$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: eWJkANzizTEt8kpmkfApgcIrizEJSDs5+cMji/gsZ14= Subject key identifier: 93:56:B8:A5:C7:72:03:7A:17:CF:A1:06:EC:3F:53:BD:A9:D8:EF:E8 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: 5F Signing time: Mon 03 Nov 2025 07:04:21 +0000 Manifest this update: Mon 03 Nov 2025 07:04:21 +0000 Manifest next update: Mon 10 Nov 2025 07:04:21 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: 5UpNzfPKhK8KYbbjpTexB6Zti5gxwOjnKyvrcPXYIlU=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: SpbPHZ/krAG/WpD65rr9pmBtHMuwVfhmB9bAKCP8oRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Nov 3 07:04:21 2025 GMT Not After : Nov 10 07:04:21 2025 GMT Subject: CN=690853f5-f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:9d:d9:cd:2b:5f:42:42:03:73:ef:11:c8: 60:85:cb:37:d7:32:8c:d1:54:65:68:eb:73:ae:8d: ad:a8:70:02:0e:a6:59:ea:2d:13:02:29:fb:a3:58: 0a:db:02:47:23:f8:97:5a:01:9f:8a:b7:a5:a6:f8: 8a:9a:93:1f:0b:f5:61:c9:14:f1:d4:35:75:4e:39: c7:ec:7a:40:60:f6:2b:35:95:02:01:ab:19:c4:12: 14:c4:92:15:7e:e4:7e:35:49:96:f5:fc:7a:a8:3c: e1:c4:9b:ed:e6:6b:8a:cf:63:20:ac:bb:09:6a:67: 76:7a:7b:f2:65:07:6b:3b:ac:ea:1d:46:1d:8e:41: 6e:3a:58:cf:31:a6:41:21:b7:17:ef:89:ff:72:c3: aa:cb:69:31:23:39:f5:19:88:d3:36:fb:3a:a6:fc: cc:47:3e:c8:1a:92:25:d9:38:6c:de:76:50:1a:f9: 68:4a:c2:ab:42:2a:7e:60:f3:ec:0b:d8:4c:79:54: 13:f0:87:db:3a:34:74:82:48:aa:14:1a:61:f9:ee: 89:b9:f8:2d:da:96:63:d0:96:cd:fb:b0:86:1e:9b: 6e:8f:ea:aa:de:78:bf:8c:f9:11:4e:23:d7:e6:98: b5:fb:1f:d3:32:2d:dd:a7:6f:b5:74:c2:7b:0e:d0: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:56:B8:A5:C7:72:03:7A:17:CF:A1:06:EC:3F:53:BD:A9:D8:EF:E8 X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0e:7c:78:93:07:85:d9:c9:33:2b:69:89:27:64:87:02:ee: 0f:fb:97:aa:5c:fc:f4:8f:eb:ce:78:95:c0:3b:20:46:4b:67: 1f:12:6e:7b:72:65:8a:fe:da:61:49:b9:ce:69:c1:61:74:2a: f6:4a:25:53:ed:d5:67:25:f3:f0:c7:fd:21:04:d2:cf:f9:11: 71:f4:48:b5:31:c9:5b:0b:57:b2:87:4e:7d:86:69:7f:f2:47: b0:83:a8:ac:50:6e:16:56:0e:0b:ab:61:ea:1b:25:10:73:c4: 5c:bc:dc:bc:6d:7b:17:c1:af:cf:67:79:b6:e7:28:85:e0:a5: fa:d9:bd:ac:05:ac:bb:12:72:e2:b9:a6:81:45:f4:22:61:31: d7:f1:be:fe:20:be:75:2a:e5:f3:3c:28:86:cc:76:2f:f9:22: 93:80:29:4b:83:bc:95:4d:2e:0d:b3:cd:01:44:42:da:ab:52: 62:e9:8d:5c:bd:62:76:be:1b:16:54:31:b6:72:0e:5c:c8:46: 45:cb:36:6f:9c:14:f6:3b:b3:62:89:1e:96:6f:5b:d3:42:26: 2b:49:91:a4:3a:02:5d:de:f6:77:cc:4c:4a:d2:64:ce:21:d6: b5:12:45:76:2e:45:93:ca:31:ee:41:ae:6f:23:1c:f2:fa:cd: 91:29:bc:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NkI0QjExMC8GA1UEBRMoMkEwMEZENUQ1RUFFRjgxRjMyQjAwQjJFNUM4MkM1RUNE QUMxMjY5MzAeFw0yNTExMDMwNzA0MjFaFw0yNTExMTAwNzA0MjFaMBgxFjAUBgNV BAMTDTY5MDg1M2Y1LWY5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqF53ZzStfQkIDc+8RyGCFyzfXMozRVGVo63Ouja2ocAIOplnqLRMCKfujWArb Akcj+JdaAZ+Kt6Wm+Iqakx8L9WHJFPHUNXVOOcfsekBg9is1lQIBqxnEEhTEkhV+ 5H41SZb1/HqoPOHEm+3ma4rPYyCsuwlqZ3Z6e/JlB2s7rOodRh2OQW46WM8xpkEh txfvif9yw6rLaTEjOfUZiNM2+zqm/MxHPsgakiXZOGzedlAa+WhKwqtCKn5g8+wL 2Ex5VBPwh9s6NHSCSKoUGmH57om5+C3almPQls37sIYem26P6qreeL+M+RFOI9fm mLX7H9MyLd2nb7V0wnsO0DWVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk1a4pcdy A3oXz6EG7D9TvanY7+gwHwYDVR0jBBgwFoAUKgD9XV6u+B8ysAsuXILF7NrBJpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2QjRCL0JCNDJDMURFMjRD MzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2dEOVhWNnUtQjh5c0FzdVhJTEY3TnJCSnBNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 QjRCL0JCNDJDMURFMjRDMzExRjA5NkM2ODQ4MUM0RjlBRTAyL0tnRDlYVjZ1LUI4 eXNBc3VYSUxGN05yQkpwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwOfHiTB4XZyTMraYknZIcC7g/7l6pc/PSP6854lcA7IEZLZx8Sbnty ZYr+2mFJuc5pwWF0KvZKJVPt1Wcl8/DH/SEE0s/5EXH0SLUxyVsLV7KHTn2GaX/y R7CDqKxQbhZWDgurYeobJRBzxFy83LxtexfBr89nebbnKIXgpfrZvawFrLsScuK5 poFF9CJhMdfxvv4gvnUq5fM8KIbMdi/5IpOAKUuDvJVNLg2zzQFEQtqrUmLpjVy9 Yna+GxZUMbZyDlzIRkXLNm+cFPY7s2KJHpZvW9NCJitJkaQ6Al3e9nfMTErSZM4h 1rUSRXYuRZPKMe5Brm8jHPL6zZEpvMQ= -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:17 2025 by rpki-client