$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: NvsoHZkVW/3J2+pLzt/x5BJu40Bc3i78/sYg5Cyf9eQ= Subject key identifier: 0C:4A:C9:79:83:DF:CB:86:E7:64:26:A4:4D:A8:72:13:FD:77:CA:B9 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03E9 Signing time: Sat 01 Nov 2025 00:45:18 +0000 Manifest this update: Sat 01 Nov 2025 00:45:18 +0000 Manifest next update: Sat 08 Nov 2025 00:45:18 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: GYaT7Jfzei5W/uJVP0E1EIR/ebgUhtWIHU8/A8mLQUU=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1006 (0x3ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Nov 1 00:45:18 2025 GMT Not After : Nov 8 00:45:18 2025 GMT Subject: CN=6905581e-6502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:07:dc:6c:9f:42:8b:3d:9b:b1:6d:58:2b: a7:8f:03:a2:65:ce:4c:b6:b6:26:f8:97:27:ce:8d: 76:14:37:84:d9:2f:49:ec:d7:5b:c1:60:37:19:43: ee:34:2a:16:2c:95:d2:c7:de:57:e5:c8:12:b9:a4: f6:b0:16:74:1a:db:22:b5:66:fd:d5:72:eb:4b:6f: d6:ea:4d:b4:73:59:3d:73:f9:15:b7:32:31:da:4e: fe:36:17:c8:c8:67:39:4b:65:d4:50:37:90:8c:4a: dc:74:28:ae:9b:08:4f:bc:ce:2a:9f:36:ca:0d:9a: b9:45:d9:82:6a:ae:63:9e:21:01:09:fe:85:be:c8: 03:c6:bb:b0:b6:cc:b8:b4:c7:04:bb:b6:17:21:b5: 70:72:ee:00:10:a2:91:83:b6:6a:74:9d:18:ca:bf: 4d:d8:43:a5:c0:a5:94:60:59:67:50:f0:b9:a4:47: 83:5a:27:cb:5c:74:9f:55:9e:61:53:79:00:39:a9: 3f:fe:75:bf:d6:09:c7:89:46:b1:82:1f:88:42:f7: 2d:10:cb:a8:26:79:7f:a1:da:80:db:ac:88:00:6f: 59:4e:d0:a5:36:e8:67:7b:af:67:e1:74:99:2c:d2: 11:21:91:96:75:35:c1:cf:4b:bb:98:f1:1d:6b:f0: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:C9:79:83:DF:CB:86:E7:64:26:A4:4D:A8:72:13:FD:77:CA:B9 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f8:db:06:84:43:85:48:e6:ea:ac:c8:30:f0:db:54:36:56: 26:7c:a4:21:57:0b:a2:d3:cc:06:ef:47:c9:3f:02:6c:b2:bf: ed:3d:ed:d7:0b:1b:8c:d8:d9:8f:c6:eb:b5:26:27:3c:d9:60: 65:09:9b:bc:3d:5c:fc:a7:af:53:25:29:27:fe:78:42:09:f9: 80:60:52:33:c6:4c:1f:c8:e7:f3:39:bb:2f:ad:11:e1:b7:c3: c6:eb:6b:cc:87:aa:1c:13:42:5c:0f:84:bc:96:9c:c0:78:66: 0d:89:4c:e3:1a:20:f2:43:57:cd:ce:3e:f0:5f:e2:d6:ed:45: a5:7e:cb:90:b4:9b:b3:c7:a7:ef:ab:3b:ef:93:b0:9e:e6:9b: 30:83:59:ec:b8:55:33:b9:64:0e:0b:f0:bf:8d:9d:28:4d:08: a8:25:d1:bf:4d:3b:f0:b4:bb:a0:37:dd:8e:f9:0b:bf:57:1a: 9e:84:e8:17:d7:b2:03:56:5f:e4:e5:9f:fa:55:eb:d6:88:52: c4:43:d3:88:12:55:01:d4:cc:ea:eb:1f:9b:de:af:f7:52:25: 13:a0:3f:08:ab:09:c0:50:e1:72:cd:7a:94:eb:8b:b6:7f:37: e1:6b:74:22:5b:e5:a4:6d:b9:de:55:eb:dc:a2:9b:6f:46:05: ab:87:52:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUxMTAxMDA0NTE4WhcNMjUxMTA4MDA0NTE4WjAYMRYwFAYD VQQDEw02OTA1NTgxZS02NTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IwH3GyfQos9m7FtWCunjwOiZc5MtrYm+Jcnzo12FDeE2S9J7NdbwWA3GUPu NCoWLJXSx95X5cgSuaT2sBZ0GtsitWb91XLrS2/W6k20c1k9c/kVtzIx2k7+NhfI yGc5S2XUUDeQjErcdCiumwhPvM4qnzbKDZq5RdmCaq5jniEBCf6FvsgDxruwtsy4 tMcEu7YXIbVwcu4AEKKRg7ZqdJ0Yyr9N2EOlwKWUYFlnUPC5pEeDWifLXHSfVZ5h U3kAOak//nW/1gnHiUaxgh+IQvctEMuoJnl/odqA26yIAG9ZTtClNuhne69n4XSZ LNIRIZGWdTXBz0u7mPEda/BOkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxKyXmD 38uG52QmpE2ochP9d8q5MB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC+NsGhEOFSObqrMgw8NtUNlYmfKQhVwui08wG70fJPwJssr/tPe3X CxuM2NmPxuu1Jic82WBlCZu8PVz8p69TJSkn/nhCCfmAYFIzxkwfyOfzObsvrRHh t8PG62vMh6ocE0JcD4S8lpzAeGYNiUzjGiDyQ1fNzj7wX+LW7UWlfsuQtJuzx6fv qzvvk7Ce5pswg1nsuFUzuWQOC/C/jZ0oTQioJdG/TTvwtLugN92O+Qu/VxqehOgX 17IDVl/k5Z/6VevWiFLEQ9OIElUB1Mzq6x+b3q/3UiUToD8IqwnAUOFyzXqU64u2 fzfha3QiW+WkbbneVevcoptvRgWrh1Ij -----END CERTIFICATE-----Generated at Sat Nov 1 10:26:54 2025 by rpki-client