$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: 4ELcVIg92BrSfIG4WFZLauDJ3riCHdNqordsJYvjaEY= Subject key identifier: E6:74:0B:3F:0B:95:C5:9D:3F:A1:67:D1:05:F1:86:D9:57:20:AB:C5 Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 02A9 Signing time: Mon 03 Nov 2025 01:29:59 +0000 Manifest this update: Mon 03 Nov 2025 01:29:58 +0000 Manifest next update: Mon 10 Nov 2025 01:29:58 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: QbrJtmWfYb6dTz7mmObbiWlA05hAbjZ3u3TvwTZ4Smg=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: wYfrxBgpnREsPiR0qsIaHokVToTMzCIKH0+74g0LVvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: Nov 3 01:29:58 2025 GMT Not After : Nov 10 01:29:58 2025 GMT Subject: CN=69080596-6784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:71:7e:35:62:f8:49:ac:0c:d7:99:9f:94:53: 57:aa:36:35:18:61:0b:d5:6d:de:f3:47:fb:3e:dc: 4d:70:3d:b3:2e:c9:d8:50:2c:26:3a:e0:26:dc:03: e2:96:3e:cb:1d:b4:bb:e8:f3:3f:1f:74:f9:d0:b0: 03:ac:fc:cc:c1:5f:37:28:07:06:f6:07:9a:f4:4d: 1b:ff:d8:d4:d5:66:ed:16:94:d4:5d:25:a1:09:c6: b9:cc:ee:f5:de:16:d4:95:af:ec:42:80:11:9c:9f: 73:26:cd:2e:0f:2a:e5:69:fa:ba:8f:6b:a3:34:53: c2:ad:a6:9a:53:b8:6e:c1:37:7f:c1:68:5d:94:30: fa:11:54:f4:18:aa:b0:f1:bf:cd:cc:a2:d0:cd:bd: 6b:fa:ac:4b:ae:11:03:b7:9a:2a:67:cb:77:15:9b: 1b:e0:f5:a6:98:dd:d0:53:6e:df:73:3e:a2:10:83: e0:0b:66:12:0a:49:d5:7d:c6:c3:6c:7c:bd:0c:30: e9:9e:c6:51:2d:69:36:25:38:b7:8d:4d:2e:9e:11: d6:f2:2a:fa:00:7e:65:58:db:11:dd:b0:7d:b0:24: e3:cf:12:ba:db:48:9c:d4:51:0e:6b:3d:c4:ea:a2: b8:32:f7:d7:14:42:f2:85:8d:5d:6f:68:0a:c9:41: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:74:0B:3F:0B:95:C5:9D:3F:A1:67:D1:05:F1:86:D9:57:20:AB:C5 X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:23:a3:ac:48:c2:3d:0e:00:01:bb:8d:00:c9:b7:aa:ea:5e: 7b:c1:0c:47:1f:93:62:0b:e2:d5:a3:0e:7e:aa:0e:13:be:3b: 68:8e:01:0a:98:07:e9:74:85:2d:be:19:c5:b6:e1:a5:ca:e4: 19:b4:57:23:13:17:42:32:04:0c:92:94:82:09:e1:26:b7:ff: f9:18:13:31:c1:c8:c8:14:45:38:bf:91:ac:08:ac:1c:21:24: 22:3b:57:24:cf:75:dc:06:86:5a:24:df:8a:00:a4:36:be:ea: 54:ef:9d:60:43:c2:42:38:e3:29:d4:c4:c4:b5:5c:ac:b2:28: b5:70:7e:8f:3c:0b:8b:ca:83:5d:2f:b0:40:77:47:32:aa:34: 0e:51:cf:de:bd:26:3b:15:e9:40:e4:4c:95:0c:40:c8:10:fb: 50:43:88:5c:8c:d4:82:3c:f9:aa:1b:e5:b0:71:92:2a:66:b2: 4d:c9:e1:cb:24:15:62:e1:77:27:05:6a:32:cc:ec:ce:09:fe: 08:6e:00:ed:5d:68:15:c3:91:49:a8:2c:c5:25:8d:ec:70:43: 2c:88:bb:c3:78:fe:ca:f0:62:3f:13:7f:65:03:19:b0:27:d9: 00:b3:37:4d:08:0b:5c:48:db:68:02:8d:4c:cf:32:16:e4:7b: b1:a0:d7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjUxMTAzMDEyOTU4WhcNMjUxMTEwMDEyOTU4WjAYMRYwFAYD VQQDEw02OTA4MDU5Ni02Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nF+NWL4SawM15mflFNXqjY1GGEL1W3e80f7PtxNcD2zLsnYUCwmOuAm3APi lj7LHbS76PM/H3T50LADrPzMwV83KAcG9gea9E0b/9jU1WbtFpTUXSWhCca5zO71 3hbUla/sQoARnJ9zJs0uDyrlafq6j2ujNFPCraaaU7huwTd/wWhdlDD6EVT0GKqw 8b/NzKLQzb1r+qxLrhEDt5oqZ8t3FZsb4PWmmN3QU27fcz6iEIPgC2YSCknVfcbD bHy9DDDpnsZRLWk2JTi3jU0unhHW8ir6AH5lWNsR3bB9sCTjzxK620ic1FEOaz3E 6qK4MvfXFELyhY1db2gKyUF35wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ0Cz8L lcWdP6Fn0QXxhtlXIKvFMB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTI6OsSMI9DgABu40Aybeq6l57wQxHH5NiC+LVow5+qg4TvjtojgEK mAfpdIUtvhnFtuGlyuQZtFcjExdCMgQMkpSCCeEmt//5GBMxwcjIFEU4v5GsCKwc ISQiO1ckz3XcBoZaJN+KAKQ2vupU751gQ8JCOOMp1MTEtVyssii1cH6PPAuLyoNd L7BAd0cyqjQOUc/evSY7FelA5EyVDEDIEPtQQ4hcjNSCPPmqG+WwcZIqZrJNyeHL JBVi4XcnBWoyzOzOCf4IbgDtXWgVw5FJqCzFJY3scEMsiLvDeP7K8GI/E39lAxmw J9kAszdNCAtcSNtoAo1MzzIW5HuxoNc2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:37 2025 by rpki-client