$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft File: kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json) Hash identifier: 5xC/6ThUpol8jxwJZ++yvERR9ksPciWr0DIQ37Ahh9M= Subject key identifier: 59:7D:E0:6D:63:EB:CD:47:38:B2:C3:97:1B:E3:85:6B:16:71:C9:FD Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74 Certificate issuer: /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft Manifest number: 21 Signing time: Mon 03 Nov 2025 07:53:15 +0000 Manifest this update: Mon 03 Nov 2025 07:53:14 +0000 Manifest next update: Mon 10 Nov 2025 07:53:14 +0000 Files and hashes: 1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: P54WabCgZnVBG5pLrKZ+SHKBezOWGVxThlrapaq9QNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374 Validity Not Before: Nov 3 07:53:14 2025 GMT Not After : Nov 10 07:53:14 2025 GMT Subject: CN=69085f6a-b0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:76:66:3b:15:dd:d5:5a:c4:64:ce:05:53:be: bb:bd:03:37:96:50:1c:7d:13:9e:65:50:a8:6c:d8: a0:51:78:af:a4:8a:6a:b0:ab:3f:f0:73:27:4c:31: f3:1e:da:d3:27:a9:cf:70:c4:4b:5e:56:e7:b0:9f: 46:d8:c7:97:98:8a:ef:1a:bb:6c:41:34:4c:93:5d: 15:fb:fb:4e:2d:71:c0:b0:65:6a:3d:34:92:45:f1: de:53:6d:61:64:bf:ae:cf:64:27:94:2a:cb:af:d9: 96:44:49:95:89:c5:16:c2:0f:0a:46:37:5f:f1:0a: 09:b5:02:bb:20:a7:bf:04:05:15:31:89:9f:07:64: ff:da:20:df:21:3a:44:61:2b:a8:ad:52:91:4f:cb: 58:f9:82:cf:3d:7d:d2:5f:e9:8a:3c:f6:2e:d9:1c: 59:cd:b5:ce:cf:4e:d4:11:05:c3:5e:6a:48:88:07: 6a:a5:7f:49:b3:bb:9a:00:6d:b3:4e:ad:f8:4d:06: 52:1b:1d:81:3f:c0:d8:90:b2:2d:af:7f:ae:fe:ff: ad:a3:f9:05:18:e6:34:5f:ac:62:ab:c7:19:1a:6a: 8d:7b:e8:6d:60:31:ea:01:c8:cf:dc:d4:af:40:15: e9:b2:3e:25:24:d2:c5:cf:6a:b1:c8:20:b7:3d:cb: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7D:E0:6D:63:EB:CD:47:38:B2:C3:97:1B:E3:85:6B:16:71:C9:FD X509v3 Authority Key Identifier: keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:87:c0:70:e1:00:7d:f3:87:e7:eb:3f:43:3f:95:e8:b0:74: 43:58:12:8c:17:ac:a2:40:1d:e0:3a:03:be:18:1a:ab:00:85: 3f:49:c2:52:22:d9:61:23:f7:fa:bc:72:94:1b:f9:5a:0f:10: da:e0:6f:53:c9:7b:70:28:5f:da:f5:bb:ee:ed:17:00:53:c6: 77:66:f2:8e:b5:4d:b0:20:0a:d2:76:bc:fa:b0:4e:1c:4d:0e: 2a:c2:b9:5f:97:b2:32:64:22:c3:1c:f0:c8:08:23:f2:f7:0b: 3a:94:0d:1c:3d:bd:ed:60:11:b7:8f:e2:e3:33:1b:c8:4e:30: 11:f5:34:c4:07:e2:ac:94:2a:36:97:7d:ea:84:26:9c:7f:e9: 33:42:b6:66:89:0c:06:4e:2a:c7:18:71:59:fd:20:94:fb:37: 9c:b0:87:39:ee:7c:cd:d6:d3:a4:dd:c8:08:ef:14:ee:bf:2c: 40:3f:27:65:d3:8d:ff:a5:b6:fc:78:a1:54:08:d6:13:a1:38: e2:81:2c:c6:2c:35:ba:90:38:42:90:1b:4e:2a:84:33:ba:76: 21:fa:b0:1f:ed:8b:21:ff:27:14:40:f9:32:2c:ee:f7:16:ad: 97:24:ab:c0:72:04:b0:fd:9e:62:83:fc:bb:b0:03:db:15:8e: 8b:b4:1b:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDM4RDExMC8GA1UEBRMoOTAyQkE1QTkyNTE4NjFEQTNFOEUyRkRCMUUxMjY0Q0NE OEIwNTM3NDAeFw0yNTExMDMwNzUzMTRaFw0yNTExMTAwNzUzMTRaMBgxFjAUBgNV BAMTDTY5MDg1ZjZhLWIwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDydmY7Fd3VWsRkzgVTvru9AzeWUBx9E55lUKhs2KBReK+kimqwqz/wcydMMfMe 2tMnqc9wxEteVuewn0bYx5eYiu8au2xBNEyTXRX7+04tccCwZWo9NJJF8d5TbWFk v67PZCeUKsuv2ZZESZWJxRbCDwpGN1/xCgm1Arsgp78EBRUxiZ8HZP/aIN8hOkRh K6itUpFPy1j5gs89fdJf6Yo89i7ZHFnNtc7PTtQRBcNeakiIB2qlf0mzu5oAbbNO rfhNBlIbHYE/wNiQsi2vf67+/62j+QUY5jRfrGKrxxkaao176G1gMeoByM/c1K9A FemyPiUk0sXParHIILc9yzOzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWX3gbWPr zUc4ssOXG+OFaxZxyf0wHwYDVR0jBBgwFoAUkCulqSUYYdo+ji/bHhJkzNiwU3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzhELzU1RjAxMTRFOTlE ODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRvLWppX2JIaEprek5pd1Uz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0N1bHFTVVlZZG8tamlfYkhoSmt6Tml3VTNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzhELzU1RjAxMTRFOTlEODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRv LWppX2JIaEprek5pd1UzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGHwHDhAH3zh+frP0M/leiwdENYEowXrKJAHeA6A74YGqsAhT9JwlIi 2WEj9/q8cpQb+VoPENrgb1PJe3AoX9r1u+7tFwBTxndm8o61TbAgCtJ2vPqwThxN DirCuV+XsjJkIsMc8MgII/L3CzqUDRw9ve1gEbeP4uMzG8hOMBH1NMQH4qyUKjaX feqEJpx/6TNCtmaJDAZOKscYcVn9IJT7N5ywhznufM3W06TdyAjvFO6/LEA/J2XT jf+ltvx4oVQI1hOhOOKBLMYsNbqQOEKQG04qhDO6diH6sB/tiyH/JxRA+TIs7vcW rZckq8ByBLD9nmKD/LuwA9sVjou0G2Y= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:46 2025 by rpki-client