$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: 4IW0Glo9z7DxLSVtzwncmrtgbQFj0zXXFotWgBDNm1A= Subject key identifier: 29:16:A3:86:74:6B:77:D7:EB:5C:15:C4:CE:79:5B:79:17:42:24:F1 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 10AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 10A5 Signing time: Tue 04 Nov 2025 17:25:25 +0000 Manifest this update: Tue 04 Nov 2025 17:25:24 +0000 Manifest next update: Tue 11 Nov 2025 17:25:24 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: qZ/nlWsn9Fjrq7rK1AJnSE4YZMy8tHX9nMZbiUbOSCU=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: XAfo1PZPIVH3Y+cfsdpgLhiwJGHrd3PGIzfnpG6VlMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4269 (0x10ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Nov 4 17:25:24 2025 GMT Not After : Nov 11 17:25:24 2025 GMT Subject: CN=690a3705-ff23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:fa:a2:76:65:61:66:5a:04:5f:89:db:5f: 28:66:f0:d3:2f:00:ab:d3:e7:87:64:91:69:50:fa: 09:dc:2d:29:b4:ea:9e:4f:88:7f:9d:9d:16:a7:9b: 6b:ae:67:04:5b:c3:04:c2:b2:ac:19:a1:5e:10:0b: ac:5f:6e:b3:6e:7f:dc:0e:74:04:6c:0a:59:21:ad: 26:74:f7:e3:18:8c:c0:3f:db:48:5f:78:0c:52:21: 2d:6a:d6:6e:bb:45:a0:49:16:8a:9a:2e:27:67:3d: 29:5f:4e:a4:0c:5c:2c:2b:96:cb:c0:12:92:92:40: 29:e1:13:fa:cf:4d:ff:da:72:92:2f:02:04:8a:9a: 46:81:aa:6a:e0:0f:20:88:51:4c:2e:98:15:c5:22: 6d:5a:62:4f:94:a1:ba:c5:79:3a:b1:8a:82:29:4a: 25:fc:19:d5:43:02:45:cf:dc:4f:a4:a4:cf:09:a8: 7e:f6:c6:92:e9:48:2a:a7:aa:b8:0b:f2:de:eb:30: ed:99:09:ae:fa:39:3a:82:62:f6:61:ea:bf:96:53: 23:06:d1:af:2a:1d:00:ab:c8:9e:9d:e7:ba:b4:96: 75:d7:b7:31:56:e0:d0:9f:d9:f4:b5:15:58:0d:ca: 0d:11:9b:81:f5:d1:a7:66:c7:77:88:55:09:d7:ea: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:A3:86:74:6B:77:D7:EB:5C:15:C4:CE:79:5B:79:17:42:24:F1 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:50:e2:b7:fb:d1:e1:3f:00:f1:b6:68:12:db:7b:06:a6:87: ee:8c:9e:6a:31:4d:b5:27:7a:13:95:6a:33:c2:3c:c6:75:82: d5:37:34:4b:32:b0:4f:50:3f:1f:f1:05:66:f2:fe:33:16:81: 2c:76:66:94:1e:34:cc:3f:66:39:14:8c:43:f2:2e:ff:99:25: 4c:e8:17:5a:7f:15:80:a2:13:04:5d:a8:09:d1:30:e6:c8:91: ca:08:5d:fe:44:23:4b:c4:d0:d0:6c:25:29:6b:99:34:56:04: a6:64:f8:8e:3b:63:2e:c6:1b:89:d1:94:c1:dd:6c:63:47:04: 18:f7:dc:33:ad:70:d0:9e:e0:db:05:31:73:52:d5:08:54:89: c3:fb:53:b1:04:3b:f1:39:24:2e:fb:87:00:4d:15:e5:c1:09: 2f:33:92:39:ea:f2:48:49:14:af:09:90:d4:66:12:e7:00:62: 34:ff:98:de:2c:54:96:06:06:85:e6:91:b7:ea:5a:28:db:8c: 92:03:99:f6:6b:35:f5:70:69:70:53:e2:a6:90:e1:34:c5:be: 3e:b9:e4:31:0b:d3:dd:7a:ee:77:ad:d8:ad:94:11:f6:8a:d3: 33:44:60:75:98:45:a4:2a:0c:fe:24:85:dc:ca:6a:e6:27:5f: 3a:00:aa:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUxMTA0MTcyNTI0WhcNMjUxMTExMTcyNTI0WjAYMRYwFAYD VQQDEw02OTBhMzcwNS1mZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGj6onZlYWZaBF+J218oZvDTLwCr0+eHZJFpUPoJ3C0ptOqeT4h/nZ0Wp5tr rmcEW8MEwrKsGaFeEAusX26zbn/cDnQEbApZIa0mdPfjGIzAP9tIX3gMUiEtatZu u0WgSRaKmi4nZz0pX06kDFwsK5bLwBKSkkAp4RP6z03/2nKSLwIEippGgapq4A8g iFFMLpgVxSJtWmJPlKG6xXk6sYqCKUol/BnVQwJFz9xPpKTPCah+9saS6Ugqp6q4 C/Le6zDtmQmu+jk6gmL2Yeq/llMjBtGvKh0Aq8ienee6tJZ117cxVuDQn9n0tRVY DcoNEZuB9dGnZsd3iFUJ1+p5MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkWo4Z0 a3fX61wVxM55W3kXQiTxMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClUOK3+9HhPwDxtmgS23sGpofujJ5qMU21J3oTlWozwjzGdYLVNzRL MrBPUD8f8QVm8v4zFoEsdmaUHjTMP2Y5FIxD8i7/mSVM6BdafxWAohMEXagJ0TDm yJHKCF3+RCNLxNDQbCUpa5k0VgSmZPiOO2MuxhuJ0ZTB3WxjRwQY99wzrXDQnuDb BTFzUtUIVInD+1OxBDvxOSQu+4cATRXlwQkvM5I56vJISRSvCZDUZhLnAGI0/5je LFSWBgaF5pG36loo24ySA5n2azX1cGlwU+KmkOE0xb4+ueQxC9Pdeu53rditlBH2 itMzRGB1mEWkKgz+JIXcymrmJ186AKrR -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:29 2025 by rpki-client