$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json) Hash identifier: W7xFV08hwxxGnC2DRlX5VNAK9WtsL8ed5S/qDknT9OA= Subject key identifier: 31:95:64:8F:72:B5:95:99:F5:75:A7:6B:DD:54:BE:EE:43:55:7C:18 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft Manifest number: 01B6 Signing time: Wed 05 Nov 2025 03:13:57 +0000 Manifest this update: Wed 05 Nov 2025 03:13:57 +0000 Manifest next update: Wed 12 Nov 2025 03:13:57 +0000 Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: gZm/Sg6nIz2j/ZjDjlzfkEKGyx/HkXyeJvehWiE4JQc=) 2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Nov 5 03:13:57 2025 GMT Not After : Nov 12 03:13:57 2025 GMT Subject: CN=690ac0f5-1843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:dd:f8:6a:de:54:49:a1:50:b1:c5:6e:cb: 09:d5:25:ac:72:9c:c8:ff:f1:c6:66:37:3f:94:d3: 34:fa:26:bd:c6:7f:70:38:16:95:e0:01:6c:44:18: 14:f3:79:f5:2d:99:53:e8:d5:b1:c3:35:54:f0:fd: 4f:95:7c:ef:60:26:4d:d7:7a:fc:fc:68:b7:36:8e: 3f:c8:6a:e8:aa:61:69:77:dc:59:d2:4f:d3:6a:05: 46:49:59:93:9a:36:a4:41:9b:ff:dd:69:7f:49:65: d3:be:65:07:df:30:8d:15:20:53:53:bc:53:af:94: b6:2d:af:46:dc:87:01:54:5d:03:6c:d5:05:c6:2c: 36:d6:a8:30:38:e9:58:a6:73:20:3c:45:a4:0c:29: 80:14:22:af:1e:27:fa:7f:a6:ad:f3:44:a1:a4:40: 82:f5:ca:c4:74:1b:cc:da:1d:e6:05:46:d7:f0:e3: 44:6d:1d:b0:3c:1a:ab:c8:1e:45:57:f2:65:fd:95: 8b:ce:17:07:72:df:0d:17:b5:09:57:54:a5:a6:de: 9a:06:37:4d:2d:ef:fb:f9:0f:6c:0d:64:80:49:8a: 45:7d:fc:6c:d9:82:c2:3e:51:1c:8a:1a:e7:d0:02: 1a:2d:2f:dd:a4:ce:56:ce:04:2c:b5:ce:ff:37:2a: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:64:8F:72:B5:95:99:F5:75:A7:6B:DD:54:BE:EE:43:55:7C:18 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e6:fe:5c:f9:17:e2:71:3b:ff:05:c8:50:fe:01:61:75:26: 07:4d:88:38:64:44:d1:7a:ac:f3:23:40:0d:ce:30:67:2b:71: 69:09:6a:2e:5f:dd:34:cc:ac:fc:20:42:42:05:44:77:22:87: df:8b:00:01:aa:d2:bd:92:0d:11:01:eb:f8:e1:64:6b:6e:df: 0c:a3:84:c9:17:89:f2:3a:e5:79:eb:82:3f:e3:4c:b3:21:ba: 1b:bd:2b:d7:ee:09:d8:12:70:47:e7:f9:4b:80:28:6d:2d:41: cb:82:3a:69:65:1d:4d:c8:e6:78:05:26:ef:a5:1f:75:f4:45: f2:fa:63:c6:ab:52:47:28:ae:e6:96:ff:f9:71:20:85:f8:d7: 1e:b9:8a:98:6c:65:8e:eb:8d:de:19:61:52:f6:a4:87:30:10: 75:90:5b:75:bd:81:d8:f3:05:c0:de:bf:a4:19:83:60:0e:d2: 51:56:d7:41:d5:86:d1:09:2a:1f:4b:e5:44:52:12:90:38:77: 87:c4:2d:00:07:21:6f:1d:65:d3:bf:8e:dc:0d:df:cc:4b:81: 34:12:b9:d3:a5:fb:c9:a7:e2:3e:ac:2c:e0:17:35:e0:72:b8: 72:af:5d:38:5f:06:79:83:6a:ae:09:ab:74:56:ba:2c:0f:83: 64:57:ec:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUxMTA1MDMxMzU3WhcNMjUxMTEyMDMxMzU3WjAYMRYwFAYD VQQDEw02OTBhYzBmNS0xODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApw7d+GreVEmhULHFbssJ1SWscpzI//HGZjc/lNM0+ia9xn9wOBaV4AFsRBgU 83n1LZlT6NWxwzVU8P1PlXzvYCZN13r8/Gi3No4/yGroqmFpd9xZ0k/TagVGSVmT mjakQZv/3Wl/SWXTvmUH3zCNFSBTU7xTr5S2La9G3IcBVF0DbNUFxiw21qgwOOlY pnMgPEWkDCmAFCKvHif6f6at80ShpECC9crEdBvM2h3mBUbX8ONEbR2wPBqryB5F V/Jl/ZWLzhcHct8NF7UJV1Slpt6aBjdNLe/7+Q9sDWSASYpFffxs2YLCPlEcihrn 0AIaLS/dpM5WzgQstc7/NypIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGVZI9y tZWZ9XWna91Uvu5DVXwYMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDZFNC9BQkU3RTA1NjFFMEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3 SUFyQTZmcEhacEZkZEwtZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr5v5c+RficTv/BchQ/gFhdSYHTYg4ZETReqzzI0ANzjBnK3FpCWou X900zKz8IEJCBUR3IoffiwABqtK9kg0RAev44WRrbt8Mo4TJF4nyOuV564I/40yz IbobvSvX7gnYEnBH5/lLgChtLUHLgjppZR1NyOZ4BSbvpR919EXy+mPGq1JHKK7m lv/5cSCF+NceuYqYbGWO643eGWFS9qSHMBB1kFt1vYHY8wXA3r+kGYNgDtJRVtdB 1YbRCSofS+VEUhKQOHeHxC0AByFvHWXTv47cDd/MS4E0ErnTpfvJp+I+rCzgFzXg crhyr104XwZ5g2quCat0VrosD4NkV+zV -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:05 2025 by rpki-client