$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft File: rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json) Hash identifier: /JwUHMhEYjv6tFikkl+yWEIxISs70SIeAHkFRv7Q0I8= Subject key identifier: 5D:F6:43:B8:24:60:ED:B9:60:CD:7C:5D:E8:73:57:05:20:5B:B0:D2 Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft Manifest number: DE Signing time: Mon 03 Nov 2025 05:32:27 +0000 Manifest this update: Mon 03 Nov 2025 05:32:26 +0000 Manifest next update: Mon 10 Nov 2025 05:32:26 +0000 Files and hashes: 1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: qwhbldeIIkp5wip31KOwAkRPdBm60B8TRP31ZMq0Qd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274 Validity Not Before: Nov 3 05:32:26 2025 GMT Not After : Nov 10 05:32:26 2025 GMT Subject: CN=69083e6a-4f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e1:21:eb:77:b2:d6:f8:c3:41:30:4e:1f:de: 5d:d3:e3:64:33:4d:6f:b8:76:74:3c:27:71:e6:02: 1f:c9:4e:7f:fd:93:6f:da:e2:6d:89:cc:aa:7d:fd: e4:41:02:d6:d8:f0:c7:13:41:cb:4d:51:d8:b5:29: 17:d5:eb:ef:e2:0e:73:e9:db:ef:13:91:63:55:9c: 0b:6b:92:15:51:fd:fa:05:0d:d5:7b:30:8e:b9:ff: 71:94:b3:5f:16:17:2a:d3:b1:aa:1c:b7:a9:43:35: 0a:61:37:bd:62:9d:aa:ff:87:0e:c4:2c:29:53:4a: 10:28:84:c9:74:23:9f:35:82:64:32:02:0c:27:11: 3a:29:b5:e0:d4:ab:e7:42:76:0b:d0:a5:26:72:74: 4a:94:be:4c:e1:38:c4:94:b5:2c:c4:29:c0:7e:aa: 96:6b:82:15:72:f6:eb:3f:21:b1:d4:ba:c5:47:5d: 30:da:a2:9d:9d:e4:fb:73:9a:ba:5c:19:57:53:ca: 31:25:35:bf:1c:d3:aa:1c:aa:4e:53:d1:a3:2b:b8: fc:0c:ca:09:93:1c:8c:0b:ee:ee:30:54:9f:ec:f1: ac:c5:5b:eb:09:c2:1e:e8:dd:a4:7a:11:e5:40:87: 31:bf:25:bc:af:50:c0:76:f8:da:1e:26:71:4a:46: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F6:43:B8:24:60:ED:B9:60:CD:7C:5D:E8:73:57:05:20:5B:B0:D2 X509v3 Authority Key Identifier: keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3c:e7:e8:12:67:cd:a2:78:92:63:c3:35:69:51:5d:5e:86: c9:ff:fe:11:69:3e:58:43:3f:50:9e:9e:4f:de:34:07:62:b4: 67:bd:a3:99:b6:8e:df:e0:7e:46:f9:04:8b:fb:76:20:16:34: 44:dd:10:4e:f7:8b:8a:bc:ab:03:d6:9a:ee:33:cc:68:62:17: 7e:e3:87:f1:1a:b1:32:85:19:2c:c2:4f:05:2c:18:2a:9c:1c: 67:61:5a:7a:e5:38:81:37:b8:f2:e7:b2:7f:7e:81:c4:4b:75: b6:e7:be:4e:8d:7b:33:25:09:e8:10:19:68:97:f5:09:db:bf: d6:b0:6b:62:7d:d4:16:e7:8c:00:5b:40:b8:01:3a:11:56:48: 1b:e5:4b:e2:e0:5a:00:e6:27:bb:34:17:ce:c6:d3:f6:8f:93: 15:36:b2:bb:48:7d:f0:f3:64:2d:6a:fd:89:07:c3:82:c5:47: 02:0a:f0:25:8e:6a:f8:b8:f8:d3:46:e5:d0:ce:15:ef:0e:3f: d4:39:c6:d5:42:4d:ad:43:b7:6a:a8:59:92:5b:d5:bb:28:bc: 94:8e:f9:23:2b:d4:39:07:9a:6a:22:4b:43:c4:02:3b:d3:fe: 3e:10:64:25:71:2f:6e:ce:8b:db:4d:ef:69:27:a8:90:57:e7: cb:db:12:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz RTZGODYyNzQwHhcNMjUxMTAzMDUzMjI2WhcNMjUxMTEwMDUzMjI2WjAYMRYwFAYD VQQDEw02OTA4M2U2YS00ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweEh63ey1vjDQTBOH95d0+NkM01vuHZ0PCdx5gIfyU5//ZNv2uJticyqff3k QQLW2PDHE0HLTVHYtSkX1evv4g5z6dvvE5FjVZwLa5IVUf36BQ3VezCOuf9xlLNf Fhcq07GqHLepQzUKYTe9Yp2q/4cOxCwpU0oQKITJdCOfNYJkMgIMJxE6KbXg1Kvn QnYL0KUmcnRKlL5M4TjElLUsxCnAfqqWa4IVcvbrPyGx1LrFR10w2qKdneT7c5q6 XBlXU8oxJTW/HNOqHKpOU9GjK7j8DMoJkxyMC+7uMFSf7PGsxVvrCcIe6N2kehHl QIcxvyW8r1DAdvjaHiZxSkbe0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF32Q7gk YO25YM18XehzVwUgW7DSMB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5 MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW eGZIck9CS0l6dHctYjRZblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9POfoEmfNoniSY8M1aVFdXobJ//4RaT5YQz9Qnp5P3jQHYrRnvaOZ to7f4H5G+QSL+3YgFjRE3RBO94uKvKsD1pruM8xoYhd+44fxGrEyhRkswk8FLBgq nBxnYVp65TiBN7jy57J/foHES3W2575OjXszJQnoEBlol/UJ27/WsGtifdQW54wA W0C4AToRVkgb5Uvi4FoA5ie7NBfOxtP2j5MVNrK7SH3w82Qtav2JB8OCxUcCCvAl jmr4uPjTRuXQzhXvDj/UOcbVQk2tQ7dqqFmSW9W7KLyUjvkjK9Q5B5pqIktDxAI7 0/4+EGQlcS9uzovbTe9pJ6iQV+fL2xJu -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:59 2025 by rpki-client