$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: W+YWhDPP1jSLWn16rLHrrK7HD4QAY/ozw4zRxXVdBzY= Subject key identifier: D8:80:69:E9:6D:72:29:01:EF:18:7C:D9:FF:96:28:12:B1:5E:2A:2C Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 5C Signing time: Mon 03 Nov 2025 07:08:32 +0000 Manifest this update: Mon 03 Nov 2025 07:08:32 +0000 Manifest next update: Mon 10 Nov 2025 07:08:32 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: 0/YM5nF5Pt7lODIs9RTjoJVBZ5hRYAjAb4GkvwY5q2A=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Nov 3 07:08:32 2025 GMT Not After : Nov 10 07:08:32 2025 GMT Subject: CN=690854f0-2d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:60:e3:0a:f4:62:a6:41:dd:03:1d:86:9a: 14:87:8e:3d:22:a2:44:14:e7:2f:27:ae:a1:2a:71: d5:81:cd:ed:65:cf:6e:1f:e6:9d:dd:e3:ad:f2:70: 00:3f:33:c9:0c:da:1d:27:21:89:02:39:83:79:4e: 45:c8:c7:50:d3:21:8c:5a:08:74:1b:74:68:75:30: 26:64:6a:31:30:3e:43:5f:cf:06:db:48:5a:05:7d: e0:7b:ad:91:c8:a3:be:25:9b:60:ff:7f:d7:d7:28: 2a:01:7b:fe:49:a5:6b:4b:76:01:57:e7:d3:1f:51: 9c:11:49:25:a5:6a:7d:cc:84:fd:8f:6c:3d:dc:76: 1c:11:79:8b:7f:5a:1f:0e:03:2e:c6:be:5a:74:a0: 01:64:ab:df:79:bf:15:1b:83:a2:ab:33:8e:a8:d2: 26:cf:e1:f6:28:9e:d0:8d:b3:45:05:5c:b3:a0:92: a4:69:c8:80:55:8d:a9:44:b1:a7:2b:e5:60:c4:e0: 4c:cb:1e:b5:56:3c:d3:75:48:eb:5d:4a:74:09:e7: ed:a5:51:5a:bf:91:77:d0:c4:95:e1:41:cb:ae:b2: d6:4b:c1:7d:1c:a7:6b:22:06:b7:f3:e1:e2:cc:1b: cf:9d:43:a9:97:cb:ab:3b:f6:6e:2a:7d:70:a2:34: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:80:69:E9:6D:72:29:01:EF:18:7C:D9:FF:96:28:12:B1:5E:2A:2C X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f0:00:d8:ae:00:23:5a:21:59:26:d2:3d:16:53:f9:c0:01: a0:6c:b3:2c:18:b8:58:aa:d4:8f:0a:7f:74:13:d1:6c:90:28: ac:9b:86:4b:fa:b2:60:0d:df:ab:88:8b:c8:88:2d:e7:83:43: 17:f2:a2:fe:39:08:5b:13:c6:85:f1:21:27:f7:d9:04:e7:e1: 50:8e:a7:2a:b2:12:4c:2c:57:e3:d4:0b:30:f4:7b:5c:79:f1: fd:92:64:9b:36:27:43:ca:2f:d2:3a:20:90:46:8a:6e:05:dd: c8:7c:35:39:7c:69:64:20:85:bd:19:bf:67:2e:e1:de:84:4b: cf:f0:bd:44:bb:18:fe:1e:3b:19:3f:1f:85:b0:f0:fa:2f:e7: 9b:21:09:67:f8:16:f9:1e:92:af:a1:a7:fd:8e:cf:0b:ec:30: c6:cd:7b:74:04:ed:2f:d7:e5:ea:35:ea:ff:8b:f3:f9:e5:84: 34:1d:ca:9b:03:e9:eb:04:33:ee:f1:c9:a0:25:a2:51:f0:92: fc:43:36:f7:2e:fa:bb:b1:4d:67:ff:58:b8:d5:57:3b:6d:0e: fb:97:9c:6b:cf:e2:91:df:d9:51:e7:9a:40:e8:98:7c:cd:83: e9:00:67:e7:67:8d:c8:05:26:fe:fa:85:c1:c8:53:af:b6:e2: c7:f2:89:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTExMDMwNzA4MzJaFw0yNTExMTAwNzA4MzJaMBgxFjAUBgNV BAMTDTY5MDg1NGYwLTJkNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnG2DjCvRipkHdAx2GmhSHjj0iokQU5y8nrqEqcdWBze1lz24f5p3d463ycAA/ M8kM2h0nIYkCOYN5TkXIx1DTIYxaCHQbdGh1MCZkajEwPkNfzwbbSFoFfeB7rZHI o74lm2D/f9fXKCoBe/5JpWtLdgFX59MfUZwRSSWlan3MhP2PbD3cdhwReYt/Wh8O Ay7Gvlp0oAFkq995vxUbg6KrM46o0ibP4fYontCNs0UFXLOgkqRpyIBVjalEsacr 5WDE4EzLHrVWPNN1SOtdSnQJ5+2lUVq/kXfQxJXhQcuustZLwX0cp2siBrfz4eLM G8+dQ6mXy6s79m4qfXCiNCQ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2IBp6W1y KQHvGHzZ/5YoErFeKiwwHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDwANiuACNaIVkm0j0WU/nAAaBssywYuFiq1I8Kf3QT0WyQKKybhkv6 smAN36uIi8iILeeDQxfyov45CFsTxoXxISf32QTn4VCOpyqyEkwsV+PUCzD0e1x5 8f2SZJs2J0PKL9I6IJBGim4F3ch8NTl8aWQghb0Zv2cu4d6ES8/wvUS7GP4eOxk/ H4Ww8Pov55shCWf4Fvkekq+hp/2OzwvsMMbNe3QE7S/X5eo16v+L8/nlhDQdypsD 6esEM+7xyaAlolHwkvxDNvcu+ruxTWf/WLjVVzttDvuXnGvP4pHf2VHnmkDomHzN g+kAZ+dnjcgFJv76hcHIU6+24sfyiU4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:35 2025 by rpki-client