$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: WhPucYS+QNtVnwvdXq6+7/YtF6qWKdzNbo2hADPCh4Q= Subject key identifier: 42:A5:A4:4D:FD:C1:D9:15:7C:F1:00:AB:F4:4C:8F:38:11:19:A9:B4 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 062B Signing time: Tue 04 Nov 2025 22:49:58 +0000 Manifest this update: Tue 04 Nov 2025 22:49:57 +0000 Manifest next update: Tue 11 Nov 2025 22:49:57 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: 5LEQcp4XUIWkZugm6TGGfF616D7rFk5y4XYN8BVJuVE=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: z/OvD5EQcBmWZhdA8ip/E6h0FRzhkXq6osJ4yXLXzHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Nov 4 22:49:57 2025 GMT Not After : Nov 11 22:49:57 2025 GMT Subject: CN=690a8315-575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:bd:01:95:38:0b:9a:0c:de:77:8e:aa:dc: c4:51:a7:17:82:fa:9a:bc:d3:50:91:64:64:c9:28: a8:f3:89:c2:9e:e6:ad:31:d3:93:e4:c4:cd:85:20: 55:0f:ac:56:73:be:d5:59:71:23:14:62:f4:c1:df: fe:6a:39:33:25:9d:28:7d:67:32:86:53:96:f3:da: 8b:55:2a:d4:e0:2f:9f:12:cd:70:b1:1f:f4:2f:f2: 81:a1:ee:b3:b3:66:72:83:ce:b9:7d:49:46:36:04: 93:7b:b7:60:f7:a0:87:3b:fa:35:52:6a:c6:72:68: 35:57:09:ea:e8:d0:8c:85:4e:0a:fe:e9:ff:6d:6a: d2:b0:db:b5:ea:01:89:6b:8a:38:10:18:70:84:69: 63:e0:bc:16:aa:bd:9a:07:b8:8f:18:a3:d1:5f:3d: dd:13:26:f6:bc:99:74:ec:59:02:aa:7a:20:15:ff: d1:6f:4b:1c:a1:7f:88:e6:00:02:ea:6c:0a:b8:85: b5:78:38:4f:6a:6b:90:05:03:be:c7:25:c4:b7:5c: d8:32:c4:9e:90:dd:56:6a:cd:16:2f:74:5d:07:6d: 12:2f:cc:1d:d1:bb:c4:9f:0b:44:d5:22:a4:cf:4d: ca:3f:2d:74:b7:04:bd:fa:cc:6d:27:c9:7d:b1:9b: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:A4:4D:FD:C1:D9:15:7C:F1:00:AB:F4:4C:8F:38:11:19:A9:B4 X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:67:b7:37:fe:ab:e5:8d:01:d9:50:28:03:7b:5d:9d:0d:52: 89:9f:02:ae:5e:13:74:a6:ae:39:8c:c3:23:34:a9:af:d5:58: c7:b9:03:53:06:03:30:64:38:0a:23:15:b2:1f:e2:90:4c:90: be:2e:de:8e:86:6a:2c:3a:33:54:5f:5c:9d:86:bc:31:57:ca: 5e:dc:b7:79:80:23:3f:b6:22:e0:70:5c:42:25:10:fe:04:08: 4c:26:20:20:52:19:cc:84:78:74:0b:ac:d0:49:ad:c8:d5:91: b6:2a:54:55:c7:fb:cf:0a:ae:41:26:06:3d:36:23:f4:d6:34: 41:5d:2a:17:cf:b2:e0:3b:92:39:5d:28:ea:de:f1:1d:b9:a1: 91:c9:66:e9:25:8e:f6:40:37:53:0a:66:7a:03:50:76:f1:fc: 24:a2:45:7f:1f:7b:c8:ae:b4:a3:93:5f:a0:4f:ea:79:c4:50: 3d:4b:e1:9d:df:f3:1c:cb:a7:69:28:7a:e1:34:dd:54:18:df: 0e:08:1f:c2:50:df:d3:e0:a7:78:4a:9a:ab:b5:4a:ec:09:cc: 53:76:ff:1e:4c:8b:a4:04:a3:3b:1d:bd:11:08:93:e8:28:ce: 92:33:94:aa:21:cb:db:e7:ed:22:2c:be:7b:aa:80:1d:49:45: ca:72:9b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjUxMTA0MjI0OTU3WhcNMjUxMTExMjI0OTU3WjAYMRYwFAYD VQQDEw02OTBhODMxNS01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/69AZU4C5oM3neOqtzEUacXgvqavNNQkWRkySio84nCnuatMdOT5MTNhSBV D6xWc77VWXEjFGL0wd/+ajkzJZ0ofWcyhlOW89qLVSrU4C+fEs1wsR/0L/KBoe6z s2Zyg865fUlGNgSTe7dg96CHO/o1UmrGcmg1Vwnq6NCMhU4K/un/bWrSsNu16gGJ a4o4EBhwhGlj4LwWqr2aB7iPGKPRXz3dEyb2vJl07FkCqnogFf/Rb0scoX+I5gAC 6mwKuIW1eDhPamuQBQO+xyXEt1zYMsSekN1Was0WL3RdB20SL8wd0bvEnwtE1SKk z03KPy10twS9+sxtJ8l9sZsAZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKlpE39 wdkVfPEAq/RMjzgRGam0MB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Z7c3/qvljQHZUCgDe12dDVKJnwKuXhN0pq45jMMjNKmv1VjHuQNT BgMwZDgKIxWyH+KQTJC+Lt6OhmosOjNUX1ydhrwxV8pe3Ld5gCM/tiLgcFxCJRD+ BAhMJiAgUhnMhHh0C6zQSa3I1ZG2KlRVx/vPCq5BJgY9NiP01jRBXSoXz7LgO5I5 XSjq3vEduaGRyWbpJY72QDdTCmZ6A1B28fwkokV/H3vIrrSjk1+gT+p5xFA9S+Gd 3/Mcy6dpKHrhNN1UGN8OCB/CUN/T4Kd4SpqrtUrsCcxTdv8eTIukBKM7Hb0RCJPo KM6SM5SqIcvb5+0iLL57qoAdSUXKcpts -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:15 2025 by rpki-client