$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json) Hash identifier: AYaY1VZ+/x2aDDjeril3spwK+rELVwkHRBecOCGWtfQ= Subject key identifier: 75:B2:1A:43:51:5B:7C:16:91:3B:08:4E:9B:AE:75:8A:95:2F:C5:A7 Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 15:18:52 +0000 Manifest this update: Sun 02 Nov 2025 15:18:52 +0000 Manifest next update: Sun 09 Nov 2025 15:18:52 +0000 Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: n20eWaYuW0mtQ/wkWJrnUIgtyOpDBAHEOXeUuyf6VbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082 Validity Not Before: Nov 2 15:18:52 2025 GMT Not After : Nov 9 15:18:52 2025 GMT Subject: CN=6907765c-5b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:03:18:0d:aa:a6:cb:32:74:70:98:a0:35: 82:8d:41:9b:fa:48:4e:ee:f0:77:4b:59:f8:ea:f5: 81:f5:9c:08:f0:64:21:8c:c3:5b:92:2a:39:2f:f4: 44:9a:3f:67:13:88:43:16:3c:84:7a:5a:26:50:0a: 97:0a:bd:42:63:7c:7d:85:b6:d2:09:1a:15:88:6c: b7:38:12:98:b8:79:93:68:d1:74:42:be:4c:6b:ba: b7:11:c9:37:e3:8c:94:39:2b:34:b8:1c:d6:b3:1c: 69:47:46:89:4c:71:3d:77:36:2b:bc:4b:06:21:a9: 67:fd:c4:40:bf:a0:35:97:d6:0a:cd:3d:55:30:8e: b9:c6:da:9b:14:64:44:79:85:88:44:21:f7:b6:9a: 40:6b:45:5f:74:a9:a0:60:dd:c5:34:d2:f0:8c:b0: d3:2b:ff:24:b3:31:9c:88:f3:88:21:7a:40:dd:5e: 36:0c:48:57:c7:be:9a:ef:85:7f:d9:f4:d3:a7:82: 8d:f1:3e:ec:0b:2b:41:7b:67:06:8a:06:bb:ac:14: ec:56:b8:06:00:1e:06:e6:a0:e3:12:90:94:ff:10: 6c:af:79:5d:01:86:ff:8c:82:92:17:b9:48:cf:b0: 99:3c:da:43:ce:21:b6:91:eb:c4:c6:0b:eb:f7:c1: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B2:1A:43:51:5B:7C:16:91:3B:08:4E:9B:AE:75:8A:95:2F:C5:A7 X509v3 Authority Key Identifier: keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9c:e5:8f:08:d4:bc:87:4f:af:6d:d2:03:d5:83:d1:3a:f3: 9f:3e:a6:13:47:07:64:d2:55:49:50:11:8f:81:42:cb:89:d7: 3a:9d:2a:82:c1:dd:5d:51:d0:56:78:d3:ba:0a:16:38:ec:83: fe:fb:88:92:cb:6d:cb:2b:fc:ec:62:67:a3:0b:f4:f6:86:0a: 5b:bc:9b:73:01:7c:a2:6d:b5:32:4c:69:6f:a7:b9:02:76:f1: 74:a0:b9:f5:10:db:22:da:cb:01:d4:17:6f:9a:c7:36:87:72: de:9e:59:d5:06:5a:f7:3d:d7:c0:61:eb:b6:46:98:f1:df:c1: ca:bc:ec:1b:5b:ec:de:60:a0:5a:be:e5:56:a0:b9:25:2a:a5: a6:3e:a4:e7:51:24:f7:9a:16:81:73:a9:bf:d8:be:bb:c6:29: af:84:26:68:f8:28:3c:4b:44:5c:67:84:dc:3c:95:7e:d7:e2: 46:7d:56:e3:14:ff:52:17:c3:1b:26:f1:6e:6b:f3:92:e7:51: 39:aa:c7:3d:5b:fc:5d:52:2f:65:7d:aa:5c:3a:ea:1d:6a:5e: 39:b7:15:58:bb:d1:38:3f:f2:7b:aa:89:19:4c:fc:1f:29:92: a7:23:38:46:51:bf:f8:c9:cd:47:0c:02:d3:46:12:7a:d5:b8: 97:8c:af:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG NTQwNjEwODIwHhcNMjUxMTAyMTUxODUyWhcNMjUxMTA5MTUxODUyWjAYMRYwFAYD VQQDEw02OTA3NzY1Yy01YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI4DGA2qpssydHCYoDWCjUGb+khO7vB3S1n46vWB9ZwI8GQhjMNbkio5L/RE mj9nE4hDFjyEelomUAqXCr1CY3x9hbbSCRoViGy3OBKYuHmTaNF0Qr5Ma7q3Eck3 44yUOSs0uBzWsxxpR0aJTHE9dzYrvEsGIaln/cRAv6A1l9YKzT1VMI65xtqbFGRE eYWIRCH3tppAa0VfdKmgYN3FNNLwjLDTK/8kszGciPOIIXpA3V42DEhXx76a74V/ 2fTTp4KN8T7sCytBe2cGiga7rBTsVrgGAB4G5qDjEpCU/xBsr3ldAYb/jIKSF7lI z7CZPNpDziG2kevExgvr98EPOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWyGkNR W3wWkTsITpuudYqVL8WnMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKnOWPCNS8h0+vbdID1YPROvOfPqYTRwdk0lVJUBGPgULLidc6nSqC wd1dUdBWeNO6ChY47IP++4iSy23LK/zsYmejC/T2hgpbvJtzAXyibbUyTGlvp7kC dvF0oLn1ENsi2ssB1Bdvmsc2h3LenlnVBlr3PdfAYeu2Rpjx38HKvOwbW+zeYKBa vuVWoLklKqWmPqTnUST3mhaBc6m/2L67ximvhCZo+Cg8S0RcZ4TcPJV+1+JGfVbj FP9SF8MbJvFua/OS51E5qsc9W/xdUi9lfapcOuodal45txVYu9E4P/J7qokZTPwf KZKnIzhGUb/4yc1HDALTRhJ61biXjK+l -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:13 2025 by rpki-client