$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: W1TLNvmOM+qHPVSgYSluXP21/p5sKvs5dFfbwiTv5Ps= Subject key identifier: 7A:2E:FE:13:0B:11:DC:99:58:49:DD:47:C8:07:0A:33:45:2E:C2:B7 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 0134 Signing time: Sun 19 Oct 2025 07:18:26 +0000 Manifest this update: Sun 19 Oct 2025 07:18:25 +0000 Manifest next update: Sun 26 Oct 2025 07:18:25 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: tjci0LrilJsHE2i7ixoR1tg3EqLPJKxuhrKRIX7TvLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Oct 19 07:18:25 2025 GMT Not After : Oct 26 07:18:25 2025 GMT Subject: CN=68f490c1-5ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:98:11:fd:f5:df:14:98:04:6f:26:d7:bb: 3b:98:fe:43:28:71:77:a5:ee:4c:02:dd:aa:64:bb: f7:e4:39:67:a6:2b:49:86:78:00:71:22:e4:89:4c: f5:fc:96:54:79:db:09:c0:05:d5:c9:70:2c:3a:e1: 40:1b:9c:2b:21:4e:8d:1b:7d:e4:40:91:c8:06:68: 99:38:8c:df:49:b4:12:84:77:b0:99:3a:25:3a:b6: 22:2c:9e:73:2f:92:15:6b:b9:d9:b9:88:23:09:ee: a5:25:40:e9:d8:de:ef:b9:04:46:a9:21:b9:37:81: 4f:09:c2:14:4c:0c:4a:70:5c:02:33:8c:c5:72:ca: d9:37:19:e0:5a:14:b2:88:24:69:aa:a9:39:26:21: 56:dd:99:ef:b6:ee:ca:ac:2f:7d:28:84:7f:4b:77: b1:86:4f:b1:9c:25:83:39:aa:fd:8b:f3:c6:97:91: 10:2d:e2:c0:21:85:ed:a7:0c:b1:67:61:f0:a9:09: c3:13:77:2d:dc:60:28:6c:7e:94:1a:32:c1:ed:99: 75:64:4e:4c:ee:bf:6b:a8:a0:39:f1:35:0e:d2:8e: 72:91:b4:83:01:33:49:93:4e:f5:50:6f:6c:b1:4b: b5:df:84:c5:73:6d:c2:de:3e:de:02:b6:4a:3e:0f: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2E:FE:13:0B:11:DC:99:58:49:DD:47:C8:07:0A:33:45:2E:C2:B7 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:03:81:37:3e:4f:33:c7:8b:f1:af:b5:b2:42:64:87:6e:fe: bd:e7:65:f2:94:b2:71:09:b9:7e:dc:8b:a4:d3:7c:b2:2f:59: d8:16:8f:61:e8:6d:19:71:b5:00:85:73:e2:47:cf:11:ef:0a: 9c:78:29:c3:02:0f:82:37:8a:7b:af:5d:d8:b3:7d:84:d1:7e: f9:74:81:e0:e8:67:ad:cf:9d:de:08:95:7c:7b:a8:58:32:20: e0:9a:09:8e:ad:c1:91:22:ed:d4:b1:a3:6b:b4:bd:e5:21:88: 6f:ee:a0:39:c8:97:63:f5:c5:9c:c5:6e:df:58:3d:3c:7e:8c: c2:8b:87:d1:5e:45:58:2a:6e:0e:ca:72:fd:1b:f7:bc:c7:d5: bf:14:a6:db:ca:68:3e:89:0a:b8:4e:78:18:41:62:a1:e9:e1: 80:58:ae:5e:f1:3c:5f:26:55:0a:59:0d:da:9c:61:92:9c:6e: 96:f3:c5:8d:b7:98:0f:a6:b9:33:33:8a:7f:9e:08:a6:89:b9: b9:d8:b1:60:c3:6e:4a:0a:2e:bb:cb:7b:2a:79:76:77:91:b9: 11:21:25:18:46:61:0c:2e:02:8e:c1:73:a0:79:6c:af:40:ae: 4f:22:e1:44:bb:38:ed:6d:4c:ed:4a:73:dc:9f:31:58:56:65: 28:81:6c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjUxMDE5MDcxODI1WhcNMjUxMDI2MDcxODI1WjAYMRYwFAYD VQQDEw02OGY0OTBjMS01Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvluYEf313xSYBG8m17s7mP5DKHF3pe5MAt2qZLv35DlnpitJhngAcSLkiUz1 /JZUedsJwAXVyXAsOuFAG5wrIU6NG33kQJHIBmiZOIzfSbQShHewmTolOrYiLJ5z L5IVa7nZuYgjCe6lJUDp2N7vuQRGqSG5N4FPCcIUTAxKcFwCM4zFcsrZNxngWhSy iCRpqqk5JiFW3Znvtu7KrC99KIR/S3exhk+xnCWDOar9i/PGl5EQLeLAIYXtpwyx Z2HwqQnDE3ct3GAobH6UGjLB7Zl1ZE5M7r9rqKA58TUO0o5ykbSDATNJk071UG9s sUu134TFc23C3j7eArZKPg/C9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHou/hML EdyZWEndR8gHCjNFLsK3MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaA4E3Pk8zx4vxr7WyQmSHbv6952XylLJxCbl+3Iuk03yyL1nYFo9h 6G0ZcbUAhXPiR88R7wqceCnDAg+CN4p7r13Ys32E0X75dIHg6Getz53eCJV8e6hY MiDgmgmOrcGRIu3UsaNrtL3lIYhv7qA5yJdj9cWcxW7fWD08fozCi4fRXkVYKm4O ynL9G/e8x9W/FKbbymg+iQq4TngYQWKh6eGAWK5e8TxfJlUKWQ3anGGSnG6W88WN t5gPprkzM4p/ngimibm52LFgw25KCi67y3sqeXZ3kbkRISUYRmEMLgKOwXOgeWyv QK5PIuFEuzjtbUztSnPcnzFYVmUogWzM -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:03 2025 by rpki-client