$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json) Hash identifier: +Tl72NxvAPtsSFlMh/ucUGzMR2eTiEJjHkBTUbj0kdY= Subject key identifier: 80:03:D3:28:63:09:E7:6C:95:10:91:9E:86:B4:68:1F:60:16:A9:33 Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft Manifest number: 7E Signing time: Mon 03 Nov 2025 06:46:25 +0000 Manifest this update: Mon 03 Nov 2025 06:46:24 +0000 Manifest next update: Mon 10 Nov 2025 06:46:24 +0000 Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: C0mCnqh+MQNFvVWFqz8berby5myRR4IzPvnnh54QTko=) 2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: dZ19lJ/LmfvsUh9I1/K0IKSV94UgWGsaBqWt/Z2oGKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA Validity Not Before: Nov 3 06:46:24 2025 GMT Not After : Nov 10 06:46:24 2025 GMT Subject: CN=69084fc1-fd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8f:6f:2e:3d:ef:8b:e0:0a:54:22:ec:8c:9d: cd:cf:61:eb:c4:63:51:36:ea:cb:e9:3d:2a:d9:b1: b8:32:7c:c2:84:cb:94:18:3d:00:3e:20:9f:76:9e: 6e:fb:07:24:89:98:7b:04:b4:f0:86:65:8d:b1:f7: a7:e2:5c:c5:19:da:57:67:0d:6a:fa:7b:dc:ee:f8: 35:bc:9b:c2:1b:a9:18:85:56:ea:0b:b8:a5:3f:93: 88:3f:52:f2:b5:69:51:0a:6f:85:a4:4c:9c:13:22: bc:3b:6d:39:44:a4:44:01:a5:a5:b4:18:71:06:58: 89:98:ba:56:56:16:73:cf:e7:91:48:ed:bc:48:c8: 1c:32:a1:31:f7:0f:e9:ad:3d:ae:11:09:26:4d:d2: bd:9d:b2:30:14:d6:7d:08:f4:85:ae:b2:26:8a:9f: b7:f4:3a:fa:c5:44:bc:52:55:f5:20:6e:61:71:da: 6d:ae:ba:90:0e:de:ff:25:c1:4f:67:35:87:41:02: 2a:66:65:94:26:8d:52:8a:64:8c:0d:36:1d:73:07: 05:6f:c1:81:8f:7c:be:80:31:c6:ad:1f:dd:0c:4b: db:c9:59:bd:a6:62:0c:f5:0d:e4:f7:82:0d:71:5f: a3:55:27:75:cd:69:19:25:92:e0:f0:88:03:4c:a3: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:03:D3:28:63:09:E7:6C:95:10:91:9E:86:B4:68:1F:60:16:A9:33 X509v3 Authority Key Identifier: keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:85:21:1b:69:56:0b:61:74:49:3d:e6:20:16:d1:8d:38:4a: 46:a7:4c:f8:95:95:9d:92:e9:96:37:10:09:8c:fd:7e:46:2a: 00:b9:33:91:eb:12:96:22:e3:62:91:54:17:fd:bd:2b:be:b9: 55:70:21:9a:a4:7a:dc:02:88:58:eb:27:e3:48:ae:92:1e:50: 6b:8b:95:7d:e3:58:c2:51:77:e9:00:a7:55:eb:c0:ce:98:aa: 48:2b:ac:4e:0f:63:3c:9b:4c:6a:01:c4:61:ad:ad:95:83:4e: eb:8b:56:b7:69:54:f0:cc:5a:83:55:75:5b:54:54:42:6d:94: b7:ae:f2:e5:d0:66:8a:2a:05:83:60:02:3f:99:a8:63:f4:30: 34:f5:1f:5f:4d:fe:f2:aa:46:82:ae:68:7e:fc:a7:9d:ad:8c: 25:ba:cd:07:4f:37:f6:f3:55:33:a7:93:e5:71:67:66:c0:89: 87:c9:27:45:16:57:e0:4d:0d:63:1b:5c:b5:e3:d4:99:63:cd: 72:11:a5:66:5e:94:94:b0:fa:81:b6:a5:7d:1d:72:4c:67:21: f7:e4:09:25:40:ec:b2:aa:d8:a7:fa:13:e6:a9:27:72:bc:49: b9:3b:1c:0f:7d:fa:4e:e8:39:c7:5b:50:c1:77:f4:86:63:5f: cc:18:89:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz MDI0MUI4RUEwHhcNMjUxMTAzMDY0NjI0WhcNMjUxMTEwMDY0NjI0WjAYMRYwFAYD VQQDEw02OTA4NGZjMS1mZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro9vLj3vi+AKVCLsjJ3Nz2HrxGNRNurL6T0q2bG4MnzChMuUGD0APiCfdp5u +wckiZh7BLTwhmWNsfen4lzFGdpXZw1q+nvc7vg1vJvCG6kYhVbqC7ilP5OIP1Ly tWlRCm+FpEycEyK8O205RKREAaWltBhxBliJmLpWVhZzz+eRSO28SMgcMqEx9w/p rT2uEQkmTdK9nbIwFNZ9CPSFrrImip+39Dr6xUS8UlX1IG5hcdptrrqQDt7/JcFP ZzWHQQIqZmWUJo1SimSMDTYdcwcFb8GBj3y+gDHGrR/dDEvbyVm9pmIM9Q3k94IN cV+jVSd1zWkZJZLg8IgDTKNbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAD0yhj CedslRCRnoa0aB9gFqkzMB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1 T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk3NC9FNEU4OTAwRUZCNjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGht T19GZHh4Zm4xQXN3SkJ1T28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPhSEbaVYLYXRJPeYgFtGNOEpGp0z4lZWdkumWNxAJjP1+RioAuTOR 6xKWIuNikVQX/b0rvrlVcCGapHrcAohY6yfjSK6SHlBri5V941jCUXfpAKdV68DO mKpIK6xOD2M8m0xqAcRhra2Vg07ri1a3aVTwzFqDVXVbVFRCbZS3rvLl0GaKKgWD YAI/mahj9DA09R9fTf7yqkaCrmh+/KedrYwlus0HTzf281Uzp5PlcWdmwImHySdF FlfgTQ1jG1y149SZY81yEaVmXpSUsPqBtqV9HXJMZyH35AklQOyyqtin+hPmqSdy vEm5OxwPffpO6DnHW1DBd/SGY1/MGIlj -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:26 2025 by rpki-client