$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json) Hash identifier: F5WN+DCUmEphQlrXRLKhtISdIM9tKd74Y7X73iivzS8= Subject key identifier: 42:5F:1D:87:02:7D:C8:EB:C6:25:D8:1F:26:5D:24:95:B2:FE:5B:9C Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft Manifest number: 0698 Signing time: Tue 04 Nov 2025 22:27:10 +0000 Manifest this update: Tue 04 Nov 2025 22:27:09 +0000 Manifest next update: Tue 11 Nov 2025 22:27:09 +0000 Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: VxxcDkoECdVf9BDl632iJinBSItlgwofSl3CQYrzFb8=) 2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: kyXa2/fOky6ixQEZzJ/YTQjRwQzmiBb1i8hW42gK6jE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79 Validity Not Before: Nov 4 22:27:09 2025 GMT Not After : Nov 11 22:27:09 2025 GMT Subject: CN=690a7dbd-d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:af:a7:b6:87:30:00:4d:69:0e:76:51:ca: 8c:2b:03:88:ac:4b:b3:43:77:15:fb:97:00:d7:21: ef:3a:92:37:e2:60:67:3a:c1:9b:65:0e:57:f9:aa: 53:bf:24:10:a6:ef:0c:fd:c7:de:1e:11:79:f6:09: f5:c4:04:27:b0:c3:4e:7f:2e:d5:e7:e3:ee:53:5b: aa:c1:82:d8:7a:78:54:7d:36:28:d6:dc:77:0c:92: 45:c6:67:c6:c8:0f:ba:f0:1a:f9:ec:19:a2:db:59: 2f:d2:8b:03:74:f7:16:05:64:9d:4e:69:b3:dd:bb: 38:97:bc:29:52:7e:22:e0:cd:46:e5:8e:cb:76:ce: 06:e3:26:65:bc:4a:3d:57:50:02:fc:5e:d1:f1:02: 38:8e:b9:b5:ae:79:53:9e:cd:b3:9d:ed:d9:90:f2: f3:a1:db:9e:7d:83:f1:05:9b:7a:57:dd:25:bf:6b: a2:b6:dd:30:9a:9a:ba:9e:fe:82:a1:65:1b:bd:53: 89:ab:51:05:59:6a:7d:34:eb:c5:9c:61:57:97:fc: 2a:b7:77:f7:55:e2:4e:21:96:4a:b1:43:33:99:b8: 74:36:ab:d3:78:32:a5:db:e9:37:7d:25:73:05:66: 50:5e:72:af:e6:f0:ff:39:1d:ba:a1:3c:e9:47:d7: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:1D:87:02:7D:C8:EB:C6:25:D8:1F:26:5D:24:95:B2:FE:5B:9C X509v3 Authority Key Identifier: keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c9:88:5a:24:5a:a4:f6:e2:d1:67:4a:e3:fe:3e:93:1b:f2: d9:4b:dc:9c:fd:21:a9:b0:47:1f:67:d4:06:b7:5a:7b:39:36: 94:a7:73:fc:53:c6:74:d5:be:07:5f:24:52:72:46:3d:35:c9: e0:98:42:96:83:cb:67:d2:6d:fc:d6:a4:ee:70:20:9b:81:e0: 10:92:89:d5:38:77:db:71:9f:da:b1:e8:82:aa:21:ee:ef:81: ad:98:a4:78:9f:3b:ca:cc:48:7e:a8:56:1b:88:6d:d8:80:b0: 20:cf:6e:ab:0a:cf:7e:c5:a2:34:b5:f9:ca:cf:7b:d6:1e:fc: a9:1d:6e:d3:05:23:af:82:5a:14:32:8d:97:37:e7:68:ae:99: 20:9d:ce:81:86:14:26:56:70:7b:3d:35:63:b2:a9:ef:19:c9: d1:42:19:3d:c6:d1:c4:b8:4d:03:9b:f8:5f:d1:c9:f8:8d:ed: e2:ce:7c:cd:d1:0e:2e:aa:4e:1d:aa:00:92:dd:d8:b5:bb:5b: 97:6e:74:67:2d:04:7e:bb:55:bb:af:23:f0:bc:4d:5c:7a:c9: 02:b4:4f:93:49:a9:25:57:b8:eb:ec:e0:6b:8d:a4:7c:ed:f3: d3:cb:37:e8:0a:35:9f:32:1b:19:72:13:5c:31:ad:a6:9f:fb: b5:4e:9d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY2OUQxMTAvBgNVBAUTKDkxMTI2RTg2RjE4QzYwOTQwNEQxOTBGMjk4QzMyQ0Q2 MDlGQ0ZBNzkwHhcNMjUxMTA0MjIyNzA5WhcNMjUxMTExMjIyNzA5WjAYMRYwFAYD VQQDEw02OTBhN2RiZC1kOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aCvp7aHMABNaQ52UcqMKwOIrEuzQ3cV+5cA1yHvOpI34mBnOsGbZQ5X+apT vyQQpu8M/cfeHhF59gn1xAQnsMNOfy7V5+PuU1uqwYLYenhUfTYo1tx3DJJFxmfG yA+68Br57Bmi21kv0osDdPcWBWSdTmmz3bs4l7wpUn4i4M1G5Y7Lds4G4yZlvEo9 V1AC/F7R8QI4jrm1rnlTns2zne3ZkPLzoduefYPxBZt6V90lv2uitt0wmpq6nv6C oWUbvVOJq1EFWWp9NOvFnGFXl/wqt3f3VeJOIZZKsUMzmbh0NqvTeDKl2+k3fSVz BWZQXnKv5vD/OR26oTzpR9cqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJfHYcC fcjrxiXYHyZdJJWy/lucMB8GA1UdIwQYMBaAFJESbobxjGCUBNGQ8pjDLNYJ/Pp5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjY5RC9CRjZFMjBBNjhE QUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlKUUUwWkR5bU1NczFnbjgt bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSSnVodkdNWUpRRTBaRHltTU1zMWduOC1uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjY5RC9CRjZFMjBBNjhEQUUxMUVCQjI5OEI1MUZDNEY5QUUwMi9rUkp1aHZHTVlK UUUwWkR5bU1NczFnbjgtbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2yYhaJFqk9uLRZ0rj/j6TG/LZS9yc/SGpsEcfZ9QGt1p7OTaUp3P8 U8Z01b4HXyRSckY9NcngmEKWg8tn0m381qTucCCbgeAQkonVOHfbcZ/aseiCqiHu 74GtmKR4nzvKzEh+qFYbiG3YgLAgz26rCs9+xaI0tfnKz3vWHvypHW7TBSOvgloU Mo2XN+dorpkgnc6BhhQmVnB7PTVjsqnvGcnRQhk9xtHEuE0Dm/hf0cn4je3iznzN 0Q4uqk4dqgCS3di1u1uXbnRnLQR+u1W7ryPwvE1ceskCtE+TSaklV7jr7OBrjaR8 7fPTyzfoCjWfMhsZchNcMa2mn/u1Tp01 -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:06 2025 by rpki-client