$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json) Hash identifier: t8d5yTSMw098LRVAa6IcdovDp3umUtjTlbT1y6Hb7Nc= Subject key identifier: 01:8B:29:33:01:EC:3E:C5:37:C9:FD:AC:52:49:6E:DA:7C:03:A8:2D Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft Manifest number: 21 Signing time: Wed 05 Nov 2025 07:57:00 +0000 Manifest this update: Wed 05 Nov 2025 07:56:59 +0000 Manifest next update: Wed 12 Nov 2025 07:56:59 +0000 Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: 64yiDApannV8U8E8nMcqBIwazxsRwel5I+ynMdUOSL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C Validity Not Before: Nov 5 07:56:59 2025 GMT Not After : Nov 12 07:56:59 2025 GMT Subject: CN=690b034c-67a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:52:19:64:67:17:48:6c:98:88:97:d3:5c: 9a:a5:be:a8:8b:12:3c:a3:f5:b5:0b:37:76:c4:ba: ce:6b:a1:ef:3a:2d:af:19:76:d2:a7:6b:b8:a6:f2: 1b:8a:1c:1e:4a:43:e2:e1:e1:39:d0:e2:e5:9f:07: 14:c6:b3:5a:b6:0b:6b:c3:f6:80:88:ea:3f:47:52: 92:ef:cb:4a:33:f9:eb:c3:f6:00:6f:b4:cd:0e:14: 28:bf:b2:df:21:9d:fd:b6:6e:a4:28:8f:92:b7:80: 52:69:60:de:e1:ed:85:3b:d8:a8:06:e2:3b:43:a9: a0:75:f7:8f:5e:2a:35:0e:4f:51:d9:93:a0:f3:09: fe:d1:4b:9b:e2:d0:ea:25:c2:da:43:7c:0b:6f:b1: 77:5b:59:c0:c9:31:1f:bf:56:7f:47:52:50:54:10: e9:8e:3b:20:a2:e4:f7:36:69:73:d3:5b:e3:01:46: 12:10:a0:32:92:eb:04:10:a4:b9:33:23:71:3b:19: e4:cd:0f:51:f6:c2:07:0a:e9:bb:2a:f9:f6:87:6f: 7c:01:e7:80:ac:9d:d9:cc:cc:a0:13:b3:a8:af:ae: 39:72:b0:1a:3d:04:8b:17:c0:1f:40:1d:6c:53:48: 5f:a1:58:a6:0e:91:ef:76:3d:45:e3:1a:1c:35:e1: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:29:33:01:EC:3E:C5:37:C9:FD:AC:52:49:6E:DA:7C:03:A8:2D X509v3 Authority Key Identifier: keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:06:53:14:0b:a0:9f:69:2d:70:9d:6b:31:c9:d9:70:81:35: ac:61:a0:58:37:52:4f:48:3b:ae:95:7a:07:bc:18:53:c5:08: 9b:11:c2:fd:12:4b:2c:ef:20:2b:3a:9f:fc:7a:37:a0:c4:f1: f9:d6:9a:94:4c:ff:32:f5:58:41:35:34:dc:60:93:ca:bf:e1: ae:98:5b:b1:8c:f6:5f:af:c2:ad:21:f6:98:83:ab:ef:4d:fc: 06:81:43:bf:bf:06:c9:7e:63:ae:4a:4e:67:bd:df:d5:45:19: 42:c3:e5:ac:ec:6d:bc:78:27:9a:46:12:ae:97:a8:41:a8:5b: 56:d5:50:06:24:2a:e9:53:4b:2a:8a:60:b2:cc:7d:5c:a3:25: 20:ae:13:ac:67:48:63:fc:15:20:35:77:a3:c5:db:46:6b:4e: dd:a3:80:d8:48:47:34:e9:4f:1a:85:24:44:96:e1:a5:90:1d: 33:f9:3d:4e:2c:88:69:5d:92:a5:e1:3c:a6:47:18:2c:b2:21: d8:53:d0:22:dc:22:20:c1:14:6b:d0:93:04:e7:42:85:d5:00: c9:97:37:1c:73:8b:ec:f9:39:18:c2:08:ec:6f:f5:d2:6d:63: 5d:52:0e:2e:b9:f3:53:91:75:0b:11:d1:41:18:25:ab:1f:38: d6:2a:c2:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoQUNBMDVCRjk2Mjk1QjYxQzJFNDRFOUREM0M0QzQ4QzQ1 OUI5RTk1QzAeFw0yNTExMDUwNzU2NTlaFw0yNTExMTIwNzU2NTlaMBgxFjAUBgNV BAMTDTY5MGIwMzRjLTY3YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY6lIZZGcXSGyYiJfTXJqlvqiLEjyj9bULN3bEus5roe86La8ZdtKna7im8huK HB5KQ+Lh4TnQ4uWfBxTGs1q2C2vD9oCI6j9HUpLvy0oz+evD9gBvtM0OFCi/st8h nf22bqQoj5K3gFJpYN7h7YU72KgG4jtDqaB1949eKjUOT1HZk6DzCf7RS5vi0Ool wtpDfAtvsXdbWcDJMR+/Vn9HUlBUEOmOOyCi5Pc2aXPTW+MBRhIQoDKS6wQQpLkz I3E7GeTND1H2wgcK6bsq+faHb3wB54CsndnMzKATs6ivrjlysBo9BIsXwB9AHWxT SF+hWKYOke92PUXjGhw14VeHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAYspMwHs PsU3yf2sUklu2nwDqC0wHwYDVR0jBBgwFoAUrKBb+WKVthwuROndPExIxFm56Vww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzJFNjU5Nzk2ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL3JLQmItV0tWdGh3dVJPbmRQRXhJeEZtNTZW dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcktCYi1XS1Z0aHd1Uk9uZFBFeEl4Rm01NlZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzJFNjU5Nzk2ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL3JLQmItV0tWdGh3 dVJPbmRQRXhJeEZtNTZWdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL8GUxQLoJ9pLXCdazHJ2XCBNaxhoFg3Uk9IO66Vege8GFPFCJsRwv0S SyzvICs6n/x6N6DE8fnWmpRM/zL1WEE1NNxgk8q/4a6YW7GM9l+vwq0h9piDq+9N /AaBQ7+/Bsl+Y65KTme939VFGULD5azsbbx4J5pGEq6XqEGoW1bVUAYkKulTSyqK YLLMfVyjJSCuE6xnSGP8FSA1d6PF20ZrTt2jgNhIRzTpTxqFJESW4aWQHTP5PU4s iGldkqXhPKZHGCyyIdhT0CLcIiDBFGvQkwTnQoXVAMmXNxxzi+z5ORjCCOxv9dJt Y11SDi6581ORdQsR0UEYJasfONYqwm0= -----END CERTIFICATE-----Generated at Thu Nov 6 03:47:43 2025 by rpki-client