$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft File: kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json) Hash identifier: fi0f3HsB47WcO31uB6mZ4Y42ORSjV9160Bd7Q4zT43g= Subject key identifier: 36:DA:51:43:ED:72:81:B2:35:FF:3F:C4:E9:CE:8A:5F:A2:1C:A6:5F Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 Certificate issuer: /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft Manifest number: 2C Signing time: Sun 19 Oct 2025 11:13:26 +0000 Manifest this update: Sun 19 Oct 2025 11:13:26 +0000 Manifest next update: Sun 26 Oct 2025 11:13:26 +0000 Files and hashes: 1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: yG/r0jPFMmaTp4/KkpFlWgytL+DFnmVYBPLAcc1vG/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0 Validity Not Before: Oct 19 11:13:26 2025 GMT Not After : Oct 26 11:13:26 2025 GMT Subject: CN=68f4c7d6-2830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:e2:b8:a8:64:17:0c:84:dd:f1:7e:40:cf: d3:ae:ea:e3:ba:8a:7d:67:f9:39:c8:c0:59:e7:36: 92:6a:a2:46:6c:f9:8b:c1:53:ea:17:60:6d:d2:f6: 44:98:7d:4c:7d:f5:a5:d9:61:01:33:75:e9:c7:95: fd:e5:6e:79:8b:66:c8:05:7d:34:c5:ac:b6:ab:60: 8d:46:05:f1:60:e1:b5:72:52:7d:5f:3f:27:87:b7: 73:ed:04:c3:4a:d0:3a:f4:22:cc:05:3e:79:7a:05: 5f:c3:e7:7d:d8:5e:52:32:77:c4:37:da:4c:d9:5d: df:d7:5f:17:99:2a:87:ae:a6:43:bf:06:3a:d4:2b: f2:c0:8d:a8:e9:c2:94:4f:fe:6f:c0:38:b7:40:71: 0c:b3:b7:4b:cb:a3:93:f0:33:e2:f1:d8:69:42:63: 58:60:17:7a:75:c6:80:20:93:16:b4:13:cf:1e:75: 43:6b:33:c8:bd:eb:04:6f:a1:21:df:15:da:c3:ed: cd:ed:6a:0c:b4:27:58:27:bf:4a:54:10:13:a4:b7: c6:18:28:c5:bf:49:b5:f0:d1:d6:5f:86:ac:0d:60: 08:0c:a1:cb:5c:71:4b:02:4a:00:f9:c1:d5:68:05: 83:9d:d9:c0:bd:70:94:96:79:c6:b9:59:e9:6c:9b: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DA:51:43:ED:72:81:B2:35:FF:3F:C4:E9:CE:8A:5F:A2:1C:A6:5F X509v3 Authority Key Identifier: keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e5:a1:27:ed:8d:ee:31:0b:08:7d:a3:78:85:80:df:3f:ee: 0d:e3:f8:79:c7:35:7a:27:57:c9:dc:a9:41:e8:11:be:e8:71: 01:ff:fc:05:e3:f6:03:f5:98:16:c9:4f:17:42:9f:9a:d8:c6: 1d:f9:a8:e1:e9:a2:68:28:c8:9e:54:05:5b:48:48:aa:28:e8: 50:cc:31:ed:1b:3d:98:c3:c7:79:7e:5b:0b:d1:45:ea:14:67: fa:8a:03:ac:64:0a:49:d0:7c:0b:ea:cb:7a:80:fb:e4:c6:db: ae:02:fd:42:2c:8b:38:70:c3:37:0f:ba:ca:25:d1:44:e3:44: 11:18:18:34:9e:a2:7c:51:60:b3:f0:65:4d:94:92:04:d3:67: 25:3b:8a:d0:26:f9:24:5f:c3:83:59:99:a6:47:b1:d4:41:4d: 66:bf:53:ae:2c:75:2f:28:57:c4:44:ad:02:42:36:f4:b6:f0: c5:a9:28:98:57:bd:3d:a8:1a:db:6c:da:c3:01:9e:b1:e9:69: 1b:a2:92:7c:cb:80:5e:b3:1d:d8:82:87:10:0d:48:80:08:57: 9b:67:35:a0:41:c4:1c:f3:c4:11:e4:11:45:f9:d4:17:7d:01: ea:aa:c8:b7:07:2b:12:5d:19:84:63:1a:54:70:a5:fc:53:93: 3a:c3:39:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoOTBDQjdGQTEzNzk2OUM0MzU2QTRDQTUyRjcwNURDQTFB QjIyNUZEMDAeFw0yNTEwMTkxMTEzMjZaFw0yNTEwMjYxMTEzMjZaMBgxFjAUBgNV BAMTDTY4ZjRjN2Q2LTI4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzKuK4qGQXDITd8X5Az9Ou6uO6in1n+TnIwFnnNpJqokZs+YvBU+oXYG3S9kSY fUx99aXZYQEzdenHlf3lbnmLZsgFfTTFrLarYI1GBfFg4bVyUn1fPyeHt3PtBMNK 0Dr0IswFPnl6BV/D533YXlIyd8Q32kzZXd/XXxeZKoeupkO/BjrUK/LAjajpwpRP /m/AOLdAcQyzt0vLo5PwM+Lx2GlCY1hgF3p1xoAgkxa0E88edUNrM8i96wRvoSHf FdrD7c3tagy0J1gnv0pUEBOkt8YYKMW/SbXw0dZfhqwNYAgMoctccUsCSgD5wdVo BYOd2cC9cJSWeca5Welsm7tbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNtpRQ+1y gbI1/z/E6c6KX6Icpl8wHwYDVR0jBBgwFoAUkMt/oTeWnENWpMpS9wXcoasiX9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzQxOUU3RTEyNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVOV3BNcFM5d1hjb2FzaVg5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva010X29UZVduRU5XcE1wUzl3WGNvYXNpWDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzQxOUU3RTEyNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyL2tNdF9vVGVXbkVO V3BNcFM5d1hjb2FzaVg5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7loSftje4xCwh9o3iFgN8/7g3j+HnHNXonV8ncqUHoEb7ocQH//AXj 9gP1mBbJTxdCn5rYxh35qOHpomgoyJ5UBVtISKoo6FDMMe0bPZjDx3l+WwvRReoU Z/qKA6xkCknQfAvqy3qA++TG264C/UIsizhwwzcPusol0UTjRBEYGDSeonxRYLPw ZU2UkgTTZyU7itAm+SRfw4NZmaZHsdRBTWa/U64sdS8oV8RErQJCNvS28MWpKJhX vT2oGtts2sMBnrHpaRuiknzLgF6zHdiChxANSIAIV5tnNaBBxBzzxBHkEUX51Bd9 AeqqyLcHKxJdGYRjGlRwpfxTkzrDOaI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:32 2025 by rpki-client