$ rpki-client -vvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft File: kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json) Hash identifier: IigznZAA5RoZnr7r4Cr8jbWmt6uOmrUOwFg6s24qdBA= Subject key identifier: E7:6D:F2:D8:9E:4B:EF:8B:5B:FD:C2:6D:5E:10:5F:86:83:EE:8E:2D Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 Certificate issuer: /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft Manifest number: 4A Signing time: Wed 05 Nov 2025 07:32:33 +0000 Manifest this update: Wed 05 Nov 2025 07:32:32 +0000 Manifest next update: Wed 12 Nov 2025 07:32:32 +0000 Files and hashes: 1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: mcSB3mxlUnYgjwB34t7F6hTXbKaneUC5xJVhUsPvwgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9 Validity Not Before: Nov 5 07:32:32 2025 GMT Not After : Nov 12 07:32:32 2025 GMT Subject: CN=690afd90-0665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:ec:ca:8f:5e:07:16:f1:a4:70:60:7f:f7: d7:14:6a:05:79:cb:a9:57:85:6f:69:59:6c:39:00: b9:d4:21:f0:6f:f2:2f:25:50:4f:8a:f4:2d:ea:8d: 15:75:2e:df:67:5f:e8:07:4e:63:cc:48:17:df:4a: 84:00:25:34:dc:e7:1a:08:cf:ad:c3:b4:6c:b0:3b: c6:75:5b:a9:ee:97:0b:f6:6a:58:20:49:fa:fb:cc: 37:f9:bf:8a:89:6d:3f:65:b6:f7:3e:b4:ca:56:57: 26:4b:8f:08:f1:ed:6a:95:9c:ca:47:7d:67:86:8a: 98:9f:b8:53:b7:17:7a:a9:34:ac:a0:43:f3:99:17: 22:a2:99:66:e2:3f:77:24:88:42:84:09:30:83:95: 23:d8:e9:d0:63:e3:b7:eb:c4:36:ec:e1:53:0f:54: 32:6c:11:80:1b:7a:b4:3e:41:66:d9:bf:37:33:86: 39:81:88:9c:17:fd:59:59:36:49:06:bc:df:6d:3c: 89:fd:ca:43:0a:85:c9:4b:e1:d9:1e:03:f3:b7:70: f2:bf:4a:36:b7:98:f1:70:7a:d5:ef:01:df:7a:f3: 1a:5c:13:b1:47:2e:eb:a0:24:7c:f8:a0:62:3f:41: 04:fa:eb:74:c9:4b:d8:9d:0d:e4:64:eb:52:4c:36: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6D:F2:D8:9E:4B:EF:8B:5B:FD:C2:6D:5E:10:5F:86:83:EE:8E:2D X509v3 Authority Key Identifier: keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:da:c9:90:2b:86:ea:ea:67:eb:7e:a4:36:1d:7c:dc:18:08: 8f:b6:a2:48:c4:20:72:fb:8f:05:96:95:60:16:cf:6f:c6:51: d1:95:e2:20:60:ef:c5:66:8b:41:0a:61:07:da:69:df:12:9c: e0:84:8a:13:18:19:2c:50:19:40:65:c0:d1:24:ae:bb:43:1f: 7f:7a:dc:22:77:bb:9c:16:17:82:4b:bb:4d:a4:ca:ac:81:cc: 6a:fb:af:1c:67:0b:fd:0e:58:fe:91:d7:ae:d1:aa:37:79:91: 51:f1:54:81:64:86:b0:31:59:52:d1:f8:27:51:1d:19:6c:03: 26:fc:da:89:0a:22:83:bd:c2:cf:38:ca:4c:bc:95:4e:ce:95: 1e:6c:33:dd:05:fc:fe:45:cb:a7:1f:96:d0:0c:12:33:7c:7b: 52:7e:d9:34:5d:ad:19:f5:7d:e7:28:d7:11:f1:18:6f:ca:4c: de:99:61:65:02:fa:30:3f:46:35:86:57:28:6d:12:7b:20:a2: e7:2b:fe:87:d5:96:d7:80:99:0a:43:62:bf:1e:1d:b7:3b:1a: 20:2c:51:ae:43:35:22:f6:bd:0d:3b:98:45:8e:04:7e:f6:bb: bf:c9:56:5c:02:fc:50:e3:5c:3f:15:61:71:4b:c5:71:48:10: 22:b5:99:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTNBNTExMC8GA1UEBRMoOTAyMUJFRkYzQjYzRUU3MjQ4QjkwRERBQTVEREJGQTdF MzEyMUNEOTAeFw0yNTExMDUwNzMyMzJaFw0yNTExMTIwNzMyMzJaMBgxFjAUBgNV BAMTDTY5MGFmZDkwLTA2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUcuzKj14HFvGkcGB/99cUagV5y6lXhW9pWWw5ALnUIfBv8i8lUE+K9C3qjRV1 Lt9nX+gHTmPMSBffSoQAJTTc5xoIz63DtGywO8Z1W6nulwv2alggSfr7zDf5v4qJ bT9ltvc+tMpWVyZLjwjx7WqVnMpHfWeGipifuFO3F3qpNKygQ/OZFyKimWbiP3ck iEKECTCDlSPY6dBj47frxDbs4VMPVDJsEYAberQ+QWbZvzczhjmBiJwX/VlZNkkG vN9tPIn9ykMKhclL4dkeA/O3cPK/Sja3mPFwetXvAd968xpcE7FHLuugJHz4oGI/ QQT663TJS9idDeRk61JMNiBVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU523y2J5L 74tb/cJtXhBfhoPuji0wHwYDVR0jBBgwFoAUkCG+/ztj7nJIuQ3apd2/p+MSHNkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExM0E1L0U1N0YzNTkyNEI3 NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25KSXVRM2FwZDJfcC1NU0hO ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0NHLV96dGo3bkpJdVEzYXBkMl9wLU1TSE5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx M0E1L0U1N0YzNTkyNEI3NzExRjBCMUNCOUUyN0M0RjlBRTAyL2tDRy1fenRqN25K SXVRM2FwZDJfcC1NU0hOay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLayZArhurqZ+t+pDYdfNwYCI+2okjEIHL7jwWWlWAWz2/GUdGV4iBg 78Vmi0EKYQfaad8SnOCEihMYGSxQGUBlwNEkrrtDH3963CJ3u5wWF4JLu02kyqyB zGr7rxxnC/0OWP6R167Rqjd5kVHxVIFkhrAxWVLR+CdRHRlsAyb82okKIoO9ws84 yky8lU7OlR5sM90F/P5Fy6cfltAMEjN8e1J+2TRdrRn1feco1xHxGG/KTN6ZYWUC +jA/RjWGVyhtEnsgoucr/ofVlteAmQpDYr8eHbc7GiAsUa5DNSL2vQ07mEWOBH72 u7/JVlwC/FDjXD8VYXFLxXFIECK1mRs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:24 2025 by rpki-client