$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: Rz9TJQwVsQMsGowZ7PVyPv36SHOuhpoCDSDPoewBSk8= Subject key identifier: 7F:68:1C:81:7E:B3:9E:B1:A3:7B:B7:EE:1C:E4:AB:7B:A0:F2:22:FF Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 76 Signing time: Sun 19 Oct 2025 10:10:55 +0000 Manifest this update: Sun 19 Oct 2025 10:10:54 +0000 Manifest next update: Sun 26 Oct 2025 10:10:54 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 0zNYUuIemP1jlPWjvrcGHIIsmG2y42dAwqpCLjkBenQ=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Oct 19 10:10:54 2025 GMT Not After : Oct 26 10:10:54 2025 GMT Subject: CN=68f4b92e-07a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:12:fd:8f:b9:d0:94:01:43:f7:c0:17:cf: 8c:a9:9f:21:99:67:a8:57:b3:dd:c6:6a:b9:67:7e: 44:42:96:b6:d6:ab:bd:66:27:70:04:fb:1c:a3:c5: 72:f7:d2:23:19:16:76:da:c2:a5:5b:81:fd:82:73: 23:00:2c:2d:6e:90:12:aa:80:50:0e:66:37:b2:5b: ad:73:6e:2d:05:73:58:41:c7:43:03:80:80:b1:62: 0f:0b:a9:ac:18:5f:a8:d7:c2:7e:bc:3c:9f:09:3f: 35:a1:1e:fe:00:12:f6:38:ba:a0:9d:b0:ce:7b:25: e0:a5:7f:1c:3d:96:99:e3:fd:3f:34:3d:7e:93:34: 71:56:c0:13:55:d2:1e:23:bb:99:96:54:28:11:3f: 4f:04:44:53:70:c1:34:ab:20:76:35:18:9b:81:dd: 68:ca:7d:fa:ef:73:9d:1b:9a:ef:85:68:7f:19:b3: d6:bf:52:42:9a:10:98:91:09:61:12:91:6d:85:bf: 83:8b:1c:27:56:f1:cf:78:53:41:35:4b:5d:0e:de: 35:ec:1e:34:93:31:b8:02:e8:89:06:48:db:b1:25: 16:6c:db:8b:79:ca:a7:eb:9e:a8:d1:31:b9:6d:de: f7:85:3c:8d:7b:f2:a8:28:94:a9:9c:1d:0a:e4:79: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:68:1C:81:7E:B3:9E:B1:A3:7B:B7:EE:1C:E4:AB:7B:A0:F2:22:FF X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:d1:37:49:3e:7a:7a:de:3c:3f:5d:b4:c9:5a:9e:13:92: ac:e5:38:d6:5f:f7:f1:ba:46:15:94:07:c7:74:9f:48:6a:7c: 25:8e:ed:a3:30:d8:59:9c:a4:d7:59:5b:a0:a8:dc:32:e4:5a: 45:3e:48:68:1a:d1:1f:3d:3b:4a:09:03:b7:2f:53:41:5c:93: 4e:4e:ef:de:5d:10:37:29:a0:52:bf:21:38:2f:ff:b9:ad:3d: 63:0a:bc:bd:13:11:2d:4f:06:4c:a6:58:ff:6e:f8:f1:bb:0f: d6:d1:2b:8a:0c:d6:b1:83:9d:4c:8c:2b:f0:67:12:29:0f:ba: 04:0e:a3:38:f9:17:99:6c:54:ae:66:23:80:2d:e0:54:41:d0: 3c:bb:4e:e8:76:1e:6f:eb:3e:cd:67:ff:0b:03:97:0c:f9:3d: a6:5e:41:b3:cb:fd:07:20:08:88:40:40:ca:aa:5e:f8:1a:4b: bb:aa:5a:a6:93:34:9a:94:38:47:3b:e5:be:e7:64:c0:ae:ae: fe:1f:1a:d5:e6:bb:b7:8d:4b:f2:71:d3:05:b7:6f:95:70:52: 1b:5d:6d:61:a7:01:9e:c9:07:7f:7d:3f:b8:7e:9a:27:7c:fc: 65:4c:24:7c:3a:8e:9c:39:78:0d:44:cf:81:a4:39:af:3d:43: 90:20:ff:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk3NDExMC8GA1UEBRMoOTBCMkYxMkJFN0E1ODY2M0JGMTVEQzcxN0U3RDQwQjMw MjQxQjhFQTAeFw0yNTEwMTkxMDEwNTRaFw0yNTEwMjYxMDEwNTRaMBgxFjAUBgNV BAMTDTY4ZjRiOTJlLTA3YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbyhL9j7nQlAFD98AXz4ypnyGZZ6hXs93GarlnfkRClrbWq71mJ3AE+xyjxXL3 0iMZFnbawqVbgf2CcyMALC1ukBKqgFAOZjeyW61zbi0Fc1hBx0MDgICxYg8LqawY X6jXwn68PJ8JPzWhHv4AEvY4uqCdsM57JeClfxw9lpnj/T80PX6TNHFWwBNV0h4j u5mWVCgRP08ERFNwwTSrIHY1GJuB3WjKffrvc50bmu+FaH8Zs9a/UkKaEJiRCWES kW2Fv4OLHCdW8c94U0E1S10O3jXsHjSTMbgC6IkGSNuxJRZs24t5yqfrnqjRMblt 3veFPI178qgolKmcHQrkeepjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf2gcgX6z nrGje7fuHOSre6DyIv8wHwYDVR0jBBgwFoAUkLLxK+elhmO/Fdxxfn1AswJBuOow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTc0L0U0RTg5MDBFRkI2 NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVP by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0xMeEstZWxobU9fRmR4eGZuMUFzd0pCdU9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC OTc0L0U0RTg5MDBFRkI2NTExRUY5QkJBRUU0OUM0RjlBRTAyL2tMTHhLLWVsaG1P X0ZkeHhmbjFBc3dKQnVPby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgr0TdJPnp63jw/XbTJWp4TkqzlONZf9/G6RhWUB8d0n0hqfCWO7aMw 2FmcpNdZW6Co3DLkWkU+SGga0R89O0oJA7cvU0Fck05O795dEDcpoFK/ITgv/7mt PWMKvL0TES1PBkymWP9u+PG7D9bRK4oM1rGDnUyMK/BnEikPugQOozj5F5lsVK5m I4At4FRB0Dy7Tuh2Hm/rPs1n/wsDlwz5PaZeQbPL/QcgCIhAQMqqXvgaS7uqWqaT NJqUOEc75b7nZMCurv4fGtXmu7eNS/Jx0wW3b5VwUhtdbWGnAZ7JB399P7h+mid8 /GVMJHw6jpw5eA1Ez4GkOa89Q5Ag/44= -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:57 2025 by rpki-client