$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: UXNbSdXf3VudISC3Bi7VHqnGqJMjXlffnizlCIqXKxE= Subject key identifier: E6:DC:5E:CD:58:3C:07:E6:5A:87:1A:6F:17:59:38:38:C1:74:07:3A Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 013B Signing time: Mon 03 Nov 2025 04:25:37 +0000 Manifest this update: Mon 03 Nov 2025 04:25:37 +0000 Manifest next update: Mon 10 Nov 2025 04:25:37 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: djM2C5ayXFC8EPOuACQV+8TCmTyUFaMt+APlJGJI/l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Nov 3 04:25:37 2025 GMT Not After : Nov 10 04:25:37 2025 GMT Subject: CN=69082ec1-fb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:98:29:05:3e:cc:e2:08:aa:d3:4b:46:de: d1:3a:1a:0f:e0:cf:39:a6:d1:c0:e5:d8:8b:c5:70: 02:b6:cc:8f:dc:ae:ad:b0:0a:d9:3c:0a:28:50:42: 3b:4e:b7:35:6a:ba:06:3a:73:13:75:53:cb:df:84: f2:d2:24:74:0a:18:78:5e:de:b8:4c:af:e9:c6:f4: 29:36:9b:14:b6:a3:cd:1b:ec:e9:4b:e3:13:55:4a: 7d:a1:64:02:21:aa:ff:76:0f:b4:b2:d6:bf:f2:6f: 79:0b:28:bf:29:e4:af:c5:72:34:5f:f9:dd:56:58: 6f:5a:1b:ee:82:b0:09:3b:7a:5a:83:e9:f0:8b:40: 26:d3:12:c2:4a:8f:b7:fd:f9:6b:b4:81:f9:a5:76: 00:8f:15:f7:77:f8:60:95:3b:39:16:6a:e0:89:13: de:43:ab:43:48:52:b5:02:35:2b:30:d9:f2:d8:68: 6d:cd:de:f3:3e:c5:2f:08:e2:f8:d7:58:34:8f:41: db:62:f5:f9:72:b2:eb:b2:9a:cd:3b:42:17:89:d4: 15:f9:c0:73:80:33:27:16:ed:0e:aa:7f:ad:08:cd: 07:1b:a7:35:05:9d:8f:f8:90:38:56:2c:c8:06:a1: d8:eb:2b:26:1f:17:10:14:80:1f:df:d0:3f:b8:98: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DC:5E:CD:58:3C:07:E6:5A:87:1A:6F:17:59:38:38:C1:74:07:3A X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2e:dd:3c:e9:02:ee:b0:1b:47:bf:a0:0e:03:d8:7f:62:2d: 46:2b:42:b5:dc:6f:66:7b:4c:e8:62:94:48:e3:f0:99:1f:63: 31:27:70:66:e2:b6:53:5f:d9:ca:d2:5a:be:63:e7:1f:e8:27: 3f:e2:ec:03:dd:c2:2d:d3:19:3a:b6:5c:a4:28:cc:6a:5d:90: 3f:07:51:5e:38:48:95:c3:84:3e:d6:2a:8b:0d:52:f2:b1:01: 50:87:7b:ad:c9:35:d1:96:54:b2:85:0c:1a:3c:0a:f5:34:99: 12:27:94:d6:c8:69:1e:fd:2a:2e:08:ab:80:90:e9:d4:88:19: 9b:2c:d0:24:67:35:bb:3b:f7:5d:4d:66:7f:dc:1d:c3:31:36: b2:01:5b:91:1d:0c:cb:ac:06:ec:8a:0f:c0:3a:57:2e:ae:84: b5:17:17:c5:a9:21:26:5b:35:3a:e2:8b:00:93:a5:50:b3:2d: 6f:b4:30:19:60:64:4a:86:be:f5:24:ba:00:4b:01:42:fe:f8: cc:11:d7:c1:d4:96:f7:1d:16:d8:16:6e:5d:81:d9:22:70:32: 43:40:6d:f6:9d:23:2d:22:08:52:60:7c:41:0b:92:f6:51:f4: 8d:e1:f4:ca:ca:bf:d3:10:e9:03:3d:93:eb:62:cf:ba:7b:fe: 50:e5:f5:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUxMTAzMDQyNTM3WhcNMjUxMTEwMDQyNTM3WjAYMRYwFAYD VQQDEw02OTA4MmVjMS1mYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9mYKQU+zOIIqtNLRt7ROhoP4M85ptHA5diLxXACtsyP3K6tsArZPAooUEI7 Trc1aroGOnMTdVPL34Ty0iR0Chh4Xt64TK/pxvQpNpsUtqPNG+zpS+MTVUp9oWQC Iar/dg+0sta/8m95Cyi/KeSvxXI0X/ndVlhvWhvugrAJO3pag+nwi0Am0xLCSo+3 /flrtIH5pXYAjxX3d/hglTs5FmrgiRPeQ6tDSFK1AjUrMNny2Ghtzd7zPsUvCOL4 11g0j0HbYvX5crLrsprNO0IXidQV+cBzgDMnFu0Oqn+tCM0HG6c1BZ2P+JA4VizI BqHY6ysmHxcQFIAf39A/uJjuVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObcXs1Y PAfmWocabxdZODjBdAc6MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMLt086QLusBtHv6AOA9h/Yi1GK0K13G9me0zoYpRI4/CZH2MxJ3Bm 4rZTX9nK0lq+Y+cf6Cc/4uwD3cIt0xk6tlykKMxqXZA/B1FeOEiVw4Q+1iqLDVLy sQFQh3utyTXRllSyhQwaPAr1NJkSJ5TWyGke/SouCKuAkOnUiBmbLNAkZzW7O/dd TWZ/3B3DMTayAVuRHQzLrAbsig/AOlcuroS1FxfFqSEmWzU64osAk6VQsy1vtDAZ YGRKhr71JLoASwFC/vjMEdfB1Jb3HRbYFm5dgdkicDJDQG32nSMtIghSYHxBC5L2 UfSN4fTKyr/TEOkDPZPrYs+6e/5Q5fVG -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:42 2025 by rpki-client