$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: wnTdrRuttGvg8AoAh+m0wXP9ys1ieMbcb8KoaIa+mcA= Subject key identifier: E6:3D:2D:67:2C:53:85:05:AE:98:A6:F0:03:E4:AC:9D:36:65:51:0B Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 07B1 Signing time: Sat 18 Oct 2025 22:44:31 +0000 Manifest this update: Sat 18 Oct 2025 22:44:31 +0000 Manifest next update: Sat 25 Oct 2025 22:44:31 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: oebgIO44d3vI5FLyJae2EIm/atxcswHVPWkO33lpWxk=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: m3jxJQF+AC7fQWOTcRGVcRm7nhWrV4djextUV/e5Tp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Oct 18 22:44:31 2025 GMT Not After : Oct 25 22:44:31 2025 GMT Subject: CN=68f4184f-5acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:16:be:cb:fe:c9:75:1d:43:66:ea:44:5c: 06:ff:24:f3:3a:96:06:23:04:19:07:99:19:8a:45: e4:84:77:73:32:97:aa:6e:28:83:04:71:52:d1:ad: c6:d5:e8:2a:d9:13:f5:31:2f:ba:52:56:23:07:39: a2:4e:25:97:a5:8f:89:bf:5c:78:fb:50:92:34:aa: 7b:88:4b:85:28:57:a3:03:f3:cf:f1:99:bd:e1:56: 01:52:9d:09:e2:58:76:8f:de:96:57:53:5d:f6:92: 2d:04:91:e8:b3:a3:f3:40:5b:00:d8:be:62:b1:0c: ba:9d:88:30:8e:e3:6f:c0:ec:7a:db:27:f7:cd:d1: cb:5d:11:7d:4b:58:9b:ff:62:64:2d:f7:7d:62:02: ba:e6:81:d0:b0:20:6b:45:ae:4d:f9:12:8a:68:d0: d1:1b:2d:31:0a:38:f8:ad:1c:fb:ff:60:0b:ff:74: 2b:32:50:06:0e:7b:c0:9d:b8:70:3a:1b:a7:66:6d: ab:21:da:a6:6b:4c:79:cd:37:26:8e:52:10:89:4e: ab:d2:f3:c4:e1:4c:f0:09:b8:e7:1b:c2:19:00:c1: ad:e7:aa:26:27:c6:50:19:58:04:00:42:9f:af:04: 37:76:e7:eb:f7:9c:60:d0:3b:ac:26:ef:40:2b:68: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3D:2D:67:2C:53:85:05:AE:98:A6:F0:03:E4:AC:9D:36:65:51:0B X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:36:94:00:c4:ff:43:eb:fa:59:b1:98:42:47:40:a4:57:f9: ab:e0:bd:57:21:13:1b:c1:c4:ac:e9:e7:bf:9c:61:61:2c:9e: db:42:93:6f:20:05:b4:9b:fa:3b:a7:ba:30:92:87:62:20:76: 02:47:12:a6:a9:3e:e4:8c:a2:55:2c:49:ce:e3:45:46:fc:70: c0:87:30:b3:82:56:f4:0e:e1:f5:35:cd:43:93:03:80:1e:93: 56:44:3c:1a:6f:2d:3e:75:e2:96:39:72:d5:63:57:8e:8d:94: f8:e9:16:00:69:0a:6d:e0:29:28:03:9a:c6:99:37:13:9f:96: 14:94:0c:8e:98:e2:80:6d:40:a5:c6:b0:30:90:6b:1b:ee:27: ba:1a:ff:be:88:08:08:d6:fb:cf:e2:70:2b:ce:8a:f5:26:0b: d1:15:b5:b1:6d:77:c8:6b:a7:aa:c5:09:16:11:68:47:3f:9d: 31:d9:ec:9c:fe:ad:11:77:20:4a:6c:dc:51:96:e2:3b:3d:66: f4:95:b7:c2:26:05:3e:0c:f1:79:d7:36:1a:39:d7:4a:b8:22: ef:a6:c1:84:90:26:25:77:30:30:a2:32:03:a1:5d:5a:fe:f1: 23:0d:06:b0:0c:c6:28:b4:54:6a:8c:02:b6:3a:46:fa:9d:87: 7d:65:5b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUxMDE4MjI0NDMxWhcNMjUxMDI1MjI0NDMxWjAYMRYwFAYD VQQDEw02OGY0MTg0Zi01YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy4Wvsv+yXUdQ2bqRFwG/yTzOpYGIwQZB5kZikXkhHdzMpeqbiiDBHFS0a3G 1egq2RP1MS+6UlYjBzmiTiWXpY+Jv1x4+1CSNKp7iEuFKFejA/PP8Zm94VYBUp0J 4lh2j96WV1Nd9pItBJHos6PzQFsA2L5isQy6nYgwjuNvwOx62yf3zdHLXRF9S1ib /2JkLfd9YgK65oHQsCBrRa5N+RKKaNDRGy0xCjj4rRz7/2AL/3QrMlAGDnvAnbhw OhunZm2rIdqma0x5zTcmjlIQiU6r0vPE4UzwCbjnG8IZAMGt56omJ8ZQGVgEAEKf rwQ3dufr95xg0DusJu9AK2jV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOY9LWcs U4UFrpim8APkrJ02ZVELMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/NpQAxP9D6/pZsZhCR0CkV/mr4L1XIRMbwcSs6ee/nGFhLJ7bQpNv IAW0m/o7p7owkodiIHYCRxKmqT7kjKJVLEnO40VG/HDAhzCzglb0DuH1Nc1DkwOA HpNWRDwaby0+deKWOXLVY1eOjZT46RYAaQpt4CkoA5rGmTcTn5YUlAyOmOKAbUCl xrAwkGsb7ie6Gv++iAgI1vvP4nArzor1JgvRFbWxbXfIa6eqxQkWEWhHP50x2eyc /q0RdyBKbNxRluI7PWb0lbfCJgU+DPF51zYaOddKuCLvpsGEkCYldzAwojIDoV1a /vEjDQawDMYotFRqjAK2Okb6nYd9ZVvK -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:54 2025 by rpki-client