$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: Il405FwaVWoLOIh37H8Fr1NOdCqmg8j/ibbG5AT/+0Q= Subject key identifier: C7:0A:C9:D8:E8:6F:A2:C0:62:1F:F8:B7:A4:8B:7D:FD:C9:2E:72:2F Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 013C Signing time: Wed 05 Nov 2025 04:34:28 +0000 Manifest this update: Wed 05 Nov 2025 04:34:27 +0000 Manifest next update: Wed 12 Nov 2025 04:34:27 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: I/2dT5LfFlRNKDsAosp6yLPGTDq3EJc3KBBgn3bfkX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Nov 5 04:34:27 2025 GMT Not After : Nov 12 04:34:27 2025 GMT Subject: CN=690ad3d4-ce35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:a6:c2:87:30:17:06:8a:ca:5f:c2:03:da: 18:3a:64:e6:3a:0a:43:3a:6d:bb:25:39:6e:6b:86: 0f:99:55:80:ee:4d:c6:fe:62:45:a4:ba:11:65:d5: e7:0a:48:38:3a:dd:96:b3:14:d0:46:c9:1f:60:84: 0f:9b:db:94:9a:40:08:9a:fa:03:6f:f1:62:0f:6e: 0f:f0:59:95:29:f2:04:06:94:a2:e7:45:2f:31:92: d2:23:3c:86:a4:c7:c3:54:d7:e9:79:ea:71:8f:91: b6:44:5f:e4:ea:f3:be:32:17:22:da:0f:4c:d9:8c: 26:56:68:62:4c:7c:5e:23:66:82:5c:b0:c8:87:2b: 4f:9b:38:63:ad:6f:a0:05:51:84:46:85:ba:5b:d3: 5d:73:38:9e:a2:41:f9:98:3b:ed:62:99:d3:47:db: 29:89:da:03:e5:36:93:df:bf:d3:ee:29:24:40:34: f2:68:a4:56:af:b0:42:8a:9b:21:e8:86:a4:a5:7c: 33:2b:68:ab:5a:26:12:69:fb:96:0a:0d:d5:1a:9e: ab:e6:c6:f8:d0:14:63:3c:c0:2e:b8:b9:d3:4c:fa: 9c:c8:83:1f:27:46:5b:bc:36:ee:a0:6f:0d:94:fc: 21:e6:17:9e:94:d8:0a:47:59:fc:8f:e4:6b:85:d8: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:C9:D8:E8:6F:A2:C0:62:1F:F8:B7:A4:8B:7D:FD:C9:2E:72:2F X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:af:73:e9:cc:f8:4e:ee:71:91:69:79:cd:db:87:3a:b9:25: 1d:78:26:64:21:10:a3:4e:02:1d:8c:f2:26:83:66:6c:b0:4c: 79:70:de:3a:92:f8:3b:9d:03:1c:2c:f0:d4:7b:65:4e:63:54: 22:14:26:1b:43:7b:0d:c1:e0:9e:43:4f:70:33:b4:2b:38:13: fe:85:9b:a5:31:ff:00:16:5d:c5:0c:f2:3c:00:b6:e5:2e:fb: fc:9f:ed:9c:b1:ce:b1:fa:76:6d:ad:2b:b0:f1:bb:f4:2e:23: 70:b6:37:10:0e:a8:6b:ae:2b:ca:91:d2:c4:8c:05:12:f5:05: 91:9e:50:6d:6f:93:5d:a8:30:57:c5:9e:2a:25:5e:1d:06:f1: 24:21:92:ec:68:b4:ee:48:b6:6b:3f:96:f3:ae:dc:c8:05:77: 19:50:bf:f0:9e:e8:44:28:79:da:f7:d2:84:91:63:4b:59:50: 81:2e:5e:be:e4:8f:9a:6c:d3:a9:df:59:34:c6:ff:cd:2e:1d: b1:fc:bd:a6:1f:6e:50:5d:54:18:cd:b5:f4:52:ff:ab:3b:3e: b1:5f:f1:88:80:d9:76:63:e8:03:4d:12:e4:c5:2e:14:a0:41: d7:b0:22:03:ca:d0:a4:d2:6b:89:95:36:86:ca:f4:a2:62:d0: 06:41:59:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUxMTA1MDQzNDI3WhcNMjUxMTEyMDQzNDI3WjAYMRYwFAYD VQQDEw02OTBhZDNkNC1jZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43KmwocwFwaKyl/CA9oYOmTmOgpDOm27JTlua4YPmVWA7k3G/mJFpLoRZdXn Ckg4Ot2WsxTQRskfYIQPm9uUmkAImvoDb/FiD24P8FmVKfIEBpSi50UvMZLSIzyG pMfDVNfpeepxj5G2RF/k6vO+Mhci2g9M2YwmVmhiTHxeI2aCXLDIhytPmzhjrW+g BVGERoW6W9NdczieokH5mDvtYpnTR9spidoD5TaT37/T7ikkQDTyaKRWr7BCipsh 6IakpXwzK2irWiYSafuWCg3VGp6r5sb40BRjPMAuuLnTTPqcyIMfJ0ZbvDbuoG8N lPwh5heelNgKR1n8j+RrhdiWJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcKydjo b6LAYh/4t6SLff3JLnIvMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDr3PpzPhO7nGRaXnN24c6uSUdeCZkIRCjTgIdjPImg2ZssEx5cN46 kvg7nQMcLPDUe2VOY1QiFCYbQ3sNweCeQ09wM7QrOBP+hZulMf8AFl3FDPI8ALbl Lvv8n+2csc6x+nZtrSuw8bv0LiNwtjcQDqhrrivKkdLEjAUS9QWRnlBtb5NdqDBX xZ4qJV4dBvEkIZLsaLTuSLZrP5bzrtzIBXcZUL/wnuhEKHna99KEkWNLWVCBLl6+ 5I+abNOp31k0xv/NLh2x/L2mH25QXVQYzbX0Uv+rOz6xX/GIgNl2Y+gDTRLkxS4U oEHXsCIDytCk0muJlTaGyvSiYtAGQVkz -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:28 2025 by rpki-client