$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: SbBx325HV5OluoqYkbCIJ2hwiZBzKVcFrJH+lUXEPos= Subject key identifier: D4:4A:CA:3B:58:26:46:96:34:E5:18:44:AE:38:77:EB:A0:03:2E:19 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0484 Signing time: Wed 05 Nov 2025 00:11:20 +0000 Manifest this update: Wed 05 Nov 2025 00:11:19 +0000 Manifest next update: Wed 12 Nov 2025 00:11:19 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: zbRIAaYg3+iTX8127rWBo279VTDUzlg1pv8WW5evz1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Nov 5 00:11:19 2025 GMT Not After : Nov 12 00:11:19 2025 GMT Subject: CN=690a9627-e60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:03:87:32:96:44:f0:39:68:60:b9:fa:27: 7f:c3:fb:f0:e2:88:32:9b:58:fd:60:14:84:19:42: 4b:9e:b0:10:9b:a7:09:9d:00:23:a0:9c:4b:2d:fc: d9:9e:0a:d1:8d:62:71:c5:07:47:59:4d:8c:d7:32: 73:dd:01:8c:62:91:f2:f6:c3:a0:18:cd:9e:e9:cb: 8e:ed:05:a7:29:f2:14:61:56:3f:61:0a:fe:28:fa: c6:3b:b8:e2:12:c1:73:f3:5c:6e:8b:57:7b:04:d2: 28:e6:2e:b6:08:bf:ac:e0:32:20:a4:c9:8f:87:85: a7:e4:6d:4d:e9:98:ea:df:4a:83:00:4e:cf:9e:5c: 7e:20:06:00:33:9f:61:7c:d0:e6:70:fb:8d:6b:c9: 72:07:f0:01:21:e3:a2:42:9a:6a:ba:29:48:6e:19: 7c:20:88:09:69:ce:24:f6:9c:98:99:80:61:15:0d: c9:1d:67:91:f4:1b:e5:82:95:20:b7:dc:ee:0a:bd: ad:fa:29:5e:f6:70:ce:20:a1:02:1f:cc:fe:d6:52: 2a:c4:a1:ba:f9:a8:78:f4:17:71:23:9a:d0:ce:a5: 2e:79:10:77:c8:d8:82:60:96:27:dc:2b:d1:cd:42: 30:55:c2:41:c6:c8:2d:2e:ae:8d:29:3c:9e:b8:ab: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4A:CA:3B:58:26:46:96:34:E5:18:44:AE:38:77:EB:A0:03:2E:19 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:07:f4:f3:8d:b8:04:37:5b:e9:73:87:b5:08:88:ca:c2: 3c:7c:5a:e2:0a:31:e0:42:07:b2:ee:e1:90:b2:1b:e4:2a:3b: 26:17:89:7e:92:59:9f:4b:46:ec:09:61:7c:b0:3c:b8:0c:32: 10:36:55:cc:4c:e5:d7:77:1d:fc:ba:f6:3b:dd:0f:75:6b:f0: b7:76:36:05:e2:24:f2:30:78:8c:30:f6:ca:2a:60:79:d6:6b: 3c:5c:30:ae:11:26:16:af:0e:95:16:0b:97:d5:80:e3:c3:43: 6b:7c:a6:3a:c9:98:b0:be:41:64:18:bf:cc:27:3f:21:e8:a7: 60:a1:7c:9e:ae:f6:56:94:7e:3b:9b:62:12:98:de:5b:06:82: 5c:9b:89:4d:09:40:87:8c:40:c8:68:4a:1a:b3:73:aa:87:ee: 01:6e:58:f6:9f:4e:9c:d5:ca:88:e8:1f:b9:e4:6e:d6:8f:a5: a4:4e:98:d5:9e:a3:55:51:12:f0:b5:6c:9c:4e:36:27:b8:30: 5d:76:2d:19:a6:9f:76:1c:23:1c:e4:27:89:02:7c:64:38:c2: e6:3d:d6:5c:f6:78:d1:cb:fe:aa:ea:fb:ae:61:0d:f2:d2:16: 1b:6e:c5:7e:c1:b4:88:6a:14:6d:00:ad:29:a1:10:29:13:ff: 94:97:ce:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUxMTA1MDAxMTE5WhcNMjUxMTEyMDAxMTE5WjAYMRYwFAYD VQQDEw02OTBhOTYyNy1lNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q4DhzKWRPA5aGC5+id/w/vw4ogym1j9YBSEGUJLnrAQm6cJnQAjoJxLLfzZ ngrRjWJxxQdHWU2M1zJz3QGMYpHy9sOgGM2e6cuO7QWnKfIUYVY/YQr+KPrGO7ji EsFz81xui1d7BNIo5i62CL+s4DIgpMmPh4Wn5G1N6Zjq30qDAE7Pnlx+IAYAM59h fNDmcPuNa8lyB/ABIeOiQppquilIbhl8IIgJac4k9pyYmYBhFQ3JHWeR9BvlgpUg t9zuCr2t+ile9nDOIKECH8z+1lIqxKG6+ah49BdxI5rQzqUueRB3yNiCYJYn3CvR zUIwVcJBxsgtLq6NKTyeuKvQ6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRKyjtY JkaWNOUYRK44d+ugAy4ZMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAybgf08424BDdb6XOHtQiIysI8fFriCjHgQgey7uGQshvkKjsmF4l+ klmfS0bsCWF8sDy4DDIQNlXMTOXXdx38uvY73Q91a/C3djYF4iTyMHiMMPbKKmB5 1ms8XDCuESYWrw6VFguX1YDjw0NrfKY6yZiwvkFkGL/MJz8h6KdgoXyervZWlH47 m2ISmN5bBoJcm4lNCUCHjEDIaEoas3Oqh+4Bblj2n06c1cqI6B+55G7Wj6WkTpjV nqNVURLwtWycTjYnuDBddi0Zpp92HCMc5CeJAnxkOMLmPdZc9njRy/6q6vuuYQ3y 0hYbbsV+wbSIahRtAK0poRApE/+Ul84Y -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:16 2025 by rpki-client