$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json) Hash identifier: wSnmfXIOTMFsLPuZhyNhGXgCTbVgSHbppAwFDpO8g8g= Subject key identifier: 09:05:F1:27:B1:D2:56:2F:B7:3E:67:76:DC:94:63:78:35:DA:FF:28 Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft Manifest number: 085E Signing time: Sat 18 Oct 2025 21:48:27 +0000 Manifest this update: Sat 18 Oct 2025 21:48:26 +0000 Manifest next update: Sat 25 Oct 2025 21:48:26 +0000 Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: +Nu+JiJX3/F5KNACs9RJKovNxkMEmXRd4mRPDPa23gM=) 2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B Validity Not Before: Oct 18 21:48:26 2025 GMT Not After : Oct 25 21:48:26 2025 GMT Subject: CN=68f40b2b-9ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:b3:3a:c1:c3:f2:a7:b1:ae:3f:b7:b0:e0: 30:23:32:c4:07:09:67:d6:a8:23:6c:df:b0:60:82: 74:95:01:f0:4b:33:58:02:df:1b:ec:8d:04:52:23: 4b:c0:ab:94:58:72:58:2b:cc:c6:ab:67:2e:f3:d1: 2f:c5:83:87:eb:80:d2:ac:a7:db:b5:8c:9b:be:66: cc:a9:02:98:e9:2a:81:2b:d9:c7:f7:8b:f2:26:29: 8d:9b:ba:e6:42:23:0e:63:2e:26:d7:43:87:ab:00: 02:c5:af:e9:b3:83:f0:5f:59:3e:b7:8b:eb:fd:b4: e3:27:ec:42:bc:e2:99:2d:5c:e3:da:a1:3f:29:58: 65:86:af:91:d0:7e:51:18:be:6d:46:45:16:80:e4: a9:bd:dd:c1:7b:59:da:03:6a:98:fb:b5:64:d2:d9: 2d:de:7a:97:5f:a9:17:20:ac:05:0a:f3:35:63:8c: ec:77:ab:7d:c5:52:4f:f2:8b:d4:4f:64:99:97:c9: 90:4b:bd:11:1b:1a:d4:3f:6f:66:5c:11:35:5c:e5: 30:fe:95:cd:c4:8f:a0:03:55:61:63:12:5d:6b:d8: c1:56:58:83:4b:d9:97:c6:5f:23:78:c8:3b:95:f6: b7:47:dd:e1:e6:51:6b:13:3a:e6:0e:83:c7:c9:f1: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:F1:27:B1:D2:56:2F:B7:3E:67:76:DC:94:63:78:35:DA:FF:28 X509v3 Authority Key Identifier: keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:4e:b5:cd:f7:71:4e:5a:c4:81:0e:35:27:b3:9a:c6:a9:6f: bb:22:a8:9a:36:83:b6:d8:cf:51:3c:d0:5d:4d:0c:78:06:39: aa:bc:78:77:6b:70:e9:14:03:d3:ed:13:7c:e7:a2:b2:92:22: d2:3b:45:3b:ae:6f:a3:4c:7e:5a:53:29:0c:3a:1f:48:23:ca: 58:22:7d:d4:52:13:b1:a0:ff:6d:7a:0e:79:fc:39:f5:27:69: 38:db:4b:9a:f1:72:ec:bd:52:86:a6:65:46:f3:88:36:d2:5d: 0d:78:a7:5e:5d:e9:81:1e:81:0e:12:14:da:91:2a:da:9a:74: ec:05:e6:13:89:65:c3:ab:93:03:11:b6:54:3e:77:26:81:9c: 34:17:95:75:b1:f4:d0:fd:96:94:27:57:9e:5b:71:58:3d:64: 17:9e:1d:d8:6c:9b:c8:2b:92:47:6f:da:c7:50:d5:6f:27:27: e6:97:57:06:1a:5e:ed:f8:14:4f:54:6a:5c:d2:5b:63:0e:50: 91:e6:99:42:eb:e6:68:69:33:8f:f9:06:dc:00:d9:22:7b:fb: d0:05:9f:b0:73:49:40:68:fd:51:c5:6a:f9:6b:09:69:81:38: 54:2f:f5:74:0c:51:3d:5a:33:13:db:06:c1:d4:d9:9a:f3:32: f2:38:41:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3 RDcxNjQyNEIwHhcNMjUxMDE4MjE0ODI2WhcNMjUxMDI1MjE0ODI2WjAYMRYwFAYD VQQDEw02OGY0MGIyYi05ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49KzOsHD8qexrj+3sOAwIzLEBwln1qgjbN+wYIJ0lQHwSzNYAt8b7I0EUiNL wKuUWHJYK8zGq2cu89EvxYOH64DSrKfbtYybvmbMqQKY6SqBK9nH94vyJimNm7rm QiMOYy4m10OHqwACxa/ps4PwX1k+t4vr/bTjJ+xCvOKZLVzj2qE/KVhlhq+R0H5R GL5tRkUWgOSpvd3Be1naA2qY+7Vk0tkt3nqXX6kXIKwFCvM1Y4zsd6t9xVJP8ovU T2SZl8mQS70RGxrUP29mXBE1XOUw/pXNxI+gA1VhYxJda9jBVliDS9mXxl8jeMg7 lfa3R93h5lFrEzrmDoPHyfFF5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkF8Sex 0lYvtz5ndtyUY3g12v8oMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3 ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3 V0NtSl9NdHlfSko5Y1dRa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQTrXN93FOWsSBDjUns5rGqW+7IqiaNoO22M9RPNBdTQx4BjmqvHh3 a3DpFAPT7RN856KykiLSO0U7rm+jTH5aUykMOh9II8pYIn3UUhOxoP9teg55/Dn1 J2k420ua8XLsvVKGpmVG84g20l0NeKdeXemBHoEOEhTakSramnTsBeYTiWXDq5MD EbZUPncmgZw0F5V1sfTQ/ZaUJ1eeW3FYPWQXnh3YbJvIK5JHb9rHUNVvJyfml1cG Gl7t+BRPVGpc0ltjDlCR5plC6+ZoaTOP+QbcANkie/vQBZ+wc0lAaP1RxWr5awlp gThUL/V0DFE9WjMT2wbB1Nma8zLyOEGC -----END CERTIFICATE-----Generated at Mon Oct 20 00:23:39 2025 by rpki-client