$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: F3tAKamQG4bK2u523ypyGWc9hn4V75xzOFV860GxJTA= Subject key identifier: A5:98:49:D9:CB:6B:41:4A:24:D5:CB:65:19:17:F6:00:EA:B0:DC:7F Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 01D1 Signing time: Mon 03 Nov 2025 02:59:02 +0000 Manifest this update: Mon 03 Nov 2025 02:59:01 +0000 Manifest next update: Mon 10 Nov 2025 02:59:01 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: Mbs4behkEiPQ2I024DB7GBDEmrq7CjSgytJYsCN2xjw=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: 3V/ibErrTNJ9w1YW/LwCYcNNPjpkRJOqZOAkX5zvOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Nov 3 02:59:01 2025 GMT Not After : Nov 10 02:59:01 2025 GMT Subject: CN=69081a76-c602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:04:e9:00:b5:24:ab:18:1d:8b:2b:d1:a1:eb: ce:5c:ae:9b:12:05:7f:e6:d5:57:cd:98:c5:07:6a: 18:30:a5:37:cb:23:ea:29:bd:a6:37:f6:ca:b9:67: ba:0d:33:20:08:98:89:54:44:08:fd:a6:a5:b8:64: a8:61:e4:3e:6f:d7:a8:39:6e:35:6e:f0:e6:63:83: 0a:c6:8a:96:c5:02:7e:40:f2:f0:5d:4d:79:db:cd: 86:d6:42:b6:01:5d:bf:13:26:7b:f1:00:3e:e0:35: 93:ce:11:1d:18:c2:2d:8a:8c:f8:2a:43:e8:7c:0e: c1:7d:a3:f0:39:a5:23:e3:c7:cf:46:c3:90:ff:f6: 13:2c:9b:71:6c:f6:ab:9d:eb:ab:ba:1a:d6:17:24: be:36:66:96:7f:cf:c5:34:c1:16:a2:50:c9:b7:49: 2f:31:96:f9:c5:7f:0f:14:ec:56:4c:7f:6a:34:ec: 30:40:59:1a:7b:4c:90:69:80:7d:35:13:cc:ce:86: 2d:61:16:58:20:fc:5a:85:cc:4e:ee:28:97:d8:2a: 2a:9b:e2:09:85:a5:8b:aa:a0:44:bc:6d:c2:e8:10: 9c:91:ed:cd:85:33:0d:12:c2:e0:13:c1:16:66:f0: df:1c:f4:7b:8a:cc:3b:f0:fa:4e:95:db:d1:ed:a3: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:98:49:D9:CB:6B:41:4A:24:D5:CB:65:19:17:F6:00:EA:B0:DC:7F X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:28:b0:21:ca:5b:3b:c6:50:3a:25:d8:ae:04:1e:a4:4f:4c: a8:9e:34:df:24:49:e6:ee:7d:3e:4a:dc:c3:49:a8:7f:4a:5a: 22:6f:ac:3f:44:66:b7:48:b1:73:3b:10:e7:ac:c8:1f:be:4f: e0:67:c5:db:d2:77:e1:e6:dd:11:b9:29:e4:f5:95:42:d7:69: 47:f5:e2:f2:ab:90:c3:d1:11:4d:be:ad:6d:91:cc:83:dd:47: d2:31:a1:01:3d:70:cd:00:7d:57:27:85:7e:0e:2b:7f:45:9a: bc:1e:d7:6f:f6:e2:0f:48:6d:f3:ec:8a:0a:c2:e5:6c:18:7d: e4:77:59:f9:f1:f6:9d:c6:56:cf:7f:c1:c7:97:98:37:be:b9: b8:96:cb:e8:66:a7:8c:96:92:8f:c1:11:83:52:17:2f:1e:18: d0:b4:26:d7:e7:a7:55:7e:71:8f:01:f8:5b:52:9d:a2:6a:43: 5f:01:e0:42:4e:92:68:ea:eb:39:a1:76:5b:3e:eb:e3:80:0b: f6:61:7c:19:82:5b:64:1f:c2:d3:0e:23:5a:d1:f9:06:48:74: 7a:f1:26:9c:a1:71:0b:b4:68:14:8a:5e:b8:be:31:59:40:b0: 67:2c:34:7a:ee:8d:55:0f:88:5e:c2:c6:14:56:b7:30:20:08: 96:6a:74:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjUxMTAzMDI1OTAxWhcNMjUxMTEwMDI1OTAxWjAYMRYwFAYD VQQDEw02OTA4MWE3Ni1jNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wTpALUkqxgdiyvRoevOXK6bEgV/5tVXzZjFB2oYMKU3yyPqKb2mN/bKuWe6 DTMgCJiJVEQI/aaluGSoYeQ+b9eoOW41bvDmY4MKxoqWxQJ+QPLwXU15282G1kK2 AV2/EyZ78QA+4DWTzhEdGMItioz4KkPofA7BfaPwOaUj48fPRsOQ//YTLJtxbPar neuruhrWFyS+NmaWf8/FNMEWolDJt0kvMZb5xX8PFOxWTH9qNOwwQFkae0yQaYB9 NRPMzoYtYRZYIPxahcxO7iiX2Coqm+IJhaWLqqBEvG3C6BCcke3NhTMNEsLgE8EW ZvDfHPR7isw78PpOldvR7aPn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWYSdnL a0FKJNXLZRkX9gDqsNx/MB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuKLAhyls7xlA6JdiuBB6kT0yonjTfJEnm7n0+StzDSah/Sloib6w/ RGa3SLFzOxDnrMgfvk/gZ8Xb0nfh5t0RuSnk9ZVC12lH9eLyq5DD0RFNvq1tkcyD 3UfSMaEBPXDNAH1XJ4V+Dit/RZq8Htdv9uIPSG3z7IoKwuVsGH3kd1n58fadxlbP f8HHl5g3vrm4lsvoZqeMlpKPwRGDUhcvHhjQtCbX56dVfnGPAfhbUp2iakNfAeBC TpJo6us5oXZbPuvjgAv2YXwZgltkH8LTDiNa0fkGSHR68SacoXELtGgUil64vjFZ QLBnLDR67o1VD4hewsYUVrcwIAiWanRX -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:22 2025 by rpki-client