$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: zjM0/JLNzz45kF6kmkHElRsLt7DH/SyzFSUsLsYETjE= Subject key identifier: 21:45:41:A8:8A:0D:D5:CB:AD:8D:C8:7A:89:EE:53:BE:29:1A:9D:6B Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: 78 Signing time: Mon 03 Nov 2025 06:54:46 +0000 Manifest this update: Mon 03 Nov 2025 06:54:45 +0000 Manifest next update: Mon 10 Nov 2025 06:54:45 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: BOvey6Pa0cvMYTpOSn441ykWKSozWwgkGpbK/5l2VZ0=) 2: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: 3K0DVSQ88H0vE5ErqZjrHuBFz3ioSOB+/QcjArPUvp0=) 3: DA700744185511F09304D972C4F9AE02.roa (hash: MiqFluIC5BNSTT1867bwbDdwUanVh/INLvZrWpn+wqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Nov 3 06:54:45 2025 GMT Not After : Nov 10 06:54:45 2025 GMT Subject: CN=690851b6-e2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:ff:91:5e:a4:cc:e9:dc:44:5f:8f:a8:f8: a6:cf:3b:d8:37:0c:2d:61:03:5e:27:fe:bb:c7:a5: de:37:9c:b9:5b:da:58:36:f6:cc:33:b1:da:bb:69: 51:a0:89:ff:ac:61:4b:fa:d1:21:76:f2:cc:d4:82: 60:db:11:3f:58:7e:f0:84:dd:40:54:2f:4b:f4:36: 7d:92:70:2b:c9:d7:9b:71:4a:c1:1e:7c:79:21:ad: 7b:56:00:5c:fb:24:57:7a:54:ec:f8:df:71:0e:92: 5c:ea:6a:47:21:69:80:e3:24:3a:96:a5:6d:98:35: e0:7c:c4:4b:c7:79:d9:e8:f0:9e:6c:f9:c2:18:3d: 3b:01:ce:68:f7:40:63:51:d7:b9:23:77:4f:f7:e4: 74:8b:76:cc:b4:ad:2c:36:e6:10:3d:5c:2a:45:d7: fa:3f:7f:f1:10:17:36:de:ab:4b:63:a3:5c:ec:3e: bf:70:bb:1d:0a:e2:c1:27:07:5d:89:6d:28:71:a4: df:eb:5f:06:7a:89:03:12:3a:6c:90:f1:0e:2e:91: cd:47:2e:15:44:48:9c:67:b6:74:2f:51:32:bb:38: 35:66:ff:d4:0a:67:43:48:da:f8:48:c4:63:cc:f2: 5f:2e:05:71:40:3e:c2:46:47:89:af:77:ed:ce:ef: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:45:41:A8:8A:0D:D5:CB:AD:8D:C8:7A:89:EE:53:BE:29:1A:9D:6B X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:79:4e:0e:c1:b2:0f:c0:36:2d:68:6b:04:72:82:69:23:2f: da:9b:01:00:69:ea:49:a9:cc:27:30:e1:75:71:e9:ba:a0:64: 8e:ff:97:26:d1:03:0d:d6:17:6a:fa:91:b4:e1:4d:99:63:2c: b1:33:c6:4b:ef:19:5c:9f:cd:32:4f:f8:1b:a9:e6:ee:06:28: 27:2a:b6:cb:63:e3:2e:3f:db:64:1f:17:1a:d0:ef:8e:c9:f4: 19:b8:f4:ac:71:22:a2:13:25:20:89:c2:80:dd:d6:86:61:cc: 98:6d:4d:54:6f:d8:f9:b6:f1:9f:d5:da:dc:08:e4:be:f8:f8: 62:e6:56:5a:0e:20:3f:c0:a3:1f:42:bd:6b:4c:4f:80:2b:83: 32:9e:68:ab:96:9d:d9:fa:a7:de:25:bc:62:95:f0:a0:ed:b5: 95:75:e7:6a:09:9d:9b:ae:c6:59:dd:55:02:e9:18:b0:13:5d: 0a:c6:a9:2d:86:16:b7:ad:69:91:cb:1f:3e:dc:7b:73:5f:a0: 83:af:30:c4:1d:50:da:ab:91:ec:48:f8:05:1c:35:56:ae:4b: 6d:56:d4:c7:17:aa:3b:26:0f:b7:8f:21:e5:95:96:4e:4a:92: 49:6a:57:be:34:0f:cf:9d:2e:85:67:97:71:64:73:3e:19:61: b2:64:9d:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjVCOTExMC8GA1UEBRMoOTExNzZEMTY5QzQyRjAzRDk1MjgyQkJCQTIwNEM0RTQ0 RDMxRUQwOTAeFw0yNTExMDMwNjU0NDVaFw0yNTExMTAwNjU0NDVaMBgxFjAUBgNV BAMTDTY5MDg1MWI2LWUyZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdQf+RXqTM6dxEX4+o+KbPO9g3DC1hA14n/rvHpd43nLlb2lg29swzsdq7aVGg if+sYUv60SF28szUgmDbET9YfvCE3UBUL0v0Nn2ScCvJ15txSsEefHkhrXtWAFz7 JFd6VOz433EOklzqakchaYDjJDqWpW2YNeB8xEvHedno8J5s+cIYPTsBzmj3QGNR 17kjd0/35HSLdsy0rSw25hA9XCpF1/o/f/EQFzbeq0tjo1zsPr9wux0K4sEnB12J bShxpN/rXwZ6iQMSOmyQ8Q4ukc1HLhVESJxntnQvUTK7ODVm/9QKZ0NI2vhIxGPM 8l8uBXFAPsJGR4mvd+3O7yfTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIUVBqIoN 1cutjch6ie5TvikanWswHwYDVR0jBBgwFoAUkRdtFpxC8D2VKCu7ogTE5E0x7Qkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGNUI5LzUyMDJEMDI4MERG OTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1JkdEZweEM4RDJWS0N1N29nVEU1RTB4N1FrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG NUI5LzUyMDJEMDI4MERGOTExRjA4RTZFNzYyQUM0RjlBRTAyL2tSZHRGcHhDOEQy VktDdTdvZ1RFNUUweDdRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK55Tg7Bsg/ANi1oawRygmkjL9qbAQBp6kmpzCcw4XVx6bqgZI7/lybR Aw3WF2r6kbThTZljLLEzxkvvGVyfzTJP+Bup5u4GKCcqtstj4y4/22QfFxrQ747J 9Bm49KxxIqITJSCJwoDd1oZhzJhtTVRv2Pm28Z/V2twI5L74+GLmVloOID/Aox9C vWtMT4ArgzKeaKuWndn6p94lvGKV8KDttZV152oJnZuuxlndVQLpGLATXQrGqS2G FretaZHLHz7ce3NfoIOvMMQdUNqrkexI+AUcNVauS21W1McXqjsmD7ePIeWVlk5K kklqV740D8+dLoVnl3Fkcz4ZYbJknfM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:21:27 2025 by rpki-client