$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json) Hash identifier: f7s1YYZaGe+zHbvMYXFOTarY2oN3B5wiXGy2Tknw9zg= Subject key identifier: AB:1D:1A:99:AD:D3:A0:ED:39:34:CC:5F:FB:A3:96:28:9B:F9:EC:36 Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft Manifest number: 03E3 Signing time: Sun 19 Oct 2025 02:30:18 +0000 Manifest this update: Sun 19 Oct 2025 02:30:17 +0000 Manifest next update: Sun 26 Oct 2025 02:30:17 +0000 Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: r/nrxvobXORiNEWXnW6tHJbW/CzCrnHhqt5uqcS3+/g=) 2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7 Validity Not Before: Oct 19 02:30:17 2025 GMT Not After : Oct 26 02:30:17 2025 GMT Subject: CN=68f44d3a-db04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:8f:8f:1c:cd:6d:4c:77:0c:72:bd:52:98: a3:c7:22:00:b2:25:8f:0e:2b:d7:99:48:cc:d4:3e: f9:9c:d6:e2:69:48:fb:04:78:f0:6d:61:89:4b:0b: 51:13:dd:2c:e3:ef:c1:41:94:cf:8a:45:69:55:c7: 5c:e5:47:42:f8:bf:1f:e1:c0:ff:b7:19:39:a0:53: 24:71:30:a2:c1:23:fd:a6:21:b5:a1:4d:80:84:6a: 6b:f1:e4:93:56:dd:82:64:8d:12:41:14:c3:fe:f0: 42:01:23:65:c4:36:40:7f:18:79:43:28:4f:7e:b3: 6f:67:37:c4:50:88:46:30:dd:30:f2:06:59:ac:15: f2:49:5f:43:07:6a:2e:6f:f0:6c:10:16:df:0a:96: 4b:c4:54:14:35:bb:27:2e:95:28:43:64:31:aa:c8: 7e:f3:17:a5:41:38:84:24:ca:cf:7c:e2:1b:6d:a2: f6:27:3b:44:55:8c:2a:40:ba:ff:26:b6:22:1e:53: 7e:7b:cf:72:b4:74:22:fc:16:f8:b2:59:ba:0c:ae: 4c:3b:13:7f:14:44:3f:70:f6:6f:95:31:8d:4f:e4: 33:c6:a1:31:28:f1:6a:85:c6:3f:0a:d6:ab:7a:d9: 90:55:ef:41:61:af:d8:3b:a1:ab:01:fc:d8:e5:19: c2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1D:1A:99:AD:D3:A0:ED:39:34:CC:5F:FB:A3:96:28:9B:F9:EC:36 X509v3 Authority Key Identifier: keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e3:4e:44:c5:0b:74:5c:2d:88:5e:94:90:e5:ff:73:25:a0: 6c:3d:ce:b8:4a:2c:a4:a8:9e:53:0e:10:61:85:73:cc:87:3e: b8:d3:2b:38:3f:cb:26:8b:e3:3f:46:cc:14:36:90:94:01:ec: b7:c8:27:2c:73:c3:fd:af:43:e1:d7:f8:91:8c:5d:6d:ce:c4: 94:85:ae:b5:4f:06:da:cd:7b:03:4e:83:dc:f3:9c:37:9a:8c: d3:f3:a9:8e:38:6f:11:33:c6:a3:7f:ac:e4:80:41:5f:55:8a: 22:eb:21:66:04:db:ee:fb:75:a2:34:db:6e:32:92:50:1e:47: 32:e8:07:ed:4e:f5:4c:cf:84:89:57:82:c7:e8:5a:e2:cd:95: 86:ba:90:63:c4:d2:d3:c0:4b:21:bd:c8:3b:93:2d:df:ce:eb: 09:71:26:44:41:ee:6a:ef:bd:4f:8b:a3:47:15:f5:d3:0d:6f: ec:58:ed:23:69:58:6d:c0:83:a9:de:71:2b:0e:dc:68:f4:ab: bf:16:d6:eb:7a:fb:44:cf:fa:16:f8:e5:c0:bd:ed:98:a4:47: 1e:4f:40:16:55:78:47:6e:93:6e:10:e4:c0:de:ef:d9:df:16: c6:a3:21:6d:77:a5:88:70:ea:49:a8:13:9c:67:93:d9:7c:d1: 8d:89:40:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF M0M0NDM3RTcwHhcNMjUxMDE5MDIzMDE3WhcNMjUxMDI2MDIzMDE3WjAYMRYwFAYD VQQDEw02OGY0NGQzYS1kYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV6PjxzNbUx3DHK9UpijxyIAsiWPDivXmUjM1D75nNbiaUj7BHjwbWGJSwtR E90s4+/BQZTPikVpVcdc5UdC+L8f4cD/txk5oFMkcTCiwSP9piG1oU2AhGpr8eST Vt2CZI0SQRTD/vBCASNlxDZAfxh5QyhPfrNvZzfEUIhGMN0w8gZZrBXySV9DB2ou b/BsEBbfCpZLxFQUNbsnLpUoQ2Qxqsh+8xelQTiEJMrPfOIbbaL2JztEVYwqQLr/ JrYiHlN+e89ytHQi/Bb4slm6DK5MOxN/FEQ/cPZvlTGNT+QzxqExKPFqhcY/Ctar etmQVe9BYa/YO6GrAfzY5RnC5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsdGpmt 06DtOTTMX/ujliib+ew2MB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1 THQ4T2tQNFRjNERqeEVOLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO405ExQt0XC2IXpSQ5f9zJaBsPc64SiykqJ5TDhBhhXPMhz640ys4 P8smi+M/RswUNpCUAey3yCcsc8P9r0Ph1/iRjF1tzsSUha61TwbazXsDToPc85w3 mozT86mOOG8RM8ajf6zkgEFfVYoi6yFmBNvu+3WiNNtuMpJQHkcy6AftTvVMz4SJ V4LH6FrizZWGupBjxNLTwEshvcg7ky3fzusJcSZEQe5q771Pi6NHFfXTDW/sWO0j aVhtwIOp3nErDtxo9Ku/FtbrevtEz/oW+OXAve2YpEceT0AWVXhHbpNuEOTA3u/Z 3xbGoyFtd6WIcOpJqBOcZ5PZfNGNiUBj -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:18 2025 by rpki-client