$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: Lw8FRkSKxTfkUOSr1xQ5pd0PYET5RhhIgUhnvihbEsw= Subject key identifier: B7:73:8E:A3:E4:6E:22:BD:7A:FD:20:E8:83:FB:68:9B:D0:DE:F0:74 Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 1400 Signing time: Sun 02 Nov 2025 19:12:47 +0000 Manifest this update: Sun 02 Nov 2025 19:12:46 +0000 Manifest next update: Sun 09 Nov 2025 19:12:46 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: 4P6dpm5r1vX4eKmUeeD8RGUIwSihocH3NLYuiILuTYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Nov 2 19:12:46 2025 GMT Not After : Nov 9 19:12:46 2025 GMT Subject: CN=6907ad2f-a154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:73:e3:28:d1:1e:84:3c:56:0c:4f:4c:61:ff: 8f:4f:c2:cd:07:92:dc:3f:f4:6c:0e:ea:4d:6b:8a: 8c:fc:90:2e:31:88:8b:76:5c:25:29:c8:0d:f4:ce: d8:c6:bc:f4:79:51:ba:88:c7:6d:d3:7d:dc:c8:03: ca:c4:f7:b4:47:70:70:65:d2:14:72:a8:e9:15:98: 0b:cd:ff:2e:46:a7:79:b8:53:3c:84:3f:b3:8c:7c: 19:af:71:0a:3f:c9:5a:48:bf:38:f8:0d:2e:c4:2f: 72:48:8c:9b:78:00:19:9a:73:c2:03:e8:e2:df:bb: 77:1d:d1:5b:ed:27:e1:cc:32:96:c6:92:32:29:2a: e2:bf:03:a6:91:5b:6f:fb:35:53:cc:1b:32:7c:8f: 83:31:b6:a9:5e:91:43:52:d4:b4:da:47:da:92:27: 35:e9:3c:b2:ee:b4:09:a6:3d:46:2c:b2:ce:8b:f4: 2e:88:e6:c2:0b:7a:86:fb:3e:da:28:79:7c:96:ee: f1:f7:9d:50:0d:3c:b3:55:ad:39:63:2e:2d:ee:4c: 5e:da:79:8f:2e:71:13:c7:ab:e6:6c:67:ae:cb:df: d3:84:46:2e:6e:dd:11:7a:0b:14:7b:09:8d:7b:d0: 1d:d3:62:f3:8c:c6:e4:9a:60:d0:b8:08:a8:a1:32: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:8E:A3:E4:6E:22:BD:7A:FD:20:E8:83:FB:68:9B:D0:DE:F0:74 X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0d:85:22:83:c9:05:6e:7f:c5:02:ed:fa:2f:dc:1d:84:f5: 5f:db:97:0f:13:a3:c6:84:3a:df:f3:b4:18:8c:76:a7:80:89: de:de:01:a8:cd:3f:12:d5:8a:78:d4:4e:4c:b8:c1:5c:c5:cd: 08:27:f1:8e:fc:88:23:97:26:8f:21:e0:fd:db:81:61:7c:7a: a4:33:56:1b:1e:02:25:a5:2a:80:c1:c1:a6:c5:90:6a:12:5f: e4:9b:7e:e9:fd:08:06:11:67:83:3d:5d:4a:f1:90:fc:2c:f4: 66:6b:2b:93:5c:5a:6c:c9:60:9b:4c:1b:dc:a3:cb:54:5f:e8: 04:5b:e1:59:78:9a:2f:49:c4:8e:4a:e7:18:7b:8a:da:48:79: d9:59:cc:96:73:6c:de:f8:25:fd:8d:9c:d4:17:bd:dc:b7:3e: fb:3e:ea:3f:de:2f:1d:0f:72:ff:96:06:c3:7c:77:bc:69:0d: e9:43:54:d4:8a:53:b1:9a:05:c6:15:0a:75:d4:df:21:50:da: a0:e1:d9:06:ef:0d:50:31:ff:d8:95:77:e0:c2:f6:31:b7:87: fb:00:dc:1c:f3:7d:f4:ae:ff:9b:28:3b:dc:e8:b9:d5:0b:24: 57:a3:9c:00:02:8b:e1:8b:d9:9d:dc:c7:16:ce:f2:80:91:98: bb:7c:20:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjUxMTAyMTkxMjQ2WhcNMjUxMTA5MTkxMjQ2WjAYMRYwFAYD VQQDEw02OTA3YWQyZi1hMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nPjKNEehDxWDE9MYf+PT8LNB5LcP/RsDupNa4qM/JAuMYiLdlwlKcgN9M7Y xrz0eVG6iMdt033cyAPKxPe0R3BwZdIUcqjpFZgLzf8uRqd5uFM8hD+zjHwZr3EK P8laSL84+A0uxC9ySIybeAAZmnPCA+ji37t3HdFb7SfhzDKWxpIyKSrivwOmkVtv +zVTzBsyfI+DMbapXpFDUtS02kfakic16Tyy7rQJpj1GLLLOi/QuiObCC3qG+z7a KHl8lu7x951QDTyzVa05Yy4t7kxe2nmPLnETx6vmbGeuy9/ThEYubt0RegsUewmN e9Ad02LzjMbkmmDQuAiooTJ3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdzjqPk biK9ev0g6IP7aJvQ3vB0MB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrDYUig8kFbn/FAu36L9wdhPVf25cPE6PGhDrf87QYjHangIne3gGo zT8S1Yp41E5MuMFcxc0IJ/GO/IgjlyaPIeD924FhfHqkM1YbHgIlpSqAwcGmxZBq El/km37p/QgGEWeDPV1K8ZD8LPRmayuTXFpsyWCbTBvco8tUX+gEW+FZeJovScSO SucYe4raSHnZWcyWc2ze+CX9jZzUF73ctz77Puo/3i8dD3L/lgbDfHe8aQ3pQ1TU ilOxmgXGFQp11N8hUNqg4dkG7w1QMf/YlXfgwvYxt4f7ANwc8330rv+bKDvc6LnV CyRXo5wAAovhi9md3McWzvKAkZi7fCDn -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:10 2025 by rpki-client