$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json) Hash identifier: IJJ/YTgHJOSF/5XJH8Z6yDQibJawU+Aplmj/O9O8E/g= Subject key identifier: 83:B3:E2:6F:FE:A4:A4:7F:85:96:41:D0:AA:3E:E4:21:27:44:74:8D Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft Manifest number: C9 Signing time: Wed 05 Nov 2025 05:56:07 +0000 Manifest this update: Wed 05 Nov 2025 05:56:06 +0000 Manifest next update: Wed 12 Nov 2025 05:56:06 +0000 Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: fh6kgTFQjzzc07OYuXLZChtoQh2DDJTqGovs5U+eixo=) 2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: 9OijFxAeR1Xs5oJ+COotVbhAxkaxtoAB6g/k9YHqdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Validity Not Before: Nov 5 05:56:06 2025 GMT Not After : Nov 12 05:56:06 2025 GMT Subject: CN=690ae6f6-488b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:fe:df:1e:19:b9:22:83:b8:4f:a4:bf:61: fe:2e:3e:5f:08:33:8e:55:94:72:2f:10:44:c9:8d: 06:67:1c:be:fb:f3:b3:d9:6d:90:85:22:0c:ad:31: ce:fd:1d:36:68:6c:85:0f:0d:71:8b:c7:df:c1:3c: 43:6e:72:a0:1a:6e:8d:bb:6f:e3:19:03:7c:92:eb: ad:5e:c4:c9:77:15:0c:5b:63:5c:26:00:1a:2b:df: 7e:14:22:69:36:cb:13:67:b2:24:71:56:b1:28:d3: 1f:50:05:a4:15:53:3c:ca:41:99:d0:49:50:dd:31: 9b:b3:b8:b3:7e:d5:b5:95:d8:f1:e6:a0:bd:b6:08: 8d:97:95:99:77:0a:95:24:34:d8:09:82:34:42:ad: 6a:0b:8f:97:b3:0e:3d:8a:d3:99:84:95:1e:4e:41: 30:14:1e:c1:c9:d3:8a:79:cb:bf:7e:7b:b0:2d:20: 96:4c:8c:d6:8e:58:db:ae:9a:c5:62:67:43:7b:39: 27:95:2f:f6:70:5d:76:33:1c:68:78:3b:cf:94:66: e0:11:ba:6f:65:cb:42:cd:1d:a4:9e:15:4c:42:37: e2:2c:25:ed:01:ba:db:d6:f7:ca:a0:d1:da:ad:c9: c9:5d:36:c6:9c:72:78:bd:2f:32:72:2a:99:15:92: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B3:E2:6F:FE:A4:A4:7F:85:96:41:D0:AA:3E:E4:21:27:44:74:8D X509v3 Authority Key Identifier: keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:95:97:97:99:77:f6:88:72:f8:88:60:80:b4:dc:99:28:38: 1b:7c:c7:f1:80:9f:9e:28:f0:c0:e2:88:90:cf:69:bf:2d:25: 75:58:0b:12:d3:63:ed:e0:b5:ae:b7:64:3e:c0:eb:23:78:01: 6d:29:81:4d:56:2a:a4:5d:7c:7c:3c:06:f4:01:3a:d0:da:75: e2:a9:60:30:2a:2e:c7:6b:f6:9f:33:d9:1f:35:12:95:aa:09: 24:5e:c4:e9:d4:6b:f9:b3:e3:6e:1f:2b:be:62:69:bb:f1:ed: 37:f3:b0:3b:91:c5:4c:3b:cc:8d:a8:23:ee:b1:37:ae:d7:70: 04:b5:2b:0d:90:3e:95:9a:17:b2:07:de:95:f0:ab:68:10:6f: 94:05:9b:69:dd:ea:12:ee:19:bf:79:7a:87:8f:49:74:86:df: ad:d7:55:ef:a0:6f:de:0a:a4:e5:e1:7c:ec:8a:de:83:07:c1: 96:e1:6e:99:a3:92:24:71:2b:22:9a:02:22:fe:42:36:50:8b: 5f:3b:e9:c2:46:26:b6:aa:57:3e:94:a9:8b:4c:fa:7a:c7:d9: 2a:dd:c2:69:a7:5d:c5:01:ef:c6:58:0e:8e:4e:8e:94:ec:e9: 71:cb:fe:0b:f7:b7:50:67:a1:e0:2f:b3:66:4f:a1:85:21:78: a4:2a:b1:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKDI5QTAwOTAxM0Y3NDMxREUzNjlDMDBDQUI1NDcxNkNB OTM0NTI2RDMwHhcNMjUxMTA1MDU1NjA2WhcNMjUxMTEyMDU1NjA2WjAYMRYwFAYD VQQDEw02OTBhZTZmNi00ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+X+3x4ZuSKDuE+kv2H+Lj5fCDOOVZRyLxBEyY0GZxy++/Oz2W2QhSIMrTHO /R02aGyFDw1xi8ffwTxDbnKgGm6Nu2/jGQN8kuutXsTJdxUMW2NcJgAaK99+FCJp NssTZ7IkcVaxKNMfUAWkFVM8ykGZ0ElQ3TGbs7izftW1ldjx5qC9tgiNl5WZdwqV JDTYCYI0Qq1qC4+Xsw49itOZhJUeTkEwFB7BydOKecu/fnuwLSCWTIzWjljbrprF YmdDezknlS/2cF12MxxoeDvPlGbgEbpvZctCzR2knhVMQjfiLCXtAbrb1vfKoNHa rcnJXTbGnHJ4vS8yciqZFZLf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOz4m/+ pKR/hZZB0Ko+5CEnRHSNMB8GA1UdIwQYMBaAFCmgCQE/dDHeNpwAyrVHFsqTRSbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8zMDQzNjM1Qzg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1kNDJuQURLdFVjV3lwTkZK dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8zMDQzNjM1Qzg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1k NDJuQURLdFVjV3lwTkZKdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDglZeXmXf2iHL4iGCAtNyZKDgbfMfxgJ+eKPDA4oiQz2m/LSV1WAsS 02Pt4LWut2Q+wOsjeAFtKYFNViqkXXx8PAb0ATrQ2nXiqWAwKi7Ha/afM9kfNRKV qgkkXsTp1Gv5s+NuHyu+Ymm78e0387A7kcVMO8yNqCPusTeu13AEtSsNkD6Vmhey B96V8KtoEG+UBZtp3eoS7hm/eXqHj0l0ht+t11XvoG/eCqTl4Xzsit6DB8GW4W6Z o5IkcSsimgIi/kI2UItfO+nCRia2qlc+lKmLTPp6x9kq3cJpp13FAe/GWA6OTo6U 7Olxy/4L97dQZ6HgL7NmT6GFIXikKrGh -----END CERTIFICATE-----Generated at Wed Nov 5 19:24:06 2025 by rpki-client