$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: QkUqMOYX4mLFFQ+JmPILef9Bh0Ea447Twc8Mb5c7tUg= Subject key identifier: 15:26:C6:48:DE:C8:34:41:E2:06:D1:86:57:89:1C:A5:56:AA:DA:E9 Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 11D3 Signing time: Sun 02 Nov 2025 19:31:43 +0000 Manifest this update: Sun 02 Nov 2025 19:31:42 +0000 Manifest next update: Sun 09 Nov 2025 19:31:42 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: C0SzB9xWi6eLzOHbGm/8oOsEBVZ8tC8zc9K9mA48CZI=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: 1F9y90e8vUgBxzA3sbZHcMYz/rShgnfZZhG92OSZ8ag=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: cIWeixytaoi++ThMWrhRLi+n26qq7i+MXohCT/B96Pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Nov 2 19:31:42 2025 GMT Not After : Nov 9 19:31:42 2025 GMT Subject: CN=6907b19f-5ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:87:13:3d:3a:db:c9:4d:92:45:c7:a6:5b:4b: 54:76:2a:c9:ae:d6:e7:e4:4e:12:70:7e:bb:8c:66: 04:64:7a:9b:f9:64:30:f5:af:96:ef:7b:eb:7b:cf: 1c:d4:6a:9e:24:a4:85:6f:a7:76:37:b6:85:e5:ef: 4f:01:04:6a:55:d2:2e:77:a8:72:c1:5d:8e:2f:1a: f5:93:f3:c5:7d:57:75:90:82:0b:64:65:3e:e7:7d: 3c:b6:3d:f2:5b:8e:0e:3d:ca:44:ec:9a:46:f8:27: dd:e8:fa:01:0e:71:04:ca:19:f3:9d:38:70:19:e4: 46:f2:ff:58:5c:fe:8d:d6:5e:17:67:6b:c8:be:d7: 55:3f:8d:59:3c:6c:95:a7:e5:16:f8:84:2b:4a:af: 13:b4:32:f5:60:f8:6b:9c:6a:57:46:cb:9b:de:d6: 16:e6:fb:5f:f4:81:9b:2e:1f:2f:c5:74:a8:3b:e9: a9:88:f7:9b:d5:63:71:3f:e1:ea:8c:0d:84:66:a9: 21:66:1d:18:2c:a8:74:4a:64:cd:74:17:64:91:38: 8f:3c:9e:17:b9:d5:a9:0c:0a:08:5d:d8:2e:c8:51: ba:c2:d6:bb:0d:e2:76:b0:ee:c6:43:a4:12:c5:a9: fb:7a:e1:71:b4:3a:db:f5:a4:48:c4:b8:60:c3:58: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:26:C6:48:DE:C8:34:41:E2:06:D1:86:57:89:1C:A5:56:AA:DA:E9 X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3a:60:0d:f7:e7:c3:1e:14:da:10:f5:00:7b:85:3c:b3:df: 4f:a4:9a:08:c6:13:20:c8:5f:09:c6:0f:c7:b4:4e:12:85:e8: ef:de:01:38:67:34:17:70:5e:82:99:5f:51:e2:f8:18:99:ad: 2a:3d:b2:cc:87:f1:be:b3:f5:57:d6:4e:96:1b:ed:9e:5f:77: 55:a6:c3:89:33:fc:25:2c:67:9d:51:d1:cc:e7:f3:f1:e7:94: 2d:85:63:c2:ed:88:08:95:f0:f9:81:11:53:b0:e9:bc:e0:a0: d4:0a:48:ca:37:a4:5a:87:49:48:76:00:3b:22:b0:c7:d0:32: 5e:35:5c:ce:48:76:49:7b:ab:b5:26:a2:2c:4b:2c:ac:a0:15: 51:6c:4c:d6:fc:db:24:08:88:1a:32:30:a6:cb:de:41:dd:8d: ea:0f:5d:7f:e9:a8:51:31:aa:ca:84:65:09:6c:56:41:df:b6: ab:0e:a5:58:62:52:5a:a7:fc:8c:cf:8f:22:1f:50:14:63:dc: 2c:00:d7:aa:23:79:9a:3e:46:5b:d8:06:bd:19:6f:d3:88:98: 53:80:1f:57:bb:5c:65:34:27:18:a5:79:b8:d7:5b:b9:61:c8: dd:97:e6:b5:22:63:ad:64:83:dd:73:3a:48:fd:04:81:44:45: 75:80:6b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjUxMTAyMTkzMTQyWhcNMjUxMTA5MTkzMTQyWjAYMRYwFAYD VQQDEw02OTA3YjE5Zi01ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ocTPTrbyU2SRcemW0tUdirJrtbn5E4ScH67jGYEZHqb+WQw9a+W73vre88c 1GqeJKSFb6d2N7aF5e9PAQRqVdIud6hywV2OLxr1k/PFfVd1kIILZGU+5308tj3y W44OPcpE7JpG+Cfd6PoBDnEEyhnznThwGeRG8v9YXP6N1l4XZ2vIvtdVP41ZPGyV p+UW+IQrSq8TtDL1YPhrnGpXRsub3tYW5vtf9IGbLh8vxXSoO+mpiPeb1WNxP+Hq jA2EZqkhZh0YLKh0SmTNdBdkkTiPPJ4XudWpDAoIXdguyFG6wta7DeJ2sO7GQ6QS xan7euFxtDrb9aRIxLhgw1iyeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUmxkje yDRB4gbRhleJHKVWqtrpMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOmAN9+fDHhTaEPUAe4U8s99PpJoIxhMgyF8Jxg/HtE4Shejv3gE4 ZzQXcF6CmV9R4vgYma0qPbLMh/G+s/VX1k6WG+2eX3dVpsOJM/wlLGedUdHM5/Px 55QthWPC7YgIlfD5gRFTsOm84KDUCkjKN6Rah0lIdgA7IrDH0DJeNVzOSHZJe6u1 JqIsSyysoBVRbEzW/NskCIgaMjCmy95B3Y3qD11/6ahRMarKhGUJbFZB37arDqVY YlJap/yMz48iH1AUY9wsANeqI3maPkZb2Aa9GW/TiJhTgB9Xu1xlNCcYpXm411u5 Ycjdl+a1ImOtZIPdczpI/QSBREV1gGvL -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:16 2025 by rpki-client