$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: FAAiJwpdoaEM6SnFYeixyKzV+2REcDT89YSGU9rQInY= Subject key identifier: 89:B9:65:87:29:73:A3:3E:B1:A9:1B:13:9D:B3:12:86:76:04:19:F1 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 018D Signing time: Wed 29 Oct 2025 03:14:55 +0000 Manifest this update: Wed 29 Oct 2025 03:14:55 +0000 Manifest next update: Wed 05 Nov 2025 03:14:54 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: gJTUp/q1BYCwFl0E8cC+g96OExlEYqUiydgE1jpPtDk=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: BXgvpIKBLGyFXlTbrcn5D97Cd/AVN/R0856bn7qg3E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Oct 29 03:14:55 2025 GMT Not After : Nov 5 03:14:54 2025 GMT Subject: CN=690186af-bded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:28:9a:16:9c:17:43:29:54:23:05:9e:41: 6b:9a:31:ee:af:fc:e8:47:bf:ea:33:71:11:ae:76: d4:95:c4:6b:7d:e3:ee:ec:28:f0:b9:4c:20:65:d5: 4d:6a:0e:3d:68:ac:89:b3:3e:28:90:7c:34:89:e5: a9:b7:c5:c2:69:72:85:5b:79:56:f0:a6:31:d9:59: 69:c0:50:b0:bc:a4:95:1b:d0:c5:b0:db:a0:6c:7a: d2:07:eb:9a:f3:b7:03:73:eb:e6:a7:cc:b9:e3:4e: c6:ad:45:41:83:7b:4f:1b:ea:1c:b3:b4:36:c1:06: 6a:77:b1:01:41:75:26:f9:67:91:59:72:f8:8e:83: bc:8b:d2:56:04:ef:2d:05:4c:aa:8a:2e:d4:62:91: 1c:76:80:1b:b2:b8:53:91:e3:16:f5:21:24:65:23: cd:ec:b7:cc:69:8b:7b:ee:0e:8e:a4:71:2c:28:4e: 9a:e5:3e:d3:b6:ca:1b:7d:4f:46:41:cf:13:e0:63: 24:be:25:5c:d5:cb:6d:b2:b4:84:f8:0e:28:15:87: a5:33:6d:18:2e:65:9a:9d:82:a9:71:97:13:d6:48: 83:7f:5b:3f:b1:2d:73:10:48:b6:a2:37:14:0f:43: 30:2f:dd:25:33:1f:d1:8d:8e:de:90:6d:47:b6:4c: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:65:87:29:73:A3:3E:B1:A9:1B:13:9D:B3:12:86:76:04:19:F1 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9b:49:b9:0a:1c:b1:61:5c:82:8b:fb:71:d1:c1:ff:0d:e3: 06:a4:29:45:1b:e8:06:2a:e7:d4:86:fb:07:03:9b:a6:0a:59: fc:81:be:07:21:ef:5d:d4:62:d0:bc:81:3a:de:58:4f:5e:2d: 66:28:44:de:40:98:e3:49:51:83:cf:e0:4c:c9:56:5f:a0:fa: e7:79:ab:ac:8c:e7:be:6e:39:61:9a:5f:6e:65:61:6e:03:cb: ec:2b:84:68:01:30:fa:c9:8d:72:b8:a0:62:6c:3b:ce:a8:20: 0b:29:b3:1e:a2:1a:f3:32:c1:8f:82:00:c0:c4:d0:3b:b5:11: 1c:15:0f:fc:02:87:76:26:f2:82:4e:54:a9:d5:5b:72:64:fc: 45:bf:c1:b5:fe:1a:60:a4:ab:ea:88:ba:de:be:da:7f:2f:b9: 4e:33:07:0d:8a:ee:d0:09:36:08:73:5f:b4:29:1d:53:e9:1c: b0:6b:98:b5:61:d2:8f:1f:40:e1:5a:2e:99:23:61:0f:36:ed: ae:f9:16:51:86:e1:8e:64:61:fc:34:04:a6:c3:91:bf:32:06: f2:4e:a4:2c:0f:db:c6:bd:36:e9:e4:7b:0c:12:27:c2:30:01: 49:b3:cc:d8:32:dd:e0:b2:0a:56:e1:5f:39:a3:55:f7:7c:18: 1b:81:2c:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjUxMDI5MDMxNDU1WhcNMjUxMTA1MDMxNDU0WjAYMRYwFAYD VQQDEw02OTAxODZhZi1iZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFoomhacF0MpVCMFnkFrmjHur/zoR7/qM3ERrnbUlcRrfePu7CjwuUwgZdVN ag49aKyJsz4okHw0ieWpt8XCaXKFW3lW8KYx2VlpwFCwvKSVG9DFsNugbHrSB+ua 87cDc+vmp8y5407GrUVBg3tPG+ocs7Q2wQZqd7EBQXUm+WeRWXL4joO8i9JWBO8t BUyqii7UYpEcdoAbsrhTkeMW9SEkZSPN7LfMaYt77g6OpHEsKE6a5T7TtsobfU9G Qc8T4GMkviVc1cttsrSE+A4oFYelM20YLmWanYKpcZcT1kiDf1s/sS1zEEi2ojcU D0MwL90lMx/RjY7ekG1Htkwa7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm5ZYcp c6M+sakbE52zEoZ2BBnxMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6m0m5ChyxYVyCi/tx0cH/DeMGpClFG+gGKufUhvsHA5umCln8gb4H Ie9d1GLQvIE63lhPXi1mKETeQJjjSVGDz+BMyVZfoPrneausjOe+bjlhml9uZWFu A8vsK4RoATD6yY1yuKBibDvOqCALKbMeohrzMsGPggDAxNA7tREcFQ/8Aod2JvKC TlSp1VtyZPxFv8G1/hpgpKvqiLrevtp/L7lOMwcNiu7QCTYIc1+0KR1T6Rywa5i1 YdKPH0DhWi6ZI2EPNu2u+RZRhuGOZGH8NASmw5G/MgbyTqQsD9vGvTbp5HsMEifC MAFJs8zYMt3gsgpW4V85o1X3fBgbgSwy -----END CERTIFICATE-----Generated at Wed Oct 29 20:08:58 2025 by rpki-client