$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: 9ZIFBqZDZaTejihmYoqnzevyEp6atApTIQjTAcJmsS0= Subject key identifier: 72:1F:CF:63:09:84:A6:CE:DF:01:EE:1A:79:F0:EB:AB:B5:92:10:C5 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 0140 Signing time: Sun 19 Oct 2025 07:13:14 +0000 Manifest this update: Sun 19 Oct 2025 07:13:14 +0000 Manifest next update: Sun 26 Oct 2025 07:13:14 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: S7o9WUsf+YemYGlMJPSzDdelCcN4wAr9l28hfYZXfwQ=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: hkDgEW3xtmdXjSOLRvfpWhXCPRLijL9lQq3GA+lSi2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Oct 19 07:13:14 2025 GMT Not After : Oct 26 07:13:14 2025 GMT Subject: CN=68f48f8a-b087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:14:c3:d2:64:3a:0c:3e:e1:5c:ad:1f:c2: 0e:43:cb:8b:b0:68:ef:7e:eb:0c:28:84:b9:41:2c: 23:f0:65:6a:22:d0:a7:a9:ee:1b:ec:7f:06:ca:a1: e5:c7:fb:78:a9:ab:b7:fc:f3:a1:5e:1a:f7:ab:c6: 5c:99:9b:93:45:90:51:ca:71:67:e4:0d:cb:bc:88: 4a:ba:7d:04:17:52:cb:da:c9:b8:6f:72:52:cb:5f: 1c:f6:61:29:ed:38:9b:b5:ce:64:5c:85:f5:6a:2f: 4f:4a:dd:8c:cb:c2:cf:11:ce:a8:bd:11:c4:fe:45: f0:d8:9b:59:02:2c:80:59:45:65:99:07:ad:6f:b8: 27:75:1d:37:44:a9:17:62:2e:ce:7e:92:ad:db:b0: 93:b5:e6:dc:cf:47:e7:51:88:37:09:21:39:30:1f: a6:72:31:74:8e:98:cb:16:e6:2b:bf:1f:d1:b5:3d: fc:e4:fa:6c:35:2b:dd:6c:e5:7e:b2:2a:7a:d1:14: 51:ef:ba:fc:e9:0d:44:3c:80:e8:3d:c8:b1:a4:85: 18:b8:45:6c:aa:6d:d1:5d:41:7e:9d:95:90:45:0e: bf:5f:52:74:8a:37:9b:e2:2b:47:37:47:00:4b:ab: 7a:7e:df:97:28:00:95:fc:f2:18:73:0a:35:04:f3: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1F:CF:63:09:84:A6:CE:DF:01:EE:1A:79:F0:EB:AB:B5:92:10:C5 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:e0:73:aa:c4:06:8f:7e:28:fa:03:3b:4c:12:b4:4e:58:f5: c5:e5:c7:5d:8f:a0:4f:c1:37:9d:e4:81:11:f8:3b:43:43:1c: 54:a8:5e:82:04:23:27:cf:f6:39:ac:73:ee:19:3d:b6:d3:a3: 6f:e6:70:df:53:a1:e2:12:3c:7a:b8:94:04:35:85:2a:b6:11: 9b:49:8e:6b:a6:a6:84:df:35:d0:da:10:57:af:c4:7c:a8:46: 1b:9f:3a:58:38:52:42:12:42:f9:2c:bc:f4:77:69:e8:56:ce: db:f1:d9:c6:47:9a:9d:02:54:60:d1:92:89:2e:80:04:a8:6f: 55:82:06:ae:fc:8e:9d:4e:cf:00:37:05:25:28:bf:a0:29:8f: 38:f1:d2:5b:ea:64:3e:ae:73:ab:dc:44:4d:19:1c:01:c4:67: 01:e0:51:78:73:1f:6f:2e:30:c2:0a:5a:d3:67:d6:8f:ea:05: 20:4f:fd:59:45:16:e2:55:5b:be:ba:fc:49:90:30:41:67:56: 98:55:3c:2b:5e:bd:df:ca:8d:66:63:2f:ed:3f:23:b9:7c:d7: cc:e0:ee:c6:67:db:0c:2f:35:2b:df:5d:e4:0d:ce:9d:9f:50: 90:d7:fb:60:26:f3:1d:c3:14:9e:d6:e5:cf:c1:72:a6:ac:eb: 7a:94:6d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjUxMDE5MDcxMzE0WhcNMjUxMDI2MDcxMzE0WjAYMRYwFAYD VQQDEw02OGY0OGY4YS1iMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NYUw9JkOgw+4VytH8IOQ8uLsGjvfusMKIS5QSwj8GVqItCnqe4b7H8GyqHl x/t4qau3/POhXhr3q8ZcmZuTRZBRynFn5A3LvIhKun0EF1LL2sm4b3JSy18c9mEp 7Tibtc5kXIX1ai9PSt2My8LPEc6ovRHE/kXw2JtZAiyAWUVlmQetb7gndR03RKkX Yi7OfpKt27CTtebcz0fnUYg3CSE5MB+mcjF0jpjLFuYrvx/RtT385PpsNSvdbOV+ sip60RRR77r86Q1EPIDoPcixpIUYuEVsqm3RXUF+nZWQRQ6/X1J0ijeb4itHN0cA S6t6ft+XKACV/PIYcwo1BPNZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIfz2MJ hKbO3wHuGnnw66u1khDFMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ4HOqxAaPfij6AztMErROWPXF5cddj6BPwTed5IER+DtDQxxUqF6C BCMnz/Y5rHPuGT2206Nv5nDfU6HiEjx6uJQENYUqthGbSY5rpqaE3zXQ2hBXr8R8 qEYbnzpYOFJCEkL5LLz0d2noVs7b8dnGR5qdAlRg0ZKJLoAEqG9Vggau/I6dTs8A NwUlKL+gKY848dJb6mQ+rnOr3ERNGRwBxGcB4FF4cx9vLjDCClrTZ9aP6gUgT/1Z RRbiVVu+uvxJkDBBZ1aYVTwrXr3fyo1mYy/tPyO5fNfM4O7GZ9sMLzUr313kDc6d n1CQ1/tgJvMdwxSe1uXPwXKmrOt6lG3E -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:00 2025 by rpki-client