$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: oWGni7Woqp7CYEPrcoZJp3wd3QBMrgsQEEs+mhnFux0= Subject key identifier: FB:9B:1E:D3:AF:A9:14:37:89:69:28:07:85:35:53:AC:F8:BE:F8:41 Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 0483 Signing time: Mon 03 Nov 2025 00:04:18 +0000 Manifest this update: Mon 03 Nov 2025 00:04:17 +0000 Manifest next update: Mon 10 Nov 2025 00:04:17 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: 6F302x0DzL8bw6w3tQiV4AtINNpY7nX5r+mlftumFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Nov 3 00:04:17 2025 GMT Not After : Nov 10 00:04:17 2025 GMT Subject: CN=6907f181-ebe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:50:c9:85:96:d1:d5:a2:f6:38:da:99:08: a8:83:74:86:77:63:d8:21:f5:1f:fe:32:94:4b:2e: 18:33:8e:df:ed:7f:96:6b:3c:e9:df:69:4c:49:a4: b6:95:40:e0:ad:33:36:2f:3a:23:89:64:77:03:f3: 83:4b:ea:22:5a:f4:bb:73:0e:10:06:93:6b:96:76: f9:5d:c7:33:2e:9d:97:4a:ed:f4:b8:ba:09:5d:06: 40:e3:ab:ec:2e:62:dc:63:22:b3:f1:36:eb:eb:d7: 76:a1:27:f4:c5:d4:fd:1e:f2:d1:21:0e:e7:dc:d9: af:4c:ce:8d:e3:1f:f5:7f:7d:2c:c5:cd:d9:3f:50: ec:2a:b9:49:48:f7:8e:1d:06:6d:73:6f:cc:39:e4: 15:9f:f9:be:9a:0c:f9:e9:9b:7f:30:98:33:88:e2: e8:f7:f8:42:c4:66:c2:c1:89:15:c4:a9:73:ec:64: 17:b3:b5:ff:c1:6a:40:04:dd:05:54:46:89:3a:55: 94:d6:77:cc:8d:d3:03:39:30:68:af:7c:49:ed:1c: a2:c7:89:ce:da:47:c3:32:59:3c:27:50:d9:71:e9: 46:20:28:79:fa:32:6d:71:11:5c:38:be:ad:88:62: 54:33:b6:a4:a3:41:c5:15:4f:1b:b1:28:07:ab:cf: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9B:1E:D3:AF:A9:14:37:89:69:28:07:85:35:53:AC:F8:BE:F8:41 X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:23:40:12:0b:6c:f7:58:d8:d6:2f:28:9c:43:03:2b:65:0e: 33:b4:78:01:83:c6:97:25:21:8c:5b:61:0f:22:ab:63:f9:59: 6d:80:69:57:61:02:e5:5f:d8:d6:38:a0:2f:dc:ec:b5:6c:cf: fc:84:10:bb:67:28:ee:56:96:cc:81:d3:16:29:92:02:e5:70: 14:aa:03:26:f0:41:35:ab:6e:bc:fb:29:62:01:f6:8d:b1:ab: 7b:3a:27:6e:48:22:8d:09:53:12:19:af:7b:72:17:62:4d:b2: ad:40:87:d9:09:af:d3:23:65:70:61:b3:3b:75:1e:27:2b:7a: ef:36:67:cf:68:54:88:d1:52:76:da:99:88:79:11:25:7b:f7: 84:b4:65:e2:4b:c7:20:65:05:7a:eb:c5:c6:65:23:f2:46:51: 70:fa:d8:78:9e:90:03:29:3e:37:0e:c0:25:8e:fe:e6:22:08: 51:ed:48:72:55:f5:87:51:65:45:b5:d8:40:38:d9:df:aa:3c: be:c8:e9:8b:1e:87:da:0f:83:2e:0e:cf:92:82:c0:72:75:77: cf:ca:33:3d:42:e7:5a:c2:2b:d7:c8:e7:51:4c:1e:7f:56:05: f5:67:9f:a5:7d:ae:fb:af:53:f9:64:a3:aa:8b:5c:a2:3e:3c: 68:e3:db:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjUxMTAzMDAwNDE3WhcNMjUxMTEwMDAwNDE3WjAYMRYwFAYD VQQDEw02OTA3ZjE4MS1lYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2RQyYWW0dWi9jjamQiog3SGd2PYIfUf/jKUSy4YM47f7X+Wazzp32lMSaS2 lUDgrTM2LzojiWR3A/ODS+oiWvS7cw4QBpNrlnb5XcczLp2XSu30uLoJXQZA46vs LmLcYyKz8Tbr69d2oSf0xdT9HvLRIQ7n3NmvTM6N4x/1f30sxc3ZP1DsKrlJSPeO HQZtc2/MOeQVn/m+mgz56Zt/MJgziOLo9/hCxGbCwYkVxKlz7GQXs7X/wWpABN0F VEaJOlWU1nfMjdMDOTBor3xJ7Ryix4nO2kfDMlk8J1DZcelGICh5+jJtcRFcOL6t iGJUM7ako0HFFU8bsSgHq89GgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPubHtOv qRQ3iWkoB4U1U6z4vvhBMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATI0ASC2z3WNjWLyicQwMrZQ4ztHgBg8aXJSGMW2EPIqtj+VltgGlX YQLlX9jWOKAv3Oy1bM/8hBC7ZyjuVpbMgdMWKZIC5XAUqgMm8EE1q268+yliAfaN sat7OiduSCKNCVMSGa97chdiTbKtQIfZCa/TI2VwYbM7dR4nK3rvNmfPaFSI0VJ2 2pmIeREle/eEtGXiS8cgZQV668XGZSPyRlFw+th4npADKT43DsAljv7mIghR7Uhy VfWHUWVFtdhAONnfqjy+yOmLHofaD4MuDs+SgsBydXfPyjM9QudawivXyOdRTB5/ VgX1Z5+lfa77r1P5ZKOqi1yiPjxo49tB -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:09 2025 by rpki-client