$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: PWn2HFPmuaKt17P7pBFxsq6kyiMaJyUdyQ+/ZNow6PU= Subject key identifier: F0:D1:31:3C:37:0D:0E:53:62:DB:59:C6:4F:D2:B0:94:BE:3B:21:12 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 0623 Signing time: Sun 19 Oct 2025 00:21:51 +0000 Manifest this update: Sun 19 Oct 2025 00:21:50 +0000 Manifest next update: Sun 26 Oct 2025 00:21:50 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: YvLEY8h2G3YKLi7YXfPfRbvNPXaFENCwp+oCsA/hU2k=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Oct 19 00:21:50 2025 GMT Not After : Oct 26 00:21:50 2025 GMT Subject: CN=68f42f1e-ae69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:74:4b:75:2b:da:c4:98:32:7d:57:4f:66: 57:f7:ff:68:7c:b9:e4:e4:db:1c:82:7c:6e:5a:ce: 15:69:23:5b:27:14:63:41:a4:c2:91:68:f9:cc:a3: 64:86:dd:7d:eb:dd:7d:dd:d4:5a:a3:4d:8b:b5:19: 03:6d:4e:70:09:d2:4b:24:c1:c1:4a:b2:c4:28:2a: d7:30:5b:1a:93:66:03:c3:be:a4:38:62:b3:22:31: 5a:13:53:14:22:1b:bb:66:83:14:e2:87:49:4f:2c: 72:0e:87:b9:4b:4f:94:1a:9d:c8:56:3d:17:6e:90: e4:d1:ec:60:bc:e4:b5:78:20:e2:86:96:7b:43:4b: c8:f4:2e:88:c4:80:90:7e:9e:99:15:62:32:4d:5d: 79:b0:e6:29:a0:36:ef:fc:3d:93:80:c5:9d:a0:b8: ee:e8:96:e7:61:ca:d8:d5:ed:7e:8e:86:0a:5a:7c: 54:cc:cd:42:32:f3:df:48:fe:a7:b9:d6:1f:e1:51: 69:f7:72:71:1f:e1:3d:52:e0:68:76:41:e0:d0:60: 03:9a:94:ba:ba:67:0a:d1:65:0a:26:b9:ca:4d:51: c7:64:5a:a3:a8:85:1f:02:b4:c8:15:84:f0:1a:9e: 91:7b:15:54:29:23:e5:61:61:7c:31:23:1d:61:d0: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D1:31:3C:37:0D:0E:53:62:DB:59:C6:4F:D2:B0:94:BE:3B:21:12 X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:90:01:e1:90:93:2c:fd:9a:3f:9f:fe:9f:10:8b:cb:84:2f: 33:0f:81:60:b8:98:82:a9:13:01:a0:ba:5b:11:3b:e7:e6:46: 73:00:96:58:d9:9c:50:f2:98:4e:2c:b6:22:a9:f1:5d:24:b4: 1f:91:81:24:0e:86:8a:40:67:a1:02:60:0b:ec:48:df:53:2a: 34:23:ab:d5:72:b5:40:ce:35:98:e5:e1:04:50:6a:eb:67:00: 9e:66:b4:68:0f:b0:01:81:c1:6d:3d:ff:60:09:70:b0:71:53: 3c:97:08:b4:9b:ed:3d:80:27:74:68:fe:96:fa:a5:b3:45:23: b3:be:46:bf:3b:09:f9:21:85:ad:99:74:6a:40:ae:8f:7d:20: 5d:50:c4:43:4b:1c:c4:cb:b9:77:85:44:f8:7a:fd:51:44:a7: 48:30:c4:f0:d3:78:4a:5c:eb:c0:56:e6:09:c6:34:c6:d0:8f: d2:3f:a0:ec:e8:15:02:35:c6:4a:e0:9c:05:ea:f3:e5:2d:d6: 22:49:59:82:6d:df:07:66:fa:74:00:22:e8:42:f8:b8:71:b8: f6:c5:6e:98:d7:87:77:10:18:7d:af:d6:50:65:a9:77:76:3d: 41:f0:be:99:e8:31:41:ba:b7:d1:3c:3b:c1:95:34:8c:5f:e9: 63:17:8d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUxMDE5MDAyMTUwWhcNMjUxMDI2MDAyMTUwWjAYMRYwFAYD VQQDEw02OGY0MmYxZS1hZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiN0S3Ur2sSYMn1XT2ZX9/9ofLnk5NscgnxuWs4VaSNbJxRjQaTCkWj5zKNk ht1969193dRao02LtRkDbU5wCdJLJMHBSrLEKCrXMFsak2YDw76kOGKzIjFaE1MU Ihu7ZoMU4odJTyxyDoe5S0+UGp3IVj0XbpDk0exgvOS1eCDihpZ7Q0vI9C6IxICQ fp6ZFWIyTV15sOYpoDbv/D2TgMWdoLju6JbnYcrY1e1+joYKWnxUzM1CMvPfSP6n udYf4VFp93JxH+E9UuBodkHg0GADmpS6umcK0WUKJrnKTVHHZFqjqIUfArTIFYTw Gp6RexVUKSPlYWF8MSMdYdACOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDRMTw3 DQ5TYttZxk/SsJS+OyESMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2kAHhkJMs/Zo/n/6fEIvLhC8zD4FguJiCqRMBoLpbETvn5kZzAJZY 2ZxQ8phOLLYiqfFdJLQfkYEkDoaKQGehAmAL7EjfUyo0I6vVcrVAzjWY5eEEUGrr ZwCeZrRoD7ABgcFtPf9gCXCwcVM8lwi0m+09gCd0aP6W+qWzRSOzvka/Own5IYWt mXRqQK6PfSBdUMRDSxzEy7l3hUT4ev1RRKdIMMTw03hKXOvAVuYJxjTG0I/SP6Ds 6BUCNcZK4JwF6vPlLdYiSVmCbd8HZvp0ACLoQvi4cbj2xW6Y14d3EBh9r9ZQZal3 dj1B8L6Z6DFBurfRPDvBlTSMX+ljF43m -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:51 2025 by rpki-client