$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft File: kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json) Hash identifier: c7cR7zYqIN3QiPqEy+7Cx5y6pZVYdNaWMMixyaSfI5Y= Subject key identifier: B3:BF:D6:67:FF:BA:CC:23:2F:34:CA:90:81:84:19:6D:34:C9:82:7B Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD Certificate issuer: /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft Manifest number: 394B Signing time: Sat 18 Oct 2025 14:40:14 +0000 Manifest this update: Sat 18 Oct 2025 14:40:13 +0000 Manifest next update: Sat 25 Oct 2025 14:40:13 +0000 Files and hashes: 1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: 28ehng99Ddlsu97lolF15QWkk5nmLHdhs/98I01Tays=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD Validity Not Before: Oct 18 14:40:13 2025 GMT Not After : Oct 25 14:40:13 2025 GMT Subject: CN=68f3a6ce-b742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:f7:23:55:5c:a5:20:18:1a:cd:3e:e0:07: 01:08:28:9c:9b:df:3a:d4:d1:5b:0f:04:52:9d:29: 6c:ca:6d:31:10:27:c2:3b:1f:8b:ac:9b:03:a5:8e: c7:aa:e0:cb:e9:03:da:85:b4:02:01:fa:04:2d:13: ff:8d:10:7c:a5:b1:62:1a:62:ef:2a:4c:dd:ec:13: a6:4f:db:e5:7a:b4:d5:ac:44:8a:52:79:da:83:ae: 71:7c:1f:1e:6e:ab:ac:02:3d:14:f6:3c:fd:a0:26: 69:28:86:96:63:12:19:b5:2c:3d:32:6f:6b:db:ed: 15:e3:db:68:d9:26:a5:73:7c:ac:13:7c:2c:e5:82: 55:0c:72:55:c8:74:ee:cf:d6:52:11:6d:9b:8c:3b: 87:78:e9:35:95:5f:9b:f7:0c:20:b4:7f:4a:97:9f: 4b:22:a9:13:29:f9:d4:e0:88:41:fe:4d:54:b2:6a: 0e:4a:ce:b1:34:3a:f1:6a:32:7f:5b:c1:4a:99:e0: f9:1c:1d:54:bf:0c:39:ef:16:39:1b:97:a6:52:a6: 8c:63:49:af:81:8c:a3:2e:5c:d4:9e:69:81:a4:f3: 9e:c0:8e:c8:29:1b:30:6e:a6:84:90:09:86:31:bd: b7:fc:e8:f3:d4:64:ec:cf:66:7e:d9:58:01:ea:46: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BF:D6:67:FF:BA:CC:23:2F:34:CA:90:81:84:19:6D:34:C9:82:7B X509v3 Authority Key Identifier: keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c3:b4:14:04:a4:29:e9:5e:41:68:21:fd:37:86:80:9e:88: 92:03:a7:39:6a:74:31:b8:5f:77:b8:c7:e0:8a:e9:12:25:fa: cb:44:c1:c8:c6:8f:4c:cf:e8:0e:9a:51:33:02:7a:ab:7b:d4: 61:bc:3e:38:1d:0f:e2:03:c4:23:09:78:99:f3:10:ec:5b:8f: ec:ca:50:12:3f:32:2f:05:94:ac:e5:37:a0:71:1a:db:cb:ed: d0:12:1c:ca:aa:df:35:23:d7:96:35:60:af:91:20:4f:4a:5c: 64:0a:ab:ce:b3:fb:55:e4:a9:91:75:6b:27:c5:06:74:96:57: 2d:60:ba:b9:8c:1e:59:56:fd:ec:b6:2b:9b:0b:b8:83:5c:39: 86:0c:d0:7e:86:e4:03:4a:62:8d:70:6a:c5:9d:9b:39:ed:8c: d7:93:c9:0b:52:a5:d7:dc:21:40:c1:9e:ce:28:3a:b0:4e:25: 6f:99:d8:4a:d6:7f:bd:96:6b:d6:20:07:3c:6b:9d:c9:da:1c: 9b:77:6d:26:87:79:b8:a8:35:53:61:61:51:61:b3:ae:7a:35: d9:b7:3e:96:22:05:e4:fe:4e:40:fa:63:97:8d:81:4b:ca:e3: fe:3b:3f:cb:9b:e7:22:13:38:4b:c8:f0:a8:60:3c:16:3d:70: c1:f2:87:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDkzMjI3MUZDNDc1RkEyREQ5RDkzMzExMjJCMDdBNTI4 RDM4RjhFRkQwHhcNMjUxMDE4MTQ0MDEzWhcNMjUxMDI1MTQ0MDEzWjAYMRYwFAYD VQQDEw02OGYzYTZjZS1iNzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEL3I1VcpSAYGs0+4AcBCCicm9861NFbDwRSnSlsym0xECfCOx+LrJsDpY7H quDL6QPahbQCAfoELRP/jRB8pbFiGmLvKkzd7BOmT9vlerTVrESKUnnag65xfB8e bqusAj0U9jz9oCZpKIaWYxIZtSw9Mm9r2+0V49to2Salc3ysE3ws5YJVDHJVyHTu z9ZSEW2bjDuHeOk1lV+b9wwgtH9Kl59LIqkTKfnU4IhB/k1UsmoOSs6xNDrxajJ/ W8FKmeD5HB1Uvww57xY5G5emUqaMY0mvgYyjLlzUnmmBpPOewI7IKRswbqaEkAmG Mb23/Ojz1GTsz2Z+2VgB6ka1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO/1mf/ uswjLzTKkIGEGW00yYJ7MB8GA1UdIwQYMBaAFJMicfxHX6LdnZMxEisHpSjTj479 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90MmRrekVTS3dlbEtOT1Bq djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5SnhfRWRmb3QyZGt6RVNLd2VsS05PUGp2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9reUp4X0VkZm90 MmRrekVTS3dlbEtOT1BqdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnw7QUBKQp6V5BaCH9N4aAnoiSA6c5anQxuF93uMfgiukSJfrLRMHI xo9Mz+gOmlEzAnqre9RhvD44HQ/iA8QjCXiZ8xDsW4/sylASPzIvBZSs5TegcRrb y+3QEhzKqt81I9eWNWCvkSBPSlxkCqvOs/tV5KmRdWsnxQZ0llctYLq5jB5ZVv3s tiubC7iDXDmGDNB+huQDSmKNcGrFnZs57YzXk8kLUqXX3CFAwZ7OKDqwTiVvmdhK 1n+9lmvWIAc8a53J2hybd20mh3m4qDVTYWFRYbOuejXZtz6WIgXk/k5A+mOXjYFL yuP+Oz/Lm+ciEzhLyPCoYDwWPXDB8oca -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:32 2025 by rpki-client