$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json) Hash identifier: Hkse2BJl7Z/WSrMSV/okcUXZVB4rM2QmhUtHsWLkWFY= Subject key identifier: 38:9E:7D:69:30:EA:40:9E:C0:74:B8:52:EA:B1:68:68:E2:38:9A:C6 Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft Manifest number: 0131 Signing time: Wed 05 Nov 2025 04:40:58 +0000 Manifest this update: Wed 05 Nov 2025 04:40:58 +0000 Manifest next update: Wed 12 Nov 2025 04:40:58 +0000 Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: XGnr+Jw2/0H/Wj5wacVVr56UJx2d3DkcTOjRdtGokYI=) 2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A Validity Not Before: Nov 5 04:40:58 2025 GMT Not After : Nov 12 04:40:58 2025 GMT Subject: CN=690ad55a-af9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:01:ed:37:c3:e8:d4:87:b0:18:97:06:dc: 50:d6:f6:5c:6d:40:1e:ad:32:d1:88:45:08:b0:7e: 35:18:39:26:8a:d2:af:b5:d4:d1:52:b2:24:50:03: 2c:80:81:ff:44:f6:be:58:c2:9d:36:be:90:ab:85: 95:af:5b:ed:dd:6d:1e:7c:65:11:de:77:f8:26:23: dd:c7:9d:9f:ea:4f:1a:4c:5b:c6:a8:e6:74:b8:71: fa:08:05:5e:01:9e:0e:17:07:e4:aa:d1:74:73:17: c3:c2:12:9b:92:0b:66:65:1a:f8:06:4e:53:ff:51: 49:53:2b:33:63:8d:9b:67:aa:dc:76:23:e8:2c:5a: 28:ed:c4:02:46:12:99:82:0f:0b:da:be:1e:50:95: c6:58:f2:da:5f:d9:75:d9:a5:56:9c:4a:b6:e4:7c: 85:8c:99:f6:52:d4:c2:3d:70:b2:0e:bf:fe:4a:e6: 17:f5:d6:6d:38:98:8c:32:85:1a:9f:53:dd:47:36: 3a:18:e6:d9:a7:44:77:47:0e:dc:8f:41:d6:ef:64: d3:79:2f:ce:aa:5b:50:fc:d3:9f:27:e7:e7:6e:37: cf:df:62:7d:d0:6a:1e:4e:16:93:90:b0:85:4d:38: 21:5a:3f:59:da:2e:a4:fd:1d:6b:01:c9:47:7b:c0: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9E:7D:69:30:EA:40:9E:C0:74:B8:52:EA:B1:68:68:E2:38:9A:C6 X509v3 Authority Key Identifier: keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a0:a2:46:2c:38:95:99:1a:09:75:fc:91:c5:84:de:21:86: ce:28:49:d1:75:2a:cd:08:72:af:02:fb:ba:99:6f:82:b2:b1: 87:eb:d6:72:5a:f5:81:11:21:e1:b4:3c:3f:6c:b2:f5:df:bc: 51:a9:a7:67:b6:eb:3e:f2:e1:80:0f:1d:6d:04:c9:ff:84:23: 53:a3:80:ac:88:78:6f:1c:fe:89:f9:97:71:e3:49:c6:56:4d: 3b:ca:4b:be:59:9f:50:02:26:6d:9e:8b:ac:40:55:c8:32:59: 3e:94:b0:b3:d4:01:11:23:ba:fb:40:8d:06:98:e4:ec:ba:fa: a4:52:5c:e9:16:fa:33:18:c1:cf:18:ec:06:3f:3c:65:58:1d: 18:66:f3:c8:f6:b0:c7:3b:e0:4a:b9:a9:b5:9e:41:1c:e1:48: 36:01:5f:17:92:8d:ac:3a:5d:8d:24:00:83:83:c6:26:b7:47: e8:18:e7:35:e5:ca:ca:32:92:ec:44:05:47:a8:06:78:4b:b8: 4c:cf:f2:62:53:ff:4c:6a:87:20:f2:44:fb:a6:11:d7:6e:1d: cc:87:f5:5b:e6:16:aa:46:df:cb:dc:a7:43:f4:d0:39:1d:53: c0:9d:a5:7c:6d:f1:aa:26:07:7f:51:59:63:c5:eb:a9:3c:cf: ff:84:73:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG MTQ4RTFBM0EwHhcNMjUxMTA1MDQ0MDU4WhcNMjUxMTEyMDQ0MDU4WjAYMRYwFAYD VQQDEw02OTBhZDU1YS1hZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HwB7TfD6NSHsBiXBtxQ1vZcbUAerTLRiEUIsH41GDkmitKvtdTRUrIkUAMs gIH/RPa+WMKdNr6Qq4WVr1vt3W0efGUR3nf4JiPdx52f6k8aTFvGqOZ0uHH6CAVe AZ4OFwfkqtF0cxfDwhKbkgtmZRr4Bk5T/1FJUyszY42bZ6rcdiPoLFoo7cQCRhKZ gg8L2r4eUJXGWPLaX9l12aVWnEq25HyFjJn2UtTCPXCyDr/+SuYX9dZtOJiMMoUa n1PdRzY6GObZp0R3Rw7cj0HW72TTeS/OqltQ/NOfJ+fnbjfP32J90GoeThaTkLCF TTghWj9Z2i6k/R1rAclHe8ANXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiefWkw 6kCewHS4UuqxaGjiOJrGMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z LTVaMFVmN3RyMG54U09Ham8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgoKJGLDiVmRoJdfyRxYTeIYbOKEnRdSrNCHKvAvu6mW+CsrGH69Zy WvWBESHhtDw/bLL137xRqadntus+8uGADx1tBMn/hCNTo4CsiHhvHP6J+Zdx40nG Vk07yku+WZ9QAiZtnousQFXIMlk+lLCz1AERI7r7QI0GmOTsuvqkUlzpFvozGMHP GOwGPzxlWB0YZvPI9rDHO+BKuam1nkEc4Ug2AV8Xko2sOl2NJACDg8Ymt0foGOc1 5crKMpLsRAVHqAZ4S7hMz/JiU/9Maocg8kT7phHXbh3Mh/Vb5haqRt/L3KdD9NA5 HVPAnaV8bfGqJgd/UVljxeupPM//hHN1 -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:31 2025 by rpki-client