$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft File: kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json) Hash identifier: i6Qa/yhTZ0Xefus+IfY/IYV5duMAmJPIldo/VspqHz4= Subject key identifier: 2F:5B:7A:C2:25:2C:16:F9:BB:35:BD:03:AC:73:0F:96:E4:22:AE:C5 Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE Certificate issuer: /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft Manifest number: F7 Signing time: Sun 19 Oct 2025 08:08:36 +0000 Manifest this update: Sun 19 Oct 2025 08:08:36 +0000 Manifest next update: Sun 26 Oct 2025 08:08:36 +0000 Files and hashes: 1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: 3Js5iIUPOd9szWpJkpmMLSGGMjo/AvnpLWEnTJ5vdJ4=) 2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 01Cn3pOh4671ZkIDU6odEQ9G33TuU+ryqBzUYewO8xQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE Validity Not Before: Oct 19 08:08:36 2025 GMT Not After : Oct 26 08:08:36 2025 GMT Subject: CN=68f49c84-3411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4d:31:64:60:44:f0:6c:06:34:a5:5f:0d:76: ed:4b:6a:d1:b2:85:25:71:cd:20:11:38:e7:e5:90: 0d:95:fc:de:12:1c:c2:5f:e4:a4:33:1a:be:3e:61: f5:7e:0d:52:a5:eb:c8:b4:b0:fe:5b:0e:da:c3:ab: 6c:32:61:94:ff:52:71:8a:bb:da:f0:92:cb:bd:7c: f1:f2:14:06:9e:92:3f:f3:91:1d:25:de:9f:4a:c0: eb:00:4f:36:e7:fd:11:be:04:76:9b:c4:5d:6c:33: 40:87:93:6a:46:eb:52:9f:c7:c2:d9:e0:42:a6:0d: 76:37:31:e3:a9:65:b4:e2:96:4e:98:5c:b9:f6:45: fd:d2:a5:a0:f2:1c:66:f7:3d:30:1c:6b:8e:1f:39: 28:87:6c:9f:02:09:52:20:36:c5:9b:22:28:df:d9: 83:de:9c:5e:f8:c7:f3:8a:39:02:69:91:e2:da:53: bd:0f:7b:b3:26:e4:62:ce:9c:d5:4d:46:23:a6:f0: c1:bf:cc:43:b5:34:b3:b5:c1:80:e1:d4:45:c2:73: 93:1c:12:bf:ed:63:b5:03:8f:51:fe:0c:37:5d:7d: 38:2e:f7:6c:bb:9b:08:09:e0:4d:19:17:09:1a:88: 6e:e7:61:0c:d3:05:6c:c1:54:59:ce:88:9f:8a:c4: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5B:7A:C2:25:2C:16:F9:BB:35:BD:03:AC:73:0F:96:E4:22:AE:C5 X509v3 Authority Key Identifier: keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:d7:6e:57:81:3a:b2:59:dd:71:48:31:73:fb:80:99:ce: 46:1a:a5:0e:f5:87:32:39:71:b8:01:b8:9c:2d:bb:58:13:67: 23:e2:64:5f:3b:0f:46:d3:c2:2b:c8:d4:84:75:de:f0:c3:11: a2:cc:67:e0:ad:b1:3a:d8:48:48:60:64:94:5c:b7:b8:9a:06: d5:05:0f:f9:76:b4:41:c0:5e:3a:9d:14:30:8a:61:b7:a8:b2: 16:bb:06:7d:1f:43:7e:00:22:98:99:16:c3:5d:89:18:0f:ee: 2a:4b:f4:63:c6:26:95:08:f2:9f:eb:61:47:88:a6:9b:3e:9a: 01:d8:3b:40:fd:f3:9f:cd:66:8f:e7:72:90:28:77:06:93:a5: 07:46:c4:63:9b:59:d0:63:d2:54:83:05:24:1d:81:ca:3d:4c: 35:2a:9e:53:a9:6e:ee:d1:6e:6b:ba:45:a6:9a:c7:02:e9:05: 80:8b:ec:13:be:f5:8f:de:a7:59:b6:ff:e2:ee:35:e9:e8:d3: 80:07:70:48:ee:93:a4:b5:9f:b8:92:6d:2c:53:e9:3b:da:0d: e1:cd:2c:b8:41:11:8f:0d:0a:73:30:e6:8a:66:4f:2d:b3:22: 5b:a4:62:d2:97:1e:9d:c2:9b:6b:9d:87:e2:06:de:37:90:81: 55:92:65:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0RkIxMTAvBgNVBAUTKDkyMjQxNjY1OTU1ODIxN0M5MzYyN0I5NkQ5QzlFQUZB QzFGQUEzRUUwHhcNMjUxMDE5MDgwODM2WhcNMjUxMDI2MDgwODM2WjAYMRYwFAYD VQQDEw02OGY0OWM4NC0zNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8E0xZGBE8GwGNKVfDXbtS2rRsoUlcc0gETjn5ZANlfzeEhzCX+SkMxq+PmH1 fg1SpevItLD+Ww7aw6tsMmGU/1Jxirva8JLLvXzx8hQGnpI/85EdJd6fSsDrAE82 5/0RvgR2m8RdbDNAh5NqRutSn8fC2eBCpg12NzHjqWW04pZOmFy59kX90qWg8hxm 9z0wHGuOHzkoh2yfAglSIDbFmyIo39mD3pxe+MfzijkCaZHi2lO9D3uzJuRizpzV TUYjpvDBv8xDtTSztcGA4dRFwnOTHBK/7WO1A49R/gw3XX04Lvdsu5sICeBNGRcJ Gohu52EM0wVswVRZzoifisQnlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9besIl LBb5uzW9A6xzD5bkIq7FMB8GA1UdIwQYMBaAFJIkFmWVWCF8k2J7ltnJ6vrB+qPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzRGQi84MTY5NzJDNjM0 MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlYeVRZbnVXMmNucS1zSDZv LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpUVdaWlZZSVh5VFludVcyY25xLXNINm8tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzRGQi84MTY5NzJDNjM0MzkxMUVGOUMzRDIxM0VDNEY5QUUwMi9raVFXWlpWWUlY eVRZbnVXMmNucS1zSDZvLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd19duV4E6slndcUgxc/uAmc5GGqUO9YcyOXG4AbicLbtYE2cj4mRf Ow9G08IryNSEdd7wwxGizGfgrbE62EhIYGSUXLe4mgbVBQ/5drRBwF46nRQwimG3 qLIWuwZ9H0N+ACKYmRbDXYkYD+4qS/RjxiaVCPKf62FHiKabPpoB2DtA/fOfzWaP 53KQKHcGk6UHRsRjm1nQY9JUgwUkHYHKPUw1Kp5TqW7u0W5rukWmmscC6QWAi+wT vvWP3qdZtv/i7jXp6NOAB3BI7pOktZ+4km0sU+k72g3hzSy4QRGPDQpzMOaKZk8t syJbpGLSlx6dwptrnYfiBt43kIFVkmWx -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:00 2025 by rpki-client