$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: teXToLccOZi94nPUKLxg1kYSLuF+VDydfJcQ4EjZ0O0= Subject key identifier: 54:B8:AA:98:DC:E7:DC:60:A7:D4:04:9C:27:BB:69:24:1F:80:08:55 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03EB Signing time: Wed 05 Nov 2025 00:36:43 +0000 Manifest this update: Wed 05 Nov 2025 00:36:43 +0000 Manifest next update: Wed 12 Nov 2025 00:36:43 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: KD1rRt5R5ncbToUN8K0fBXRN2ld/BjRUpdYNpHaPU4c=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Nov 5 00:36:43 2025 GMT Not After : Nov 12 00:36:43 2025 GMT Subject: CN=690a9c1b-adfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:61:74:84:07:da:54:02:b6:28:f3:43:77: 12:12:42:43:da:6c:e3:92:57:96:3c:40:c0:29:e0: 36:4f:0c:2a:87:53:2b:6d:64:a6:1f:f8:04:dd:c3: 22:b0:6a:38:17:42:a8:69:f9:14:0a:04:ea:12:c5: 1d:c2:f0:51:1b:24:91:f5:eb:48:80:45:42:ec:65: 90:c8:95:ad:ca:c7:7f:06:0e:ea:ab:ca:ce:18:3e: ad:be:ad:73:6c:39:73:54:d1:fd:4a:6c:ac:f7:e0: 76:d2:eb:5c:b2:a2:01:b7:15:5e:64:1a:cb:fe:20: 39:9c:f0:b9:fb:7a:6d:47:9e:1b:63:67:f9:b4:9c: 15:4e:7d:3f:1b:16:e7:5d:72:fc:6a:e6:6a:b0:4d: 0a:f4:11:90:bd:c6:75:3b:2d:48:c6:88:75:8f:61: 59:a1:77:1d:b7:29:bd:92:c0:e8:6b:51:16:43:3e: c1:04:5e:96:c1:eb:e4:20:29:1b:9b:e4:de:20:a3: 2b:c6:34:44:fc:58:6d:59:76:8f:8e:3e:06:f7:10: 5a:12:1d:3b:98:7d:16:0a:f5:c0:31:0f:70:39:b8: 84:75:7b:18:12:a5:07:df:a5:0d:68:44:0d:f7:2a: 79:c0:ff:14:9f:95:94:49:c8:53:bf:4a:4e:0d:7b: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B8:AA:98:DC:E7:DC:60:A7:D4:04:9C:27:BB:69:24:1F:80:08:55 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:d4:0f:84:db:1e:d5:27:b4:56:d9:04:29:f9:29:6b:d7: ef:16:3d:52:b6:1c:f8:eb:f4:28:01:12:82:8d:52:9e:ce:3b: b4:e3:48:14:e9:9d:37:d2:e4:13:0a:e5:e2:08:37:66:59:db: f0:5f:d0:9e:a1:f1:27:93:40:ca:fa:23:ab:49:9a:84:af:36: 96:1c:25:47:6a:a9:c3:e4:18:8c:67:69:10:9c:da:d7:69:d6: 62:da:80:53:81:6d:95:28:93:a8:ba:3d:70:4f:b2:8c:01:15: d1:85:ae:68:3a:78:58:59:d6:8c:5f:bf:d5:03:40:73:f6:fa: fc:c5:ba:56:56:39:92:c6:17:f6:12:38:0c:6d:0e:28:20:8c: 03:d9:82:eb:67:73:19:4f:bd:cd:e6:0d:d2:d5:28:28:fc:be: 0e:2c:c7:39:67:a2:49:76:30:8e:04:b2:92:06:2c:5e:b8:b2: 05:72:7f:4c:73:d4:da:ac:c0:81:40:7b:c7:67:99:b0:8d:02: 3c:f1:f1:94:5c:10:bc:d0:e3:e0:29:5f:c5:ba:a5:75:40:a7: 53:1f:37:90:6c:a7:0e:35:f9:51:61:0d:96:35:c3:6a:73:42: 8c:4f:e7:f5:3a:a7:e9:78:7c:53:79:99:50:29:29:c3:b3:69: a2:a7:02:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUxMTA1MDAzNjQzWhcNMjUxMTEyMDAzNjQzWjAYMRYwFAYD VQQDEw02OTBhOWMxYi1hZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj1hdIQH2lQCtijzQ3cSEkJD2mzjkleWPEDAKeA2Twwqh1MrbWSmH/gE3cMi sGo4F0KoafkUCgTqEsUdwvBRGySR9etIgEVC7GWQyJWtysd/Bg7qq8rOGD6tvq1z bDlzVNH9Smys9+B20utcsqIBtxVeZBrL/iA5nPC5+3ptR54bY2f5tJwVTn0/Gxbn XXL8auZqsE0K9BGQvcZ1Oy1Ixoh1j2FZoXcdtym9ksDoa1EWQz7BBF6WwevkICkb m+TeIKMrxjRE/FhtWXaPjj4G9xBaEh07mH0WCvXAMQ9wObiEdXsYEqUH36UNaEQN 9yp5wP8Un5WUSchTv0pODXvC6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS4qpjc 59xgp9QEnCe7aSQfgAhVMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOq9QPhNse1Se0VtkEKfkpa9fvFj1Sthz46/QoARKCjVKezju040gU 6Z030uQTCuXiCDdmWdvwX9CeofEnk0DK+iOrSZqErzaWHCVHaqnD5BiMZ2kQnNrX adZi2oBTgW2VKJOouj1wT7KMARXRha5oOnhYWdaMX7/VA0Bz9vr8xbpWVjmSxhf2 EjgMbQ4oIIwD2YLrZ3MZT73N5g3S1Sgo/L4OLMc5Z6JJdjCOBLKSBixeuLIFcn9M c9TarMCBQHvHZ5mwjQI88fGUXBC80OPgKV/FuqV1QKdTHzeQbKcONflRYQ2WNcNq c0KMT+f1OqfpeHxTeZlQKSnDs2mipwJ2 -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:31 2025 by rpki-client