$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft File: kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json) Hash identifier: lgiYJcxk2YjkwsGsuQbFbBVuD+UAFYLfflVYqXHB9Fc= Subject key identifier: F5:19:17:21:F2:95:5E:B9:6E:C5:60:C9:C1:23:69:DF:56:B4:7E:62 Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF Certificate issuer: /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Certificate serial: 16FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft Manifest number: 16E4 Signing time: Sun 26 Oct 2025 16:51:31 +0000 Manifest this update: Sun 26 Oct 2025 16:51:30 +0000 Manifest next update: Sun 02 Nov 2025 16:51:30 +0000 Files and hashes: 1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: hvp1YHZn9bf8gWuWA/7/J4cgyEM20jJXZB9tYAM5Cho=) 2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: sOJSfPhONuIwfnLzU2bf0wUh3TAZgenPqffj0l4T340=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 16:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5882 (0x16fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF Validity Not Before: Oct 26 16:51:30 2025 GMT Not After : Nov 2 16:51:30 2025 GMT Subject: CN=68fe5193-09fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:26:6b:fd:70:3d:5c:af:d6:00:16:ee:45: bb:6e:96:b5:72:77:75:d9:60:3f:e8:8b:f2:62:62: f4:d5:fe:a9:06:33:b3:ed:f6:fb:04:15:0e:b6:d6: 13:44:09:35:37:a7:57:6f:e8:c4:b4:06:54:1b:31: cd:14:a0:a0:bf:fb:bc:b3:53:7a:c8:6d:0e:03:91: e4:64:e4:21:4b:27:16:fb:18:e7:76:8c:aa:9a:36: 44:08:c7:86:e8:27:77:0a:6a:df:13:d2:5c:6b:ca: f9:e7:21:71:cf:3f:d7:de:de:f4:14:a4:c4:bb:f9: d9:c0:c0:c4:df:24:96:a1:f1:5e:42:2c:47:e4:36: c9:75:3c:99:da:45:39:7a:93:61:d8:33:a7:86:f6: c7:5d:09:a5:be:0b:a9:6f:78:8b:fa:0a:c4:a5:4e: 08:60:d5:cb:ad:63:67:b0:c4:6e:3a:0b:fa:2a:5a: 3a:a6:bd:d6:b7:eb:07:2b:f4:4f:81:83:b4:03:32: e5:41:ab:e2:4c:e3:e6:35:68:a1:ba:75:80:f4:46: c1:90:de:88:41:35:9a:99:c4:34:c9:6d:05:a2:cb: bc:b3:96:02:41:ff:69:30:76:be:df:7e:0f:ff:17: 5b:d9:d1:d4:37:ec:12:67:e7:15:b6:e2:45:ba:5b: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:19:17:21:F2:95:5E:B9:6E:C5:60:C9:C1:23:69:DF:56:B4:7E:62 X509v3 Authority Key Identifier: keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1b:df:ed:87:7f:2f:92:0b:d9:8e:6d:75:2f:73:be:30:03: f8:52:90:9c:a1:ab:d4:76:de:48:72:64:d4:4b:2b:f5:61:84: 3d:c2:08:91:a5:7a:9d:e8:77:81:3a:75:a5:ff:71:f5:8f:fc: 41:40:7b:1e:c2:74:44:dc:4a:44:44:1f:e7:58:e9:c7:4a:a8: be:9e:01:b9:90:10:6a:95:ca:7d:5f:91:0a:39:79:13:30:b4: 68:b8:52:b2:d4:2f:62:7e:1e:27:56:54:0e:72:14:e4:b4:a0: ba:03:d0:d9:c4:22:cc:78:ff:11:f8:85:39:7a:08:12:2e:d0: 0b:e1:bc:ea:b5:b8:96:87:89:9d:3a:26:d0:bf:bb:9f:5f:64: 48:fd:65:cd:bf:a1:62:65:12:41:ad:dc:dd:99:52:b6:80:07: bd:8b:9d:4d:a1:77:46:06:8d:6a:09:2e:53:87:1c:87:57:e2: f0:14:e9:46:34:c7:b6:1f:7b:b3:3d:c7:2d:06:c0:61:42:77: 86:be:79:31:aa:2d:1a:7c:fd:01:bd:2b:d2:16:4d:fc:5e:0a: 58:c2:4f:cc:b1:1b:81:f5:d0:75:78:dd:80:5f:74:27:61:4a: cd:ae:45:ef:0e:db:f6:25:02:51:30:ba:d9:4e:89:b2:f2:cd: 6d:09:7d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0 RjU1NTU4REYwHhcNMjUxMDI2MTY1MTMwWhcNMjUxMTAyMTY1MTMwWjAYMRYwFAYD VQQDEw02OGZlNTE5My0wOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IIma/1wPVyv1gAW7kW7bpa1cnd12WA/6IvyYmL01f6pBjOz7fb7BBUOttYT RAk1N6dXb+jEtAZUGzHNFKCgv/u8s1N6yG0OA5HkZOQhSycW+xjndoyqmjZECMeG 6Cd3CmrfE9Jca8r55yFxzz/X3t70FKTEu/nZwMDE3ySWofFeQixH5DbJdTyZ2kU5 epNh2DOnhvbHXQmlvgupb3iL+grEpU4IYNXLrWNnsMRuOgv6Klo6pr3Wt+sHK/RP gYO0AzLlQaviTOPmNWihunWA9EbBkN6IQTWamcQ0yW0Fosu8s5YCQf9pMHa+334P /xdb2dHUN+wSZ+cVtuJFultTBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUZFyHy lV65bsVgycEjad9WtH5iMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf c0FtSUpaakpocWRQVlZXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAG9/th38vkgvZjm11L3O+MAP4UpCcoavUdt5IcmTUSyv1YYQ9wgiR pXqd6HeBOnWl/3H1j/xBQHsewnRE3EpERB/nWOnHSqi+ngG5kBBqlcp9X5EKOXkT MLRouFKy1C9ifh4nVlQOchTktKC6A9DZxCLMeP8R+IU5eggSLtAL4bzqtbiWh4md OibQv7ufX2RI/WXNv6FiZRJBrdzdmVK2gAe9i51NoXdGBo1qCS5ThxyHV+LwFOlG NMe2H3uzPcctBsBhQneGvnkxqi0afP0BvSvSFk38XgpYwk/MsRuB9dB1eN2AX3Qn YUrNrkXvDtv2JQJRMLrZTomy8s1tCX1d -----END CERTIFICATE-----Generated at Tue Oct 28 09:27:09 2025 by rpki-client