$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: u+AzkayDersJBspcccTszptrf6WjH1LyJzKy2fV+pTE= Subject key identifier: 1F:5C:2B:18:81:BE:D6:9C:74:F3:FB:A3:6C:0A:10:2B:B6:FB:71:43 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 0177 Signing time: Sun 19 Oct 2025 06:25:17 +0000 Manifest this update: Sun 19 Oct 2025 06:25:17 +0000 Manifest next update: Sun 26 Oct 2025 06:25:17 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: UbfNWDldo4EOW7qVcykJQVma9sazJKOTY71NtJrWcx8=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: 75EuXED/Rvqy0Mw85Z/q36XD2zcpbxDlIxOgsx3A+Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Oct 19 06:25:17 2025 GMT Not After : Oct 26 06:25:17 2025 GMT Subject: CN=68f4844d-3834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:fe:ad:2b:55:b3:ff:25:3d:57:09:df:73: 8f:98:fd:71:40:28:07:c8:1c:71:7d:02:a8:1e:9d: 95:3e:fe:05:4d:d3:c3:50:88:4e:37:1d:83:d4:cc: c1:e0:f7:ca:be:40:8e:5e:e8:ff:54:1e:5e:c4:02: 75:26:aa:3e:24:5a:be:b3:23:3f:00:1c:4c:08:2a: 75:55:94:1d:ff:37:66:86:f7:87:e3:38:9d:51:bc: 97:b4:58:64:42:01:a7:69:ef:29:41:76:78:bb:0b: be:a7:50:20:d2:9a:66:d7:21:be:87:8e:71:e4:ed: 9c:af:26:16:84:2b:07:b7:ce:76:17:5c:0d:2a:4c: db:82:b4:90:37:bd:f2:6d:28:2b:83:01:a3:48:be: 5b:94:11:8f:bc:ae:f1:e0:a0:a2:1c:23:70:92:0d: 40:a5:bf:94:86:10:a4:53:cd:b4:93:a4:bc:66:68: 2f:f1:56:a7:d9:1c:f6:10:de:8b:fa:de:d6:5d:c1: 4d:34:44:c1:b6:d8:0e:1c:e8:75:c2:b6:d4:d5:39: 33:b9:49:ba:85:0e:a6:66:33:43:5f:51:50:05:ab: 8c:49:3c:2b:25:a6:c4:48:17:62:48:45:5e:ef:e6: 27:ba:ae:07:8a:74:b3:40:c1:7c:94:7d:a3:06:cf: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:2B:18:81:BE:D6:9C:74:F3:FB:A3:6C:0A:10:2B:B6:FB:71:43 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:35:87:92:25:6f:b7:4c:3d:6e:3d:16:50:21:bd:a9:76: 63:e2:72:05:68:9f:6b:af:f0:a0:cf:2f:d9:25:4c:78:a0:60: d4:a9:d6:18:6a:f7:65:0e:cd:06:0e:b7:1d:2e:69:60:10:8a: ab:99:bf:cb:ea:8e:8a:6b:d0:aa:1a:8e:30:a9:40:58:15:84: 4d:52:08:ad:c9:85:b1:ff:2f:ea:3f:2e:68:b6:fd:55:9d:f0: 89:b7:e1:65:8b:c7:1e:a9:4c:a2:ab:e8:90:0a:ec:be:52:a2: 4c:38:a2:69:e2:e4:97:95:fd:9a:23:dd:90:78:cc:01:c8:c4: 38:13:f7:58:1c:82:06:21:e4:79:d0:2e:77:fe:95:04:2a:b5: 97:98:8b:c3:4e:46:20:36:0c:ae:9c:f5:86:41:1f:02:ba:d0: 69:a6:6c:09:fd:3f:13:f6:d5:11:c5:eb:b9:73:65:a6:c3:ce: 05:86:17:3c:d3:5e:74:bb:06:f6:f6:96:86:8d:ee:ba:e2:43: 3f:ba:62:74:20:92:ce:c1:71:c4:ef:4a:46:6e:9f:fb:41:b0: 21:61:cb:69:f0:08:6b:55:a5:f5:20:b8:5f:d7:45:69:f1:11: 46:23:73:cf:c0:98:67:b3:eb:95:07:71:c7:55:26:bb:e4:e4: 17:f7:1a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjUxMDE5MDYyNTE3WhcNMjUxMDI2MDYyNTE3WjAYMRYwFAYD VQQDEw02OGY0ODQ0ZC0zODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XL+rStVs/8lPVcJ33OPmP1xQCgHyBxxfQKoHp2VPv4FTdPDUIhONx2D1MzB 4PfKvkCOXuj/VB5exAJ1Jqo+JFq+syM/ABxMCCp1VZQd/zdmhveH4zidUbyXtFhk QgGnae8pQXZ4uwu+p1Ag0ppm1yG+h45x5O2cryYWhCsHt852F1wNKkzbgrSQN73y bSgrgwGjSL5blBGPvK7x4KCiHCNwkg1Apb+UhhCkU820k6S8Zmgv8Van2Rz2EN6L +t7WXcFNNETBttgOHOh1wrbU1TkzuUm6hQ6mZjNDX1FQBauMSTwrJabESBdiSEVe 7+Ynuq4HinSzQMF8lH2jBs8KqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9cKxiB vtacdPP7o2wKECu2+3FDMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARsDWHkiVvt0w9bj0WUCG9qXZj4nIFaJ9rr/Cgzy/ZJUx4oGDUqdYY avdlDs0GDrcdLmlgEIqrmb/L6o6Ka9CqGo4wqUBYFYRNUgityYWx/y/qPy5otv1V nfCJt+Fli8ceqUyiq+iQCuy+UqJMOKJp4uSXlf2aI92QeMwByMQ4E/dYHIIGIeR5 0C53/pUEKrWXmIvDTkYgNgyunPWGQR8CutBppmwJ/T8T9tURxeu5c2Wmw84Fhhc8 0150uwb29paGje664kM/umJ0IJLOwXHE70pGbp/7QbAhYctp8AhrVaX1ILhf10Vp 8RFGI3PPwJhns+uVB3HHVSa75OQX9xoB -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:44 2025 by rpki-client