$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft File: kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json) Hash identifier: kwZxKl0yyP0uBqvrMzvLP3xRP50JjHD0YzswdGh+5zM= Subject key identifier: E0:1A:BA:E4:10:74:F5:E8:75:74:C7:5D:8F:CE:70:4F:9F:D2:8F:6E Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 Certificate issuer: /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft Manifest number: 55 Signing time: Sun 19 Oct 2025 10:38:00 +0000 Manifest this update: Sun 19 Oct 2025 10:37:59 +0000 Manifest next update: Sun 26 Oct 2025 10:37:59 +0000 Files and hashes: 1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: n9k7YYHnt/0mZP8/yF0ajk527M0nqYrajXaytvpIm+I=) 2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: AMD2GEEFiF8rkGOwYs1r+qxOyHQFwJJUEW+dwUt3a3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436 Validity Not Before: Oct 19 10:37:59 2025 GMT Not After : Oct 26 10:37:59 2025 GMT Subject: CN=68f4bf87-9646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:27:6a:67:56:c7:50:34:24:5a:dd:bb:4c: 3c:5c:9e:34:25:52:26:51:5d:fa:ed:88:93:3a:9d: 5e:71:37:86:5e:50:a4:2c:79:10:e7:e3:41:10:b1: 0c:3b:ff:e5:a6:b4:fc:70:83:4d:c0:e8:8e:fa:6e: 36:97:4e:6e:14:f9:90:29:56:84:27:3f:e8:5d:5c: 6a:02:ed:26:ff:18:e1:8f:7e:5c:b7:ec:09:2f:9c: ed:b8:39:58:43:10:14:cb:44:f0:6a:65:2a:09:73: 96:69:1a:47:51:53:a9:84:41:25:07:50:5a:e5:c7: f9:27:da:ec:15:20:6d:01:81:10:09:66:97:8b:a4: b6:7b:41:b9:53:8a:50:75:cb:8c:d3:7a:ef:ea:07: 4a:e9:a0:7f:9b:6d:44:6b:35:92:7b:43:7b:05:c2: f4:64:44:fc:15:fa:a2:d8:1c:3c:52:05:74:22:46: 30:1f:b2:81:b5:31:57:1b:c4:3d:5e:c9:e8:09:a5: 7f:81:c7:b1:36:50:f9:5c:93:e5:4c:48:2b:fd:33: 86:0a:36:66:c0:65:12:d6:26:29:70:b5:76:63:2d: 27:5f:8c:2c:4f:c4:40:43:e3:53:11:ff:85:6f:a7: 4c:3e:4d:42:59:5e:e8:4f:45:73:24:6d:c2:f8:f1: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1A:BA:E4:10:74:F5:E8:75:74:C7:5D:8F:CE:70:4F:9F:D2:8F:6E X509v3 Authority Key Identifier: keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:d8:50:80:54:cc:33:68:47:51:6f:80:ba:bf:64:fd:67:89: cb:c8:a0:dd:52:52:b1:6a:7a:f6:88:b8:dc:67:41:e3:ba:f6: 9f:8c:32:bc:b5:9f:a7:f5:76:55:dc:5d:3e:c4:f3:01:88:ec: 18:9c:3c:70:12:c8:53:6c:ba:8a:e6:9b:d6:30:fc:b0:e5:28: 77:1d:aa:99:79:8c:43:91:39:0e:0f:01:ba:87:32:49:c3:8a: cb:cf:44:04:2a:96:99:f0:d2:18:ce:f2:a2:ba:12:f2:0a:aa: e1:ed:d9:0e:3c:bb:4a:49:3f:1f:5f:3d:64:99:71:d1:29:b1: 7c:17:eb:55:74:32:b3:41:bc:8c:00:b0:28:7c:c3:9e:cd:34: 80:21:ea:10:39:6f:f8:6f:7f:59:73:1f:5a:24:4a:fb:dc:14: 98:80:57:d2:a4:71:87:7c:45:7c:3f:7a:6b:5c:4c:94:80:25: 0f:72:9f:17:5d:20:4e:46:8c:f3:fd:e8:94:a4:3d:f8:35:20: b8:05:33:b0:12:e5:da:61:a2:9a:29:e4:89:f6:ed:dd:a8:b1: c5:61:a9:99:2b:a0:99:af:eb:6c:3b:a8:d5:7c:96:00:26:35: e2:47:e9:eb:aa:0c:dd:87:dc:03:af:77:70:3f:a5:01:f2:fc: ef:f6:c5:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNDQzExMC8GA1UEBRMoOTMwNzZFMkNCNUUwOTk1NDJBQjIxMEZFQjQ4NjAxOTBD NTQ1QzQzNjAeFw0yNTEwMTkxMDM3NTlaFw0yNTEwMjYxMDM3NTlaMBgxFjAUBgNV BAMTDTY4ZjRiZjg3LTk2NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4mydqZ1bHUDQkWt27TDxcnjQlUiZRXfrtiJM6nV5xN4ZeUKQseRDn40EQsQw7 /+WmtPxwg03A6I76bjaXTm4U+ZApVoQnP+hdXGoC7Sb/GOGPfly37AkvnO24OVhD EBTLRPBqZSoJc5ZpGkdRU6mEQSUHUFrlx/kn2uwVIG0BgRAJZpeLpLZ7QblTilB1 y4zTeu/qB0rpoH+bbURrNZJ7Q3sFwvRkRPwV+qLYHDxSBXQiRjAfsoG1MVcbxD1e yegJpX+Bx7E2UPlck+VMSCv9M4YKNmbAZRLWJilwtXZjLSdfjCxPxEBD41MR/4Vv p0w+TUJZXuhPRXMkbcL48YgxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4Bq65BB0 9eh1dMddj85wT5/Sj24wHwYDVR0jBBgwFoAUkwduLLXgmVQqshD+tIYBkMVFxDYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0NDLzc1OEM4MEEyMkZE NzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhE WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3dkdUxMWGdtVlFxc2hELXRJWUJrTVZGeERZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 Q0NDLzc1OEM4MEEyMkZENzExRjA4NjJBNjM4NUM0RjlBRTAyL2t3ZHVMTFhnbVZR cXNoRC10SVlCa01WRnhEWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHYUIBUzDNoR1FvgLq/ZP1nicvIoN1SUrFqevaIuNxnQeO69p+MMry1 n6f1dlXcXT7E8wGI7BicPHASyFNsuormm9Yw/LDlKHcdqpl5jEOROQ4PAbqHMknD isvPRAQqlpnw0hjO8qK6EvIKquHt2Q48u0pJPx9fPWSZcdEpsXwX61V0MrNBvIwA sCh8w57NNIAh6hA5b/hvf1lzH1okSvvcFJiAV9KkcYd8RXw/emtcTJSAJQ9ynxdd IE5GjPP96JSkPfg1ILgFM7AS5dphopop5In27d2oscVhqZkroJmv62w7qNV8lgAm NeJH6euqDN2H3AOvd3A/pQHy/O/2xfE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:37:28 2025 by rpki-client