$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft File: kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json) Hash identifier: bPU6AR67xIpCvrbdp1u+9XfRwB3SnkPjOHuL7rz7pJE= Subject key identifier: 11:32:CB:71:AA:68:14:B5:24:41:38:AF:06:2A:77:EE:8D:AC:96:0C Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E Certificate issuer: /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft Manifest number: 0D0B Signing time: Sat 18 Oct 2025 18:44:59 +0000 Manifest this update: Sat 18 Oct 2025 18:44:59 +0000 Manifest next update: Sat 25 Oct 2025 18:44:59 +0000 Files and hashes: 1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: Ipdxc17pgx8tsD5miGMqnh/Fok/yaUTji+LZ++S0DT4=) 2: B579952EEBB311EEAF9E7718C4F9AE02.roa (hash: cQvewbJ40h6EgOgsAFnDbtknSxNEUHRWVYRLfKeQf+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E Validity Not Before: Oct 18 18:44:59 2025 GMT Not After : Oct 25 18:44:59 2025 GMT Subject: CN=68f3e02b-5ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:17:86:2a:a1:57:ac:c0:57:6a:8b:4b:18:31: 1a:7e:d6:64:a7:bc:2b:4c:cd:8b:57:b4:86:d5:73: 80:90:ed:5c:59:de:f7:26:2c:a5:7e:5a:5d:f4:d4: c9:c0:f1:af:78:1d:a9:80:e5:f2:ac:bb:82:a7:80: d0:a0:43:02:b2:2e:ae:bf:43:1d:2c:b5:f9:11:7d: b4:ed:70:16:3b:3f:1e:66:0c:80:29:03:a8:51:d1: fd:2a:69:c7:2e:5f:ab:09:d8:71:12:34:96:b6:56: 0d:20:9d:42:00:44:bf:4b:7d:3e:38:e4:21:a7:29: d2:0c:66:06:bd:10:99:a1:5f:8d:fa:e6:d8:d9:8a: ed:0d:5a:95:30:6b:c2:29:5b:b1:6b:29:5d:1e:cd: 02:f4:ea:d8:e5:08:39:56:6a:ed:70:23:c2:10:64: 56:6f:f6:4e:58:fa:ed:1c:d7:e2:e0:4a:3c:ea:fc: 88:9f:e6:7b:51:7c:83:6e:94:63:7b:3f:dc:8e:b5: 08:fe:5a:65:01:d1:ac:2a:02:5b:24:66:ba:70:8e: 4b:0c:0f:3a:40:e2:a7:8d:a1:fb:e3:8b:37:9d:e9: 51:50:9e:86:7e:cc:e1:d1:54:f4:c6:1a:81:53:18: a5:a6:10:dd:cc:85:22:cf:29:18:fd:70:4b:94:b0: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:CB:71:AA:68:14:B5:24:41:38:AF:06:2A:77:EE:8D:AC:96:0C X509v3 Authority Key Identifier: keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b6:00:87:67:d6:91:43:53:ba:16:ee:d2:ae:9a:f9:de:aa: 54:da:ed:1a:ae:64:ac:cd:3b:7c:c6:80:f7:95:17:d4:e6:d1: 1c:4c:ea:ec:e8:b7:3d:04:49:0c:4b:5d:28:27:fb:a2:58:2b: cd:63:ab:26:da:b9:7b:14:50:16:d5:c5:07:aa:8b:db:48:a4: 81:d6:2f:37:1e:92:74:dc:c4:a9:e5:6f:66:44:ba:d7:74:53: ca:51:2c:c8:ad:57:f0:b8:75:2b:0a:85:05:97:bc:93:07:a4: e3:a0:b8:7f:c0:e6:50:9e:c5:7f:32:19:c8:00:dd:80:80:1d: 86:4e:bd:c8:bf:32:d7:cc:aa:fd:a1:3d:c6:4d:55:b3:ac:bc: 15:ed:e2:cd:f0:77:33:43:67:6a:0e:3d:02:1d:81:e5:5e:5a: d5:cd:b2:f4:e8:da:10:b1:d0:15:0c:f0:32:f8:c3:c4:d3:10: d2:57:4f:63:a9:e2:b5:c0:3d:8e:15:a2:12:64:91:6b:f1:de: 23:2f:df:58:1a:ee:e0:e9:6e:2e:19:c7:8a:d6:3e:84:4b:b0: 4b:47:b9:32:51:6f:e0:4f:09:aa:da:f9:52:c5:4b:82:da:35: 86:dc:a5:07:a2:c3:04:7f:91:f2:29:20:42:50:6e:66:d9:ce: 4b:fb:dc:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4M0YxMTAvBgNVBAUTKDkyOTg4OUJCNUQzNEU4NjBBQ0JGNzA4OTQzMzdBNDYy QzFENkFDMkUwHhcNMjUxMDE4MTg0NDU5WhcNMjUxMDI1MTg0NDU5WjAYMRYwFAYD VQQDEw02OGYzZTAyYi01ZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ReGKqFXrMBXaotLGDEaftZkp7wrTM2LV7SG1XOAkO1cWd73Jiylflpd9NTJ wPGveB2pgOXyrLuCp4DQoEMCsi6uv0MdLLX5EX207XAWOz8eZgyAKQOoUdH9KmnH Ll+rCdhxEjSWtlYNIJ1CAES/S30+OOQhpynSDGYGvRCZoV+N+ubY2YrtDVqVMGvC KVuxayldHs0C9OrY5Qg5VmrtcCPCEGRWb/ZOWPrtHNfi4Eo86vyIn+Z7UXyDbpRj ez/cjrUI/lplAdGsKgJbJGa6cI5LDA86QOKnjaH744s3nelRUJ6Gfszh0VT0xhqB UxilphDdzIUizykY/XBLlLBR5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEyy3Gq aBS1JEE4rwYqd+6NrJYMMB8GA1UdIwQYMBaAFJKYibtdNOhgrL9wiUM3pGLB1qwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjgzRi84OTIzOEVDQ0VG NEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZHQ3N2M0NKUXpla1lzSFdy QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twaUp1MTAwNkdDc3YzQ0pRemVrWXNIV3JDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjgzRi84OTIzOEVDQ0VGNEYxMUU5OURFNDdGMENDNEY5QUUwMi9rcGlKdTEwMDZH Q3N2M0NKUXpla1lzSFdyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEtgCHZ9aRQ1O6Fu7Srpr53qpU2u0armSszTt8xoD3lRfU5tEcTOrs 6Lc9BEkMS10oJ/uiWCvNY6sm2rl7FFAW1cUHqovbSKSB1i83HpJ03MSp5W9mRLrX dFPKUSzIrVfwuHUrCoUFl7yTB6TjoLh/wOZQnsV/MhnIAN2AgB2GTr3IvzLXzKr9 oT3GTVWzrLwV7eLN8HczQ2dqDj0CHYHlXlrVzbL06NoQsdAVDPAy+MPE0xDSV09j qeK1wD2OFaISZJFr8d4jL99YGu7g6W4uGceK1j6ES7BLR7kyUW/gTwmq2vlSxUuC 2jWG3KUHosMEf5HyKSBCUG5m2c5L+9z/ -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:34 2025 by rpki-client