$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: ZimJ0X6B/KfGaphAHXZcR0PirDce1ktK8bhmfvtLFJ8= Subject key identifier: 97:51:57:51:56:22:20:E8:B8:69:54:E5:2C:50:A8:24:2F:0D:FB:2A Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 059E Signing time: Mon 20 Oct 2025 14:18:41 +0000 Manifest this update: Mon 20 Oct 2025 14:18:40 +0000 Manifest next update: Mon 27 Oct 2025 14:18:40 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: t8JF6HQ1whEQEWzBUKfq7Ew1aSdVtxZus2DsYa7wEvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Oct 20 14:18:40 2025 GMT Not After : Oct 27 14:18:40 2025 GMT Subject: CN=68f644c1-4fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:05:74:bd:80:d9:ef:5d:e2:0c:19:33:73:71: e8:b6:d1:39:4f:9c:be:90:dd:d6:db:05:5f:8b:a8: 6c:b2:56:1e:71:5e:53:5b:bc:9a:d3:6c:c4:12:b2: 87:08:bf:70:8c:e0:a7:61:f9:81:ec:16:2c:60:4a: 18:0a:88:98:6a:b4:4b:d1:b2:c4:b1:87:88:8e:72: 87:5b:dc:69:05:f9:62:b8:e9:5e:34:df:cf:03:6b: 74:95:57:58:ab:bd:76:90:4a:f4:b3:eb:4c:90:b5: f6:8a:1b:41:b3:cc:ae:32:27:d6:49:b7:7e:eb:82: 09:8c:fd:9d:21:0d:4c:c4:83:20:b0:a0:2f:c3:5b: 78:c9:51:ce:2a:3d:21:cb:32:cf:91:e4:46:c1:d7: 4a:72:49:9f:ed:f9:57:93:ba:75:c7:0a:7a:89:04: 80:06:7d:9a:08:b5:67:9f:c6:00:b2:a6:69:21:48: e6:30:57:3d:58:92:ba:3e:94:93:9f:73:00:7d:4b: cf:84:e5:23:00:9f:fc:9d:29:3d:f8:94:4e:ce:e1: e8:b2:65:ef:07:bd:84:a4:c0:76:f7:4f:90:3f:f5: 3f:dc:8b:06:46:b5:e5:35:bc:81:10:c9:86:3f:70: 15:5b:1d:4c:2a:e5:db:9d:cb:0c:2d:97:1e:b0:df: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:51:57:51:56:22:20:E8:B8:69:54:E5:2C:50:A8:24:2F:0D:FB:2A X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:43:c2:d8:36:7a:54:8b:8c:dd:f2:5a:aa:e5:15:05:c7:8c: a8:ec:ff:c4:93:88:34:7d:1d:a5:32:e7:87:f3:3f:4f:99:af: 3e:bd:cf:98:ae:c8:d3:09:60:6b:4a:11:ab:38:28:ca:e5:28: a7:09:fc:a1:88:22:9f:ff:f9:26:e5:6e:b3:86:01:3c:af:2b: b4:63:e9:be:3c:09:01:2d:6a:5a:b5:29:f8:c7:02:f1:ab:b2: 24:0d:ef:c9:db:f6:f4:4d:83:eb:e8:40:0a:5a:58:cf:33:ee: c7:50:ff:cc:0e:6e:40:17:17:fb:4d:45:97:cf:55:60:73:44: 00:ae:20:d0:4c:91:ec:c0:df:bc:99:ad:dc:ba:5c:61:e9:e9: 3f:1d:ed:80:b9:f8:7c:a5:ff:15:12:e3:22:ff:ba:68:08:27: 23:09:3d:f1:6d:95:11:5e:36:61:2d:01:dc:a8:a4:7f:3d:78: 93:5f:fa:21:da:4f:81:64:05:32:43:3a:79:82:4e:50:ed:4f: e4:c7:a6:09:9b:40:85:12:42:16:b0:87:19:21:ae:f4:d1:61: 01:4b:97:33:e5:4d:15:81:aa:04:c5:5f:4f:fa:f7:09:7b:0f: 60:55:76:a9:7a:21:1a:c6:08:1c:34:65:f8:5c:ed:80:ff:fe: f8:4e:6b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjUxMDIwMTQxODQwWhcNMjUxMDI3MTQxODQwWjAYMRYwFAYD VQQDEw02OGY2NDRjMS00ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QV0vYDZ713iDBkzc3HottE5T5y+kN3W2wVfi6hsslYecV5TW7ya02zEErKH CL9wjOCnYfmB7BYsYEoYCoiYarRL0bLEsYeIjnKHW9xpBfliuOleNN/PA2t0lVdY q712kEr0s+tMkLX2ihtBs8yuMifWSbd+64IJjP2dIQ1MxIMgsKAvw1t4yVHOKj0h yzLPkeRGwddKckmf7flXk7p1xwp6iQSABn2aCLVnn8YAsqZpIUjmMFc9WJK6PpST n3MAfUvPhOUjAJ/8nSk9+JROzuHosmXvB72EpMB290+QP/U/3IsGRrXlNbyBEMmG P3AVWx1MKuXbncsMLZcesN9xfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdRV1FW IiDouGlU5SxQqCQvDfsqMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmQ8LYNnpUi4zd8lqq5RUFx4yo7P/Ek4g0fR2lMueH8z9Pma8+vc+Y rsjTCWBrShGrOCjK5SinCfyhiCKf//km5W6zhgE8ryu0Y+m+PAkBLWpatSn4xwLx q7IkDe/J2/b0TYPr6EAKWljPM+7HUP/MDm5AFxf7TUWXz1Vgc0QAriDQTJHswN+8 ma3culxh6ek/He2Aufh8pf8VEuMi/7poCCcjCT3xbZURXjZhLQHcqKR/PXiTX/oh 2k+BZAUyQzp5gk5Q7U/kx6YJm0CFEkIWsIcZIa700WEBS5cz5U0VgaoExV9P+vcJ ew9gVXapeiEaxggcNGX4XO2A//74TmuX -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:51 2025 by rpki-client