$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: VW4V8ZuoXa9CeLvjBe8sjjwtDuBg8h80pPmNpnU1/yQ= Subject key identifier: E0:BF:04:98:EA:1F:2E:4F:27:95:25:1A:BA:F3:4D:29:B8:16:D7:19 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: 60 Signing time: Sun 19 Oct 2025 10:26:55 +0000 Manifest this update: Sun 19 Oct 2025 10:26:54 +0000 Manifest next update: Sun 26 Oct 2025 10:26:54 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: KnWPSp3lBUJFHSZvRb+kSf/U24HkXDjjq48rZxbN02k=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: +HdHyMhgt4vT3DS5nsB5YQiE8tKIuj7aqeWwrUFKUm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Oct 19 10:26:54 2025 GMT Not After : Oct 26 10:26:54 2025 GMT Subject: CN=68f4bcee-e9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:c7:08:36:0f:7b:67:a6:ee:84:12:6e:bb: 59:63:2a:2a:b5:1e:0c:61:5e:f1:b5:9d:27:ec:5d: d9:1c:7d:2f:28:ef:f3:2f:85:f1:88:fd:e0:f8:0d: bb:0a:24:80:f6:ba:1b:e8:5e:f4:4b:7c:04:91:58: b4:3f:d8:e8:1f:db:73:38:76:1f:35:07:a8:63:e2: bd:88:e3:66:96:d8:49:ca:fe:4d:b9:07:6c:f9:30: 54:da:f0:43:12:be:8d:a8:a0:92:2c:76:24:61:09: 89:7e:33:00:85:b8:d0:5a:ec:ad:ca:d9:31:6a:9d: 87:e0:96:e7:72:ab:66:62:5d:da:47:b4:3c:e5:98: f1:e1:33:df:d1:bb:c1:0e:78:98:5b:0f:e4:0c:73: 2c:75:9d:46:40:a8:15:87:a5:0d:e7:2c:e5:26:93: f1:5e:6a:e7:d4:10:3b:91:83:da:57:f4:fa:30:b6: c1:57:a0:fc:93:e0:ba:dd:ee:b7:ad:e9:87:14:9d: ae:0e:56:a6:8b:f2:4e:c7:ea:ab:1c:b1:8c:1f:68: dc:79:23:7d:98:f4:53:75:b3:f4:96:a7:de:42:51: 0b:60:8b:f5:81:ec:3a:12:47:02:b6:fc:73:ed:67: a6:4d:ce:49:bf:82:9f:c3:70:c3:d1:36:f6:15:41: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BF:04:98:EA:1F:2E:4F:27:95:25:1A:BA:F3:4D:29:B8:16:D7:19 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b6:aa:07:2e:dc:e6:6a:4f:0c:69:d6:7a:b1:13:db:6f:cf: ad:1f:ef:a5:2e:8b:5e:b1:af:d2:d8:93:53:b0:95:7a:c3:f6: 7f:72:90:37:3d:e5:41:e4:82:34:3b:21:1e:ef:04:2d:4c:0c: 19:87:80:be:2b:80:89:bd:a6:f9:6c:04:75:13:c6:3e:fd:a0: 66:1a:ea:1f:95:4b:d7:f4:6a:af:e0:dd:4c:63:35:09:cc:a2: a4:9e:4b:aa:94:be:61:72:fd:f0:e9:ff:42:64:12:cd:3a:29: 3e:28:63:c9:5f:09:e3:db:43:0e:ba:d5:de:fe:3d:51:35:89: 70:c5:2c:36:34:2e:a3:2e:82:b0:92:e0:43:9d:c6:d7:b8:18: 79:5b:17:9f:81:25:79:32:3b:9e:fe:8a:bd:1f:15:dc:67:7b: 10:40:6e:05:c7:ad:ff:e1:ca:dc:19:e0:28:c9:e2:59:a1:bd: 97:d4:37:0a:f3:36:2a:fe:57:03:fe:98:bd:c5:48:89:b0:15: f1:24:86:90:e7:53:c9:3a:7b:f0:46:b6:eb:9f:04:0b:d5:51: eb:3f:fb:a6:30:da:db:23:11:28:b6:3a:81:37:7a:4d:7c:e8: 0e:1b:d4:a1:3d:8d:91:3d:e6:bb:09:78:04:32:ff:80:84:4b: f2:a2:3e:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEUzRjExMC8GA1UEBRMoMjhCRUU3MDQwNEIyNDMwOTY0QzMwMjkyOTBEM0VBNjA0 QzkxMEVCMTAeFw0yNTEwMTkxMDI2NTRaFw0yNTEwMjYxMDI2NTRaMBgxFjAUBgNV BAMTDTY4ZjRiY2VlLWU5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDopccINg97Z6buhBJuu1ljKiq1HgxhXvG1nSfsXdkcfS8o7/MvhfGI/eD4DbsK JID2uhvoXvRLfASRWLQ/2Ogf23M4dh81B6hj4r2I42aW2EnK/k25B2z5MFTa8EMS vo2ooJIsdiRhCYl+MwCFuNBa7K3K2TFqnYfgludyq2ZiXdpHtDzlmPHhM9/Ru8EO eJhbD+QMcyx1nUZAqBWHpQ3nLOUmk/FeaufUEDuRg9pX9PowtsFXoPyT4Lrd7ret 6YcUna4OVqaL8k7H6qscsYwfaNx5I32Y9FN1s/SWp95CUQtgi/WB7DoSRwK2/HPt Z6ZNzkm/gp/DcMPRNvYVQXnVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4L8EmOof Lk8nlSUauvNNKbgW1xkwHwYDVR0jBBgwFoAUKL7nBASyQwlkwwKSkNPqYEyRDrEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RTNGLzNDM0U2MjBFMThF MjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS0w3bkJBU3lRd2xrd3dLU2tOUHFZRXlSRHJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RTNGLzNDM0U2MjBFMThFMjExRjA5QkU5OTU1N0M0RjlBRTAyL0tMN25CQVN5UXds a3d3S1NrTlBxWUV5UkRyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHm2qgcu3OZqTwxp1nqxE9tvz60f76Uui16xr9LYk1OwlXrD9n9ykDc9 5UHkgjQ7IR7vBC1MDBmHgL4rgIm9pvlsBHUTxj79oGYa6h+VS9f0aq/g3UxjNQnM oqSeS6qUvmFy/fDp/0JkEs06KT4oY8lfCePbQw661d7+PVE1iXDFLDY0LqMugrCS 4EOdxte4GHlbF5+BJXkyO57+ir0fFdxnexBAbgXHrf/hytwZ4CjJ4lmhvZfUNwrz Nir+VwP+mL3FSImwFfEkhpDnU8k6e/BGtuufBAvVUes/+6Yw2tsjESi2OoE3ek18 6A4b1KE9jZE95rsJeAQy/4CES/KiPr0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:49 2025 by rpki-client