$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json) Hash identifier: 7nQg2ol/1mReXegokHnT6XyKM2t5y2XtxhLij+ktbn4= Subject key identifier: 6B:11:EF:15:1C:D5:8A:CA:4E:8B:B1:08:86:70:21:BB:42:EF:71:BE Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft Manifest number: 06C0 Signing time: Sun 02 Nov 2025 22:06:28 +0000 Manifest this update: Sun 02 Nov 2025 22:06:28 +0000 Manifest next update: Sun 09 Nov 2025 22:06:28 +0000 Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: eyeLVgZJQxeNo1BocsH9q5qc/7dajJwfrPOexPaUZcE=) 2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: TnZM67noo4lbQHfXpAgCtw+JAFkneMpGmuhyQRw2ydg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8 Validity Not Before: Nov 2 22:06:28 2025 GMT Not After : Nov 9 22:06:28 2025 GMT Subject: CN=6907d5e4-8bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:4e:26:de:88:d0:a6:32:8d:55:eb:47:61: b7:61:a0:b4:12:1d:d5:1d:7a:0c:3e:bd:1b:57:e9: e5:62:99:a4:21:be:fe:dc:62:c7:80:93:c9:95:d7: c8:08:eb:40:75:de:30:10:ec:5e:97:2c:a9:42:bb: b4:d2:64:01:7d:04:db:cc:10:a6:c3:f8:18:bd:9c: 23:a5:74:2c:41:67:83:80:05:d6:b5:c4:c9:80:4a: 42:9f:1f:4a:ea:5d:12:30:57:fa:65:6c:c3:74:a9: ee:39:86:d9:33:11:bf:9b:99:24:71:76:4f:8f:c9: 3c:e6:97:1d:84:29:09:9d:b4:77:64:ee:6a:fa:e0: c5:fe:eb:16:da:b2:39:15:fa:5c:18:0a:54:b4:30: 7e:99:39:66:11:9f:f1:d0:1d:d5:a1:75:ca:7d:6a: 3c:2d:ab:5b:f3:11:b4:1d:5e:3f:28:32:d0:d6:19: af:a5:0b:44:7e:56:e0:8d:8f:70:0f:97:6d:77:1e: 2a:4a:68:15:2e:7f:8b:b8:4c:f3:0f:8e:cd:18:59: 59:1f:c8:f4:41:dc:a4:dc:c1:9c:47:28:d2:91:6e: 6a:a5:6e:33:3f:c0:39:68:c8:c6:75:a2:16:a4:97: 28:66:5c:9f:15:8d:18:bd:01:b6:1f:87:27:12:96: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:11:EF:15:1C:D5:8A:CA:4E:8B:B1:08:86:70:21:BB:42:EF:71:BE X509v3 Authority Key Identifier: keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:3d:d6:46:26:d9:a6:b1:b1:3e:77:d5:9e:c5:a9:4a:33:99: 4d:e2:3d:00:f7:37:72:7e:a3:5b:e3:87:57:67:6d:b2:a8:02: 26:9a:be:95:d3:60:a2:40:22:16:86:84:8f:81:8f:07:9d:a7: f9:bf:f6:7e:9d:95:a5:1d:70:11:95:0a:64:d2:47:98:58:15: c9:d6:05:bd:17:b6:e2:5b:10:dd:bd:93:d5:33:58:37:cd:e2: 1d:39:a1:c8:66:4d:ff:2c:85:55:0f:31:06:91:46:06:a4:2f: 83:13:9d:54:3d:90:cd:47:f9:14:e9:cb:2f:bf:b4:39:5b:99: 69:2a:35:a8:4f:cc:63:ce:65:da:a9:c7:ef:6a:9d:77:67:52: 2e:0e:f5:ae:53:6e:4a:09:e5:ff:88:c9:5e:8b:d7:dc:cb:06: ef:5e:03:d8:30:f9:41:ef:73:77:29:7f:49:6d:d8:3e:0e:0f: cf:e8:4d:28:8f:e7:17:0d:c8:03:81:ee:3c:f0:15:25:b4:84: 69:77:9e:98:5f:16:a1:3e:f4:75:84:c8:fe:48:81:ab:66:ee: fa:bd:c9:62:c4:1c:df:dc:3d:8a:f2:be:52:6d:f1:03:c5:2f: 09:97:70:30:56:15:6d:e8:4f:f5:5f:6c:f9:9e:08:42:aa:dd: 99:39:ca:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE NzIzN0Q4RDgwHhcNMjUxMTAyMjIwNjI4WhcNMjUxMTA5MjIwNjI4WjAYMRYwFAYD VQQDEw02OTA3ZDVlNC04YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNxOJt6I0KYyjVXrR2G3YaC0Eh3VHXoMPr0bV+nlYpmkIb7+3GLHgJPJldfI COtAdd4wEOxelyypQru00mQBfQTbzBCmw/gYvZwjpXQsQWeDgAXWtcTJgEpCnx9K 6l0SMFf6ZWzDdKnuOYbZMxG/m5kkcXZPj8k85pcdhCkJnbR3ZO5q+uDF/usW2rI5 FfpcGApUtDB+mTlmEZ/x0B3VoXXKfWo8Latb8xG0HV4/KDLQ1hmvpQtEflbgjY9w D5dtdx4qSmgVLn+LuEzzD47NGFlZH8j0Qdyk3MGcRyjSkW5qpW4zP8A5aMjGdaIW pJcoZlyfFY0YvQG2H4cnEpaTXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsR7xUc 1YrKTouxCIZwIbtC73G+MB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0PdZGJtmmsbE+d9WexalKM5lN4j0A9zdyfqNb44dXZ22yqAImmr6V 02CiQCIWhoSPgY8Hnaf5v/Z+nZWlHXARlQpk0keYWBXJ1gW9F7biWxDdvZPVM1g3 zeIdOaHIZk3/LIVVDzEGkUYGpC+DE51UPZDNR/kU6csvv7Q5W5lpKjWoT8xjzmXa qcfvap13Z1IuDvWuU25KCeX/iMlei9fcywbvXgPYMPlB73N3KX9Jbdg+Dg/P6E0o j+cXDcgDge488BUltIRpd56YXxahPvR1hMj+SIGrZu76vclixBzf3D2K8r5SbfED xS8Jl3AwVhVt6E/1X2z5nghCqt2ZOcqE -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:10 2025 by rpki-client