$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft File: KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json) Hash identifier: Dc4GvAKQuJHA1c7GH+hPaiciXpH5/dKNMinq0RlcUOs= Subject key identifier: 84:79:5D:FB:AC:A0:F2:CC:5D:B7:E7:CB:BD:9C:9E:D6:57:FF:73:67 Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A Certificate issuer: /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft Manifest number: 0A6B Signing time: Sat 18 Oct 2025 20:36:56 +0000 Manifest this update: Sat 18 Oct 2025 20:36:56 +0000 Manifest next update: Sat 25 Oct 2025 20:36:56 +0000 Files and hashes: 1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: KHsgwY7oRJu30W7ti8+P9uLbJbE5wdUBsUWo3s86oJQ=) 2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A Validity Not Before: Oct 18 20:36:56 2025 GMT Not After : Oct 25 20:36:56 2025 GMT Subject: CN=68f3fa68-1eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:8e:1f:ac:01:67:10:57:7e:48:df:ca:61: 20:17:7b:9c:70:cb:c2:f6:28:39:b4:11:d7:ea:be: f9:bf:bd:10:16:ff:e6:26:f0:f8:02:c8:35:de:03: 4d:06:c4:81:ce:cb:2d:4d:6d:b5:a6:57:a1:44:c9: a6:e4:3a:00:06:48:6b:69:b0:57:ea:0d:58:b1:7a: f4:5f:32:3e:2f:15:4b:30:95:f8:87:3e:43:4c:d3: 02:59:80:44:e5:78:fa:a3:bb:11:f5:02:20:40:2d: 87:5a:dc:18:b0:01:25:fb:ef:22:40:c8:18:59:e6: 80:3d:fe:bf:91:61:6f:cd:b7:9f:79:32:6f:bd:e7: 96:b3:1f:04:d3:6e:2f:50:dd:19:56:f5:e2:d3:bd: 19:e4:c3:bd:2f:f5:af:04:6b:f7:d9:7d:ae:ff:71: e9:b7:43:90:af:13:61:80:d5:61:eb:8a:b5:a8:cb: aa:4d:ca:94:f8:a4:2a:d1:ff:ed:75:de:f5:db:6d: 10:31:ef:c4:41:46:8c:da:c6:b9:14:82:67:e6:54: bb:54:0d:62:02:ff:15:ec:57:24:27:dd:21:da:61: 8d:b0:39:5a:b8:aa:69:df:68:e2:74:42:8a:65:7e: 9b:f6:84:79:9d:f2:47:a4:c2:99:f8:b9:31:ea:ec: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:79:5D:FB:AC:A0:F2:CC:5D:B7:E7:CB:BD:9C:9E:D6:57:FF:73:67 X509v3 Authority Key Identifier: keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0c:f4:f6:f4:69:8b:7d:2c:d3:eb:a3:d8:54:04:c9:01:3b: 23:91:8a:b0:2f:0b:d4:a4:3d:37:a6:14:37:41:3c:80:86:20: 8a:e5:37:8a:d1:23:15:29:38:cb:3c:cd:a6:83:dd:24:c3:d6: c7:33:82:fd:42:6f:fb:b1:b1:ff:e7:26:b4:24:04:fe:17:bd: 1d:e8:9d:d9:13:ca:3f:4c:1e:61:cd:27:ca:4a:e2:b3:5b:ac: fd:91:c3:19:45:b6:d9:19:a3:5d:f5:20:5f:20:58:62:fb:02: 0e:9f:75:21:8d:51:b1:24:10:51:1f:a9:c5:c6:1a:14:14:c0: c9:51:fd:b3:6e:44:20:03:34:6d:64:51:32:e8:f9:80:1f:e1: a3:0f:5f:b0:6b:78:45:1f:79:33:89:3e:a4:cb:c0:d2:ee:de: 80:8a:2d:98:6a:2c:5e:56:be:f0:c2:29:f0:25:ff:a9:f9:b8: d9:66:fb:8d:24:ab:4a:c0:5e:a7:d9:5e:81:5a:d5:9b:6a:f1: 59:01:e6:e6:4e:a2:0d:07:09:56:f2:53:39:c2:38:50:20:9a: 87:0a:a2:a9:2e:bd:aa:6f:7b:12:3c:d4:17:4f:13:de:ab:52: dd:7d:25:c0:76:4a:c7:82:fb:fd:b4:57:a8:47:5b:6f:18:9a: 5b:67:ea:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwOEYxMTAvBgNVBAUTKDI4NjgyRUM3MjNDQ0UzMzYxODVCMzMzMDIwMTNGRjAw NjBEREUwOUEwHhcNMjUxMDE4MjAzNjU2WhcNMjUxMDI1MjAzNjU2WjAYMRYwFAYD VQQDEw02OGYzZmE2OC0xZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RKOH6wBZxBXfkjfymEgF3uccMvC9ig5tBHX6r75v70QFv/mJvD4Asg13gNN BsSBzsstTW21plehRMmm5DoABkhrabBX6g1YsXr0XzI+LxVLMJX4hz5DTNMCWYBE 5Xj6o7sR9QIgQC2HWtwYsAEl++8iQMgYWeaAPf6/kWFvzbefeTJvveeWsx8E024v UN0ZVvXi070Z5MO9L/WvBGv32X2u/3Hpt0OQrxNhgNVh64q1qMuqTcqU+KQq0f/t dd71220QMe/EQUaM2sa5FIJn5lS7VA1iAv8V7FckJ90h2mGNsDlauKpp32jidEKK ZX6b9oR5nfJHpMKZ+Lkx6uz+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIR5Xfus oPLMXbfny72cntZX/3NnMB8GA1UdIwQYMBaAFChoLscjzOM2GFszMCAT/wBg3eCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA4Ri9COUIzNDQ1QzZG ODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6WVlXek13SUJQX0FHRGQ0 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tHZ3V4eVBNNHpZWVd6TXdJQlBfQUdEZDRKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA4Ri9COUIzNDQ1QzZGODcxMUVBOTNBOUY5MzNDNEY5QUUwMi9LR2d1eHlQTTR6 WVlXek13SUJQX0FHRGQ0Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRDPT29GmLfSzT66PYVATJATsjkYqwLwvUpD03phQ3QTyAhiCK5TeK 0SMVKTjLPM2mg90kw9bHM4L9Qm/7sbH/5ya0JAT+F70d6J3ZE8o/TB5hzSfKSuKz W6z9kcMZRbbZGaNd9SBfIFhi+wIOn3UhjVGxJBBRH6nFxhoUFMDJUf2zbkQgAzRt ZFEy6PmAH+GjD1+wa3hFH3kziT6ky8DS7t6Aii2YaixeVr7wwinwJf+p+bjZZvuN JKtKwF6n2V6BWtWbavFZAebmTqINBwlW8lM5wjhQIJqHCqKpLr2qb3sSPNQXTxPe q1LdfSXAdkrHgvv9tFeoR1tvGJpbZ+pS -----END CERTIFICATE-----Generated at Mon Oct 20 04:20:05 2025 by rpki-client