$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft File: kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json) Hash identifier: +VA1qWA/ox6Q6rZym4qOEOmxzA6Oq9Yhbq6Ew4EeBtw= Subject key identifier: E5:CA:15:57:5E:D8:5E:84:82:6B:68:23:EF:BB:B2:64:E0:B5:E0:54 Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74 Certificate issuer: /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft Manifest number: 1A Signing time: Sun 19 Oct 2025 11:33:53 +0000 Manifest this update: Sun 19 Oct 2025 11:33:53 +0000 Manifest next update: Sun 26 Oct 2025 11:33:53 +0000 Files and hashes: 1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: dH9lGpXfPxSN43ICkuX7XT28WQE/AoU/lazIgqLbO4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374 Validity Not Before: Oct 19 11:33:53 2025 GMT Not After : Oct 26 11:33:53 2025 GMT Subject: CN=68f4cca1-2f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:ff:81:7c:4c:78:2b:a2:91:54:29:8e:17: 07:93:65:8a:c6:f4:cc:9e:43:1f:16:c1:f4:1b:c4: 10:23:cc:29:81:1c:f0:5d:6e:09:27:4d:03:06:2e: 4b:0c:19:74:1c:de:41:47:3a:cc:21:da:cf:51:9f: 89:15:01:29:45:56:d2:a9:62:1c:9b:45:30:52:ab: 88:7a:de:54:e9:69:5e:8a:af:1d:ba:7b:c1:b9:8e: 28:d3:b0:8e:1b:15:99:52:8d:8e:b8:5b:b9:ed:8d: a1:20:58:ec:8f:b0:6c:80:b0:ee:4b:bf:36:90:43: 19:01:0a:9b:40:90:d5:68:0f:05:03:f5:9a:da:58: a9:d0:e0:65:3f:d1:17:50:ee:4e:86:35:ff:d2:13: cf:dc:c0:05:16:b1:38:48:70:60:9e:d3:53:8d:64: 60:b3:93:35:fa:2b:6b:0c:6d:02:d3:01:e7:b6:f7: 1f:42:b5:e2:fd:fb:88:ab:1c:29:21:ca:93:f4:ce: 8f:46:a2:4c:27:8f:3d:78:f3:38:bc:46:dc:14:f3: 7d:7f:22:2b:01:9b:c6:74:2c:b4:07:bf:e5:38:2a: 39:ce:a9:64:6a:be:b8:79:c9:56:77:3e:ee:13:94: 23:d6:29:20:9b:48:52:8c:3e:78:d3:83:ed:9e:1e: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:15:57:5E:D8:5E:84:82:6B:68:23:EF:BB:B2:64:E0:B5:E0:54 X509v3 Authority Key Identifier: keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:50:89:32:b6:5e:88:4c:24:ca:b9:f8:22:8a:c0:c6:99: 0c:d4:6c:d1:75:2c:41:60:90:a1:31:1d:09:06:c4:3b:42:56: b8:9a:56:45:ea:f1:7b:84:3f:6c:ff:f8:e0:a3:dd:df:a0:ea: 3b:7a:79:1b:de:b8:5c:82:03:19:88:78:03:09:56:54:5a:78: 66:65:b8:9a:b0:37:c0:62:80:de:7a:35:64:d2:6f:70:e9:29: a9:f0:39:55:c4:75:4f:e9:27:39:b3:b4:8f:f6:ac:5c:aa:8a: f5:14:a7:24:42:f2:62:2e:58:d0:27:9d:7c:da:01:ee:19:f9: 0e:94:68:59:57:22:56:f9:eb:2f:c3:da:0f:d9:03:48:ef:c0: d1:db:ef:cd:3a:d5:a3:52:43:87:6b:27:93:e4:a1:3a:9f:d6: 78:80:59:26:16:42:75:d3:3a:b6:03:3f:0e:0b:64:a4:26:d0: d6:bd:c6:ec:20:67:7f:09:4b:02:4b:c9:50:b7:de:b1:d9:db: 19:9c:eb:a5:76:7c:5a:10:22:5e:2a:51:e1:a1:27:87:b0:45: ee:b6:22:3b:2e:e3:6c:08:df:47:80:7d:28:8b:c9:6b:cb:0e: 79:a6:87:97:cd:fb:bf:49:60:b1:4c:c3:a1:b9:bb:dc:11:4e: aa:c1:d9:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDM4RDExMC8GA1UEBRMoOTAyQkE1QTkyNTE4NjFEQTNFOEUyRkRCMUUxMjY0Q0NE OEIwNTM3NDAeFw0yNTEwMTkxMTMzNTNaFw0yNTEwMjYxMTMzNTNaMBgxFjAUBgNV BAMTDTY4ZjRjY2ExLTJmODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbYv+BfEx4K6KRVCmOFweTZYrG9MyeQx8WwfQbxBAjzCmBHPBdbgknTQMGLksM GXQc3kFHOswh2s9Rn4kVASlFVtKpYhybRTBSq4h63lTpaV6Krx26e8G5jijTsI4b FZlSjY64W7ntjaEgWOyPsGyAsO5LvzaQQxkBCptAkNVoDwUD9ZraWKnQ4GU/0RdQ 7k6GNf/SE8/cwAUWsThIcGCe01ONZGCzkzX6K2sMbQLTAee29x9CteL9+4irHCkh ypP0zo9Gokwnjz148zi8RtwU831/IisBm8Z0LLQHv+U4KjnOqWRqvrh5yVZ3Pu4T lCPWKSCbSFKMPnjTg+2eHhPlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5coVV17Y XoSCa2gj77uyZOC14FQwHwYDVR0jBBgwFoAUkCulqSUYYdo+ji/bHhJkzNiwU3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzhELzU1RjAxMTRFOTlE ODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRvLWppX2JIaEprek5pd1Uz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0N1bHFTVVlZZG8tamlfYkhoSmt6Tml3VTNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzhELzU1RjAxMTRFOTlEODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRv LWppX2JIaEprek5pd1UzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAP8UIkytl6ITCTKufgiisDGmQzUbNF1LEFgkKExHQkGxDtCVriaVkXq 8XuEP2z/+OCj3d+g6jt6eRveuFyCAxmIeAMJVlRaeGZluJqwN8BigN56NWTSb3Dp KanwOVXEdU/pJzmztI/2rFyqivUUpyRC8mIuWNAnnXzaAe4Z+Q6UaFlXIlb56y/D 2g/ZA0jvwNHb78061aNSQ4drJ5PkoTqf1niAWSYWQnXTOrYDPw4LZKQm0Na9xuwg Z38JSwJLyVC33rHZ2xmc66V2fFoQIl4qUeGhJ4ewRe62Ijsu42wI30eAfSiLyWvL Dnmmh5fN+79JYLFMw6G5u9wRTqrB2a8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:18 2025 by rpki-client