$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft File: kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json) Hash identifier: t7nu/IX5JgCuYdqQiKKQj9czCUoob587vaCN+2gzVjs= Subject key identifier: ED:20:B4:FC:54:98:DF:94:8F:87:70:71:A3:89:9B:2F:9C:0C:C3:B6 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0BE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft Manifest number: 0BB8 Signing time: Tue 04 Nov 2025 19:05:32 +0000 Manifest this update: Tue 04 Nov 2025 19:05:32 +0000 Manifest next update: Tue 11 Nov 2025 19:05:32 +0000 Files and hashes: 1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: 3qw3P6Mn86O4jrJbXDKwqf3BlmGnNJpNtO0WCw5cVFc=) 2: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: riSPm8Um648H2O5onROefisDf6lA1aFxuieJBfuqrKc=) 3: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY=) 4: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: dwF4PLUAXx1X1N5mZQhJUj6aIS0fEqRxQ0gkZCCE5EA=) 5: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: akcNDk8y+ODsfpu3oKFQYxPcSwPpaVaD8Gu1z5j+dkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Nov 4 19:05:32 2025 GMT Not After : Nov 11 19:05:32 2025 GMT Subject: CN=690a4e7c-6a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:ae:5a:36:36:dc:8a:d1:1d:5f:07:e6:b7: 64:ff:f3:ea:56:ad:73:25:11:59:7f:a2:17:3b:8e: 40:a4:1d:16:15:4d:81:ac:3a:16:c6:b7:10:2a:05: 18:48:2f:26:45:dd:35:d4:15:c7:98:8a:79:07:41: 13:b8:fa:70:5e:ca:e1:85:27:20:e6:a9:38:d6:09: bf:1c:63:99:40:de:6d:f5:ca:a8:65:05:95:ac:58: 02:75:89:33:dd:1a:b4:c8:2f:3c:80:05:58:3d:7a: d9:82:55:3c:a8:15:ed:9b:73:cc:7e:3a:e7:9e:78: 10:40:36:db:8c:50:3d:2f:fe:ab:3f:6d:57:ca:a6: 85:e6:a8:8f:0c:71:4a:f7:50:a4:61:99:34:07:ef: bb:91:c0:8c:47:5f:89:c6:47:da:3c:19:fe:88:e1: 64:55:44:ca:71:f4:b1:69:e0:af:3f:ef:98:f2:5f: e9:78:67:e8:83:4d:d8:25:50:9f:2b:3b:2d:ed:ab: 8a:ed:ad:b9:30:e4:af:56:f2:6a:19:37:16:64:9d: c5:61:89:3d:6d:96:18:67:3d:04:7f:a6:c0:3b:f4: 06:3a:27:1f:2e:22:7a:2b:29:fe:90:4a:c9:cb:24: 33:d9:b8:bb:38:24:82:32:fa:62:98:87:4e:f9:7e: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:20:B4:FC:54:98:DF:94:8F:87:70:71:A3:89:9B:2F:9C:0C:C3:B6 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:90:1d:5f:b5:4f:54:04:28:09:3f:63:e4:2a:58:b1:98:39: 07:6b:c5:a8:cc:ed:8f:a6:db:7e:c6:73:39:fa:84:1b:96:c5: 6c:b6:71:49:00:6f:a1:de:2e:55:29:8c:6f:90:14:b1:94:2c: 83:47:f3:28:30:c6:21:01:6d:2a:60:9c:83:9a:40:2e:c4:52: aa:94:25:0e:b1:cb:1d:ae:05:98:24:ce:3d:e2:85:c6:2a:a5: 19:37:af:3a:3a:d3:e8:44:62:42:a2:97:b4:7d:07:f6:cb:b2: 82:3f:80:ba:87:ac:10:9e:ab:ba:cb:46:66:d0:1e:4e:af:2e: 34:b6:41:90:43:a9:13:cc:cc:99:6a:43:1c:3a:1f:75:d6:e4: 25:40:23:a1:b2:89:de:54:3e:27:f4:39:da:71:dc:6a:37:0b: 9e:3b:f4:9f:76:62:15:aa:b2:bb:f8:6d:48:bc:f1:03:b0:ea: 64:ef:7e:55:4f:a3:23:95:b3:41:aa:59:3a:a8:51:47:85:26: cf:e5:7f:ba:91:10:cf:e4:41:cc:92:38:71:d0:70:1d:e7:d0: 5b:27:ff:76:76:6d:98:3c:f5:ac:3a:01:16:5b:a1:b6:91:f5: f2:a0:a6:73:d6:8f:7d:14:9d:b1:17:ee:41:1e:88:fc:bf:eb: fb:47:52:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUxMTA0MTkwNTMyWhcNMjUxMTExMTkwNTMyWjAYMRYwFAYD VQQDEw02OTBhNGU3Yy02YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtyuWjY23IrRHV8H5rdk//PqVq1zJRFZf6IXO45ApB0WFU2BrDoWxrcQKgUY SC8mRd011BXHmIp5B0ETuPpwXsrhhScg5qk41gm/HGOZQN5t9cqoZQWVrFgCdYkz 3Rq0yC88gAVYPXrZglU8qBXtm3PMfjrnnngQQDbbjFA9L/6rP21XyqaF5qiPDHFK 91CkYZk0B++7kcCMR1+JxkfaPBn+iOFkVUTKcfSxaeCvP++Y8l/peGfog03YJVCf Kzst7auK7a25MOSvVvJqGTcWZJ3FYYk9bZYYZz0Ef6bAO/QGOicfLiJ6Kyn+kErJ yyQz2bi7OCSCMvpimIdO+X7SPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0gtPxU mN+Uj4dwcaOJmy+cDMO2MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc4Ni9CMEQ3MjNFRTM1REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFS X0ZOUUlkaGZXdWVfdXRwWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMkB1ftU9UBCgJP2PkKlixmDkHa8WozO2Pptt+xnM5+oQblsVstnFJ AG+h3i5VKYxvkBSxlCyDR/MoMMYhAW0qYJyDmkAuxFKqlCUOscsdrgWYJM494oXG KqUZN686OtPoRGJCope0fQf2y7KCP4C6h6wQnqu6y0Zm0B5Ory40tkGQQ6kTzMyZ akMcOh911uQlQCOhsoneVD4n9DnacdxqNwueO/SfdmIVqrK7+G1IvPEDsOpk735V T6MjlbNBqlk6qFFHhSbP5X+6kRDP5EHMkjhx0HAd59BbJ/92dm2YPPWsOgEWW6G2 kfXyoKZz1o99FJ2xF+5BHoj8v+v7R1Ls -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:48 2025 by rpki-client