$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: 2EcnA8AtMQ27K5ToI/cEO4+V+aJ3WUe77ihjAtGaq48= Subject key identifier: DD:23:B9:9D:2F:23:AC:3F:1B:EA:1D:49:05:D9:40:53:0A:A4:38:31 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 11D8 Signing time: Sat 18 Oct 2025 20:26:32 +0000 Manifest this update: Sat 18 Oct 2025 20:26:31 +0000 Manifest next update: Sat 25 Oct 2025 20:26:31 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: VQcjP8+zUktVbvw5036JAQGlZRUIT+haIcBZjSYFw/Y=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: lzUKRSmxvGEfweMuUaXbxsWlHdwgK7qhdoTfKi3EzzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Oct 18 20:26:31 2025 GMT Not After : Oct 25 20:26:31 2025 GMT Subject: CN=68f3f7f7-fb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:f6:a0:9a:95:25:1f:3d:e1:8e:5e:e4:fb: 73:f9:c7:b6:29:44:31:ce:51:6a:f7:a3:4a:cd:6b: d2:2a:b4:ca:1a:a0:13:91:41:8a:6c:27:b7:1f:9b: 41:93:d3:74:ae:01:fd:2b:c8:7f:e3:1c:3c:b0:44: 1c:dd:ba:c7:e6:7c:c9:4f:12:26:d5:a2:53:50:9e: 76:be:17:f9:2c:84:97:e5:c4:ff:6d:17:be:c7:09: 40:92:b4:7b:9a:82:c0:86:85:9e:94:bc:8e:fa:7c: c4:63:9a:bd:87:db:85:cc:53:6e:ba:ee:18:34:64: 66:78:3e:91:64:57:6d:61:13:46:a0:25:61:64:80: 5f:97:61:05:ed:87:98:00:2b:2c:80:01:2c:9b:a1: 7e:88:26:29:01:b5:e4:ba:e4:0c:07:2a:30:1d:38: 10:1b:a3:64:58:bd:fe:cf:ca:72:ee:d4:cf:fe:25: 06:f9:75:42:21:b4:f3:1c:88:6e:23:ac:8f:84:8f: 6c:57:3e:07:f3:a0:c6:39:6e:9d:e0:e6:94:1d:04: 4a:2c:21:a9:11:80:f6:00:e2:c7:18:95:f1:3f:ed: 89:29:f3:55:ab:fe:8a:be:4a:c5:09:03:6a:75:4d: 2a:ff:a3:97:60:07:2d:86:03:3c:9e:9d:09:f6:5a: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:23:B9:9D:2F:23:AC:3F:1B:EA:1D:49:05:D9:40:53:0A:A4:38:31 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:a1:6e:98:46:95:b8:13:9f:88:59:bf:82:e2:db:d1:f7:63: 80:be:bb:3e:30:6d:c4:bc:37:4e:e1:48:9c:e1:4b:47:2e:a6: 82:09:7f:31:fc:f2:36:f4:d6:3b:2f:8f:ad:8e:70:02:ef:69: 60:8f:78:ba:77:f5:c5:77:58:f6:38:2b:76:f8:0c:7f:dc:98: 57:41:cb:8c:02:7f:f9:83:e7:f8:93:08:99:2c:8c:c9:6c:49: 46:54:c8:2d:9d:e5:5c:f4:fc:87:c1:dc:a0:45:61:e0:68:69: db:7b:71:e5:4d:7d:4f:08:30:e3:df:99:28:a3:d7:f6:14:94: cd:d9:ae:fc:b6:7d:b4:20:70:a4:a8:00:3c:8e:ae:58:9e:b1: 0f:e6:62:7b:87:e0:bc:c0:6f:7d:5f:18:20:b0:80:03:6c:e9: d1:54:0c:e4:b4:1c:38:c2:5f:3e:69:06:ba:ce:93:14:02:f4: e1:9b:7c:f0:c2:38:88:a2:b6:f7:a3:d2:d3:47:99:8a:9e:75: 24:f3:55:06:66:5e:1b:15:50:2d:0e:2f:ed:5d:2e:76:a2:be: db:ad:8e:fb:08:b4:3e:3e:af:e6:9f:94:d5:25:57:00:d3:54: 52:2b:e7:bd:e1:10:d8:c3:b2:20:02:cb:df:da:45:2a:4c:bb: 02:00:89:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUxMDE4MjAyNjMxWhcNMjUxMDI1MjAyNjMxWjAYMRYwFAYD VQQDEw02OGYzZjdmNy1mYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjr2oJqVJR894Y5e5Ptz+ce2KUQxzlFq96NKzWvSKrTKGqATkUGKbCe3H5tB k9N0rgH9K8h/4xw8sEQc3brH5nzJTxIm1aJTUJ52vhf5LISX5cT/bRe+xwlAkrR7 moLAhoWelLyO+nzEY5q9h9uFzFNuuu4YNGRmeD6RZFdtYRNGoCVhZIBfl2EF7YeY ACssgAEsm6F+iCYpAbXkuuQMByowHTgQG6NkWL3+z8py7tTP/iUG+XVCIbTzHIhu I6yPhI9sVz4H86DGOW6d4OaUHQRKLCGpEYD2AOLHGJXxP+2JKfNVq/6KvkrFCQNq dU0q/6OXYActhgM8np0J9lqauQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0juZ0v I6w/G+odSQXZQFMKpDgxMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHoW6YRpW4E5+IWb+C4tvR92OAvrs+MG3EvDdO4Uic4UtHLqaCCX8x /PI29NY7L4+tjnAC72lgj3i6d/XFd1j2OCt2+Ax/3JhXQcuMAn/5g+f4kwiZLIzJ bElGVMgtneVc9PyHwdygRWHgaGnbe3HlTX1PCDDj35koo9f2FJTN2a78tn20IHCk qAA8jq5YnrEP5mJ7h+C8wG99XxggsIADbOnRVAzktBw4wl8+aQa6zpMUAvThm3zw wjiIorb3o9LTR5mKnnUk81UGZl4bFVAtDi/tXS52or7brY77CLQ+Pq/mn5TVJVcA 01RSK+e94RDYw7IgAsvf2kUqTLsCAIke -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:09 2025 by rpki-client