$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: SVX/X4mEYz6BEQkM0PXU8uEtO7JmfyvgMYFAL58UAFU= Subject key identifier: 8C:E0:66:20:E8:31:3B:DB:8D:96:D9:67:DE:74:8B:75:19:EF:13:FA Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 395C Signing time: Sun 02 Nov 2025 14:37:34 +0000 Manifest this update: Sun 02 Nov 2025 14:37:33 +0000 Manifest next update: Sun 09 Nov 2025 14:37:33 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: bp4qFaJmznRXmVyTZBnRccZm6UvUYtLauChGZm5TFME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Nov 2 14:37:33 2025 GMT Not After : Nov 9 14:37:33 2025 GMT Subject: CN=69076cad-eeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:eb:42:01:18:ad:85:10:57:3d:2c:86:01: f0:04:c7:9e:be:48:a5:58:41:22:b0:6e:fa:32:4a: 6a:3c:ba:f1:3a:a8:72:e0:1f:6b:bb:79:d4:38:29: 9c:79:43:c6:5c:fb:93:3d:ba:99:2f:73:3b:e8:07: 4c:5e:37:db:af:37:0f:26:6d:53:dc:02:14:6a:56: c9:d4:a7:ca:52:92:7f:3c:4c:16:c5:ec:73:3d:3d: 82:00:1c:6c:c3:ae:fc:a8:db:6c:3f:5e:30:26:71: 23:28:38:24:53:ce:20:b6:00:7c:d1:40:1a:51:00: aa:d1:aa:ab:87:59:55:0f:5c:52:99:a4:81:13:6a: 8f:e1:2d:33:64:64:ac:b0:8b:04:65:08:03:5b:3f: 15:1b:49:ed:96:8a:82:99:3d:d5:55:b7:90:f2:e3: 15:2a:41:48:b9:96:51:3e:1f:b3:2b:12:37:1f:cc: 94:26:11:51:c0:6d:8f:51:38:55:83:7d:43:c6:66: 36:ea:52:a9:72:57:5c:6b:7c:c5:4a:d0:9e:d0:9f: 16:3d:97:0c:ed:13:b5:0b:ee:16:92:06:53:50:6d: 6d:8e:a1:c8:22:5a:1a:88:75:02:ca:e1:81:e3:24: d2:93:96:c4:e3:3d:18:89:ef:9e:ca:7b:da:4d:86: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:66:20:E8:31:3B:DB:8D:96:D9:67:DE:74:8B:75:19:EF:13:FA X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:9f:df:b1:5c:fe:70:05:bc:bd:b9:4b:be:e2:76:fa:1a: 19:9c:2f:14:74:e6:2f:71:37:a5:5d:85:51:f8:14:b7:1f:25: 64:bc:b0:ae:f6:89:b0:23:a3:f5:94:c3:83:fd:36:bb:0b:22: 88:d6:1d:65:f9:bb:5e:c7:77:59:07:45:f4:73:0a:80:31:50: 2c:70:37:19:1c:8a:3e:e8:ec:a8:aa:2c:5c:4b:d7:1e:a8:c8: 6b:24:26:75:bc:a1:99:fc:47:6e:46:5e:f7:a2:64:6f:29:e7: 4b:72:bd:b1:df:da:15:14:58:1c:8c:a7:df:e5:7d:51:d4:77: 80:eb:59:4c:84:13:af:63:d6:8c:d2:68:6f:8c:5c:8f:f5:b3: 2c:cc:8f:0b:3a:f1:a6:dd:eb:6a:8e:af:8d:d0:f0:85:56:80: 5d:39:a2:07:43:be:a3:f1:91:72:79:e9:4a:2e:ea:de:98:f9: f9:32:e5:db:86:b1:e7:1c:0c:24:4b:6d:6a:9d:b8:b2:fa:e9: 8d:50:b1:91:10:79:55:46:b6:8d:ee:c3:d8:62:fb:0c:3c:ef: 12:98:1b:f0:cd:0d:b6:dc:18:34:9b:9b:0b:4d:e1:50:55:ac: 44:41:9d:d5:f3:42:2e:fc:61:56:24:07:4b:5f:00:6e:8f:56: 52:aa:5e:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUxMTAyMTQzNzMzWhcNMjUxMTA5MTQzNzMzWjAYMRYwFAYD VQQDEw02OTA3NmNhZC1lZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8vrQgEYrYUQVz0shgHwBMeevkilWEEisG76MkpqPLrxOqhy4B9ru3nUOCmc eUPGXPuTPbqZL3M76AdMXjfbrzcPJm1T3AIUalbJ1KfKUpJ/PEwWxexzPT2CABxs w678qNtsP14wJnEjKDgkU84gtgB80UAaUQCq0aqrh1lVD1xSmaSBE2qP4S0zZGSs sIsEZQgDWz8VG0ntloqCmT3VVbeQ8uMVKkFIuZZRPh+zKxI3H8yUJhFRwG2PUThV g31DxmY26lKpcldca3zFStCe0J8WPZcM7RO1C+4WkgZTUG1tjqHIIloaiHUCyuGB 4yTSk5bE4z0Yie+eynvaTYamAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzgZiDo MTvbjZbZZ950i3UZ7xP6MB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJl5/fsVz+cAW8vblLvuJ2+hoZnC8UdOYvcTelXYVR+BS3HyVkvLCu 9omwI6P1lMOD/Ta7CyKI1h1l+btex3dZB0X0cwqAMVAscDcZHIo+6OyoqixcS9ce qMhrJCZ1vKGZ/EduRl73omRvKedLcr2x39oVFFgcjKff5X1R1HeA61lMhBOvY9aM 0mhvjFyP9bMszI8LOvGm3etqjq+N0PCFVoBdOaIHQ76j8ZFyeelKLuremPn5MuXb hrHnHAwkS21qnbiy+umNULGREHlVRraN7sPYYvsMPO8SmBvwzQ223Bg0m5sLTeFQ VaxEQZ3V80Iu/GFWJAdLXwBuj1ZSql5t -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:20 2025 by rpki-client