$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: oHQlH9q6KSQCqekLiqsrJXGktZaMw/+12A3PNEZUIRs= Subject key identifier: B5:5D:42:10:10:E0:94:54:0B:BF:51:B1:BB:0A:C7:10:61:5C:A8:E2 Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 0222 Signing time: Wed 05 Nov 2025 02:12:15 +0000 Manifest this update: Wed 05 Nov 2025 02:12:14 +0000 Manifest next update: Wed 12 Nov 2025 02:12:14 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: 2t96vHW6/O6Nf0wr1OWq4fhAQjGmhC2OI/V8cAqWlos=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: dipdNfnJaJs6s5CVnvO1Wlubse6AOUfgpacGaixKSoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: Nov 5 02:12:14 2025 GMT Not After : Nov 12 02:12:14 2025 GMT Subject: CN=690ab27e-8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:9e:75:58:f6:fd:c9:83:c9:0a:39:23:2e: a0:80:10:5c:bc:9a:71:9d:a0:74:89:ec:3b:e0:7c: c2:10:96:a3:8e:6d:16:f0:13:f1:6d:f4:95:f5:a1: 72:eb:5c:20:4f:f7:96:d9:4f:87:8b:e4:35:d9:78: e7:7d:b0:f5:c4:f0:49:ef:f6:5b:a1:75:69:78:7e: ba:5f:ba:dc:37:6a:6a:58:6f:4b:ef:46:89:47:42: bb:a7:74:cd:25:e6:7d:4c:28:c8:cb:f0:9a:a3:52: f7:64:ea:0c:ec:ca:95:6a:9a:f7:38:3c:b9:85:ee: 03:4b:4f:36:a0:ac:34:56:cc:da:ac:1d:fc:b5:68: a4:fa:36:1f:d2:df:bd:f6:5d:30:b9:82:ab:60:7c: 0c:3c:33:72:9d:f9:65:80:02:29:05:4e:b1:88:63: 2a:86:cc:bf:fd:52:6b:c2:56:a5:11:b8:7c:d6:62: 04:1c:58:5f:e8:7b:98:df:72:92:9c:de:49:27:7b: ba:12:9b:c2:00:9b:48:f7:59:aa:a7:87:66:22:82: af:b8:39:c6:3a:08:1a:1a:98:7d:4e:08:a2:10:39: c7:e9:dd:6f:25:71:db:70:61:fe:a0:fd:c6:83:35: 0c:32:e1:9d:60:80:57:8f:dd:86:67:ce:38:01:c4: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5D:42:10:10:E0:94:54:0B:BF:51:B1:BB:0A:C7:10:61:5C:A8:E2 X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:98:33:07:e9:f0:ce:bb:3a:57:e9:0e:f0:3f:2e:70:e0:32: 9c:ef:9b:31:55:19:50:0b:ae:68:c1:ba:be:23:d1:3b:69:23: b8:b5:f3:94:60:22:52:8b:8b:d6:57:f6:73:66:e2:7b:cf:c4: 41:f4:b7:7b:7a:3b:b8:b2:be:38:ec:3b:12:24:10:1a:21:fc: 3a:4a:10:3c:0b:84:58:07:4e:d9:a5:e7:30:86:3f:01:2b:b6: 6f:23:a6:1b:12:f2:43:d2:a4:4e:cb:cd:7c:87:e6:a9:17:d1: cf:37:1b:b6:33:6b:eb:56:9e:c4:e1:63:74:41:71:f5:89:2f: 6b:ea:31:9a:c9:e7:89:92:89:1f:1c:53:43:10:a2:a2:45:3e: f4:d7:aa:f2:86:2b:6f:42:ff:2f:fc:fd:f3:c9:ec:1b:4a:db: 78:6e:50:8e:f9:64:51:25:68:3d:20:c2:3f:3c:b0:dc:45:86: b7:4f:c6:57:6e:72:09:69:12:ab:bc:18:76:54:08:a3:48:2c: f2:2c:a2:72:aa:92:6a:29:13:cc:67:ee:28:19:09:7c:f1:e2: 61:19:46:3e:2e:cf:1a:fe:1e:c0:62:50:04:5a:92:95:ee:78: 0c:0f:be:16:b1:45:bb:1e:9a:d5:a4:cd:96:f4:fa:6c:a8:65: c7:74:a2:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjUxMTA1MDIxMjE0WhcNMjUxMTEyMDIxMjE0WjAYMRYwFAYD VQQDEw02OTBhYjI3ZS04YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvaedVj2/cmDyQo5Iy6ggBBcvJpxnaB0iew74HzCEJajjm0W8BPxbfSV9aFy 61wgT/eW2U+Hi+Q12XjnfbD1xPBJ7/ZboXVpeH66X7rcN2pqWG9L70aJR0K7p3TN JeZ9TCjIy/Cao1L3ZOoM7MqVapr3ODy5he4DS082oKw0VszarB38tWik+jYf0t+9 9l0wuYKrYHwMPDNynfllgAIpBU6xiGMqhsy//VJrwlalEbh81mIEHFhf6HuY33KS nN5JJ3u6EpvCAJtI91mqp4dmIoKvuDnGOggaGph9TgiiEDnH6d1vJXHbcGH+oP3G gzUMMuGdYIBXj92GZ844AcQq8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVdQhAQ 4JRUC79RsbsKxxBhXKjiMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjmDMH6fDOuzpX6Q7wPy5w4DKc75sxVRlQC65owbq+I9E7aSO4tfOU YCJSi4vWV/ZzZuJ7z8RB9Ld7eju4sr447DsSJBAaIfw6ShA8C4RYB07Zpecwhj8B K7ZvI6YbEvJD0qROy818h+apF9HPNxu2M2vrVp7E4WN0QXH1iS9r6jGayeeJkokf HFNDEKKiRT7016ryhitvQv8v/P3zyewbStt4blCO+WRRJWg9IMI/PLDcRYa3T8ZX bnIJaRKrvBh2VAijSCzyLKJyqpJqKRPMZ+4oGQl88eJhGUY+Ls8a/h7AYlAEWpKV 7ngMD74WsUW7HprVpM2W9PpsqGXHdKIp -----END CERTIFICATE-----Generated at Wed Nov 5 13:22:43 2025 by rpki-client