$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: 2HXX4J2hdWBAVwHKaUcasRi0COUXVPunOBq6lwQOcKI= Subject key identifier: 97:60:18:84:2A:55:5B:25:D2:0B:89:BB:98:03:D1:1B:D2:2F:E8:93 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 071C Signing time: Sat 18 Oct 2025 23:14:48 +0000 Manifest this update: Sat 18 Oct 2025 23:14:47 +0000 Manifest next update: Sat 25 Oct 2025 23:14:47 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: kpNc4JZutTxal7ZqReAUAn3v8PDUtHbntHDYR2/WpMo=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: yon8zk/9fCZ3WyFBjyvszv/gLcYp08xtnvCiEsyDKSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Oct 18 23:14:47 2025 GMT Not After : Oct 25 23:14:47 2025 GMT Subject: CN=68f41f68-d2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bc:26:3d:de:37:a3:99:d3:aa:62:85:59:1c: 9b:09:15:3d:c2:1a:d1:c5:bc:5b:d4:95:fa:df:22: d1:23:1f:14:19:d6:9a:37:f0:a5:c9:e9:96:b0:fd: 80:0f:0c:df:fe:57:e9:05:69:0c:2a:2c:2f:4b:45: f5:0c:8f:13:47:3e:f9:68:71:ce:48:b1:48:20:0e: f5:ad:a4:8d:35:fa:5f:6a:8b:0c:c5:83:dd:5c:f5: 30:f2:8a:3c:31:95:f2:a4:c8:4e:3a:59:19:30:ff: f9:91:d6:1d:6e:ec:c1:e3:fb:a5:f0:ca:44:a8:80: cc:1f:c4:66:ff:44:48:d2:bf:11:d6:fa:6b:01:46: 31:66:5f:b9:58:b6:00:d8:9f:a4:67:56:4c:5e:10: 1a:cc:bf:bc:ac:ca:b3:70:5e:f2:91:bc:dd:88:d5: 4c:d8:1f:70:32:f7:e4:bf:3f:00:6a:ab:e8:20:4d: d5:6c:af:12:a0:40:81:8b:8c:f8:8d:ab:55:2a:e9: 8f:db:30:f7:1b:ec:08:2b:d9:91:9f:7f:96:40:88: cb:80:ab:46:a3:be:a9:15:31:5c:46:f1:01:39:20: c4:d5:dc:75:24:4a:04:8e:e0:be:af:5d:fd:a9:c5: 3b:8d:ae:da:91:1f:e2:f2:a6:2a:03:4a:45:d5:43: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:18:84:2A:55:5B:25:D2:0B:89:BB:98:03:D1:1B:D2:2F:E8:93 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:74:e0:59:ac:30:33:10:9a:55:fe:4b:b7:bd:09:31:a8:b3: 27:97:4c:bc:a6:cd:1b:c9:ca:d7:67:76:9b:63:60:8c:30:59: 2a:e6:a0:8d:ba:96:db:57:57:7e:73:1b:dc:bb:1e:e2:a4:12: 66:55:21:db:ef:e0:cf:a8:9e:62:3b:9e:2e:f0:c1:24:be:dd: dd:e7:d4:35:be:ee:db:e9:34:10:b4:2e:a7:ce:e2:8a:6c:7c: e6:cb:92:de:c9:d6:f0:7f:d9:f2:b0:78:3c:ca:46:f6:40:cf: 28:a4:91:87:90:1a:03:08:60:b5:76:c3:c7:24:7d:ed:ea:2f: 49:1b:bd:06:ac:e3:a6:df:07:b6:98:97:c9:89:b4:e2:71:03: 11:bf:95:cc:ca:28:84:6a:c9:26:05:d8:05:53:24:04:ee:37: f3:fd:99:eb:23:43:77:74:58:08:03:f1:69:2b:a6:bf:0d:e3: 09:1c:ee:10:13:04:ee:55:74:c0:2c:36:a7:23:af:d8:10:c2: 1f:8b:17:37:59:ba:7b:c7:b0:21:3d:34:8e:c1:1c:1e:71:06: 83:c7:11:39:c7:a4:f9:1f:f0:4f:5f:8b:9a:3c:35:ad:e8:ed: 0a:76:7d:d8:c2:61:97:10:39:1e:31:16:f4:84:98:51:ae:05: ed:10:b9:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjUxMDE4MjMxNDQ3WhcNMjUxMDI1MjMxNDQ3WjAYMRYwFAYD VQQDEw02OGY0MWY2OC1kMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LwmPd43o5nTqmKFWRybCRU9whrRxbxb1JX63yLRIx8UGdaaN/ClyemWsP2A Dwzf/lfpBWkMKiwvS0X1DI8TRz75aHHOSLFIIA71raSNNfpfaosMxYPdXPUw8oo8 MZXypMhOOlkZMP/5kdYdbuzB4/ul8MpEqIDMH8Rm/0RI0r8R1vprAUYxZl+5WLYA 2J+kZ1ZMXhAazL+8rMqzcF7ykbzdiNVM2B9wMvfkvz8AaqvoIE3VbK8SoECBi4z4 jatVKumP2zD3G+wIK9mRn3+WQIjLgKtGo76pFTFcRvEBOSDE1dx1JEoEjuC+r139 qcU7ja7akR/i8qYqA0pF1UOuKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdgGIQq VVsl0guJu5gD0RvSL+iTMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcdOBZrDAzEJpV/ku3vQkxqLMnl0y8ps0bycrXZ3abY2CMMFkq5qCN upbbV1d+cxvcux7ipBJmVSHb7+DPqJ5iO54u8MEkvt3d59Q1vu7b6TQQtC6nzuKK bHzmy5Leydbwf9nysHg8ykb2QM8opJGHkBoDCGC1dsPHJH3t6i9JG70GrOOm3we2 mJfJibTicQMRv5XMyiiEaskmBdgFUyQE7jfz/ZnrI0N3dFgIA/FpK6a/DeMJHO4Q EwTuVXTALDanI6/YEMIfixc3Wbp7x7AhPTSOwRwecQaDxxE5x6T5H/BPX4uaPDWt 6O0Kdn3YwmGXEDkeMRb0hJhRrgXtELmJ -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:54 2025 by rpki-client