:a0: 1b:30:ab:40:74:b2:a2:2d:ec:1c:6a:59:6d:1a:7d:18:9d:c3: 99:dd:33:66:b2:8d:fe:b3:37:b4:c3:f3:b5:68:03:ab:93:bc: 7b:37:6c:65:c3:73:45:4d:f5:6a:61:86:ed:a5:69:69:cb:79: b6:8e:90:17:f0:91:be:b5:f2:dd:20:5c:55:80:bb:a1:35:48: 38:8b:19:ed:ec:f2:ba:c3:ba:a9:5f:73:6d:22:98:ea:8a:c2: e7:a9:cc:7a:b6:d6:a4:30:e7:d8:25:79:fc:df:c7:aa:7e:91: 50:16:8b:01:2a:13:fb:f5:06:62:c4:b6:6c:d3:c1:7f:60:fb: fa:c7:05:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUxMTA1MDU0MjI5WhcNMjUxMTEyMDU0MjI5WjAYMRYwFAYD VQQDEw02OTBhZTNjNS1lZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp1jgUVMRx/FhlW1kYs0YO4DCZBdnw03D0isgV9GkMsfyPYtTTasD9BirVv6 IiqskaoGsbXXQeN/P7yj2fQJ/yBeyXe5p2HOo3+fBoRYC9zf0iSpA2ZShGdnyjyR kqRDFRFwQ9thn5Mm0HEyG5rQLIkfUpxPG7EUBXWrppZEV5fpC2I2ENkU6j0f5h4I 67E63tsJqXQ+8p4B6lgQ+QDkpFpjbHsQBsIsW/kPX62OZTHSgT6d29IDKhnRnDZH EkX/c6juaQElPAq5Z1FW1K9reNbjGXHE5o2Sc2vK4DK5vf7aLIzj77q6+ToSF4Ty hPGM8qpjL/vQPoU/Q3k+7b+xEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrRifRp AVQ3YBBGUSvjcTGWelEYMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArimqO56n6lyq4+gQaRvoNY6UNLj3ESDZFtZxoIl/bNAcS1u25l0Vb /+slP5SxpoFEV2LocbES5JAAUd09eI2cht98l99XJ6wFObjBOsG2QNPLjOtMdDdq vUbipBnx2yIV6WBCobIyY+8pOs2WMtBCU/Ko1MNIm+cswfm9B6AbMKtAdLKiLewc alltGn0YncOZ3TNmso3+sze0w/O1aAOrk7x7N2xlw3NFTfVqYYbtpWlpy3m2jpAX 8JG+tfLdIFxVgLuhNUg4ixnt7PK6w7qpX3NtIpjqisLnqcx6ttakMOfYJXn838eq fpFQFosBKhP79QZixLZs08F/YPv6xwXN -----END CERTIFICATE-----Generated at Wed Nov 5 18:49:06 2025 by rpki-client