$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: NjA0qHhBu0QwqEVi5vVKhTSumn3Wq5Bb+34zBRM6+Pk= Subject key identifier: 8C:82:93:5F:68:ED:BA:BD:DE:A1:DD:FA:62:33:5C:14:B2:3C:FF:4B Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 03DA Signing time: Mon 03 Nov 2025 00:34:27 +0000 Manifest this update: Mon 03 Nov 2025 00:34:26 +0000 Manifest next update: Mon 10 Nov 2025 00:34:26 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: FHSdlfV5/iHA2MSHwtDdMgkxqt12s8kERL1qnIL7fwQ=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 8U+UsiCXDKifnoegufsPJKGalX6CUXoFX96X70pYMYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Nov 3 00:34:26 2025 GMT Not After : Nov 10 00:34:26 2025 GMT Subject: CN=6907f893-96a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:38:7a:03:fd:88:56:a5:ba:b9:df:7c:9e: 8d:7d:54:4d:6d:5b:4a:3a:83:89:24:73:2e:b2:fe: f4:53:50:c8:d8:82:29:2d:73:a1:aa:ac:52:86:6c: a5:9b:9e:0b:ad:04:db:36:bc:76:3d:d4:9b:4c:b8: d6:7c:4d:9a:3b:ba:d7:85:c8:8d:a5:a5:f5:fb:11: 40:13:e9:5f:71:37:b5:ba:fc:f2:4c:a3:12:1f:f9: 34:f9:4e:92:0f:df:f9:fe:f3:d0:51:2e:d4:6d:bc: 81:87:d2:63:98:e7:cf:95:44:8b:3e:b8:51:b4:cf: af:2f:e9:48:81:a1:f8:74:ec:86:4a:76:8c:1f:5f: fb:b7:10:22:48:91:f7:7f:ed:c6:2f:93:e3:81:7b: 76:02:41:f1:f3:90:cc:ed:5c:19:92:2f:e8:e3:be: 25:6b:7a:59:5e:af:d4:a0:a9:2f:1c:0d:07:61:4e: 04:fa:2f:e3:b4:2f:e7:79:23:3f:db:d4:b3:a3:a7: 83:d9:44:85:4b:b5:da:70:32:d2:17:04:6c:f3:45: 71:da:b9:0e:2c:5e:de:66:fb:88:ed:a9:a5:a9:b1: ea:df:e0:a5:a3:bb:15:80:f7:ba:ab:60:8c:6a:4f: 64:67:35:4f:89:a0:6c:08:e5:25:52:54:21:e0:89: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:93:5F:68:ED:BA:BD:DE:A1:DD:FA:62:33:5C:14:B2:3C:FF:4B X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:91:d2:8d:2d:fb:41:3f:d9:28:0d:48:cf:c2:72:98:57:61: 13:cf:6c:36:70:f0:bc:c1:60:b6:42:94:a2:48:a4:c2:72:35: e6:c0:61:54:a5:71:b8:66:78:c7:0e:d6:d8:4c:66:0d:cf:64: 8b:1b:2b:51:8b:e5:1d:9a:0c:cf:a0:58:de:9f:d8:e9:ee:2a: 89:24:fb:a7:ec:83:d0:75:ca:1c:53:0d:49:f2:e2:06:9a:04: 16:1c:3b:15:32:4a:21:df:09:a3:ec:9c:41:73:3a:9f:ec:83: a1:a9:d6:e7:f3:8c:64:16:3e:83:a7:ab:f0:d9:b8:1d:0a:7a: d9:68:87:a2:18:fd:1c:1c:01:3b:44:a7:92:d8:54:39:23:20: 32:ec:d4:7f:b7:62:6e:81:2e:db:33:d7:ad:0f:83:b2:2b:4e: 43:cd:7d:c4:0d:aa:ec:e3:af:98:29:28:d8:b0:19:05:b7:ed: 2a:67:1d:85:cb:50:6a:52:86:99:0e:5c:4d:bb:25:75:64:16: c2:ea:02:19:25:a0:b0:8e:1b:45:d2:aa:c3:60:25:27:5b:2f: d9:07:cd:f7:ee:f2:66:23:81:70:e6:bf:32:65:c3:10:9c:09: 3d:d5:e7:ea:8f:36:35:4d:36:91:fc:02:38:1d:3a:ac:8c:be: de:91:c7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjUxMTAzMDAzNDI2WhcNMjUxMTEwMDAzNDI2WjAYMRYwFAYD VQQDEw02OTA3Zjg5My05NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvQ4egP9iFalurnffJ6NfVRNbVtKOoOJJHMusv70U1DI2IIpLXOhqqxShmyl m54LrQTbNrx2PdSbTLjWfE2aO7rXhciNpaX1+xFAE+lfcTe1uvzyTKMSH/k0+U6S D9/5/vPQUS7UbbyBh9JjmOfPlUSLPrhRtM+vL+lIgaH4dOyGSnaMH1/7txAiSJH3 f+3GL5PjgXt2AkHx85DM7VwZki/o474la3pZXq/UoKkvHA0HYU4E+i/jtC/neSM/ 29Szo6eD2USFS7XacDLSFwRs80Vx2rkOLF7eZvuI7amlqbHq3+Clo7sVgPe6q2CM ak9kZzVPiaBsCOUlUlQh4InMjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyCk19o 7bq93qHd+mIzXBSyPP9LMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLkdKNLftBP9koDUjPwnKYV2ETz2w2cPC8wWC2QpSiSKTCcjXmwGFU pXG4ZnjHDtbYTGYNz2SLGytRi+UdmgzPoFjen9jp7iqJJPun7IPQdcocUw1J8uIG mgQWHDsVMkoh3wmj7JxBczqf7IOhqdbn84xkFj6Dp6vw2bgdCnrZaIeiGP0cHAE7 RKeS2FQ5IyAy7NR/t2JugS7bM9etD4OyK05DzX3EDars46+YKSjYsBkFt+0qZx2F y1BqUoaZDlxNuyV1ZBbC6gIZJaCwjhtF0qrDYCUnWy/ZB8337vJmI4Fw5r8yZcMQ nAk91efqjzY1TTaR/AI4HTqsjL7ekcfa -----END CERTIFICATE-----Generated at Tue Nov 4 07:28:10 2025 by rpki-client