$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json) Hash identifier: FGG/ZrEDnfqDK2aNo8pzOV8IcudajqzuVtG7DPNWXZM= Subject key identifier: A1:F9:30:A6:74:A2:30:E7:11:6C:4F:24:3A:34:56:7C:83:58:09:59 Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft Manifest number: 0437 Signing time: Mon 03 Nov 2025 00:16:10 +0000 Manifest this update: Mon 03 Nov 2025 00:16:10 +0000 Manifest next update: Mon 10 Nov 2025 00:16:09 +0000 Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: QnHvGOj95u19Qt1BYipd+NPNbGU2YEnyh5JT8mSENYQ=) 2: 8AB7936E5FF111F092635949C4F9AE02.roa (hash: ZKGRhr8pcRlZGuDYruEwy7xDWFkv+Zae+rNW87nRb4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Nov 3 00:16:10 2025 GMT Not After : Nov 10 00:16:09 2025 GMT Subject: CN=6907f44a-c914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f1:34:5d:b2:2b:77:1b:43:25:23:b5:94:96: 96:49:29:7f:50:9f:d9:f3:3b:7d:b3:a6:cb:d9:56: e6:ff:07:5b:53:3d:2c:c4:b1:e7:af:a5:94:d5:0d: 65:85:f6:5c:3d:96:78:86:dd:6e:c5:4f:9f:c8:88: b1:6a:bb:28:23:1a:a5:9a:2c:cf:8e:98:f2:99:45: e4:ac:b9:73:c2:99:13:f9:7d:af:3a:89:5d:3d:18: 81:bd:0b:c1:63:ed:a8:56:9f:50:81:30:e0:90:d2: ed:80:5d:c6:80:53:a9:e3:bc:48:bd:e0:74:ba:67: 14:4e:67:95:49:b6:7c:ed:03:3e:97:41:64:42:c9: c3:59:c7:9c:fe:41:f6:da:25:12:e3:b2:44:20:af: 70:5b:6b:7c:59:42:1c:c5:39:69:18:8b:61:f7:0b: c7:c0:66:73:79:ac:76:60:e0:8b:56:e6:45:ac:4a: b5:8c:94:18:b7:ce:24:b6:77:15:6b:1c:ba:1b:1f: 6c:5e:13:9b:0b:84:20:76:ed:9d:5a:3e:c0:8f:65: 9b:91:94:d6:1e:85:6e:25:80:d2:0f:50:a5:63:2e: 74:3b:7c:d1:78:47:57:65:e8:d7:f7:ec:bd:75:81: e8:c5:91:4b:44:9a:0f:8d:66:f0:47:fc:8b:1a:6e: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F9:30:A6:74:A2:30:E7:11:6C:4F:24:3A:34:56:7C:83:58:09:59 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:96:9c:00:d6:28:d6:ca:f4:f3:1c:f4:7e:5a:7f:9c:80:fb: 1f:5c:fc:48:9d:85:f2:71:bd:3b:fc:8f:08:62:ab:f9:da:67: de:9c:e1:d5:41:a4:ef:8a:e1:0a:d3:0f:59:f7:45:92:57:18: ca:9e:6c:86:0c:29:9f:c8:a9:2e:c7:69:84:21:5e:80:62:63: d2:26:b6:fa:91:e5:69:92:b5:06:55:1c:e0:e2:7a:78:fc:0f: c0:49:9e:cc:1a:ed:b4:f9:f5:ed:5a:95:c8:ae:45:3a:fb:71: df:09:b9:96:6c:b9:3c:1d:06:50:f5:c6:9f:3b:f2:4e:07:6e: 96:b4:26:85:e0:1d:c4:c2:d2:9a:36:12:61:ae:11:19:a4:f4: bf:64:74:f6:85:e8:d3:74:e9:fe:99:9e:77:b7:7f:1f:29:24: 9b:d3:3f:b2:19:fa:a8:dd:7e:69:90:a3:bc:46:48:7e:cd:92: f6:78:c6:c4:bf:0c:20:5a:a8:c6:28:9d:a9:88:ed:9b:3a:99: c7:94:49:c5:8a:4b:a5:3a:f0:a8:67:74:01:0d:44:90:e4:7b: 7b:89:03:27:6e:97:6f:52:c8:93:05:e7:9a:6f:eb:f4:54:a9: 51:b3:ce:e0:ee:c6:63:82:b0:76:03:73:2b:5a:2a:23:d6:2e: 3d:fe:5f:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjUxMTAzMDAxNjEwWhcNMjUxMTEwMDAxNjA5WjAYMRYwFAYD VQQDEw02OTA3ZjQ0YS1jOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PE0XbIrdxtDJSO1lJaWSSl/UJ/Z8zt9s6bL2Vbm/wdbUz0sxLHnr6WU1Q1l hfZcPZZ4ht1uxU+fyIixarsoIxqlmizPjpjymUXkrLlzwpkT+X2vOoldPRiBvQvB Y+2oVp9QgTDgkNLtgF3GgFOp47xIveB0umcUTmeVSbZ87QM+l0FkQsnDWcec/kH2 2iUS47JEIK9wW2t8WUIcxTlpGIth9wvHwGZzeax2YOCLVuZFrEq1jJQYt84ktncV axy6Gx9sXhObC4Qgdu2dWj7Aj2WbkZTWHoVuJYDSD1ClYy50O3zReEdXZejX9+y9 dYHoxZFLRJoPjWbwR/yLGm5hBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH5MKZ0 ojDnEWxPJDo0VnyDWAlZMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RENGRS85NjUwNUIyNDgwRTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3Fk LUo4TWd4akR6VVg1T2xJelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAllpwA1ijWyvTzHPR+Wn+cgPsfXPxInYXycb07/I8IYqv52mfenOHV QaTviuEK0w9Z90WSVxjKnmyGDCmfyKkux2mEIV6AYmPSJrb6keVpkrUGVRzg4np4 /A/ASZ7MGu20+fXtWpXIrkU6+3HfCbmWbLk8HQZQ9cafO/JOB26WtCaF4B3EwtKa NhJhrhEZpPS/ZHT2hejTdOn+mZ53t38fKSSb0z+yGfqo3X5pkKO8Rkh+zZL2eMbE vwwgWqjGKJ2piO2bOpnHlEnFikulOvCoZ3QBDUSQ5Ht7iQMnbpdvUsiTBeeab+v0 VKlRs87g7sZjgrB2A3MrWioj1i49/l+c -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:18 2025 by rpki-client