$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: vp0k1+llLRita6z6/AZbZN3ySduUIc9f9F8xYOdSsnU= Subject key identifier: 56:95:2E:DA:58:4E:0F:26:51:B0:08:66:29:56:76:0E:79:2F:80:B6 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 34E5 Signing time: Tue 04 Nov 2025 15:00:21 +0000 Manifest this update: Tue 04 Nov 2025 15:00:21 +0000 Manifest next update: Tue 11 Nov 2025 15:00:21 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: 3qqlKPYg7KLS21tFXWvYuUqdGpI7EuCoP94AC6ln40E=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Nov 4 15:00:21 2025 GMT Not After : Nov 11 15:00:21 2025 GMT Subject: CN=690a1505-b9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:6c:ef:11:7e:8d:e9:63:4d:c1:02:fb:1c: 0a:b2:6f:74:f7:e4:99:42:8d:93:ee:75:ee:2c:57: bc:0e:3a:a3:92:42:de:e9:26:a0:35:22:58:81:b4: 81:00:a5:b6:c8:d0:9b:a6:10:db:fb:49:90:5d:e3: 6a:c8:71:3b:34:62:5c:ec:e2:7f:d3:5e:9d:99:87: 08:73:17:70:1b:1e:7a:d8:05:e9:a3:f0:b7:d3:8b: 06:36:bf:26:f2:65:7b:66:54:e7:86:34:bd:e5:c6: 67:45:50:37:ed:d3:97:a4:e8:02:1c:75:51:79:aa: fc:3a:3e:15:53:b1:e9:b0:ed:e6:0e:93:08:7e:d0: 6a:b8:20:eb:71:6c:c3:e3:be:c5:35:95:dd:16:28: 78:30:02:3e:f0:d5:3f:a3:a9:21:a8:b1:96:b2:73: 35:44:d7:82:c1:aa:d0:4f:e2:e0:9f:72:11:e3:dc: ae:0b:6d:a8:9e:a8:14:53:1d:45:ae:0c:a0:89:73: 20:c9:1c:0e:45:c6:21:3b:ca:59:b8:a5:8f:29:e8: 9d:70:67:a9:7a:99:e0:fc:79:bb:6b:a0:f2:7e:ce: 55:28:27:ac:82:af:72:c8:c9:6a:b1:29:56:47:72: fd:86:24:e2:4e:b7:43:39:84:37:f1:ed:b9:28:f2: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:95:2E:DA:58:4E:0F:26:51:B0:08:66:29:56:76:0E:79:2F:80:B6 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:66:a4:bd:ec:d5:37:5a:88:bb:2f:4f:af:d6:de:8c:cd:db: 69:56:55:f5:98:c9:5b:40:eb:ef:f2:86:44:1e:05:cb:12:e7: 66:e8:6a:38:22:b0:e3:1a:c9:69:71:3d:47:69:ff:67:c6:6d: f6:6e:f5:f4:f3:a7:ac:d6:ee:16:b4:8d:b9:66:c9:29:3b:a6: 12:15:4f:38:ec:5b:88:f4:88:47:0e:09:04:a3:a1:7b:2f:51: 9c:17:75:19:4b:6d:d4:e0:8c:07:eb:3c:c9:76:b8:90:4e:a0: 1b:92:1c:37:9f:29:90:5c:73:85:98:5f:30:a5:11:76:b6:3e: 28:3a:d5:3c:dc:d8:84:ec:aa:b5:e7:24:6f:b2:41:56:00:fd: df:9b:c6:04:c9:30:79:fd:f6:cf:ca:ee:c0:12:36:ad:23:02: 08:e7:65:69:3f:3b:4c:d9:38:63:fb:db:55:b5:d8:4b:9c:15: 43:aa:fa:34:b9:2a:e0:b6:22:c2:79:ec:f5:c2:5e:f5:82:37: ad:e2:56:4a:ef:ee:62:13:af:6a:8e:ed:95:d7:84:13:4f:08: 25:c0:01:77:c4:22:b3:e5:f9:bf:ab:5e:33:41:9a:13:af:45: 1d:f1:02:7e:c1:7b:18:b8:6e:5c:fc:a5:b4:7b:ff:ca:87:b6: d0:49:0e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUxMTA0MTUwMDIxWhcNMjUxMTExMTUwMDIxWjAYMRYwFAYD VQQDEw02OTBhMTUwNS1iOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcJs7xF+jeljTcEC+xwKsm909+SZQo2T7nXuLFe8DjqjkkLe6SagNSJYgbSB AKW2yNCbphDb+0mQXeNqyHE7NGJc7OJ/016dmYcIcxdwGx562AXpo/C304sGNr8m 8mV7ZlTnhjS95cZnRVA37dOXpOgCHHVRear8Oj4VU7HpsO3mDpMIftBquCDrcWzD 477FNZXdFih4MAI+8NU/o6khqLGWsnM1RNeCwarQT+Lgn3IR49yuC22onqgUUx1F rgygiXMgyRwORcYhO8pZuKWPKeidcGepepng/Hm7a6Dyfs5VKCesgq9yyMlqsSlW R3L9hiTiTrdDOYQ38e25KPKZhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaVLtpY Tg8mUbAIZilWdg55L4C2MB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWZqS97NU3Woi7L0+v1t6MzdtpVlX1mMlbQOvv8oZEHgXLEudm6Go4 IrDjGslpcT1Haf9nxm32bvX086es1u4WtI25ZskpO6YSFU847FuI9IhHDgkEo6F7 L1GcF3UZS23U4IwH6zzJdriQTqAbkhw3nymQXHOFmF8wpRF2tj4oOtU83NiE7Kq1 5yRvskFWAP3fm8YEyTB5/fbPyu7AEjatIwII52VpPztM2Thj+9tVtdhLnBVDqvo0 uSrgtiLCeez1wl71gjet4lZK7+5iE69qju2V14QTTwglwAF3xCKz5fm/q14zQZoT r0Ud8QJ+wXsYuG5c/KW0e//Kh7bQSQ68 -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:29 2025 by rpki-client