$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft File: KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json) Hash identifier: 4UeKnN3OKLL7H5X2fMxA0jhj8GiIm9AXXaM2kKZSfdE= Subject key identifier: D1:43:E5:DF:73:1F:6D:CE:FB:A4:FA:25:26:D0:CC:2B:41:32:3A:81 Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C Certificate issuer: /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft Manifest number: 67 Signing time: Wed 05 Nov 2025 07:15:48 +0000 Manifest this update: Wed 05 Nov 2025 07:15:47 +0000 Manifest next update: Wed 12 Nov 2025 07:15:47 +0000 Files and hashes: 1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: bukIF0oJEhnIDGoH77KYHvc07cnRfmbbwimTK9xC9xc=) 2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C Validity Not Before: Nov 5 07:15:47 2025 GMT Not After : Nov 12 07:15:47 2025 GMT Subject: CN=690af9a4-2233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:d5:26:85:21:82:d7:68:32:64:c4:f5:79: 60:7d:72:61:33:92:5d:50:68:18:b2:93:d7:ec:82: 44:36:f6:e3:37:0b:23:7d:b3:22:04:75:dd:24:6e: 81:02:ca:a9:7b:06:2f:5b:15:48:2d:09:e2:0f:69: 0c:04:10:3b:3b:85:db:ff:49:6e:da:68:14:b5:76: 4d:68:d1:8c:3d:1a:cf:29:93:ae:9e:f0:5a:e7:91: 60:93:42:c5:ba:b6:b1:b4:b8:9f:47:04:78:d0:04: 7d:a6:47:1c:5b:3d:a4:55:a7:c1:d7:5e:08:bd:86: 54:40:f4:e5:15:37:24:06:bc:4b:74:d5:c3:af:22: fa:03:7c:c9:4d:2b:50:5f:44:39:7e:62:84:6c:0b: a2:9a:74:10:17:c7:16:dd:4b:b5:c5:f8:11:59:d6: 37:75:48:9e:be:31:13:df:02:c8:2d:11:5f:47:d3: 61:cc:00:22:0a:77:bf:35:dd:35:fd:59:bb:7f:77: ce:18:ee:35:8a:58:ea:2b:5c:82:7b:2e:fe:1c:2c: 03:83:ca:74:77:84:cb:01:7c:62:24:57:99:68:8f: 83:cb:ad:98:ad:23:e3:40:34:2a:17:eb:92:a0:69: 2e:47:23:85:97:e8:fe:bb:bf:6b:80:8d:cd:33:7c: 4e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:E5:DF:73:1F:6D:CE:FB:A4:FA:25:26:D0:CC:2B:41:32:3A:81 X509v3 Authority Key Identifier: keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:54:62:c8:70:b8:d5:91:ca:e3:01:79:91:b6:e0:f2:4b:d2: 33:aa:c6:cb:29:99:99:65:0d:18:c9:18:58:9a:e0:8a:81:9b: ae:6c:7b:e4:0d:9d:51:9f:b8:06:d2:47:6e:55:05:7f:60:77: 86:fa:31:e4:f3:46:2b:04:51:7d:07:f2:63:0d:a7:fe:0f:24: e5:52:4b:08:df:7a:5e:ad:1d:0c:77:7d:f8:f0:86:0e:f8:54: 5c:04:ae:61:eb:5d:35:20:69:52:8e:ac:24:fd:f1:85:01:16: 4e:36:d2:4a:b5:18:9e:61:00:cd:c5:3c:7c:ff:ae:08:99:98: 83:a4:60:1f:6d:1e:3c:d1:d4:8c:5b:27:57:40:5d:fd:68:c5: 92:e7:62:8a:2d:c1:80:56:ed:36:cb:df:56:b3:a8:a5:5c:11: aa:ec:d2:25:98:df:df:75:93:b5:ba:ff:26:bd:77:2f:ce:1a: 45:50:f4:17:ca:28:41:19:2d:d7:c9:ef:db:8e:10:3d:74:19: 2c:12:69:fa:3a:2b:22:79:df:5f:57:98:15:ae:f2:f9:7a:ac: f5:ea:a8:2a:b7:d5:ae:ff:d7:7d:a8:a6:fd:b7:ea:c3:cb:a9: 1b:81:f9:2f:31:43:2e:77:55:fd:ff:7d:0a:b9:12:e7:ee:24: 54:9e:33:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QUM3MzExMC8GA1UEBRMoMjhDRDA5RTY1MEMyNjlFQzdEMkJDOUZFRjdENTY2QzEw MTJEMjA0QzAeFw0yNTExMDUwNzE1NDdaFw0yNTExMTIwNzE1NDdaMBgxFjAUBgNV BAMTDTY5MGFmOWE0LTIyMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzq9UmhSGC12gyZMT1eWB9cmEzkl1QaBiyk9fsgkQ29uM3CyN9syIEdd0kboEC yql7Bi9bFUgtCeIPaQwEEDs7hdv/SW7aaBS1dk1o0Yw9Gs8pk66e8FrnkWCTQsW6 trG0uJ9HBHjQBH2mRxxbPaRVp8HXXgi9hlRA9OUVNyQGvEt01cOvIvoDfMlNK1Bf RDl+YoRsC6KadBAXxxbdS7XF+BFZ1jd1SJ6+MRPfAsgtEV9H02HMACIKd7813TX9 Wbt/d84Y7jWKWOorXIJ7Lv4cLAODynR3hMsBfGIkV5loj4PLrZitI+NANCoX65Kg aS5HI4WX6P67v2uAjc0zfE47AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0UPl33Mf bc77pPolJtDMK0EyOoEwHwYDVR0jBBgwFoAUKM0J5lDCaex9K8n+99VmwQEtIEww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBQzczLzc3NTEyREMyMjUx NzExRjBCMDdGODYxREM0RjlBRTAyL0tNMEo1bERDYWV4OUs4bi05OVZtd1FFdElF dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS00wSjVsRENhZXg5SzhuLTk5Vm13UUV0SUV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB QzczLzc3NTEyREMyMjUxNzExRjBCMDdGODYxREM0RjlBRTAyL0tNMEo1bERDYWV4 OUs4bi05OVZtd1FFdElFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACNUYshwuNWRyuMBeZG24PJL0jOqxsspmZllDRjJGFia4IqBm65se+QN nVGfuAbSR25VBX9gd4b6MeTzRisEUX0H8mMNp/4PJOVSSwjfel6tHQx3ffjwhg74 VFwErmHrXTUgaVKOrCT98YUBFk420kq1GJ5hAM3FPHz/rgiZmIOkYB9tHjzR1Ixb J1dAXf1oxZLnYootwYBW7TbL31azqKVcEars0iWY3991k7W6/ya9dy/OGkVQ9BfK KEEZLdfJ79uOED10GSwSafo6KyJ5319XmBWu8vl6rPXqqCq31a7/132opv236sPL qRuB+S8xQy53Vf3/fQq5EufuJFSeM9Y= -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:55 2025 by rpki-client