$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: wd0a9YCE/4HeCOPxvj9d3juJTfAfKIi6coOolFv6r88= Subject key identifier: 70:F6:CE:0E:35:9F:99:AE:1F:D3:13:42:80:CE:37:E7:2F:11:39:EF Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 01AE Signing time: Sun 19 Oct 2025 05:42:43 +0000 Manifest this update: Sun 19 Oct 2025 05:42:42 +0000 Manifest next update: Sun 26 Oct 2025 05:42:42 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: 6iTIHZ9Vd21912Olqvn2CYEyFv89HH/RTZz1FRMrqWM=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Oct 19 05:42:42 2025 GMT Not After : Oct 26 05:42:42 2025 GMT Subject: CN=68f47a52-8fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:ed:e0:b3:dd:e1:b5:6b:f3:69:84:c2:47: 16:d0:5a:e0:42:f1:44:52:ef:80:36:54:95:01:aa: 07:9c:23:e8:7c:a3:9c:1f:a1:8d:cc:77:3d:d2:5c: 1a:2e:ee:7d:3a:e1:2b:34:18:dd:cf:d4:dc:fe:68: 2f:0f:92:9e:f5:1a:ed:5d:31:2a:a7:5d:3e:e4:7d: 79:71:21:7e:f5:7d:99:c9:20:25:e0:d0:33:91:59: 79:10:d4:ee:f4:4e:c0:df:cc:e8:e9:ec:4c:95:b8: 27:0c:ea:78:76:c9:33:28:42:57:49:09:3f:f6:c6: 07:17:a0:28:d4:fc:bf:cb:79:29:0d:49:17:46:dd: d0:18:86:12:6e:3c:b4:a1:59:13:91:e0:51:d8:6d: 1f:8f:3f:76:54:0b:b0:6f:d8:50:1b:af:d5:28:86: da:47:30:09:1c:fc:e8:8c:26:ad:c4:21:6b:43:8a: 67:d2:b0:65:13:af:ab:25:ee:cf:75:45:1e:07:c6: 4e:cf:e0:5f:06:74:e1:55:ff:ab:72:d6:98:e2:01: 7e:36:d8:b0:1b:f6:37:6d:99:41:74:be:8d:ed:ba: c2:dd:66:8b:8f:d8:1c:77:64:ed:73:da:f5:80:39: 61:5e:53:b2:d0:52:0b:a1:ca:31:b1:7f:fd:15:5a: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F6:CE:0E:35:9F:99:AE:1F:D3:13:42:80:CE:37:E7:2F:11:39:EF X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:57:84:39:a1:c4:38:c4:7c:e3:a6:c5:24:48:55:6e:84:c6: d4:c6:81:ff:60:c6:a8:99:67:10:74:f7:6c:7b:3e:b6:d8:73: a5:a5:14:8b:1c:5d:79:6a:5f:d3:2a:50:5b:39:5d:d0:d0:55: fb:f0:81:ec:12:f6:63:5e:91:7c:17:9d:b1:9d:8c:b7:cc:61: 8a:c6:e2:7d:26:a3:14:b1:19:e1:35:4d:f5:26:b0:37:16:4d: ce:6e:80:63:b8:0c:dc:e4:d1:70:a2:6c:78:df:50:bd:eb:7b: 92:51:4f:db:b6:08:a2:64:3b:a6:b6:8f:4f:80:f1:4a:b1:c1: 9a:6e:ec:b4:3e:e5:cb:4a:34:b6:69:53:0a:3d:3c:e6:10:8a: 39:50:61:d9:06:5c:75:71:12:11:8b:0b:1f:c9:25:69:63:d1: 49:f3:cb:f0:ea:76:74:f7:ca:ad:6a:a9:8c:ab:4f:b4:a5:99: 6e:db:71:7f:65:88:88:c4:ef:2d:5e:e2:0e:db:1f:51:04:90: 7d:54:e6:a1:13:d2:5a:33:b4:7a:e6:e6:8b:b6:31:5d:10:7f: 16:6d:8a:0c:da:d1:44:36:cd:0d:52:eb:f7:8f:0f:c2:97:74: 87:d1:e2:20:c6:d5:30:b3:0e:b6:f6:5f:39:7a:ea:55:f5:1e: 67:ad:30:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUxMDE5MDU0MjQyWhcNMjUxMDI2MDU0MjQyWjAYMRYwFAYD VQQDEw02OGY0N2E1Mi04ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Ht4LPd4bVr82mEwkcW0FrgQvFEUu+ANlSVAaoHnCPofKOcH6GNzHc90lwa Lu59OuErNBjdz9Tc/mgvD5Ke9RrtXTEqp10+5H15cSF+9X2ZySAl4NAzkVl5ENTu 9E7A38zo6exMlbgnDOp4dskzKEJXSQk/9sYHF6Ao1Py/y3kpDUkXRt3QGIYSbjy0 oVkTkeBR2G0fjz92VAuwb9hQG6/VKIbaRzAJHPzojCatxCFrQ4pn0rBlE6+rJe7P dUUeB8ZOz+BfBnThVf+rctaY4gF+NtiwG/Y3bZlBdL6N7brC3WaLj9gcd2Ttc9r1 gDlhXlOy0FILocoxsX/9FVo1dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD2zg41 n5muH9MTQoDON+cvETnvMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+V4Q5ocQ4xHzjpsUkSFVuhMbUxoH/YMaomWcQdPdsez622HOlpRSL HF15al/TKlBbOV3Q0FX78IHsEvZjXpF8F52xnYy3zGGKxuJ9JqMUsRnhNU31JrA3 Fk3OboBjuAzc5NFwomx431C963uSUU/btgiiZDumto9PgPFKscGabuy0PuXLSjS2 aVMKPTzmEIo5UGHZBlx1cRIRiwsfySVpY9FJ88vw6nZ098qtaqmMq0+0pZlu23F/ ZYiIxO8tXuIO2x9RBJB9VOahE9JaM7R65uaLtjFdEH8WbYoM2tFENs0NUuv3jw/C l3SH0eIgxtUwsw629l85eupV9R5nrTAA -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:20 2025 by rpki-client