$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: pG9ITL15HSEMwVUznPeW4/YR6ZVrVpOuQk2xbAiCP84= Subject key identifier: A9:AE:D8:F6:2D:BB:2B:3B:28:8E:C6:08:8A:EC:33:2B:EF:15:87:E2 Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 03E0 Signing time: Sun 19 Oct 2025 02:33:56 +0000 Manifest this update: Sun 19 Oct 2025 02:33:56 +0000 Manifest next update: Sun 26 Oct 2025 02:33:56 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: VUdC6i1FcBsQ8ixqwZvzFNbfzxcTKz0OkwIOLwGd+7Q=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: CoOJrAcKTrWo0nejzXhp58RWFVEIO9a7vZX9DurBX3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Oct 19 02:33:56 2025 GMT Not After : Oct 26 02:33:56 2025 GMT Subject: CN=68f44e14-78ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3d:dd:30:62:9d:07:0f:b3:e4:34:e6:0d:91: fa:9d:03:1a:db:e1:bc:21:1b:63:cd:2f:af:b3:96: 07:22:ff:27:07:f7:49:5f:f0:31:37:d6:8e:c0:7d: 0c:32:d4:f9:a7:2e:02:56:1e:ae:79:06:5a:c3:58: ff:6a:a6:10:39:a2:9c:b4:47:11:1f:35:0c:22:c1: 8d:0d:81:e8:e9:c6:ba:a8:ce:8d:19:81:6a:31:a1: ac:d2:f5:01:cd:9f:35:a7:e1:78:07:cf:bb:d6:f8: 87:0a:fe:35:d9:1a:fa:32:83:7a:9b:04:fb:9c:36: 51:a8:d4:6f:28:f7:a5:56:dc:2f:e2:05:0a:f9:1f: 63:ae:bb:d4:3e:7c:19:eb:5a:fb:b9:c4:76:60:e8: bc:70:a7:0f:ab:b5:c8:d3:33:00:88:c7:0e:56:d0: d3:18:2a:20:8d:47:38:d5:c5:88:b3:50:55:56:ad: ea:cc:67:a6:00:bc:cf:84:dc:54:28:5f:79:ca:f5: 64:98:68:eb:99:de:cd:34:38:1b:df:87:1f:20:a6: f5:d9:5a:0b:06:ac:d1:c1:ed:27:37:f4:35:76:77: df:f5:4a:b8:f8:9e:ed:0c:68:b9:1c:64:bf:4a:e0: 52:db:c0:78:cc:ec:2e:e1:14:da:91:14:fc:06:40: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:D8:F6:2D:BB:2B:3B:28:8E:C6:08:8A:EC:33:2B:EF:15:87:E2 X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:80:2e:96:7b:46:3e:f0:14:22:24:9d:4c:99:85:16:91:05: 5a:6e:8d:73:86:e0:57:5b:8b:14:75:b7:63:a9:3b:98:fd:42: df:47:22:b7:3c:d6:8c:17:23:98:e5:6c:a7:85:f2:3b:ae:cd: 1c:34:6e:17:0e:83:b3:b5:4e:53:bb:a3:b5:5a:4c:09:60:41: 20:d0:3f:4c:cb:44:9a:25:00:35:df:1d:08:fd:2e:f9:97:02: c5:2d:e9:14:16:b5:71:34:d5:ae:64:60:b8:8b:02:7b:34:f2: a5:7c:cc:9b:72:c8:bf:59:ec:3f:de:0d:93:c8:fb:1d:19:58: 57:ab:b1:93:ec:ed:32:a5:9d:17:9a:42:5e:60:7b:20:27:ff: 14:a4:19:3f:e4:07:66:6d:09:12:3a:5e:30:6e:98:9a:3b:1b: 58:f4:f5:d1:6b:4e:f3:d5:7b:14:3e:1a:e8:b2:c3:cf:dc:ce: c2:f1:bd:cb:a9:c8:cf:8f:23:fd:89:d7:c4:de:b0:65:48:3c: 86:c2:de:cf:68:01:b0:7f:c0:e2:93:40:e7:15:42:27:fa:b7: 0b:e9:27:6a:24:3c:f7:95:13:a0:80:45:ab:37:b6:3c:3a:98: 76:5c:ad:df:24:50:07:71:75:40:14:52:6c:85:09:81:26:b3: ad:9e:6f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjUxMDE5MDIzMzU2WhcNMjUxMDI2MDIzMzU2WjAYMRYwFAYD VQQDEw02OGY0NGUxNC03OGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7T3dMGKdBw+z5DTmDZH6nQMa2+G8IRtjzS+vs5YHIv8nB/dJX/AxN9aOwH0M MtT5py4CVh6ueQZaw1j/aqYQOaKctEcRHzUMIsGNDYHo6ca6qM6NGYFqMaGs0vUB zZ81p+F4B8+71viHCv412Rr6MoN6mwT7nDZRqNRvKPelVtwv4gUK+R9jrrvUPnwZ 61r7ucR2YOi8cKcPq7XI0zMAiMcOVtDTGCogjUc41cWIs1BVVq3qzGemALzPhNxU KF95yvVkmGjrmd7NNDgb34cfIKb12VoLBqzRwe0nN/Q1dnff9Uq4+J7tDGi5HGS/ SuBS28B4zOwu4RTakRT8BkBRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmu2PYt uys7KI7GCIrsMyvvFYfiMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtgC6We0Y+8BQiJJ1MmYUWkQVabo1zhuBXW4sUdbdjqTuY/ULfRyK3 PNaMFyOY5WynhfI7rs0cNG4XDoOztU5Tu6O1WkwJYEEg0D9My0SaJQA13x0I/S75 lwLFLekUFrVxNNWuZGC4iwJ7NPKlfMybcsi/Wew/3g2TyPsdGVhXq7GT7O0ypZ0X mkJeYHsgJ/8UpBk/5AdmbQkSOl4wbpiaOxtY9PXRa07z1XsUPhrossPP3M7C8b3L qcjPjyP9idfE3rBlSDyGwt7PaAGwf8Dik0DnFUIn+rcL6SdqJDz3lROggEWrN7Y8 Oph2XK3fJFAHcXVAFFJshQmBJrOtnm+2 -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:51 2025 by rpki-client