$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: 1Lf3e9LCsjww1DuBj5hhaeNpdu+PJ+jgzgf5FQKmBIg= Subject key identifier: 25:7D:16:5C:10:3F:57:4C:75:98:0E:69:56:B9:60:AA:28:55:4E:71 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 05A6 Signing time: Tue 04 Nov 2025 14:18:17 +0000 Manifest this update: Tue 04 Nov 2025 14:18:16 +0000 Manifest next update: Tue 11 Nov 2025 14:18:16 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: h5yMj6QwfCHANYiLC5Ajj3LRNp0L3AmNKEskdduqJRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Nov 4 14:18:16 2025 GMT Not After : Nov 11 14:18:16 2025 GMT Subject: CN=690a0b29-4f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:c5:cb:d7:ad:99:8f:33:4e:c7:a4:c3:b7: c6:62:53:5f:df:9c:c6:6e:e1:5d:df:e0:e0:de:7d: 08:f4:10:99:4e:25:51:50:56:07:49:9e:90:a5:f5: 0d:f6:97:58:22:54:3b:96:ac:67:60:5f:cd:48:e0: 48:12:80:03:20:75:4c:1d:43:5e:fe:96:30:07:c4: 2e:56:54:a0:a4:9b:88:13:50:17:9a:a3:0f:8d:4d: 47:58:cd:40:52:49:dc:d4:e7:0a:5d:1b:02:0c:5e: 54:59:78:88:38:0f:97:48:11:06:75:87:58:e3:35: 5e:ca:5f:2f:49:51:50:8a:5b:cb:c1:28:f3:1f:42: 86:30:e2:a1:4f:14:0d:12:a0:0b:11:e8:76:08:56: 57:7b:e3:58:fb:53:35:d2:f4:b2:8e:e8:1d:d1:92: fc:c2:07:56:6f:88:22:fe:59:65:0a:d1:09:5b:35: ad:c1:ad:5e:ac:8b:7e:a7:9d:f7:be:31:cf:8a:f2: 57:10:db:c0:7b:92:d3:e4:f8:b4:27:8b:63:57:43: 34:01:16:2e:f6:d6:c2:8f:aa:62:7e:19:4f:7a:fd: 3b:f7:92:4f:66:0b:4a:f2:4a:9f:df:69:b7:3d:d1: f2:3a:7b:8a:72:3b:7a:77:9c:13:c2:ee:db:26:58: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7D:16:5C:10:3F:57:4C:75:98:0E:69:56:B9:60:AA:28:55:4E:71 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:97:db:13:d2:f4:16:85:9d:e9:b1:07:b0:c9:fc:ce:5f:b4: d3:27:75:9a:2e:fc:61:23:2a:c5:cf:a9:d5:89:1c:47:f9:d3: d8:a9:a8:f6:64:2f:52:cd:99:3b:6e:ee:d7:6b:4f:55:d8:42: 27:7d:16:63:3a:ad:de:46:a8:0e:57:73:72:37:38:51:97:97: e1:bb:0d:8d:ba:f6:76:8d:ec:8f:33:6e:68:19:de:96:c7:cb: 78:b3:17:ee:93:68:1e:b6:33:8d:71:b1:f1:e3:fb:07:b8:05: 69:26:9a:b0:aa:9b:0b:ee:30:9c:84:32:ac:f7:81:68:51:4e: e1:d5:9e:72:93:61:98:5b:f5:c5:f0:cb:4e:5f:e1:8b:ba:9f: 8b:58:68:ef:c5:63:3d:80:75:06:67:fb:7e:a9:df:98:b0:1d: bb:17:1a:09:1a:ac:15:16:47:3c:93:6c:ab:a5:4b:e0:5d:dc: 12:4d:43:7f:ee:2e:a6:ef:9d:2c:b0:1e:b1:01:3f:30:77:d9: d7:00:b4:e2:81:c6:27:08:d1:52:9e:ea:75:6c:bd:23:26:1d: 3a:e5:8c:3e:70:8d:79:8e:bb:b7:d5:7f:6d:6c:7d:71:a0:3d: 11:bc:46:1c:32:bb:d2:17:2a:d9:53:93:d4:60:48:2f:01:5a: 32:0d:7b:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUxMTA0MTQxODE2WhcNMjUxMTExMTQxODE2WjAYMRYwFAYD VQQDEw02OTBhMGIyOS00ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbfFy9etmY8zTsekw7fGYlNf35zGbuFd3+Dg3n0I9BCZTiVRUFYHSZ6QpfUN 9pdYIlQ7lqxnYF/NSOBIEoADIHVMHUNe/pYwB8QuVlSgpJuIE1AXmqMPjU1HWM1A Uknc1OcKXRsCDF5UWXiIOA+XSBEGdYdY4zVeyl8vSVFQilvLwSjzH0KGMOKhTxQN EqALEeh2CFZXe+NY+1M10vSyjugd0ZL8wgdWb4gi/lllCtEJWzWtwa1erIt+p533 vjHPivJXENvAe5LT5Pi0J4tjV0M0ARYu9tbCj6pifhlPev0795JPZgtK8kqf32m3 PdHyOnuKcjt6d5wTwu7bJlixwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV9FlwQ P1dMdZgOaVa5YKooVU5xMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyl9sT0vQWhZ3psQewyfzOX7TTJ3WaLvxhIyrFz6nViRxH+dPYqaj2 ZC9SzZk7bu7Xa09V2EInfRZjOq3eRqgOV3NyNzhRl5fhuw2NuvZ2jeyPM25oGd6W x8t4sxfuk2getjONcbHx4/sHuAVpJpqwqpsL7jCchDKs94FoUU7h1Z5yk2GYW/XF 8MtOX+GLup+LWGjvxWM9gHUGZ/t+qd+YsB27FxoJGqwVFkc8k2yrpUvgXdwSTUN/ 7i6m750ssB6xAT8wd9nXALTigcYnCNFSnup1bL0jJh065Yw+cI15jru31X9tbH1x oD0RvEYcMrvSFyrZU5PUYEgvAVoyDXuy -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:04 2025 by rpki-client