$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: t95BmW2uDK4beawzOx9jZqb6Hob/5e2f+cMKAlqUJ58= Subject key identifier: F6:93:37:89:46:B3:38:9B:AA:70:45:B3:FD:3D:C0:18:65:6F:DE:CC Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 1F Signing time: Mon 03 Nov 2025 07:45:34 +0000 Manifest this update: Mon 03 Nov 2025 07:45:33 +0000 Manifest next update: Mon 10 Nov 2025 07:45:33 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: fgOhfkEXcxzaVcj/12ZE/vyG596RE+McyxGUVqYHEV4=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Nov 3 07:45:33 2025 GMT Not After : Nov 10 07:45:33 2025 GMT Subject: CN=69085d9e-538f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:06:25:ab:bf:a6:b9:f5:25:06:96:27:27: a0:c8:c8:99:d6:1b:83:b1:14:f7:ba:77:68:61:d9: b1:57:ce:76:2d:9a:af:2e:f3:73:06:a8:d6:c8:97: 0d:9d:33:fa:25:ed:59:15:eb:28:58:d5:90:26:02: 0d:d4:5d:89:08:73:aa:b8:d5:9f:7e:a1:57:ec:de: 76:ed:31:40:f3:68:0e:0e:ac:b3:ac:ee:ac:ba:ae: 3d:21:71:20:b8:b2:da:82:68:df:ac:df:a2:c9:de: ff:06:ee:6d:73:9d:3c:2c:3c:50:a5:eb:d6:25:62: 9b:44:9a:f9:d1:0a:3f:c7:63:9f:dc:5d:c0:5e:0a: 89:c5:69:78:44:3a:8b:b6:fb:a4:fe:e5:e7:a9:1d: 9d:d7:ba:d0:82:7b:c9:1b:f8:6b:6f:8e:43:fd:86: 90:7f:b7:71:d6:a5:85:2f:55:54:a3:fc:fd:00:5f: a8:8e:37:27:62:2d:18:2c:eb:96:99:4d:10:71:b9: b1:e8:de:6e:1a:4f:29:0a:ee:f0:cf:d2:d9:64:01: 88:4f:e3:30:14:a5:b4:57:9a:b9:e5:c9:b3:c5:d0: fb:d0:fb:5c:bf:3a:db:c2:83:19:8b:e7:af:c9:ca: 95:cf:58:55:c7:b8:f5:fe:c5:85:37:5c:9d:17:33: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:93:37:89:46:B3:38:9B:AA:70:45:B3:FD:3D:C0:18:65:6F:DE:CC X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:7b:1a:ab:cf:bf:3e:df:70:c9:1b:61:ff:5f:38:d5:a0:08: 7a:51:26:7c:0d:7b:fa:16:d9:41:52:e4:c4:4a:20:93:a8:0f: ae:c9:9a:36:81:33:1d:a6:23:85:ac:44:e9:85:8b:a3:7a:4d: 7b:e4:10:39:60:0a:43:13:41:89:24:9e:17:3c:23:75:c4:6d: 71:e3:65:f5:c7:8e:7c:00:ff:b1:ac:f4:5f:2e:aa:93:e9:c0: e6:84:3d:a5:80:72:15:e8:c4:73:b0:2f:48:60:99:47:4d:4f: 6c:cd:1b:e0:36:69:97:8b:e7:c2:69:e8:b6:57:5a:b0:ce:4b: 04:47:2c:1a:2b:b0:ce:87:9a:7d:ff:eb:15:eb:00:c5:96:15: 6c:31:d0:28:fc:2a:7e:fa:31:21:40:c7:99:ad:96:1f:15:88: 16:fa:ec:14:2a:c3:7a:54:5d:1e:27:ac:8b:54:58:b8:45:40: f6:15:0b:4f:db:61:f7:47:b7:c0:a6:f2:52:f1:1f:34:89:96: c1:f8:ad:ae:60:2c:e6:36:5d:14:03:9e:bf:e3:41:d1:f9:f4: 16:f0:36:bb:2e:ee:17:cf:33:33:b0:5c:a0:25:a4:c8:0f:79: af:fe:2f:8d:c5:6d:95:64:47:b2:df:c6:29:41:4b:cb:73:b6: 96:e6:7b:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNTExMDMwNzQ1MzNaFw0yNTExMTAwNzQ1MzNaMBgxFjAUBgNV BAMTDTY5MDg1ZDllLTUzOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLSgYlq7+mufUlBpYnJ6DIyJnWG4OxFPe6d2hh2bFXznYtmq8u83MGqNbIlw2d M/ol7VkV6yhY1ZAmAg3UXYkIc6q41Z9+oVfs3nbtMUDzaA4OrLOs7qy6rj0hcSC4 stqCaN+s36LJ3v8G7m1znTwsPFCl69YlYptEmvnRCj/HY5/cXcBeConFaXhEOou2 +6T+5eepHZ3XutCCe8kb+GtvjkP9hpB/t3HWpYUvVVSj/P0AX6iONydiLRgs65aZ TRBxubHo3m4aTykK7vDP0tlkAYhP4zAUpbRXmrnlybPF0PvQ+1y/OtvCgxmL56/J ypXPWFXHuPX+xYU3XJ0XM1lTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9pM3iUaz OJuqcEWz/T3AGGVv3swwHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABB7GqvPvz7fcMkbYf9fONWgCHpRJnwNe/oW2UFS5MRKIJOoD67JmjaB Mx2mI4WsROmFi6N6TXvkEDlgCkMTQYkknhc8I3XEbXHjZfXHjnwA/7Gs9F8uqpPp wOaEPaWAchXoxHOwL0hgmUdNT2zNG+A2aZeL58Jp6LZXWrDOSwRHLBorsM6Hmn3/ 6xXrAMWWFWwx0Cj8Kn76MSFAx5mtlh8ViBb67BQqw3pUXR4nrItUWLhFQPYVC0/b YfdHt8Cm8lLxHzSJlsH4ra5gLOY2XRQDnr/jQdH59BbwNrsu7hfPMzOwXKAlpMgP ea/+L43FbZVkR7LfxilBS8tztpbme3Y= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:32 2025 by rpki-client