$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: pkGv1A3cEZqSTQQhLtkBCmD6GQAGK3sLkUFw0l+NFYA= Subject key identifier: 7C:E7:F0:AC:03:FB:65:74:05:D8:9F:FA:2A:DE:FD:4A:99:90:FD:70 Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 5D Signing time: Wed 05 Nov 2025 07:19:55 +0000 Manifest this update: Wed 05 Nov 2025 07:19:54 +0000 Manifest next update: Wed 12 Nov 2025 07:19:54 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: p23ftEX0D3IPRDhRrCXpVNV7T6LQMsyfxpH52uwfmM8=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Nov 5 07:19:54 2025 GMT Not After : Nov 12 07:19:54 2025 GMT Subject: CN=690afa9b-f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:a0:bc:72:3d:54:07:0d:24:35:dd:2d:86: 4c:0a:20:71:5c:36:29:c3:8c:ec:4e:99:e1:69:c5: 65:29:81:9b:ae:f0:19:a5:23:79:3d:5b:02:a2:d9: 4a:c1:50:51:7e:34:a9:6a:5b:ef:2f:51:e2:b6:c8: 02:30:a5:ad:68:8c:36:72:1c:c4:5d:5f:38:f4:bc: 47:66:42:a3:0a:9e:f8:b5:09:99:df:e8:a6:e3:bc: 6f:08:3f:69:d6:bc:dc:63:44:fe:5f:95:ed:1d:62: 2f:77:7d:55:fa:ef:d3:52:d9:08:58:6a:eb:24:68: c2:96:03:c1:6e:04:08:a6:c3:52:e2:67:48:c6:37: 1e:d0:c3:31:1b:6e:50:8a:c1:62:19:d6:85:95:46: 32:39:01:4c:48:96:23:8e:71:7a:d9:d4:40:27:ed: bf:d2:90:6c:50:3f:9c:5d:1f:52:09:8b:f5:1a:17: 54:e6:c5:c9:f0:78:58:a3:90:9c:5b:71:9a:3e:3f: e2:a2:e7:25:5f:a2:00:9f:31:4b:73:f1:1c:fc:e3: f4:2d:dc:6a:fc:69:e6:e7:ca:7a:99:f2:23:fc:3e: 4f:0e:c3:f1:c2:df:6f:d8:c5:40:24:eb:9c:45:b5: ac:d6:5b:b1:19:e2:01:07:fa:25:53:d4:38:47:06: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E7:F0:AC:03:FB:65:74:05:D8:9F:FA:2A:DE:FD:4A:99:90:FD:70 X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a1:5a:d1:4f:9f:38:c8:77:af:8f:ea:bd:08:b0:6c:28:05: 60:a0:79:d1:8f:56:07:cc:9e:0b:c9:3f:e9:db:9c:8d:3e:56: 39:62:11:e1:1a:7d:4f:83:e0:37:07:96:4a:c3:64:88:72:db: 07:cc:e0:e4:58:ff:f1:5e:1f:78:65:c0:a9:a8:73:d3:43:6f: a5:41:a8:af:62:6a:0e:48:7f:99:d3:9a:ba:d4:5a:c3:85:ad: 31:5e:fd:95:ab:07:c7:17:c5:1c:38:fc:2b:0f:77:5d:d8:34: 24:25:58:a4:27:16:bb:d2:54:ca:a3:b0:d2:51:59:ad:55:5c: be:e9:ee:8c:22:73:b6:8a:11:38:fc:95:fb:e7:d4:b9:f0:4a: dc:80:de:84:66:4f:2c:57:7a:a2:59:a4:9a:d5:be:79:07:31: 03:e1:e1:ac:ef:2b:da:64:c8:75:fc:8b:e9:2b:9f:56:ca:58: 8a:d4:80:5c:4e:92:4a:5e:f8:44:ec:b6:89:cd:e2:26:ee:6e: db:67:c8:8d:13:ef:81:b9:e6:58:4b:16:af:b3:a3:73:a8:00: 8f:2a:4f:c0:9b:4f:3d:bc:03:ee:ae:d1:9b:c6:81:e8:ad:2f: ab:d4:83:1f:9f:a1:4d:db:d9:84:aa:0c:5c:3d:0c:d1:55:49: cc:80:c4:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTExMDUwNzE5NTRaFw0yNTExMTIwNzE5NTRaMBgxFjAUBgNV BAMTDTY5MGFmYTliLWYxMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC98KC8cj1UBw0kNd0thkwKIHFcNinDjOxOmeFpxWUpgZuu8BmlI3k9WwKi2UrB UFF+NKlqW+8vUeK2yAIwpa1ojDZyHMRdXzj0vEdmQqMKnvi1CZnf6KbjvG8IP2nW vNxjRP5fle0dYi93fVX679NS2QhYauskaMKWA8FuBAimw1LiZ0jGNx7QwzEbblCK wWIZ1oWVRjI5AUxIliOOcXrZ1EAn7b/SkGxQP5xdH1IJi/UaF1TmxcnweFijkJxb cZo+P+Ki5yVfogCfMUtz8Rz84/Qt3Gr8aebnynqZ8iP8Pk8Ow/HC32/YxUAk65xF tazWW7EZ4gEH+iVT1DhHBgzDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfOfwrAP7 ZXQF2J/6Kt79SpmQ/XAwHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHihWtFPnzjId6+P6r0IsGwoBWCgedGPVgfMngvJP+nbnI0+VjliEeEa fU+D4DcHlkrDZIhy2wfM4ORY//FeH3hlwKmoc9NDb6VBqK9iag5If5nTmrrUWsOF rTFe/ZWrB8cXxRw4/CsPd13YNCQlWKQnFrvSVMqjsNJRWa1VXL7p7owic7aKETj8 lfvn1LnwStyA3oRmTyxXeqJZpJrVvnkHMQPh4azvK9pkyHX8i+krn1bKWIrUgFxO kkpe+ETstonN4ibubttnyI0T74G55lhLFq+zo3OoAI8qT8CbTz28A+6u0ZvGgeit L6vUgx+foU3b2YSqDFw9DNFVScyAxM8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:01 2025 by rpki-client