$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: nPV9vFBYIQ6wVyS855r7NxQ01I3KyILlWMjlpTd8c94= Subject key identifier: 69:AC:BD:E2:12:48:3A:A4:33:F3:50:A1:A7:AC:0B:AB:E9:0B:15:09 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16E9 Signing time: Tue 04 Nov 2025 16:44:32 +0000 Manifest this update: Tue 04 Nov 2025 16:44:31 +0000 Manifest next update: Tue 11 Nov 2025 16:44:31 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: yWgPhIgJXHw3ifiKotw9o4DmaUbCONtarRyFM2Z7b5s=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5887 (0x16ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Nov 4 16:44:31 2025 GMT Not After : Nov 11 16:44:31 2025 GMT Subject: CN=690a2d6f-169d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:98:10:8d:51:6b:dd:ee:d8:8c:0d:3c:fa: 68:82:32:09:5d:74:6c:47:85:c0:40:fc:03:19:f0: 9d:0c:4c:cf:e1:b0:d1:af:ad:cf:96:42:ba:21:9d: da:69:14:eb:1f:07:84:2f:56:ac:33:ad:0c:28:08: e2:71:9f:96:ef:46:49:ef:2c:67:7b:f2:59:f0:53: 82:53:60:df:62:6c:05:09:79:05:ba:e9:f2:dc:8e: e1:20:a8:99:f5:88:7a:19:70:62:4b:ae:55:ea:0f: 9d:c1:1a:40:30:0a:dc:e9:33:c9:80:8c:68:51:58: d7:7b:bb:26:1d:73:88:89:07:38:85:48:0d:2e:ee: b1:5c:66:2b:24:67:af:8a:b7:8e:a0:36:96:47:e2: 3a:2a:de:10:43:4e:c0:a5:d7:b8:44:a4:d1:63:6a: 37:75:7a:20:09:6d:57:06:cb:82:d3:75:0a:51:e4: bb:7c:36:04:83:05:ff:9d:72:98:e3:b2:75:4c:5e: b1:05:b7:93:20:8c:2f:a4:4c:0f:7a:52:a3:92:28: 59:d6:59:1d:d5:b9:cf:c9:a0:3a:f3:70:d0:b4:43: 35:bd:ba:64:73:28:46:f9:7b:07:4a:84:3f:80:08: 54:f4:df:bc:fd:b9:8c:61:28:8f:c9:e3:de:7d:19: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:BD:E2:12:48:3A:A4:33:F3:50:A1:A7:AC:0B:AB:E9:0B:15:09 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:82:bd:38:9e:f2:b8:e6:a8:1f:25:90:a7:cf:c9:35:01:04: 99:4e:66:c5:ef:da:74:0c:c4:7c:97:d0:ed:58:87:ce:9e:2a: ad:2e:2e:31:42:56:43:c5:72:15:41:a2:27:12:87:ef:bc:e6: d6:86:8b:3a:a7:51:cb:50:d2:fc:dd:5c:6d:1f:ec:40:33:37: b7:bc:f9:ed:37:ba:37:e5:c3:d9:a6:6a:64:6d:ea:40:ab:71: e4:bb:35:b2:75:2d:52:72:03:df:af:df:0b:88:ad:74:58:c5: 85:35:8c:b3:b1:af:35:06:74:c3:4e:bc:75:c8:e8:00:79:e8: e8:18:c2:13:55:f9:eb:3e:79:c0:02:b5:64:ab:fd:c7:44:8a: db:e3:af:d1:bd:2d:af:b2:77:da:c7:44:fb:c8:04:8a:4c:89: c1:d8:65:66:be:98:e1:d3:2a:40:87:a1:40:cb:b6:77:f2:8e: 42:9b:a0:21:c6:6a:bb:67:2f:52:e1:b9:5a:52:b0:5e:5e:5c: fa:a0:7a:c9:e8:03:9e:9c:39:66:84:b6:40:d4:24:ed:cb:2b: 04:b2:75:62:d9:16:44:99:17:09:c4:7e:d8:8b:54:c1:3b:a7: 30:6d:19:50:36:c1:16:8f:ab:e3:d1:d1:02:2e:55:a9:15:d1: 39:7e:98:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUxMTA0MTY0NDMxWhcNMjUxMTExMTY0NDMxWjAYMRYwFAYD VQQDEw02OTBhMmQ2Zi0xNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmuYEI1Ra93u2IwNPPpogjIJXXRsR4XAQPwDGfCdDEzP4bDRr63PlkK6IZ3a aRTrHweEL1asM60MKAjicZ+W70ZJ7yxne/JZ8FOCU2DfYmwFCXkFuuny3I7hIKiZ 9Yh6GXBiS65V6g+dwRpAMArc6TPJgIxoUVjXe7smHXOIiQc4hUgNLu6xXGYrJGev ireOoDaWR+I6Kt4QQ07Apde4RKTRY2o3dXogCW1XBsuC03UKUeS7fDYEgwX/nXKY 47J1TF6xBbeTIIwvpEwPelKjkihZ1lkd1bnPyaA683DQtEM1vbpkcyhG+XsHSoQ/ gAhU9N+8/bmMYSiPyePefRnt/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmsveIS SDqkM/NQoaesC6vpCxUJMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIgr04nvK45qgfJZCnz8k1AQSZTmbF79p0DMR8l9DtWIfOniqtLi4x QlZDxXIVQaInEofvvObWhos6p1HLUNL83VxtH+xAMze3vPntN7o35cPZpmpkbepA q3HkuzWydS1ScgPfr98LiK10WMWFNYyzsa81BnTDTrx1yOgAeejoGMITVfnrPnnA ArVkq/3HRIrb46/RvS2vsnfax0T7yASKTInB2GVmvpjh0ypAh6FAy7Z38o5Cm6Ah xmq7Zy9S4blaUrBeXlz6oHrJ6AOenDlmhLZA1CTtyysEsnVi2RZEmRcJxH7Yi1TB O6cwbRlQNsEWj6vj0dECLlWpFdE5fpgl -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:27 2025 by rpki-client