$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: iLQTtz/HfWtHxqHlFC3XrS4BmDF7NjNY2YpnQQhJXuQ= Subject key identifier: 2E:96:19:FE:96:EE:BF:D9:2E:B5:3E:6B:06:15:F3:49:23:A2:15:86 Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 33 Signing time: Mon 03 Nov 2025 07:36:24 +0000 Manifest this update: Mon 03 Nov 2025 07:36:24 +0000 Manifest next update: Mon 10 Nov 2025 07:36:24 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: QWgqO2qM4qTifCnxKBrMKtuIMKUj38jKHrffvHW42Rg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Nov 3 07:36:24 2025 GMT Not After : Nov 10 07:36:24 2025 GMT Subject: CN=69085b78-b390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6b:89:50:b6:cb:82:bd:2c:93:b8:c5:25:36: b1:2d:c7:0f:80:fe:12:75:fb:d1:db:da:df:fe:7c: cd:e3:de:b6:4e:ec:78:42:1d:1f:d5:1e:8e:f5:0e: bf:a2:ff:d6:21:6b:cf:f3:54:4b:79:0b:ab:b3:63: b7:3f:95:c3:9e:47:0d:f6:61:b7:f5:31:8c:5c:e2: 7b:f0:6d:d4:83:2b:13:15:30:8d:21:21:31:5d:40: b4:35:e1:1d:1a:b4:39:9d:53:0b:6e:77:e0:7d:a0: 10:aa:c8:3c:76:39:6f:9f:06:41:e7:0d:1b:9b:bb: ee:91:2f:69:78:69:a6:50:57:50:95:dc:89:93:ab: 6c:88:cb:4f:10:7c:b4:ae:39:63:c3:60:3f:ab:c7: 8b:98:0d:9c:eb:e4:e3:b6:b4:2d:4c:91:87:9a:aa: 95:4a:d7:05:20:46:f1:23:6f:75:67:e7:de:f2:30: 97:77:d4:49:be:e6:95:ce:0b:16:94:db:5e:db:ab: 23:5f:3c:a2:de:1b:a4:1c:a2:07:f1:4f:1b:86:81: ce:f7:99:3c:92:80:f8:b1:4e:50:9d:56:1d:9e:dd: 99:70:3d:03:d4:3d:fc:e1:3a:de:7c:4d:ed:0e:fa: 19:4b:71:6b:1a:d3:4b:fa:6e:3d:5e:ed:0a:5f:8c: d1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:19:FE:96:EE:BF:D9:2E:B5:3E:6B:06:15:F3:49:23:A2:15:86 X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5f:8d:48:66:4e:a3:d8:a8:94:86:8c:da:bb:d7:50:da:c2: be:1b:16:9d:86:66:e5:47:ea:a0:2a:d6:59:3e:32:46:64:3a: 56:bc:fc:ae:0d:68:96:a2:70:9e:1c:a7:9a:a6:8a:1e:55:49: 51:d5:2f:a5:e9:b6:ec:cb:46:3e:6a:b2:2b:dc:4c:15:c5:45: a2:df:a7:24:ff:be:f3:70:48:97:96:0b:fe:ed:7e:b6:29:db: 3a:77:df:10:75:0a:8f:4e:c5:07:54:04:e6:6e:4c:39:ad:6b: 18:f7:c2:ad:fc:b6:2f:1a:3e:30:1e:34:29:a6:ae:1f:71:74: f1:cc:4d:a6:3a:95:86:1b:8f:72:72:4c:1f:42:cd:75:a9:5b: 92:5f:21:31:9f:c2:4c:4a:a6:e1:06:1a:cb:24:3f:a4:9e:cd: c2:b1:b1:53:72:a7:31:ca:3c:84:64:a4:d7:f0:b4:d2:33:30: 51:ed:f4:ee:70:cb:37:c7:c6:f4:9b:a4:a9:94:b1:59:a9:c8: 93:1a:fc:c9:a3:ef:47:05:03:79:2f:02:ae:f9:d5:57:82:9e: cf:91:e1:9c:55:cf:de:b5:a6:56:1b:7e:cf:fb:46:ad:5c:c2: 30:2a:0a:27:6e:d0:27:01:43:08:4c:b0:36:4a:7d:3f:7a:2c: 64:1f:53:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNTExMDMwNzM2MjRaFw0yNTExMTAwNzM2MjRaMBgxFjAUBgNV BAMTDTY5MDg1Yjc4LWIzOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHa4lQtsuCvSyTuMUlNrEtxw+A/hJ1+9Hb2t/+fM3j3rZO7HhCHR/VHo71Dr+i /9Yha8/zVEt5C6uzY7c/lcOeRw32Ybf1MYxc4nvwbdSDKxMVMI0hITFdQLQ14R0a tDmdUwtud+B9oBCqyDx2OW+fBkHnDRubu+6RL2l4aaZQV1CV3ImTq2yIy08QfLSu OWPDYD+rx4uYDZzr5OO2tC1MkYeaqpVK1wUgRvEjb3Vn597yMJd31Em+5pXOCxaU 217bqyNfPKLeG6QcogfxTxuGgc73mTySgPixTlCdVh2e3ZlwPQPUPfzhOt58Te0O +hlLcWsa00v6bj1e7QpfjNG7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULpYZ/pbu v9kutT5rBhXzSSOiFYYwHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpfjUhmTqPYqJSGjNq711Dawr4bFp2GZuVH6qAq1lk+MkZkOla8/K4N aJaicJ4cp5qmih5VSVHVL6XptuzLRj5qsivcTBXFRaLfpyT/vvNwSJeWC/7tfrYp 2zp33xB1Co9OxQdUBOZuTDmtaxj3wq38ti8aPjAeNCmmrh9xdPHMTaY6lYYbj3Jy TB9CzXWpW5JfITGfwkxKpuEGGsskP6SezcKxsVNypzHKPIRkpNfwtNIzMFHt9O5w yzfHxvSbpKmUsVmpyJMa/Mmj70cFA3kvAq751VeCns+R4ZxVz961plYbfs/7Rq1c wjAqCidu0CcBQwhMsDZKfT96LGQfUwc= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:25 2025 by rpki-client