$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: hLaOq7ugrZgYERsTS9KiNtZSgP4uRCYAMX6SUt9rrso= Subject key identifier: 25:6C:9B:D2:70:2F:A7:50:BC:50:77:8D:E7:01:53:56:02:B0:85:C2 Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 34DD Signing time: Mon 20 Oct 2025 15:02:34 +0000 Manifest this update: Mon 20 Oct 2025 15:02:33 +0000 Manifest next update: Mon 27 Oct 2025 15:02:33 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: lmIfIKUSaDYV0/2W1tnPQHE1LehqHqOlcTGN6qo3tvk=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 8wn1BShCqNm3QYIhzMCvnBkRSH1pV/AljqzDWjCUBxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: Oct 20 15:02:33 2025 GMT Not After : Oct 27 15:02:33 2025 GMT Subject: CN=68f64f09-6a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:d0:33:c7:79:f1:88:f2:e2:f9:40:51:f1: 92:7e:10:ed:7d:88:9b:98:27:03:8d:8b:5b:9d:0d: 0b:cf:4d:fe:3d:00:74:26:5f:42:d4:89:21:af:fd: 51:b4:c4:97:61:d3:4b:25:18:c9:de:f1:f7:02:0d: a1:79:ce:4c:3d:a4:85:6a:f7:98:6d:20:0e:7c:0d: c0:3e:4b:c9:80:ef:2c:70:e4:fe:5f:72:d6:32:e8: e0:15:b8:76:17:f7:3f:e7:c0:4b:6a:e0:a2:1c:6d: 18:be:2a:6e:cb:24:8a:7f:43:87:bd:0f:96:01:aa: 62:19:ea:83:7c:a2:ca:8e:05:39:72:9a:b3:2e:e9: 94:80:a3:99:fb:d5:72:0d:fc:79:43:28:59:31:79: 4e:b5:c9:bc:44:b4:b8:bd:29:ef:dd:6a:aa:77:6a: 60:6b:a0:68:a3:6d:54:1d:32:00:61:f7:2e:6e:b8: 4e:3f:1c:2e:fb:44:28:fc:c1:80:50:49:0c:1a:fe: e6:e5:68:0f:08:4e:db:de:c7:b4:75:6c:f3:d3:6e: f9:65:6b:67:c7:07:db:a6:87:12:09:e9:1b:75:e7: b7:57:4f:e4:7a:ba:3f:41:fb:60:da:83:fa:7f:1d: 7f:c9:b2:f6:1e:65:38:9b:57:a7:e0:15:2c:5c:13: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6C:9B:D2:70:2F:A7:50:BC:50:77:8D:E7:01:53:56:02:B0:85:C2 X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d5:8b:6a:cc:4f:70:6a:a7:85:0a:1f:10:bc:b8:f9:7b:6a: 2b:cf:f5:cb:22:9d:c3:09:20:d8:70:4d:39:63:a8:60:30:f4: 99:84:d6:ac:e9:23:de:66:79:bb:2d:c6:fb:61:d9:95:da:8e: dc:c6:25:90:61:0f:ab:24:cf:af:e1:f3:b7:87:5c:0b:ae:38: 3d:a8:3d:a1:b2:96:41:7b:93:ed:bf:c6:54:ec:09:f7:4c:b1: 5f:b8:72:d5:84:d2:d9:f2:5b:b5:c2:74:f9:87:54:96:d0:9f: 61:f3:c4:99:64:10:b9:93:57:e8:92:68:b4:47:e7:c4:3e:ff: 2f:d4:ae:53:c5:4e:af:b5:b7:46:ff:94:c5:01:73:53:30:ac: 33:73:c4:e3:6a:9e:f2:a2:c8:b0:1f:48:f2:b3:94:86:43:6a: d8:58:4e:d3:bf:36:5e:9e:48:33:dc:f0:0e:0d:f0:4c:f4:f4: fe:95:2d:fc:45:27:ec:02:03:f0:7e:1e:6a:af:fc:70:a8:99: 5d:cc:6a:d3:20:4a:11:06:06:f3:c3:ac:9b:17:7a:74:72:2b: 41:58:10:d5:7e:04:66:59:db:69:39:12:a7:dd:30:25:a0:6d: 59:56:7f:7d:52:e2:86:cf:d4:7b:fd:c8:22:13:89:76:a2:21: 8f:d8:e7:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjUxMDIwMTUwMjMzWhcNMjUxMDI3MTUwMjMzWjAYMRYwFAYD VQQDEw02OGY2NGYwOS02YTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAui3QM8d58Yjy4vlAUfGSfhDtfYibmCcDjYtbnQ0Lz03+PQB0Jl9C1Ikhr/1R tMSXYdNLJRjJ3vH3Ag2hec5MPaSFaveYbSAOfA3APkvJgO8scOT+X3LWMujgFbh2 F/c/58BLauCiHG0YvipuyySKf0OHvQ+WAapiGeqDfKLKjgU5cpqzLumUgKOZ+9Vy Dfx5QyhZMXlOtcm8RLS4vSnv3Wqqd2pga6Boo21UHTIAYfcubrhOPxwu+0Qo/MGA UEkMGv7m5WgPCE7b3se0dWzz0275ZWtnxwfbpocSCekbdee3V0/kero/Qftg2oP6 fx1/ybL2HmU4m1en4BUsXBOMSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVsm9Jw L6dQvFB3jecBU1YCsIXCMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF1YtqzE9waqeFCh8QvLj5e2orz/XLIp3DCSDYcE05Y6hgMPSZhNas 6SPeZnm7Lcb7YdmV2o7cxiWQYQ+rJM+v4fO3h1wLrjg9qD2hspZBe5Ptv8ZU7An3 TLFfuHLVhNLZ8lu1wnT5h1SW0J9h88SZZBC5k1fokmi0R+fEPv8v1K5TxU6vtbdG /5TFAXNTMKwzc8Tjap7yosiwH0jys5SGQ2rYWE7TvzZenkgz3PAODfBM9PT+lS38 RSfsAgPwfh5qr/xwqJldzGrTIEoRBgbzw6ybF3p0citBWBDVfgRmWdtpORKn3TAl oG1ZVn99UuKGz9R7/cgiE4l2oiGP2Ocr -----END CERTIFICATE-----Generated at Mon Oct 20 19:10:58 2025 by rpki-client