$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: 8Z2a1IvGcU57NmL+2SMJH0AqnnVz0X9aDPDi806Hsgw= Subject key identifier: 17:78:07:58:E8:A6:38:99:22:70:1D:C0:42:52:2A:E8:EA:7E:54:AF Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 086D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 0867 Signing time: Tue 04 Nov 2025 20:42:23 +0000 Manifest this update: Tue 04 Nov 2025 20:42:22 +0000 Manifest next update: Tue 11 Nov 2025 20:42:22 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: t2AEtnQ6xa+lIMjMd/qHnIVaOJQoU+qhSwHhv1+8Qcc=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Nov 4 20:42:22 2025 GMT Not After : Nov 11 20:42:22 2025 GMT Subject: CN=690a652e-e990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:ab:4b:dd:18:b2:ae:c1:a5:94:b9:5e:5c: f5:5c:1e:37:0a:1d:cf:28:98:97:eb:96:f6:ab:6a: 32:cb:19:e6:70:a8:e1:54:3c:37:3c:2d:09:28:cf: 47:57:0a:56:09:64:22:2c:5e:4f:c7:c4:b0:99:d0: 76:fc:72:81:d5:cb:6d:be:d7:75:82:4f:36:ac:90: 3a:b4:92:a0:ca:59:c9:a8:55:55:4e:04:64:1a:1f: d0:8b:07:88:a0:c9:0b:97:e9:1a:c5:26:45:41:06: bc:eb:33:ea:b1:3e:c5:70:39:e7:a5:c9:ac:16:46: 7d:c3:4c:87:b5:3c:66:e8:07:f4:73:b5:50:3c:7f: a6:3a:35:b0:f1:3f:77:5b:14:37:ec:b7:f7:9a:36: 4a:b2:86:66:cb:35:5a:56:a1:2c:94:0e:35:cc:8b: c6:58:05:bf:1d:a0:82:9b:a6:82:3f:fe:3e:06:0c: 7c:67:ca:52:f9:e9:a1:7e:a2:b3:85:27:8d:bb:ff: 95:db:8a:4f:95:96:2e:ff:26:0d:13:86:b5:28:41: ed:3e:bd:99:09:e6:09:79:ae:7d:b8:7c:d6:a4:d6: e4:c0:63:55:a8:b6:6a:53:c0:c4:06:13:1e:93:65: 2a:3f:0b:be:0e:75:f5:d4:dd:f6:a7:89:c3:d6:93: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:07:58:E8:A6:38:99:22:70:1D:C0:42:52:2A:E8:EA:7E:54:AF X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:62:1d:cd:59:11:2b:a2:60:a4:07:99:74:8d:d7:b6:3b:cb: e8:f0:ac:0b:c8:73:52:38:78:f5:5e:a9:2b:0e:4e:e1:1c:7e: fe:02:76:2e:bf:fd:5f:1e:28:87:44:ab:7f:39:b1:11:ed:e9: 3d:88:fb:a9:f1:54:2d:b2:9e:fa:b0:a3:7f:98:b4:a2:bf:d1: 98:7b:b8:ce:bf:a0:a4:46:b0:e1:ad:a4:7f:ff:78:38:7f:73: 71:68:d7:60:cc:ba:cd:b2:f1:e6:0e:a2:df:36:df:9f:20:2c: 5e:9a:23:06:92:1d:a5:42:d5:99:f9:8e:9c:27:4b:c1:87:95: 2b:72:17:74:9d:73:e7:83:3b:c3:a0:42:d7:df:a5:b9:9a:ff: 55:1a:6d:b5:15:6e:b1:6b:d8:60:99:80:cd:54:28:2d:5a:9a: 68:9f:6d:9f:8d:a0:34:64:79:4c:8c:37:b5:f1:9f:f3:1c:3e: 69:ab:53:74:3d:f6:17:91:c0:6a:58:c4:a9:81:02:b3:bc:7a: 4e:eb:20:fc:cf:38:2b:1d:15:75:83:ad:17:74:23:eb:8d:75: 51:bd:c2:45:d3:bb:00:e6:5f:0d:13:4a:13:9b:44:ed:29:b4: 4f:12:6d:85:68:e9:e2:12:0d:cd:c8:26:de:e2:a5:13:7b:70: 04:dd:0a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUxMTA0MjA0MjIyWhcNMjUxMTExMjA0MjIyWjAYMRYwFAYD VQQDEw02OTBhNjUyZS1lOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+CrS90Ysq7BpZS5Xlz1XB43Ch3PKJiX65b2q2oyyxnmcKjhVDw3PC0JKM9H VwpWCWQiLF5Px8SwmdB2/HKB1cttvtd1gk82rJA6tJKgylnJqFVVTgRkGh/QiweI oMkLl+kaxSZFQQa86zPqsT7FcDnnpcmsFkZ9w0yHtTxm6Af0c7VQPH+mOjWw8T93 WxQ37Lf3mjZKsoZmyzVaVqEslA41zIvGWAW/HaCCm6aCP/4+Bgx8Z8pS+emhfqKz hSeNu/+V24pPlZYu/yYNE4a1KEHtPr2ZCeYJea59uHzWpNbkwGNVqLZqU8DEBhMe k2UqPwu+DnX11N32p4nD1pO4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd4B1jo pjiZInAdwEJSKujqflSvMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Yh3NWREromCkB5l0jde2O8vo8KwLyHNSOHj1XqkrDk7hHH7+AnYu v/1fHiiHRKt/ObER7ek9iPup8VQtsp76sKN/mLSiv9GYe7jOv6CkRrDhraR//3g4 f3NxaNdgzLrNsvHmDqLfNt+fICxemiMGkh2lQtWZ+Y6cJ0vBh5Urchd0nXPngzvD oELX36W5mv9VGm21FW6xa9hgmYDNVCgtWppon22fjaA0ZHlMjDe18Z/zHD5pq1N0 PfYXkcBqWMSpgQKzvHpO6yD8zzgrHRV1g60XdCPrjXVRvcJF07sA5l8NE0oTm0Tt KbRPEm2FaOniEg3NyCbe4qUTe3AE3QrR -----END CERTIFICATE-----Generated at Wed Nov 5 15:26:07 2025 by rpki-client