$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: iaR19jVP/T8tbCUWd6fgjIfs3LEkOrLq9DrowWffsKM= Subject key identifier: AA:14:24:30:86:22:DF:ED:D4:67:57:7C:8F:1B:74:53:0A:3C:07:A1 Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 07:20:51 +0000 Manifest this update: Mon 03 Nov 2025 07:20:51 +0000 Manifest next update: Mon 10 Nov 2025 07:20:51 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: Im5Z+s/aepuDtIDQvJlKADgiB75S9mm8A+Bhlvl/bm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Nov 3 07:20:51 2025 GMT Not After : Nov 10 07:20:51 2025 GMT Subject: CN=690857d3-a036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:6f:55:15:42:68:e8:e8:b2:e4:58:69:29: bd:63:fa:0d:5f:43:80:28:d5:8a:88:5e:e4:b6:f3: bf:e6:f1:ea:59:d7:9f:02:b2:4f:a9:1f:7a:2b:b3: f4:34:d5:2d:77:0b:e5:8a:bd:0a:4c:93:a3:8e:91: e1:11:87:9a:75:87:fc:74:1c:67:aa:f4:bd:e6:d2: a6:bb:7b:bf:33:ae:b7:ae:36:1f:e9:77:28:46:42: 26:b2:bb:9e:aa:77:1a:55:2e:ad:74:78:63:af:ae: 59:42:e3:2e:d5:6e:b0:c3:d7:50:dd:45:77:fb:16: 18:2b:c7:2a:a8:f0:08:85:e8:e7:51:b4:ec:85:2b: 0c:b3:26:7b:20:f1:b8:ad:1c:1a:02:1d:cb:2a:f5: 69:b8:3e:3b:2f:26:a0:54:89:bc:d5:c9:86:ba:ad: c5:e1:65:16:ca:60:b6:44:2c:4f:be:03:ba:b8:ce: df:14:09:f6:74:af:bd:f3:07:56:5d:c0:be:9a:c2: ea:2d:54:a0:f4:28:3f:e1:40:dd:eb:4c:e5:68:f9: 58:00:c8:8b:4d:6a:26:cb:a2:ce:84:e3:60:aa:03: 28:0e:52:29:43:bb:74:37:3c:df:dc:4a:0d:70:74: ff:71:6d:d1:f1:04:67:87:81:a4:15:52:8a:c2:00: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:14:24:30:86:22:DF:ED:D4:67:57:7C:8F:1B:74:53:0A:3C:07:A1 X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d9:d7:4d:cd:bb:6f:8f:0d:3a:e3:2a:19:5b:2b:25:be:09: 05:fc:7b:45:f3:b9:8e:d1:75:47:59:f4:58:ec:a7:16:68:39: 49:6f:6d:1b:49:39:2e:ff:96:4a:17:2c:2a:ca:0c:b7:ef:d3: ab:b7:81:a9:d7:37:15:23:0f:e6:7a:13:8a:c9:85:72:d4:43: ef:cc:e3:aa:7f:53:c5:f1:9e:b4:c4:78:18:7b:4b:aa:e5:27: ab:40:da:16:fa:b4:39:3e:45:aa:fc:b9:73:08:b1:49:50:47: e0:50:f8:18:19:29:09:29:51:1f:17:09:6d:78:cf:3a:57:15: 10:c5:09:5d:87:12:96:81:b0:b0:5c:31:6a:c1:9f:df:9d:3c: a1:90:02:25:b3:6b:15:81:d3:a3:f1:dc:f5:7d:4b:26:13:ec: 14:3b:85:4d:48:aa:b8:16:4a:d7:48:f2:af:91:c1:75:9f:62: 4d:37:8c:eb:1a:b2:de:4d:e0:72:c9:2a:53:d8:eb:ed:03:92: ee:55:0f:19:a4:78:f7:5e:c0:92:58:a3:e5:71:2b:18:de:3d: fd:4d:5e:09:c3:90:b1:07:01:bd:84:32:a5:a5:53:5a:5a:af: 22:c5:2f:ab:e1:81:3e:5b:d4:cc:6a:a9:ea:93:f8:f2:0a:77: 0b:8f:93:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoMkI2ODMwQUIzN0NCMzRFRjI3M0EyMEEyRjJFODI2NDI5 OTYwMTNEQTAeFw0yNTExMDMwNzIwNTFaFw0yNTExMTAwNzIwNTFaMBgxFjAUBgNV BAMTDTY5MDg1N2QzLWEwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgLG9VFUJo6Oiy5FhpKb1j+g1fQ4Ao1YqIXuS287/m8epZ158Csk+pH3ors/Q0 1S13C+WKvQpMk6OOkeERh5p1h/x0HGeq9L3m0qa7e78zrreuNh/pdyhGQiayu56q dxpVLq10eGOvrllC4y7VbrDD11DdRXf7Fhgrxyqo8AiF6OdRtOyFKwyzJnsg8bit HBoCHcsq9Wm4PjsvJqBUibzVyYa6rcXhZRbKYLZELE++A7q4zt8UCfZ0r73zB1Zd wL6awuotVKD0KD/hQN3rTOVo+VgAyItNaibLos6E42CqAygOUilDu3Q3PN/cSg1w dP9xbdHxBGeHgaQVUorCAOPnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqhQkMIYi 3+3UZ1d8jxt0Uwo8B6EwHwYDVR0jBBgwFoAUK2gwqzfLNO8nOiCi8ugmQplgE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzNFNDAyQUVBNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzJnd3F6ZkxOTzhuT2lDaTh1Z21RcGxnRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RTgwLzNFNDAyQUVBNEI2NjExRjBCODg1MjQzOUM0RjlBRTAyL0syZ3dxemZMTk84 bk9pQ2k4dWdtUXBsZ0U5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXZ103Nu2+PDTrjKhlbKyW+CQX8e0XzuY7RdUdZ9FjspxZoOUlvbRtJ OS7/lkoXLCrKDLfv06u3ganXNxUjD+Z6E4rJhXLUQ+/M46p/U8XxnrTEeBh7S6rl J6tA2hb6tDk+Rar8uXMIsUlQR+BQ+BgZKQkpUR8XCW14zzpXFRDFCV2HEpaBsLBc MWrBn9+dPKGQAiWzaxWB06Px3PV9SyYT7BQ7hU1IqrgWStdI8q+RwXWfYk03jOsa st5N4HLJKlPY6+0Dku5VDxmkePdewJJYo+VxKxjePf1NXgnDkLEHAb2EMqWlU1pa ryLFL6vhgT5b1MxqqeqT+PIKdwuPk+c= -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:25 2025 by rpki-client