$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft File: KdzyaXujSl1MV_LtlnGNAxu8VjA.mft (raw, json) Hash identifier: siDthsic4gsG7kvSsERXQNRKFxaqeCgzF/+0IZ1bfpE= Subject key identifier: 31:D8:FC:99:66:B1:30:76:2B:F3:64:11:E1:56:7A:C7:D3:EE:87:65 Authority key identifier: 29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 Certificate issuer: /CN=A91A1103/serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Certificate serial: 165D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft Manifest number: 1653 Signing time: Tue 04 Nov 2025 16:49:31 +0000 Manifest this update: Tue 04 Nov 2025 16:49:31 +0000 Manifest next update: Tue 11 Nov 2025 16:49:31 +0000 Files and hashes: 1: KdzyaXujSl1MV_LtlnGNAxu8VjA.crl (hash: 7XRCbojQckppcInzE8BD13OFDw6OYU+d4Jb6vAp+94A=) 2: 1C85059C1EB911E88533FA4EC4F9AE02.roa (hash: RqHN2PwZe21iOjQw65O1dXW58VJkxhmOGxQkFQUXslk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:49:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5725 (0x165d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1103, serialNumber=29DCF2697BA34A5D4C57F2ED96718D031BBC5630 Validity Not Before: Nov 4 16:49:31 2025 GMT Not After : Nov 11 16:49:31 2025 GMT Subject: CN=690a2e9b-ea75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:a5:09:d2:1e:6d:c2:87:d3:7f:c1:93:63: 42:e4:6b:2e:74:ea:d1:06:91:9d:22:49:f3:e8:82: c9:b7:a4:79:3d:82:3c:00:5e:7f:c8:42:c7:57:64: 94:1f:96:f9:e1:3b:aa:f6:f3:1f:86:c8:fa:79:86: da:a9:c8:a3:ef:56:1f:58:ab:21:9e:e4:b2:12:ee: 3d:52:da:2c:05:ce:23:84:00:23:fe:6e:15:20:47: 43:ba:1b:bc:d2:3e:aa:96:a0:f7:9f:56:da:d4:86: 61:df:e7:08:85:71:d5:13:33:c0:f5:ae:be:c6:2a: 15:63:ca:5c:99:5d:a9:05:e5:13:89:52:37:6d:a0: 16:e9:d7:d5:5b:9b:70:3b:a5:6b:e4:ca:6d:d7:4a: 5e:70:cf:ee:11:07:ce:d1:ef:46:15:02:27:c4:21: b6:1d:e0:e4:21:11:9c:95:56:63:24:b6:30:65:c1: 30:5e:65:3e:83:32:6e:a4:9d:a5:7a:ca:a4:4b:2a: 02:67:6e:e6:26:bc:63:d5:04:cb:5c:58:ec:5f:29: 95:c3:50:27:49:18:0c:17:85:61:b1:d9:50:f9:89: f0:f8:06:22:53:bb:9e:ba:44:da:b8:f3:23:09:8a: bb:8b:60:9f:ae:fc:c2:45:1c:c2:f8:33:00:11:5f: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D8:FC:99:66:B1:30:76:2B:F3:64:11:E1:56:7A:C7:D3:EE:87:65 X509v3 Authority Key Identifier: keyid:29:DC:F2:69:7B:A3:4A:5D:4C:57:F2:ED:96:71:8D:03:1B:BC:56:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KdzyaXujSl1MV_LtlnGNAxu8VjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1103/2095AA621A0711E8BE24A558C4F9AE02/KdzyaXujSl1MV_LtlnGNAxu8VjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:83:9e:2c:62:6b:2b:86:52:b6:9d:b8:7a:9c:86:36:15:57: fb:09:03:2d:ca:6a:7e:bc:d1:ee:7f:b0:ef:be:b4:88:33:c6: 46:c8:08:a3:98:7e:9f:8f:d2:cf:c7:c9:8b:f1:f9:10:2d:75: 19:ba:6b:c2:24:d3:b8:46:0b:78:e1:4d:6d:ca:5e:17:d1:77: cd:ba:b9:56:03:62:cb:bd:4a:59:a1:5f:f6:3f:f4:83:4a:41: 00:88:5d:75:64:65:65:20:0b:4b:bb:db:d5:34:50:7a:1b:5f: 95:69:5b:06:09:87:e7:d5:d4:5c:7f:63:c9:f8:59:4f:fb:a3: c4:69:54:22:a3:d1:bb:60:b1:61:08:a3:9d:ae:93:0f:04:84: c5:20:15:c9:bf:b0:7f:7b:bc:a0:b4:99:3d:05:a3:2d:1f:12: 12:d0:69:55:91:73:fd:d1:9b:78:94:f9:d7:4b:90:31:36:99: 32:91:e8:4a:41:17:7c:a4:74:29:8e:28:ce:fc:3b:60:51:c8: 96:c8:b0:eb:e4:2a:35:fb:04:2a:1c:e3:6d:d9:84:75:f3:a4: d6:16:91:81:39:d1:64:1f:f9:54:e3:ff:d0:42:11:ba:da:4d: fc:25:17:c4:f7:57:c6:c0:b8:67:b6:7f:e6:fe:50:ba:70:69: b1:5c:56:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExMDMxMTAvBgNVBAUTKDI5RENGMjY5N0JBMzRBNUQ0QzU3RjJFRDk2NzE4RDAz MUJCQzU2MzAwHhcNMjUxMTA0MTY0OTMxWhcNMjUxMTExMTY0OTMxWjAYMRYwFAYD VQQDEw02OTBhMmU5Yi1lYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi6lCdIebcKH03/Bk2NC5GsudOrRBpGdIknz6ILJt6R5PYI8AF5/yELHV2SU H5b54Tuq9vMfhsj6eYbaqcij71YfWKshnuSyEu49UtosBc4jhAAj/m4VIEdDuhu8 0j6qlqD3n1ba1IZh3+cIhXHVEzPA9a6+xioVY8pcmV2pBeUTiVI3baAW6dfVW5tw O6Vr5Mpt10pecM/uEQfO0e9GFQInxCG2HeDkIRGclVZjJLYwZcEwXmU+gzJupJ2l esqkSyoCZ27mJrxj1QTLXFjsXymVw1AnSRgMF4VhsdlQ+Ynw+AYiU7ueukTauPMj CYq7i2CfrvzCRRzC+DMAEV/ZKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHY/Jlm sTB2K/NkEeFWesfT7odlMB8GA1UdIwQYMBaAFCnc8ml7o0pdTFfy7ZZxjQMbvFYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTEwMy8yMDk1QUE2MjFB MDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNsMU1WX0x0bG5HTkF4dThW akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tkenlhWHVqU2wxTVZfTHRsbkdOQXh1OFZqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTEwMy8yMDk1QUE2MjFBMDcxMUU4QkUyNEE1NThDNEY5QUUwMi9LZHp5YVh1alNs MU1WX0x0bG5HTkF4dThWakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRg54sYmsrhlK2nbh6nIY2FVf7CQMtymp+vNHuf7DvvrSIM8ZGyAij mH6fj9LPx8mL8fkQLXUZumvCJNO4Rgt44U1tyl4X0XfNurlWA2LLvUpZoV/2P/SD SkEAiF11ZGVlIAtLu9vVNFB6G1+VaVsGCYfn1dRcf2PJ+FlP+6PEaVQio9G7YLFh CKOdrpMPBITFIBXJv7B/e7ygtJk9BaMtHxIS0GlVkXP90Zt4lPnXS5AxNpkykehK QRd8pHQpjijO/DtgUciWyLDr5Co1+wQqHONt2YR186TWFpGBOdFkH/lU4//QQhG6 2k38JRfE91fGwLhntn/m/lC6cGmxXFaj -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:52 2025 by rpki-client