$ rpki-client -vvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft File: kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json) Hash identifier: YnJMX2iZq7zjCJxsFaiiUpyQ+ZKm30/0QhaA1M9lJC0= Subject key identifier: 64:10:AA:FE:10:55:BF:E3:F2:53:F7:FD:67:B5:9C:7F:82:2D:6F:C0 Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E Certificate issuer: /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft Manifest number: 0704 Signing time: Sat 18 Oct 2025 23:21:25 +0000 Manifest this update: Sat 18 Oct 2025 23:21:24 +0000 Manifest next update: Sat 25 Oct 2025 23:21:24 +0000 Files and hashes: 1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: Gvw73aCvaL+CUAsVsbQ+zCCOow4n7Q5n+iKleSQu8Io=) 2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vMhYeDmA4rQgDzWKujwjU7tw9Dx++6v75EIl46gAbaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E Validity Not Before: Oct 18 23:21:24 2025 GMT Not After : Oct 25 23:21:24 2025 GMT Subject: CN=68f420f5-e1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:ed:c6:e6:ba:9f:d7:c0:9d:11:f1:a1:3d: 6a:d9:47:f2:19:de:6a:2d:69:9d:de:a7:34:5c:2c: 89:fc:80:d8:1d:3e:d3:ea:2b:b8:21:97:f3:55:cb: 6d:c4:8b:3e:9b:f4:6a:ee:d3:23:be:60:e2:30:24: 0e:62:5b:49:d2:93:5b:ba:0c:01:8d:6e:21:24:40: a1:ef:03:a1:1b:74:ea:f0:4b:72:28:14:71:fa:d5: 47:02:e7:17:a2:9c:03:0d:8b:79:31:96:20:22:47: e7:e2:e7:dc:82:21:71:94:c9:58:c9:4b:9e:c0:a4: cd:86:41:04:02:90:1b:eb:aa:59:6b:59:b2:ad:ee: 50:4a:c6:55:72:17:89:aa:80:65:71:8c:46:05:ff: f2:40:7a:fa:23:18:b7:f8:a5:ed:6b:7c:dd:44:5d: 8e:4a:a5:63:4b:eb:c9:ce:1f:33:e2:53:18:4d:21: fe:fb:d3:6e:d9:92:11:40:1b:1a:57:92:ce:4a:54: e3:ce:ab:1f:18:52:f9:e8:4b:1a:90:5b:6b:7a:8b: 5f:9f:fe:31:78:cf:bf:f7:20:05:5d:63:6a:86:56: 3b:5a:b5:b9:48:74:88:4f:57:c4:d9:b1:a9:5c:40: 3e:22:52:c0:07:91:01:86:e7:97:db:7e:cb:67:e5: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:10:AA:FE:10:55:BF:E3:F2:53:F7:FD:67:B5:9C:7F:82:2D:6F:C0 X509v3 Authority Key Identifier: keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a4:f9:aa:f0:a9:24:a9:e9:24:2e:a6:dd:37:63:83:67:fb: 15:86:25:a3:ba:69:cd:40:37:20:de:36:86:b5:9e:5b:72:5e: 73:12:2b:07:9a:16:d5:b4:c2:fa:7c:c7:0f:bf:09:c9:9f:ef: 19:a3:f0:d9:7d:1a:6d:0a:dc:7b:7d:05:cd:da:4b:94:43:65: 9c:5b:f1:31:a3:36:93:c5:e0:96:ea:0d:83:a3:72:63:21:b5: d2:bc:8c:4a:8e:3c:ab:20:79:2c:13:ff:43:21:6c:f1:db:f7: 38:c1:38:6e:ee:ce:54:89:90:d1:10:1a:f9:5f:c8:9d:1a:74: 83:98:ae:80:79:ac:79:a5:ec:68:2e:ee:0b:be:1a:ca:fd:17: 55:54:80:99:04:de:6b:e0:68:71:37:80:f1:d3:de:4a:67:ef: 0d:08:af:8b:82:0c:6c:b1:4a:99:30:12:ef:93:35:4a:de:1b: 13:9f:b6:8d:10:89:bd:61:6c:c3:02:be:1d:78:0b:0c:01:9c: c4:4b:58:fa:1b:ac:61:1a:af:d3:8b:cc:f1:f2:39:c8:5a:96: 5e:d3:54:b9:2f:12:8d:8b:5d:ef:4e:52:f1:a7:98:34:e3:cf: ba:af:0a:3b:f2:98:db:34:7c:9b:ba:83:05:2e:cd:01:56:55: 52:7d:23:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1RkIxMTAvBgNVBAUTKDkxN0E5RjdBQTIyODFCMTlGOTQ3NDIzRTk4NjEyQjFG NjNEMTdFMEUwHhcNMjUxMDE4MjMyMTI0WhcNMjUxMDI1MjMyMTI0WjAYMRYwFAYD VQQDEw02OGY0MjBmNS1lMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Ltxua6n9fAnRHxoT1q2UfyGd5qLWmd3qc0XCyJ/IDYHT7T6iu4IZfzVctt xIs+m/Rq7tMjvmDiMCQOYltJ0pNbugwBjW4hJECh7wOhG3Tq8EtyKBRx+tVHAucX opwDDYt5MZYgIkfn4ufcgiFxlMlYyUuewKTNhkEEApAb66pZa1myre5QSsZVcheJ qoBlcYxGBf/yQHr6Ixi3+KXta3zdRF2OSqVjS+vJzh8z4lMYTSH++9Nu2ZIRQBsa V5LOSlTjzqsfGFL56EsakFtreotfn/4xeM+/9yAFXWNqhlY7WrW5SHSIT1fE2bGp XEA+IlLAB5EBhueX237LZ+WqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQQqv4Q Vb/j8lP3/We1nH+CLW/AMB8GA1UdIwQYMBaAFJF6n3qiKBsZ+UdCPphhKx9j0X4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzVGQi82QzI5NkQzQTYx NDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4bjVSMEktbUdFckgyUFJm ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tYcWZlcUlvR3huNVIwSS1tR0VySDJQUmZnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzVGQi82QzI5NkQzQTYxNDIxMUVCOTkwQkE1NUZDNEY5QUUwMi9rWHFmZXFJb0d4 bjVSMEktbUdFckgyUFJmZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQpPmq8KkkqekkLqbdN2ODZ/sVhiWjumnNQDcg3jaGtZ5bcl5zEisH mhbVtML6fMcPvwnJn+8Zo/DZfRptCtx7fQXN2kuUQ2WcW/ExozaTxeCW6g2Do3Jj IbXSvIxKjjyrIHksE/9DIWzx2/c4wThu7s5UiZDREBr5X8idGnSDmK6Aeax5pexo Lu4LvhrK/RdVVICZBN5r4GhxN4Dx095KZ+8NCK+LggxssUqZMBLvkzVK3hsTn7aN EIm9YWzDAr4deAsMAZzES1j6G6xhGq/Ti8zx8jnIWpZe01S5LxKNi13vTlLxp5g0 48+6rwo78pjbNHybuoMFLs0BVlVSfSOC -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:47 2025 by rpki-client