$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: 0WRf/6IiMukehHARVDWMw6kJbfdwQqIEEOcigtAiOXc= Subject key identifier: E5:27:0E:B6:FE:84:A4:23:33:01:78:B3:72:AA:82:F1:43:C2:FA:28 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:24:37 +0000 Manifest this update: Sun 19 Oct 2025 11:24:37 +0000 Manifest next update: Sun 26 Oct 2025 11:24:37 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: Lb8wG6jYxDlc4zp3RSgIBFIEm236sqwHMiegQPLXJ2Q=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Oct 19 11:24:37 2025 GMT Not After : Oct 26 11:24:37 2025 GMT Subject: CN=68f4ca75-8a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:3c:05:0c:d5:6d:13:fe:14:9a:84:d3:0e: a1:1a:42:6c:dd:2e:75:42:1d:65:f1:9c:e3:fb:8e: 97:72:11:b9:8c:e9:e9:08:69:21:fe:9d:da:37:89: d3:f6:55:f0:74:f3:2b:69:92:70:b2:e7:23:5e:86: 5c:18:08:1a:31:bc:ae:c4:71:87:d9:36:db:b3:03: 01:d9:d2:fb:04:87:5e:bd:f4:a7:f8:29:d1:aa:6b: 12:a4:b4:3c:99:e1:16:0b:3b:d2:37:0b:8f:30:fc: 94:74:23:18:94:c9:67:ba:2c:cf:73:61:e4:e9:f7: f2:db:00:ab:51:11:10:d2:a3:0a:f3:7d:46:f5:f9: 22:28:47:db:ee:76:2e:60:13:29:6c:0a:56:13:b0: bc:61:4b:36:d9:26:82:17:ad:05:8b:65:2a:13:3e: 54:32:43:cd:06:5b:ef:91:1d:1d:88:69:79:8c:b3: f3:30:fc:14:28:93:2b:93:89:fc:94:4f:db:02:cf: 00:0f:07:df:f7:46:dc:ce:03:43:66:8c:47:9e:85: 78:29:db:29:a7:86:e7:bf:99:8b:f6:96:3d:ac:84: 16:56:c0:ea:cb:4b:72:89:db:1e:f3:d0:ca:76:db: d4:1e:ae:10:c8:c7:51:97:1b:bc:47:97:45:6c:78: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:27:0E:B6:FE:84:A4:23:33:01:78:B3:72:AA:82:F1:43:C2:FA:28 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6a:da:22:c0:99:54:40:39:97:0d:8f:50:50:de:8d:50:73: 3e:b1:77:d7:0a:db:36:c3:d8:cf:01:e5:29:f9:ac:a5:bf:c9: cd:3b:88:57:ee:19:84:be:57:66:c3:b1:ae:58:e4:b3:cd:83: 24:11:7e:0d:bc:24:ec:bc:f9:11:ff:6d:e4:23:0f:bd:b6:6a: 2f:3e:52:35:e3:0c:f6:de:4c:3c:13:93:28:3c:32:f8:1a:37: 64:69:ca:6d:f2:28:7f:ba:4d:e9:b2:43:71:45:62:c5:c8:16: 5e:fc:bc:aa:a2:7a:d8:c1:78:d7:f9:45:eb:cb:8d:9d:6b:20: d6:aa:51:a5:f3:0c:a6:15:f3:a8:1d:88:21:a7:c7:e7:ee:eb: ce:35:c7:dc:32:3b:9a:8a:33:0d:dc:a5:e2:4e:f0:37:45:13: 38:8f:d3:1b:07:fb:e7:7b:48:1c:39:3b:64:da:69:95:ca:3f: 18:1f:b6:64:5b:32:01:73:df:55:8e:34:42:d9:68:ee:91:85: 2b:8d:fd:67:d5:e9:a9:86:78:5f:6a:b1:72:a6:b8:19:2f:06: 69:84:f7:ff:a3:8c:30:0d:30:8c:25:f0:d2:f9:0b:d9:a9:ef: 98:6d:5c:74:ef:64:dc:a6:b8:58:12:02:cb:a4:e5:e5:c1:7f: 72:cb:26:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNTEwMTkxMTI0MzdaFw0yNTEwMjYxMTI0MzdaMBgxFjAUBgNV BAMTDTY4ZjRjYTc1LThhMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMNzwFDNVtE/4UmoTTDqEaQmzdLnVCHWXxnOP7jpdyEbmM6ekIaSH+ndo3idP2 VfB08ytpknCy5yNehlwYCBoxvK7EcYfZNtuzAwHZ0vsEh1699Kf4KdGqaxKktDyZ 4RYLO9I3C48w/JR0IxiUyWe6LM9zYeTp9/LbAKtRERDSowrzfUb1+SIoR9vudi5g EylsClYTsLxhSzbZJoIXrQWLZSoTPlQyQ80GW++RHR2IaXmMs/Mw/BQokyuTifyU T9sCzwAPB9/3RtzOA0NmjEeehXgp2ymnhue/mYv2lj2shBZWwOrLS3KJ2x7z0Mp2 29QerhDIx1GXG7xHl0VseOd1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5ScOtv6E pCMzAXizcqqC8UPC+igwHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA5q2iLAmVRAOZcNj1BQ3o1Qcz6xd9cK2zbD2M8B5Sn5rKW/yc07iFfu GYS+V2bDsa5Y5LPNgyQRfg28JOy8+RH/beQjD722ai8+UjXjDPbeTDwTkyg8Mvga N2Rpym3yKH+6TemyQ3FFYsXIFl78vKqietjBeNf5RevLjZ1rINaqUaXzDKYV86gd iCGnx+fu6841x9wyO5qKMw3cpeJO8DdFEziP0xsH++d7SBw5O2TaaZXKPxgftmRb MgFz31WONELZaO6RhSuN/WfV6amGeF9qsXKmuBkvBmmE9/+jjDANMIwl8NL5C9mp 75htXHTvZNymuFgSAsuk5eXBf3LLJss= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:56 2025 by rpki-client