$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: /UXmW87ADXPeghzMco+b7xOaoEFKuzZv6iisdKC2Nh0= Subject key identifier: 8B:A6:86:CE:89:98:EE:1F:3A:9C:E9:F6:A0:2E:C1:CF:D5:5A:BF:FC Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 395F Signing time: Tue 04 Nov 2025 14:40:40 +0000 Manifest this update: Tue 04 Nov 2025 14:40:40 +0000 Manifest next update: Tue 11 Nov 2025 14:40:40 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: XGrB1ZeFUJhTXfFaDJAFAMwsXZoDfAVbzUjsQRAk3b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Nov 4 14:40:40 2025 GMT Not After : Nov 11 14:40:40 2025 GMT Subject: CN=690a1068-ce53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:41:b4:39:86:e7:f6:28:f8:9f:15:c5:48: 2a:cc:80:e2:a1:b0:74:48:46:8d:d5:0e:dd:52:c3: 4f:a7:76:b3:30:13:44:e1:1e:fc:a6:02:48:7c:44: 76:e0:66:bf:28:6c:c2:55:e7:02:e2:14:3c:e3:8f: 1b:ea:0f:5b:22:4e:8e:21:a9:64:36:b9:1c:c3:64: 77:bd:86:8a:1a:4f:88:68:b4:9e:7b:8d:e8:86:34: 66:a3:54:db:fb:a7:23:21:05:0d:15:4e:63:5b:5b: 8d:48:12:2c:78:f0:58:0c:7c:00:b3:16:a0:c4:ef: c0:bf:62:59:29:75:e0:e2:65:6f:b4:88:59:1b:38: e3:89:7e:b2:bf:3e:a4:4f:1b:ec:03:95:97:93:e8: 1b:99:c4:35:93:a3:ff:5a:a5:7c:5b:6c:c7:a4:23: 3b:c7:ae:fb:15:bb:b5:45:be:13:a8:fa:e8:46:d8: 6e:b9:86:6b:f7:d3:8d:2a:71:e8:a2:bb:f3:97:90: 7e:68:85:49:c9:e9:05:ff:6f:8d:45:81:fb:9f:20: d8:af:8d:6c:19:7f:82:13:a5:d2:d6:57:8f:42:dd: 7e:d2:8c:42:e5:87:d5:fe:fe:90:c3:7f:f7:63:7d: 2f:81:94:8a:f7:c3:6c:e8:97:c6:f9:f7:2e:31:e6: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A6:86:CE:89:98:EE:1F:3A:9C:E9:F6:A0:2E:C1:CF:D5:5A:BF:FC X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:22:31:aa:28:fc:70:8a:dc:43:b2:e0:ec:24:47:33:45:11: e9:a3:1c:3e:db:7a:27:61:0c:21:03:99:11:92:cb:0a:a2:a4: d4:60:01:1a:47:76:1b:41:34:03:ac:66:01:af:77:5d:43:48: 2d:fb:b4:2a:78:49:fd:cd:28:40:9a:88:db:7a:4c:52:ae:aa: 50:31:1e:e1:b7:27:c5:f0:25:d6:56:23:1f:34:5f:67:42:e1: d8:4c:e9:22:8c:50:f0:c4:f2:a3:9a:36:23:2e:29:5b:9c:82: 60:5a:34:7a:05:74:40:fe:9c:d5:41:f1:67:9c:f9:0f:d5:29: 6f:22:cf:61:5a:90:98:9d:34:5a:bb:ec:b1:2e:0f:21:65:92: 67:fb:78:19:9d:aa:51:56:9a:b0:b3:66:80:66:84:c0:28:52: 83:92:bd:d1:24:0c:64:b1:c8:6f:d9:00:73:cb:f3:0f:c1:fb: a6:cb:e2:a0:91:48:14:9e:5c:1d:bd:18:35:86:1f:81:00:38: 81:37:f8:20:8e:38:af:f3:5e:9e:03:56:f2:a7:26:3c:95:25: 09:7a:1a:5a:7b:39:36:96:f7:0a:16:a3:03:d1:bc:53:9a:e4: 23:e7:d0:5c:fb:5a:97:d7:e9:0c:b5:fb:b6:be:7c:46:86:e8: aa:b0:55:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUxMTA0MTQ0MDQwWhcNMjUxMTExMTQ0MDQwWjAYMRYwFAYD VQQDEw02OTBhMTA2OC1jZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4tBtDmG5/Yo+J8VxUgqzIDiobB0SEaN1Q7dUsNPp3azMBNE4R78pgJIfER2 4Ga/KGzCVecC4hQ8448b6g9bIk6OIalkNrkcw2R3vYaKGk+IaLSee43ohjRmo1Tb +6cjIQUNFU5jW1uNSBIsePBYDHwAsxagxO/Av2JZKXXg4mVvtIhZGzjjiX6yvz6k TxvsA5WXk+gbmcQ1k6P/WqV8W2zHpCM7x677Fbu1Rb4TqProRthuuYZr99ONKnHo orvzl5B+aIVJyekF/2+NRYH7nyDYr41sGX+CE6XS1lePQt1+0oxC5YfV/v6Qw3/3 Y30vgZSK98Ns6JfG+fcuMeYYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIumhs6J mO4fOpzp9qAuwc/VWr/8MB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvIjGqKPxwitxDsuDsJEczRRHpoxw+23onYQwhA5kRkssKoqTUYAEa R3YbQTQDrGYBr3ddQ0gt+7QqeEn9zShAmojbekxSrqpQMR7htyfF8CXWViMfNF9n QuHYTOkijFDwxPKjmjYjLilbnIJgWjR6BXRA/pzVQfFnnPkP1SlvIs9hWpCYnTRa u+yxLg8hZZJn+3gZnapRVpqws2aAZoTAKFKDkr3RJAxkschv2QBzy/MPwfumy+Kg kUgUnlwdvRg1hh+BADiBN/ggjjiv816eA1bypyY8lSUJehpaezk2lvcKFqMD0bxT muQj59Bc+1qX1+kMtfu2vnxGhuiqsFUs -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:24 2025 by rpki-client