$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: yannjD01O9nWzzdvjjEnpNiGDISRtl7ssDaus/f+g0o= Subject key identifier: DA:B5:CC:1F:60:1E:07:B0:65:A5:BA:E1:AE:62:C2:C1:B6:BD:98:6E Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 109B Signing time: Sat 18 Oct 2025 17:53:55 +0000 Manifest this update: Sat 18 Oct 2025 17:53:54 +0000 Manifest next update: Sat 25 Oct 2025 17:53:54 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: T8rgSODrK0THGViIRjBBqELEWydA5BshhBAXeIN1yZ0=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: XAfo1PZPIVH3Y+cfsdpgLhiwJGHrd3PGIzfnpG6VlMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Oct 18 17:53:54 2025 GMT Not After : Oct 25 17:53:54 2025 GMT Subject: CN=68f3d433-4e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:df:fd:61:e8:af:2e:1a:4c:40:2f:1b:75: df:37:b5:fb:e6:b5:81:31:97:e2:24:fd:26:90:48: 67:31:73:9c:08:3c:16:67:a4:23:7a:a6:8f:51:02: 85:31:87:c4:be:18:37:70:11:b1:13:a2:46:31:c4: c3:ef:f4:39:55:e9:f4:6b:76:42:f8:fd:15:6b:40: c9:52:30:f4:f9:45:2e:7a:4f:4e:2d:df:13:af:aa: dc:87:7d:c2:13:44:f5:89:b1:aa:62:7c:d5:02:7b: af:20:06:86:67:33:8a:8a:ac:d9:65:28:ba:84:28: 13:4a:1a:a3:37:22:0f:dd:62:eb:68:98:07:95:91: 02:48:91:63:cc:3e:2b:8f:df:66:8f:2d:db:54:d5: fd:72:8d:3f:27:64:b3:bd:6c:95:46:c4:3a:43:2f: a9:56:3b:7e:91:47:05:7f:bc:d6:be:6c:4f:e0:40: 26:ae:fc:c3:9b:9e:f5:5c:3f:46:cd:25:0f:0d:d2: 1a:7e:4a:df:57:08:65:15:c5:40:e7:48:a2:2c:39: 59:25:da:10:5e:03:d3:29:01:9a:ac:55:bb:94:b8: fb:6d:5d:8e:9d:6b:06:9d:c9:4d:d8:47:a6:84:f2: a3:2a:cd:a2:ea:a7:0b:c9:aa:4a:8e:aa:87:fd:87: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B5:CC:1F:60:1E:07:B0:65:A5:BA:E1:AE:62:C2:C1:B6:BD:98:6E X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:be:da:c3:b6:0e:85:17:5a:46:41:d5:6c:ef:e2:28:15: 25:16:75:3c:f6:ce:e7:ee:dc:f7:82:8f:f9:b4:35:79:6c:40: 74:c3:fa:6d:1b:f6:f7:a8:e7:d8:4b:37:62:ca:a0:7f:5a:45: 42:f9:0c:56:f8:14:39:ea:04:1c:85:42:df:94:31:07:a0:1b: 9d:ea:5c:b2:9e:e4:c9:f4:6b:09:23:d3:de:11:d0:2d:f6:ae: 06:39:d5:dd:b4:74:01:e0:e8:7e:4b:59:5b:76:e4:7b:e0:29: 0f:96:d2:ce:3b:e1:fe:64:89:a5:6b:e1:d4:62:1b:bc:38:97: cf:bd:8b:e3:83:57:8a:31:ff:82:d4:58:11:22:28:c7:06:06: 99:77:b3:89:e0:cb:21:8f:f7:dd:62:7a:40:e5:2c:ad:d9:00: 40:4a:7e:b8:cc:e3:a5:96:7a:00:0f:ad:1c:09:a8:42:7d:3b: 22:6d:69:66:3e:71:1e:04:52:62:91:53:35:f4:4b:f8:13:38: 6e:01:c1:45:38:4f:99:f0:f1:e8:8f:42:cb:b1:74:05:ef:d1: 79:ec:b6:fe:88:d3:3a:b4:41:41:69:f3:34:09:be:bb:ff:d3: 25:a9:c7:0e:7c:84:d2:1c:85:a0:70:be:a9:d2:9a:66:eb:68: 15:6c:1f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjUxMDE4MTc1MzU0WhcNMjUxMDI1MTc1MzU0WjAYMRYwFAYD VQQDEw02OGYzZDQzMy00ZTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOLf/WHory4aTEAvG3XfN7X75rWBMZfiJP0mkEhnMXOcCDwWZ6QjeqaPUQKF MYfEvhg3cBGxE6JGMcTD7/Q5Ven0a3ZC+P0Va0DJUjD0+UUuek9OLd8Tr6rch33C E0T1ibGqYnzVAnuvIAaGZzOKiqzZZSi6hCgTShqjNyIP3WLraJgHlZECSJFjzD4r j99mjy3bVNX9co0/J2SzvWyVRsQ6Qy+pVjt+kUcFf7zWvmxP4EAmrvzDm571XD9G zSUPDdIafkrfVwhlFcVA50iiLDlZJdoQXgPTKQGarFW7lLj7bV2OnWsGnclN2Eem hPKjKs2i6qcLyapKjqqH/YeFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq1zB9g HgewZaW64a5iwsG2vZhuMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoQr7aw7YOhRdaRkHVbO/iKBUlFnU89s7n7tz3go/5tDV5bEB0w/pt G/b3qOfYSzdiyqB/WkVC+QxW+BQ56gQchULflDEHoBud6lyynuTJ9GsJI9PeEdAt 9q4GOdXdtHQB4Oh+S1lbduR74CkPltLOO+H+ZImla+HUYhu8OJfPvYvjg1eKMf+C 1FgRIijHBgaZd7OJ4Mshj/fdYnpA5Syt2QBASn64zOOllnoAD60cCahCfTsibWlm PnEeBFJikVM19Ev4EzhuAcFFOE+Z8PHoj0LLsXQF79F57Lb+iNM6tEFBafM0Cb67 /9MlqccOfITSHIWgcL6p0ppm62gVbB+g -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:12 2025 by rpki-client