$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: s7pfv40pjETDDl6RcrXIhrYQP+zboCqNW9vXd2xpYOo= Subject key identifier: 15:1E:45:8E:3B:25:57:72:0E:80:66:52:56:6A:B7:CC:AF:FD:EA:EA Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 11E8 Signing time: Sun 02 Nov 2025 19:26:45 +0000 Manifest this update: Sun 02 Nov 2025 19:26:44 +0000 Manifest next update: Sun 09 Nov 2025 19:26:44 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: IqF9zQke9T7JLQA398U9wFvbZsTkrXi/LtFkBtgvGHY=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: lzUKRSmxvGEfweMuUaXbxsWlHdwgK7qhdoTfKi3EzzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Nov 2 19:26:44 2025 GMT Not After : Nov 9 19:26:44 2025 GMT Subject: CN=6907b074-70c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:6e:7a:64:dc:8f:03:03:02:3f:a5:88:69: d3:a2:fc:77:dc:22:05:90:fd:00:9d:f4:26:5b:13: 0c:ee:c3:b7:2c:0c:ee:e0:d1:d9:4e:d9:fb:ec:26: 74:fe:6d:d9:d8:b0:e9:85:50:9d:30:45:c7:a5:72: be:b8:bb:00:50:93:b4:53:7a:42:35:e1:2f:aa:f9: 27:09:fb:c5:20:0d:ca:47:2b:ac:2c:d6:24:c1:1e: 41:da:1c:58:45:0e:31:5c:c7:49:9b:36:a2:dc:ac: 44:78:f2:3a:ad:f4:c1:ee:28:2f:6d:d9:30:3f:5b: b3:6e:1c:86:67:f6:c5:e4:31:38:8e:a5:cc:c0:06: 4b:6c:2b:c3:2d:3e:e9:b8:8e:5d:9c:68:1e:b0:7f: a3:8b:85:a9:86:e8:84:eb:f7:7f:cd:ed:5c:97:c1: dd:0b:32:04:9e:b5:43:c7:07:51:ad:9f:d2:55:59: 74:eb:94:92:20:f8:35:db:54:34:6b:73:84:4c:49: 93:d9:d3:fc:16:5c:99:ba:d2:f5:8a:24:02:30:aa: 97:6f:98:56:aa:3f:15:47:ff:d7:15:34:93:77:24: 92:87:f6:e7:4e:b4:d3:59:60:d6:17:41:26:ee:f7: 9c:41:72:08:21:00:d4:8c:cb:f6:9d:57:ed:ce:d1: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1E:45:8E:3B:25:57:72:0E:80:66:52:56:6A:B7:CC:AF:FD:EA:EA X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:aa:e2:88:f6:41:ce:12:11:77:94:80:6f:4d:71:b0:d0:e9: 57:1a:5c:2b:98:4c:e1:96:ae:c2:d3:90:89:3d:d8:ff:91:31: e4:20:c4:df:fa:6c:c9:b0:3b:17:6e:18:12:7f:9e:34:78:89: 6e:94:3b:73:e4:85:d2:ff:21:5f:68:cc:ee:10:4d:c5:d4:5d: ea:ec:10:06:e3:30:e5:32:2e:f6:1a:ea:01:df:67:09:4a:c8: e2:02:88:1f:4d:5b:c2:4c:04:99:cf:7c:46:c3:c4:8f:66:ec: 3e:1a:5d:95:1a:49:ee:3d:a9:1d:5f:06:4b:d0:54:1b:e2:b4: f5:b2:97:74:c3:5f:a5:ba:d3:4c:9a:40:74:00:1c:37:f2:c8: b2:2e:b9:12:b1:b3:90:bd:47:ad:1a:5c:27:38:21:07:62:dc: e5:1a:b1:fc:83:22:64:6d:ff:b6:07:90:3a:97:26:04:86:5b: 02:15:1f:2c:48:79:4a:03:29:c5:b2:fd:f0:e6:0b:35:a3:c0: 39:ff:78:bc:73:b2:9f:37:eb:29:74:05:5a:31:f6:57:86:f0: 5f:1c:48:ec:aa:96:f1:5b:2b:90:7c:af:23:19:25:0b:c7:d1: 58:7f:1e:e2:53:44:8b:5b:c0:aa:94:5b:67:18:31:55:bb:8e: 8d:45:82:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjUxMTAyMTkyNjQ0WhcNMjUxMTA5MTkyNjQ0WjAYMRYwFAYD VQQDEw02OTA3YjA3NC03MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlxuemTcjwMDAj+liGnTovx33CIFkP0AnfQmWxMM7sO3LAzu4NHZTtn77CZ0 /m3Z2LDphVCdMEXHpXK+uLsAUJO0U3pCNeEvqvknCfvFIA3KRyusLNYkwR5B2hxY RQ4xXMdJmzai3KxEePI6rfTB7igvbdkwP1uzbhyGZ/bF5DE4jqXMwAZLbCvDLT7p uI5dnGgesH+ji4WphuiE6/d/ze1cl8HdCzIEnrVDxwdRrZ/SVVl065SSIPg121Q0 a3OETEmT2dP8FlyZutL1iiQCMKqXb5hWqj8VR//XFTSTdySSh/bnTrTTWWDWF0Em 7vecQXIIIQDUjMv2nVftztG6DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUeRY47 JVdyDoBmUlZqt8yv/erqMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHquKI9kHOEhF3lIBvTXGw0OlXGlwrmEzhlq7C05CJPdj/kTHkIMTf +mzJsDsXbhgSf540eIlulDtz5IXS/yFfaMzuEE3F1F3q7BAG4zDlMi72GuoB32cJ SsjiAogfTVvCTASZz3xGw8SPZuw+Gl2VGknuPakdXwZL0FQb4rT1spd0w1+lutNM mkB0ABw38siyLrkSsbOQvUetGlwnOCEHYtzlGrH8gyJkbf+2B5A6lyYEhlsCFR8s SHlKAynFsv3w5gs1o8A5/3i8c7KfN+spdAVaMfZXhvBfHEjsqpbxWyuQfK8jGSUL x9FYfx7iU0SLW8CqlFtnGDFVu46NRYLf -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:02 2025 by rpki-client