$ rpki-client -vvf rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft File: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft (raw, json) Hash identifier: Pk/9x4hV5aLlleQhyg+o69/JMAm3H61zu72dymFnAbU= Subject key identifier: 75:19:BF:DB:F7:61:C2:04:40:B4:80:0F:D5:32:47:CA:23:64:5F:9D Authority key identifier: 28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B Certificate issuer: /CN=A91C744F/serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft Manifest number: 07B8 Signing time: Sun 02 Nov 2025 21:23:02 +0000 Manifest this update: Sun 02 Nov 2025 21:23:02 +0000 Manifest next update: Sun 09 Nov 2025 21:23:02 +0000 Files and hashes: 1: KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl (hash: 4bnvw/Nff7SQIF0uqxSYG9lJ/sdPh4zn9KH9lZvAZU8=) 2: E7EFEDC07C1F11EB95B6492DC4F9AE02.roa (hash: m3jxJQF+AC7fQWOTcRGVcRm7nhWrV4djextUV/e5Tp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C744F, serialNumber=289EB23F28C9CF23FA5B918A650CB8428050307B Validity Not Before: Nov 2 21:23:02 2025 GMT Not After : Nov 9 21:23:02 2025 GMT Subject: CN=6907cbb6-51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:d5:67:20:f4:12:c6:54:ad:d7:7e:88:2d: 1e:78:98:2a:85:b1:d3:ed:91:47:7e:d2:8b:2d:45: 61:ca:f1:59:8e:82:40:30:c3:65:50:60:e3:94:f2: 8e:38:1b:ef:24:d3:28:fa:d0:2e:7f:25:e1:87:38: dd:c9:26:d3:23:11:2c:47:c7:3d:eb:6a:04:39:36: a5:c1:76:74:f1:59:88:98:f5:bd:c5:2b:c1:44:ce: f2:66:90:80:9a:4f:77:3f:81:91:9b:83:0b:89:2f: d2:a5:94:1b:04:2b:aa:f2:11:3c:13:be:f6:8c:e4: 77:26:f7:37:90:a7:96:a6:de:a5:65:c2:b2:7e:bd: e1:12:53:ae:5d:9f:62:13:12:85:a9:da:33:9c:35: db:eb:16:25:b1:27:90:94:1b:83:c8:a5:ac:dc:aa: 3b:91:42:d8:9c:fc:03:38:88:f9:a0:4a:4e:8f:77: 91:f4:15:fb:3d:5d:15:56:6d:b0:e4:89:e4:ae:c0: 95:ce:ec:b1:b2:59:cd:3d:e4:d1:c9:3f:75:05:8c: c2:5b:50:f7:f1:56:1f:9d:86:4d:9a:40:d1:47:02: 08:7b:73:6b:c0:9e:96:af:a4:d8:f4:87:75:d7:d8: fc:70:1f:bd:af:7c:df:83:c7:e9:bc:a2:2f:05:28: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:19:BF:DB:F7:61:C2:04:40:B4:80:0F:D5:32:47:CA:23:64:5F:9D X509v3 Authority Key Identifier: keyid:28:9E:B2:3F:28:C9:CF:23:FA:5B:91:8A:65:0C:B8:42:80:50:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C744F/B7F9385E22B711EB8C37033CC4F9AE02/KJ6yPyjJzyP6W5GKZQy4QoBQMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:07:6c:0a:02:70:9d:69:0f:dd:88:8f:bd:3b:38:a8:0c:d8: b8:cb:97:01:31:c8:d8:66:ee:10:5c:63:0b:88:28:7c:af:be: 1f:db:fa:8e:8e:f2:97:4a:5e:b1:ca:23:85:35:37:f6:53:6a: 0a:c4:90:cc:32:b1:7c:ff:61:1c:c4:85:33:52:b7:9b:28:fc: 34:a9:d2:e3:a2:98:2b:fd:1c:49:3e:95:76:d2:cb:67:e9:b8: 3f:ae:23:56:bc:78:1d:c9:42:83:e5:85:bf:a4:d6:34:0a:ee: 6d:7b:ea:2d:1b:c1:19:c2:19:ea:ff:85:3b:2c:87:d3:13:1d: e8:3e:48:ba:16:be:9c:60:d5:af:b4:f6:05:f9:32:f7:85:a6: e9:9d:d9:75:a4:48:68:71:3f:b0:1c:be:ee:4b:58:20:20:4e: 7d:3f:8e:a7:6f:d6:62:af:20:16:4e:12:38:1d:bf:57:83:ae: a2:f4:89:f3:02:69:00:b5:20:74:9f:f1:85:44:d3:4b:37:1a: 7d:39:cf:b8:03:82:b4:1b:0c:04:77:71:56:5b:20:e2:ee:fd: 57:d7:30:e0:59:a1:6f:d5:a3:ed:25:d2:43:2d:f4:38:f0:66: 83:1e:74:16:29:f8:8b:1a:27:86:e5:d4:49:f5:fc:f7:6e:2c: 8c:3e:7b:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0NEYxMTAvBgNVBAUTKDI4OUVCMjNGMjhDOUNGMjNGQTVCOTE4QTY1MENCODQy ODA1MDMwN0IwHhcNMjUxMTAyMjEyMzAyWhcNMjUxMTA5MjEyMzAyWjAYMRYwFAYD VQQDEw02OTA3Y2JiNi01MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7PrVZyD0EsZUrdd+iC0eeJgqhbHT7ZFHftKLLUVhyvFZjoJAMMNlUGDjlPKO OBvvJNMo+tAufyXhhzjdySbTIxEsR8c962oEOTalwXZ08VmImPW9xSvBRM7yZpCA mk93P4GRm4MLiS/SpZQbBCuq8hE8E772jOR3Jvc3kKeWpt6lZcKyfr3hElOuXZ9i ExKFqdoznDXb6xYlsSeQlBuDyKWs3Ko7kULYnPwDOIj5oEpOj3eR9BX7PV0VVm2w 5InkrsCVzuyxslnNPeTRyT91BYzCW1D38VYfnYZNmkDRRwIIe3NrwJ6Wr6TY9Id1 19j8cB+9r3zfg8fpvKIvBSj2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUZv9v3 YcIEQLSAD9UyR8ojZF+dMB8GA1UdIwQYMBaAFCiesj8oyc8j+luRimUMuEKAUDB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzQ0Ri9CN0Y5Mzg1RTIy QjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5UDZXNUdLWlF5NFFvQlFN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKNnlQeWpKenlQNlc1R0taUXk0UW9CUU1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzQ0Ri9CN0Y5Mzg1RTIyQjcxMUVCOEMzNzAzM0NDNEY5QUUwMi9LSjZ5UHlqSnp5 UDZXNUdLWlF5NFFvQlFNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHB2wKAnCdaQ/diI+9OzioDNi4y5cBMcjYZu4QXGMLiCh8r74f2/qO jvKXSl6xyiOFNTf2U2oKxJDMMrF8/2EcxIUzUrebKPw0qdLjopgr/RxJPpV20stn 6bg/riNWvHgdyUKD5YW/pNY0Cu5te+otG8EZwhnq/4U7LIfTEx3oPki6Fr6cYNWv tPYF+TL3habpndl1pEhocT+wHL7uS1ggIE59P46nb9ZiryAWThI4Hb9Xg66i9Inz AmkAtSB0n/GFRNNLNxp9Oc+4A4K0GwwEd3FWWyDi7v1X1zDgWaFv1aPtJdJDLfQ4 8GaDHnQWKfiLGieG5dRJ9fz3biyMPnuk -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:22 2025 by rpki-client