$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft File: KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json) Hash identifier: 7EH/LhOWd7s1vvqJM4wdmS3oXjvChQIh8fIrQRO8XH4= Subject key identifier: 78:6F:D7:64:C7:7A:78:A6:18:6B:33:DC:8C:4E:D2:07:93:27:93:61 Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft Manifest number: 0AAD Signing time: Sat 18 Oct 2025 20:28:56 +0000 Manifest this update: Sat 18 Oct 2025 20:28:55 +0000 Manifest next update: Sat 25 Oct 2025 20:28:55 +0000 Files and hashes: 1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: YfJR/Ns7HMjxjbNXrQ6vCImeb5DqNfkdd4dyh2C/muY=) 2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: 0+FYOd7cEHhPhl5/EXB24cdR/+U1VPktvi4vWKzamkI=) 3: DE137C362C7811EC97C8D979C4F9AE02.roa (hash: ORPxj2tqrIsIpHEdVkZPm4n/aNb1Vqu1v7KB5t0Gcw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: Oct 18 20:28:55 2025 GMT Not After : Oct 25 20:28:55 2025 GMT Subject: CN=68f3f887-fb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:88:2e:7f:32:e0:5a:29:b8:6d:c1:e9:c1:a9: fb:e1:00:0e:6c:14:63:87:19:e3:ea:0d:0e:f0:4d: d1:c1:f7:3c:2a:14:aa:50:8e:a5:89:26:17:7f:27: bc:83:5d:0e:ce:7d:81:3a:d4:74:9c:80:28:06:b4: 00:18:fd:be:74:12:b4:97:13:3e:b0:fd:58:4a:e0: 7b:f5:09:27:9b:be:06:4a:3e:cc:25:53:1f:fe:63: ef:7e:36:a8:86:60:f8:41:17:c6:f8:c2:0c:c6:42: f9:55:c9:35:90:9e:5a:6e:f9:3e:e1:f6:a9:69:83: 8a:a6:42:0c:ff:27:46:8a:27:aa:e6:70:17:af:a0: 2a:a6:4e:34:36:79:0b:65:c8:4a:44:49:43:06:e8: 00:4f:52:bc:c4:de:00:81:08:e8:28:3a:f1:0e:65: 79:64:d3:27:04:71:64:2c:2b:8f:b4:ac:5c:a5:9c: 56:b2:cf:eb:f6:93:ec:b5:e0:b4:ff:ba:42:b2:76: 8f:4f:a7:5a:8a:7e:4f:b4:c1:24:3e:60:21:b3:a7: dc:de:f8:5d:5f:b6:e2:43:1a:10:23:d4:22:f4:60: 91:72:ca:e6:c7:e9:21:86:d4:32:51:0f:01:33:7c: 76:a7:01:d3:34:05:bd:a4:7e:a3:cb:8e:15:dc:68: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6F:D7:64:C7:7A:78:A6:18:6B:33:DC:8C:4E:D2:07:93:27:93:61 X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:94:3f:80:2b:f5:14:ef:13:67:94:99:91:ce:b2:66:4b: ed:0a:1b:af:bc:0f:d8:04:0f:5e:55:3b:30:4e:37:d4:10:78: 2f:a3:e5:94:27:c3:53:17:cf:ff:e9:bb:0c:ed:95:64:8a:ad: 0e:47:a4:9c:1e:7f:c3:ae:28:67:00:85:3f:65:20:a3:b7:23: 86:db:6d:47:b3:9f:f8:65:dd:ad:d0:30:d9:00:ef:1e:06:35: 20:e5:ee:b4:46:f5:23:71:eb:41:58:eb:90:bb:92:60:95:00: 5a:6f:b1:0c:48:a1:82:08:92:5c:ad:31:c2:ab:d3:97:1b:3b: 77:3d:47:26:85:4b:50:9a:ed:eb:dd:66:e6:14:52:3d:66:00: f3:76:ef:cf:d1:56:2d:2a:90:32:7d:b5:53:3d:3a:86:08:68: b0:97:2c:77:40:fd:7b:00:c4:b6:25:80:57:3d:de:72:c3:2d: 14:c6:2f:46:2f:46:f3:cb:37:3a:2d:91:95:e1:da:ab:b6:33: 16:55:99:37:0b:c5:36:b0:f2:00:de:8f:52:31:61:83:47:41: 2f:7f:01:b5:7d:c2:e8:4d:4d:82:68:37:4c:d6:20:67:82:48: 73:14:eb:36:d3:e9:8d:2e:fe:fd:4e:7a:a3:1a:db:3f:2a:5e: 42:7a:98:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUxMDE4MjAyODU1WhcNMjUxMDI1MjAyODU1WjAYMRYwFAYD VQQDEw02OGYzZjg4Ny1mYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArogufzLgWim4bcHpwan74QAObBRjhxnj6g0O8E3Rwfc8KhSqUI6liSYXfye8 g10Ozn2BOtR0nIAoBrQAGP2+dBK0lxM+sP1YSuB79Qknm74GSj7MJVMf/mPvfjao hmD4QRfG+MIMxkL5Vck1kJ5abvk+4fapaYOKpkIM/ydGiieq5nAXr6Aqpk40NnkL ZchKRElDBugAT1K8xN4AgQjoKDrxDmV5ZNMnBHFkLCuPtKxcpZxWss/r9pPsteC0 /7pCsnaPT6dain5PtMEkPmAhs6fc3vhdX7biQxoQI9Qi9GCRcsrmx+khhtQyUQ8B M3x2pwHTNAW9pH6jy44V3Gi9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhv12TH enimGGsz3IxO0geTJ5NhMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ4Qy9BNzREQTc3MjY0QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQw MDlPUTlhQ3RFTFc4TmZWdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb5ZQ/gCv1FO8TZ5SZkc6yZkvtChuvvA/YBA9eVTswTjfUEHgvo+WU J8NTF8//6bsM7ZVkiq0OR6ScHn/DrihnAIU/ZSCjtyOG221Hs5/4Zd2t0DDZAO8e BjUg5e60RvUjcetBWOuQu5JglQBab7EMSKGCCJJcrTHCq9OXGzt3PUcmhUtQmu3r 3WbmFFI9ZgDzdu/P0VYtKpAyfbVTPTqGCGiwlyx3QP17AMS2JYBXPd5ywy0Uxi9G L0bzyzc6LZGV4dqrtjMWVZk3C8U2sPIA3o9SMWGDR0EvfwG1fcLoTU2CaDdM1iBn gkhzFOs20+mNLv79TnqjGts/Kl5CephG -----END CERTIFICATE-----Generated at Mon Oct 20 10:48:00 2025 by rpki-client