$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft File: KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json) Hash identifier: r1n20wtB0gOhzZrLvo8fOm/BaOyd97XYoCFEqRj8Ksw= Subject key identifier: 36:34:9F:3F:87:03:1B:1A:96:F4:E2:51:61:8E:A6:38:DB:9B:93:9A Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 Certificate issuer: /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft Manifest number: 0163 Signing time: Wed 05 Nov 2025 04:11:26 +0000 Manifest this update: Wed 05 Nov 2025 04:11:25 +0000 Manifest next update: Wed 12 Nov 2025 04:11:25 +0000 Files and hashes: 1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: TfTQ74317d0q5osCeRomyjOz512AZNpJdLOHyrAbBlI=) 2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8 Validity Not Before: Nov 5 04:11:25 2025 GMT Not After : Nov 12 04:11:25 2025 GMT Subject: CN=690ace6d-f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:af:19:21:93:d4:60:f4:29:e0:cc:e6:bc: 16:a8:61:98:56:57:2b:95:b8:86:7f:78:75:b4:32: ac:f4:97:df:dd:a3:10:fc:29:56:16:eb:fb:df:19: 71:79:b1:82:f2:bf:c9:35:94:f7:52:70:5f:cb:82: 8f:f6:2b:4b:d2:40:a1:fe:dc:94:da:d4:f6:c0:58: 37:34:d3:87:2b:cc:5a:15:fe:81:02:d8:bc:23:59: 39:89:5b:24:eb:97:b3:88:57:a2:c1:8a:4f:4e:19: db:0c:87:cf:b9:63:44:55:12:73:be:8a:2c:55:64: 6c:39:4c:3e:e9:93:eb:72:ce:7b:ee:8b:fd:e3:86: 2a:3e:e8:49:8a:80:f4:a6:9a:18:f7:be:93:ec:7d: 84:39:6e:f2:cf:04:e9:f7:17:35:76:ec:f1:fd:a9: 57:2f:d2:8b:a7:69:d3:59:f6:b6:08:73:cf:7c:57: d2:19:08:7d:fb:c1:93:11:70:d0:45:aa:0d:eb:24: 4c:7c:7b:9b:de:3c:30:7f:67:89:af:a2:59:46:c2: 12:e0:e6:8d:16:1e:80:54:73:99:0a:ee:55:fc:44: 88:5d:7d:54:9b:ae:10:fb:f3:ae:91:9a:1e:f8:21: 49:2f:dd:80:ad:02:6e:69:22:f9:3e:a9:f7:fa:c1: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:34:9F:3F:87:03:1B:1A:96:F4:E2:51:61:8E:A6:38:DB:9B:93:9A X509v3 Authority Key Identifier: keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:14:b1:27:2f:99:c7:b8:97:a4:f8:aa:6e:d0:df:f2:55:9e: 14:d8:26:b1:6d:fd:99:52:65:17:f4:20:55:83:c9:73:4b:b4: d7:3e:5f:2b:ba:27:c8:12:20:b7:dc:a3:dc:ec:d0:2f:9d:b9: 16:67:be:30:fa:67:85:65:dc:db:67:b8:9f:67:50:a1:f7:ba: 14:9a:72:e5:98:ae:3d:c7:d5:2b:f8:0f:fd:a1:60:5a:00:88: 21:b0:a2:17:5a:09:8a:5b:7b:d5:11:a4:b4:57:90:f3:3e:09: 1e:d5:e1:00:a8:29:f3:e6:95:ad:c5:39:b2:8d:80:0a:f0:e3: 20:2d:ee:d3:60:c1:a1:18:26:8a:db:74:e9:bb:90:d4:71:bb: e6:43:1a:39:cd:2e:3e:24:f9:e0:3b:fa:8c:2e:58:79:e2:4d: 3c:07:90:87:85:7e:9e:94:85:c1:82:f9:d1:b7:83:84:3c:c0: 92:62:78:2a:1c:a2:97:84:fc:0c:ad:ec:f0:ce:23:8d:4b:93: ee:2e:43:ac:92:37:38:ec:07:51:54:fa:a0:d7:be:05:9a:23: b3:fe:58:af:69:ad:1d:35:15:3d:3f:1f:bd:89:02:42:25:0e: ca:75:dd:21:ca:0c:a4:3d:08:40:f7:b0:c2:ec:db:a7:9e:05: ab:ab:f8:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE OEZBRkJDQTgwHhcNMjUxMTA1MDQxMTI1WhcNMjUxMTEyMDQxMTI1WjAYMRYwFAYD VQQDEw02OTBhY2U2ZC1mNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTGvGSGT1GD0KeDM5rwWqGGYVlcrlbiGf3h1tDKs9Jff3aMQ/ClWFuv73xlx ebGC8r/JNZT3UnBfy4KP9itL0kCh/tyU2tT2wFg3NNOHK8xaFf6BAti8I1k5iVsk 65eziFeiwYpPThnbDIfPuWNEVRJzvoosVWRsOUw+6ZPrcs577ov944YqPuhJioD0 ppoY976T7H2EOW7yzwTp9xc1duzx/alXL9KLp2nTWfa2CHPPfFfSGQh9+8GTEXDQ RaoN6yRMfHub3jwwf2eJr6JZRsIS4OaNFh6AVHOZCu5V/ESIXX1Um64Q+/OukZoe +CFJL92ArQJuaSL5Pqn3+sFLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY0nz+H AxsalvTiUWGOpjjbm5OaMB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2 S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtFLEnL5nHuJek+Kpu0N/yVZ4U2Caxbf2ZUmUX9CBVg8lzS7TXPl8r uifIEiC33KPc7NAvnbkWZ74w+meFZdzbZ7ifZ1Ch97oUmnLlmK49x9Ur+A/9oWBa AIghsKIXWgmKW3vVEaS0V5DzPgke1eEAqCnz5pWtxTmyjYAK8OMgLe7TYMGhGCaK 23Tpu5DUcbvmQxo5zS4+JPngO/qMLlh54k08B5CHhX6elIXBgvnRt4OEPMCSYngq HKKXhPwMrezwziONS5PuLkOskjc47AdRVPqg174FmiOz/livaa0dNRU9Px+9iQJC JQ7Kdd0hygykPQhA97DC7NunngWrq/jt -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:08 2025 by rpki-client