$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft File: kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft (raw, json) Hash identifier: PAyXznxExb9yPCDfoqlbGwSjcgDZG2fCBEpSrgK8VjE= Subject key identifier: CB:19:C4:55:AC:23:CB:37:F6:E7:93:C9:56:8A:7A:20:7B:14:FC:4E Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 Certificate issuer: /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft Manifest number: 0C41 Signing time: Tue 04 Nov 2025 18:46:42 +0000 Manifest this update: Tue 04 Nov 2025 18:46:41 +0000 Manifest next update: Tue 11 Nov 2025 18:46:41 +0000 Files and hashes: 1: kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl (hash: aQ3IkXVCAGIlyQtr/KgRFPgKiUOreG9VciofTwVVbfk=) 2: EA531ACE61C211EF89F25E2CC4F9AE02.roa (hash: wvS2IKCsAphgy9VmVy8jmzdrhXrxZNTENgiqGBEyqqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6462, serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039 Validity Not Before: Nov 4 18:46:41 2025 GMT Not After : Nov 11 18:46:41 2025 GMT Subject: CN=690a4a12-38f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:aa:59:2c:d6:b9:0d:29:58:d7:ae:3f:f2: 89:04:b5:74:41:52:81:be:1b:bb:59:a6:8b:f3:ed: a0:98:db:63:25:39:24:dc:77:f8:38:96:28:00:78: 64:02:98:64:cb:49:8c:eb:d6:93:ab:1b:fd:5a:a4: f8:e2:38:6c:35:d2:72:7d:df:b6:2b:a8:30:76:f6: d7:bb:3e:3e:bd:c2:ec:ec:50:9a:9c:59:c9:f1:ea: 8b:0e:0e:ad:ba:03:5e:d2:47:a0:35:a0:36:fb:0b: 73:9c:47:77:ef:66:4c:d4:36:5c:60:8b:8e:f0:2c: 58:df:dd:0c:e9:6f:12:35:9e:28:4e:32:38:73:c8: c4:e6:d7:07:ca:a9:65:48:f7:bd:fa:3f:21:1b:d5: 06:3c:3a:55:62:6d:33:d2:55:34:70:de:62:39:dd: 66:71:97:ca:c1:ef:22:01:44:47:fa:34:95:01:4a: 30:7e:62:bc:c9:ac:5a:7b:87:59:c7:d8:be:60:75: f6:b8:f1:a1:c7:8c:7c:d3:22:e0:41:9a:15:ed:03: f0:78:3e:73:2e:0b:06:0d:d3:00:a2:81:61:ba:bd: 37:f0:7e:69:ae:f8:ce:ef:60:e3:76:f1:a3:00:88: 89:db:87:b2:40:13:12:dd:34:af:76:56:97:bf:8e: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:19:C4:55:AC:23:CB:37:F6:E7:93:C9:56:8A:7A:20:7B:14:FC:4E X509v3 Authority Key Identifier: keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d7:e0:46:aa:c9:36:1d:ed:5e:95:34:d1:1f:8e:da:39:b9: 7a:ad:ce:b1:81:49:4d:ba:e1:41:19:32:6e:40:50:a9:81:54: ed:8f:67:fb:6f:3d:42:4e:63:71:21:cf:df:5a:42:fc:89:49: 0a:81:13:ef:52:8e:67:1e:e7:6a:d8:52:9f:99:5b:43:d5:48: 0a:67:18:01:b7:69:a6:c8:31:1c:da:95:3e:7e:41:b6:13:b6: dc:d1:5f:0b:dc:c1:cb:9d:70:32:16:37:3d:bb:68:90:e6:b9: 4b:5f:91:d9:a2:ef:57:f5:1a:48:2b:f6:01:62:07:6e:68:55: f1:aa:fd:74:4c:77:06:6d:75:1e:42:6c:46:cb:89:30:cd:b2: 86:db:c8:3d:0e:eb:00:d1:9c:70:42:1f:09:ee:59:b5:61:21: e5:38:aa:60:6a:9a:cc:72:74:07:98:ff:e9:7c:5e:53:e8:dc: 36:ca:0e:8b:77:50:7c:85:c8:67:e3:20:86:27:cb:04:31:db: be:4d:15:2c:c2:37:f0:5e:aa:60:ec:eb:66:ae:cc:60:4a:11: 27:f4:ad:c4:ac:9c:f3:80:f7:18:b8:10:f0:80:71:12:37:a0: ec:bb:97:ac:e0:69:ea:ac:93:7b:35:e2:79:d9:e5:ff:57:ef: a7:d2:94:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY0NjIxMTAvBgNVBAUTKDkxQTVFNkU1NzZDMzE1QzQzMTlFRUY5RkRBMzI4N0FE MjBDMzgwMzkwHhcNMjUxMTA0MTg0NjQxWhcNMjUxMTExMTg0NjQxWjAYMRYwFAYD VQQDEw02OTBhNGExMi0zOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudKqWSzWuQ0pWNeuP/KJBLV0QVKBvhu7WaaL8+2gmNtjJTkk3Hf4OJYoAHhk Aphky0mM69aTqxv9WqT44jhsNdJyfd+2K6gwdvbXuz4+vcLs7FCanFnJ8eqLDg6t ugNe0kegNaA2+wtznEd372ZM1DZcYIuO8CxY390M6W8SNZ4oTjI4c8jE5tcHyqll SPe9+j8hG9UGPDpVYm0z0lU0cN5iOd1mcZfKwe8iAURH+jSVAUowfmK8yaxae4dZ x9i+YHX2uPGhx4x80yLgQZoV7QPweD5zLgsGDdMAooFhur038H5prvjO72DjdvGj AIiJ24eyQBMS3TSvdlaXv45+CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsZxFWs I8s39ueTyVaKeiB7FPxOMB8GA1UdIwQYMBaAFJGl5uV2wxXEMZ7vn9oyh60gw4A5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjQ2Mi9EQUY0MzVFMDE4 NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZjUXhudS1mMmpLSHJTRERn RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thWG01WGJERmNReG51LWYyaktIclNERGdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjQ2Mi9EQUY0MzVFMDE4NDMxMUVBQjBBRjIwMURDNEY5QUUwMi9rYVhtNVhiREZj UXhudS1mMmpLSHJTRERnRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO1+BGqsk2He1elTTRH47aObl6rc6xgUlNuuFBGTJuQFCpgVTtj2f7 bz1CTmNxIc/fWkL8iUkKgRPvUo5nHudq2FKfmVtD1UgKZxgBt2mmyDEc2pU+fkG2 E7bc0V8L3MHLnXAyFjc9u2iQ5rlLX5HZou9X9RpIK/YBYgduaFXxqv10THcGbXUe QmxGy4kwzbKG28g9DusA0ZxwQh8J7lm1YSHlOKpgaprMcnQHmP/pfF5T6Nw2yg6L d1B8hchn4yCGJ8sEMdu+TRUswjfwXqpg7OtmrsxgShEn9K3ErJzzgPcYuBDwgHES N6Dsu5es4GnqrJN7NeJ52eX/V++n0pT3 -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:05 2025 by rpki-client