$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: IB9U7+7Qg+XivxiDNA8mfDjJwgIz8K0EbY1aiUXd8R4= Subject key identifier: 57:08:02:64:B5:BA:72:7E:AB:AE:07:0B:AC:3A:BE:3D:AF:37:61:EC Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0697 Signing time: Sun 02 Nov 2025 22:20:52 +0000 Manifest this update: Sun 02 Nov 2025 22:20:52 +0000 Manifest next update: Sun 09 Nov 2025 22:20:52 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: RM2jR3yHQvc300/IE2s39rZOXHxwLmTDSebs/8taw5I=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: kyXa2/fOky6ixQEZzJ/YTQjRwQzmiBb1i8hW42gK6jE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Nov 2 22:20:52 2025 GMT Not After : Nov 9 22:20:52 2025 GMT Subject: CN=6907d944-28ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:c7:e6:32:8d:68:9e:31:1f:74:b7:7b:80: 5f:52:e1:ba:61:91:4a:03:6b:b0:b5:f6:55:e5:eb: 71:7b:2b:d1:48:58:68:b4:77:ee:90:4f:1a:23:94: 52:5f:e7:3d:9e:80:09:16:2f:ae:0d:43:f7:7e:75: c1:a5:91:d0:43:32:1e:94:77:65:f2:35:20:4e:53: 90:f4:9c:dd:73:6d:1b:be:b6:6f:3d:37:20:3a:b1: 58:92:4b:4c:95:f5:99:05:d2:a9:a5:ae:a7:d2:63: 74:c0:b5:0b:88:13:88:4f:e7:a0:f4:31:56:c6:f1: d2:a4:c4:ab:7e:37:1f:ee:fe:02:12:cc:a1:24:03: b6:dd:9d:19:f3:85:80:6f:5d:ee:36:29:68:e1:37: 5d:7f:a0:a6:24:26:0e:74:6a:46:87:25:74:54:5e: b4:37:85:e3:8a:66:69:6b:90:6c:97:6e:cb:78:46: 29:99:54:21:86:70:31:e3:6e:25:a2:b9:24:b7:0a: 12:b4:8f:df:e7:4b:91:0f:66:e7:f3:30:89:77:41: 77:98:dc:86:eb:32:99:f5:b8:c3:40:c5:1c:b7:55: e8:5c:26:9e:73:41:e7:5e:b4:73:87:a4:0d:49:8a: d9:98:4a:52:3e:f4:6a:c9:0a:52:0a:d6:ad:b4:67: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:08:02:64:B5:BA:72:7E:AB:AE:07:0B:AC:3A:BE:3D:AF:37:61:EC X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:23:84:d6:bf:48:f3:ad:0d:ff:a1:01:50:24:4d:a7:70:60: 54:a5:4d:e8:e2:8a:2a:b4:e7:c2:b1:e7:f1:c1:73:de:d7:94: fd:45:80:7c:39:bd:4b:42:9a:fd:b4:b8:59:6a:c2:4c:40:42: 43:20:69:29:37:a3:e3:e1:6b:40:8b:6d:d3:a4:19:8d:df:7e: d9:70:d1:b6:87:43:8e:2b:8d:c0:6b:b7:19:a6:50:ab:38:60: a3:b0:82:0b:d6:f8:0f:52:30:6c:88:87:2e:1a:32:d3:ae:51: 0e:a2:ba:58:d4:74:78:7d:d7:dc:66:07:f4:6c:1a:cd:2a:42: ff:d2:72:e1:b5:3a:a2:c1:8d:f9:07:b1:91:32:86:a2:88:0a: 1f:9c:e6:75:ca:8c:4d:8e:d6:47:65:b5:e4:f8:34:d6:33:de: e4:81:f5:70:5c:ed:db:e8:31:8f:36:00:0c:ac:55:ec:d5:30: b2:b8:0b:b3:c7:ce:07:da:ab:b2:59:4b:dc:c4:80:b1:de:e4: 74:b1:cd:fc:0f:71:2c:be:64:56:d4:b3:ea:88:fc:3f:8d:b8: f9:5a:55:07:24:8f:27:9b:34:95:5a:da:05:68:41:d3:0e:47: f4:94:28:d7:92:99:8b:e8:ca:71:0a:e3:35:06:22:24:d3:92: 92:77:ba:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUxMTAyMjIyMDUyWhcNMjUxMTA5MjIyMDUyWjAYMRYwFAYD VQQDEw02OTA3ZDk0NC0yOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8HH5jKNaJ4xH3S3e4BfUuG6YZFKA2uwtfZV5etxeyvRSFhotHfukE8aI5RS X+c9noAJFi+uDUP3fnXBpZHQQzIelHdl8jUgTlOQ9Jzdc20bvrZvPTcgOrFYkktM lfWZBdKppa6n0mN0wLULiBOIT+eg9DFWxvHSpMSrfjcf7v4CEsyhJAO23Z0Z84WA b13uNilo4Tddf6CmJCYOdGpGhyV0VF60N4XjimZpa5Bsl27LeEYpmVQhhnAx424l orkktwoStI/f50uRD2bn8zCJd0F3mNyG6zKZ9bjDQMUct1XoXCaec0HnXrRzh6QN SYrZmEpSPvRqyQpSCtattGdkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcIAmS1 unJ+q64HC6w6vj2vN2HsMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeI4TWv0jzrQ3/oQFQJE2ncGBUpU3o4ooqtOfCsefxwXPe15T9RYB8 Ob1LQpr9tLhZasJMQEJDIGkpN6Pj4WtAi23TpBmN337ZcNG2h0OOK43Aa7cZplCr OGCjsIIL1vgPUjBsiIcuGjLTrlEOorpY1HR4fdfcZgf0bBrNKkL/0nLhtTqiwY35 B7GRMoaiiAofnOZ1yoxNjtZHZbXk+DTWM97kgfVwXO3b6DGPNgAMrFXs1TCyuAuz x84H2quyWUvcxICx3uR0sc38D3EsvmRW1LPqiPw/jbj5WlUHJI8nmzSVWtoFaEHT Dkf0lCjXkpmL6MpxCuM1BiIk05KSd7oY -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:27 2025 by rpki-client