$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: cA7Ly5rwiHLULPypHZwbaYJlmeXUbemRPG3Xe6WiTG4= Subject key identifier: 8D:D8:E5:9A:AF:F5:2A:CA:A9:D8:D5:38:CE:46:5E:E4:6F:6E:47:FA Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: 8D Signing time: Sun 19 Oct 2025 09:47:43 +0000 Manifest this update: Sun 19 Oct 2025 09:47:42 +0000 Manifest next update: Sun 26 Oct 2025 09:47:42 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: tUxOYH1W+O7d2Meq1dUj/m1+J0zqQwAPEcyGilATFyE=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: Oct 19 09:47:42 2025 GMT Not After : Oct 26 09:47:42 2025 GMT Subject: CN=68f4b3bf-9982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:71:18:b9:08:86:41:3f:11:9d:b4:9e:ef: d0:5c:ef:61:10:7a:ed:1d:76:14:28:ba:3d:e9:11: ab:fd:c4:8a:2d:4a:10:c1:e7:72:44:ac:55:63:aa: b5:d0:8c:70:75:46:96:38:cd:01:2b:81:52:1d:2e: fa:53:27:e9:d6:af:de:e8:be:b7:68:87:53:89:63: e7:8c:bd:15:6d:2c:4c:48:bf:88:5c:d7:74:a1:13: 99:fd:db:6f:a3:43:fb:ab:56:63:c0:8c:b6:7d:84: 47:56:46:6d:37:1b:8b:5d:34:7a:5d:87:b7:ca:ed: 3f:2c:fa:22:3e:b2:9a:a6:7c:16:d2:0c:03:92:eb: ca:b5:2e:c9:1d:7a:86:5b:dc:6c:40:b0:d8:7f:0a: 43:90:0f:91:e0:60:1e:25:3e:91:5a:b0:13:0a:c8: de:09:1f:45:14:31:0b:f7:73:89:d3:f5:9e:43:03: 86:9b:e6:2a:b3:82:64:22:84:9d:6d:a2:18:bf:3c: f8:bf:67:55:9b:26:fc:38:ae:1a:8e:59:fd:21:f6: 78:f6:22:f8:2a:d8:c7:b2:48:b1:d8:15:a0:44:8b: 9c:30:43:c3:13:04:99:59:64:16:a0:98:3e:d6:19: 0b:e0:44:10:fb:a3:b9:d9:b8:25:0a:4a:51:29:41: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D8:E5:9A:AF:F5:2A:CA:A9:D8:D5:38:CE:46:5E:E4:6F:6E:47:FA X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9b:71:85:e3:62:b1:77:e3:3c:ef:80:bb:01:81:2c:46:44: 6f:10:48:c1:83:1c:e0:ea:89:7c:3a:ce:3e:08:42:f8:ea:6a: 33:0d:24:c9:7e:6f:05:8f:66:e5:3e:fd:8f:d8:1d:8a:a9:14: 89:a5:26:76:3c:86:5d:c1:ec:3a:bf:2f:02:25:04:be:47:98: 29:e2:02:ec:82:14:b2:d8:c6:02:f1:f7:48:98:c0:09:6b:87: 06:2b:a6:f1:e7:54:a3:87:4f:6b:18:b5:40:e5:d7:fd:b4:2c: ac:4b:ad:5e:e9:9d:b1:79:dd:ef:c4:74:fa:39:d2:6d:cc:23: 82:e6:5f:db:06:94:76:93:e6:0d:0f:11:96:e3:94:fb:80:65: 18:da:40:b0:28:de:b3:75:16:14:98:0f:f6:98:5a:49:bb:1e: 49:5a:bb:f5:8a:3d:f1:72:bc:1c:40:19:02:88:49:95:5e:b8: c9:3e:e9:89:78:ed:82:1c:f0:f8:50:d9:5b:af:da:c3:84:cd: 3b:fd:73:6c:5d:b0:2e:ef:27:38:4b:26:0f:63:2d:ae:08:1e: 3b:ce:1f:b5:1c:4a:19:3d:b1:45:6c:95:8e:8c:4c:16:6b:a9: 85:8a:3c:fe:42:85:78:d8:85:e0:82:d2:f3:e7:ee:51:fc:fe: e9:f0:d3:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1 RjA3MDJBQzgwHhcNMjUxMDE5MDk0NzQyWhcNMjUxMDI2MDk0NzQyWjAYMRYwFAYD VQQDEw02OGY0YjNiZi05OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAVxGLkIhkE/EZ20nu/QXO9hEHrtHXYUKLo96RGr/cSKLUoQwedyRKxVY6q1 0IxwdUaWOM0BK4FSHS76Uyfp1q/e6L63aIdTiWPnjL0VbSxMSL+IXNd0oROZ/dtv o0P7q1ZjwIy2fYRHVkZtNxuLXTR6XYe3yu0/LPoiPrKapnwW0gwDkuvKtS7JHXqG W9xsQLDYfwpDkA+R4GAeJT6RWrATCsjeCR9FFDEL93OJ0/WeQwOGm+Yqs4JkIoSd baIYvzz4v2dVmyb8OK4ajln9IfZ49iL4KtjHskix2BWgRIucMEPDEwSZWWQWoJg+ 1hkL4EQQ+6O52bglCkpRKUEsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3Y5Zqv 9SrKqdjVOM5GXuRvbkf6MB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0 OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD MXBieVIzQVZSMXhmQndLc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtm3GF42Kxd+M874C7AYEsRkRvEEjBgxzg6ol8Os4+CEL46mozDSTJ fm8Fj2blPv2P2B2KqRSJpSZ2PIZdwew6vy8CJQS+R5gp4gLsghSy2MYC8fdImMAJ a4cGK6bx51Sjh09rGLVA5df9tCysS61e6Z2xed3vxHT6OdJtzCOC5l/bBpR2k+YN DxGW45T7gGUY2kCwKN6zdRYUmA/2mFpJux5JWrv1ij3xcrwcQBkCiEmVXrjJPumJ eO2CHPD4UNlbr9rDhM07/XNsXbAu7yc4SyYPYy2uCB47zh+1HEoZPbFFbJWOjEwW a6mFijz+QoV42IXggtLz5+5R/P7p8NOr -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:40 2025 by rpki-client