$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: 3B5RPAOknyk6PmIG2f2kY3nrzeBsdGCDuraJRdDPG+4= Subject key identifier: 36:A3:99:E1:7A:5A:32:1A:93:CB:49:25:DB:48:0C:20:34:7B:92:C4 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0BB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0BAB Signing time: Sat 18 Oct 2025 19:47:18 +0000 Manifest this update: Sat 18 Oct 2025 19:47:18 +0000 Manifest next update: Sat 25 Oct 2025 19:47:18 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: X4OWLbwqT0GFmlx2rkSOVNegcppV8Qi8YfXgTAQH22E=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2999 (0xbb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Oct 18 19:47:18 2025 GMT Not After : Oct 25 19:47:18 2025 GMT Subject: CN=68f3eec6-a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:c6:3f:0c:5f:8e:f4:14:77:9a:05:d1:c8: 39:15:7b:ed:77:68:84:cd:00:6c:40:04:63:b6:3b: 70:89:8c:e3:0d:0f:12:c9:eb:da:a0:97:6b:51:83: 20:8f:ba:62:64:9b:75:b7:97:00:d8:7f:ad:12:dd: 8c:c9:e0:59:bc:7b:8a:7a:28:82:b6:ee:2a:c9:8b: 26:ad:9d:c1:0f:48:89:20:44:92:16:fb:cb:6e:91: b8:ec:0a:1a:42:16:8c:c1:f7:8b:f0:c0:0b:27:8a: b9:98:72:d0:19:d2:bc:91:4c:d6:17:f7:28:cb:79: 43:ae:2e:8c:25:07:2c:5f:8f:1e:64:e2:a6:cc:69: 77:f6:e4:7e:42:88:3c:f5:e4:5a:42:5a:9b:ae:4e: 1c:62:5d:98:2a:28:03:ef:ca:85:40:25:8c:33:ee: 22:b8:88:3d:24:51:ee:2a:46:e5:90:ca:56:4c:51: 98:78:2f:2e:1a:0f:3b:80:90:44:56:1f:b9:39:9c: 84:11:a3:32:64:a0:12:94:6f:d1:ac:88:90:f9:66: f4:50:e6:44:b7:c8:d4:72:4b:75:dc:68:50:53:9e: b4:79:88:83:97:ba:d8:65:bd:71:c6:fe:da:26:ef: aa:71:b5:26:7a:01:78:2f:23:06:ff:29:77:63:35: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A3:99:E1:7A:5A:32:1A:93:CB:49:25:DB:48:0C:20:34:7B:92:C4 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:45:f6:2b:a0:d0:22:88:62:62:45:41:d8:de:3c:bf:9c:e4: a4:2d:32:ee:64:51:43:67:34:95:1c:9f:9f:76:0e:5a:db:29: 0b:cb:fc:90:fd:9d:92:66:17:ff:e7:58:ae:de:43:7c:0c:e6: 85:21:4a:7e:91:95:0c:7a:ff:60:d9:10:18:d8:ef:cf:70:c5: c5:7f:b2:b7:c9:b1:eb:27:14:04:5e:d5:11:47:68:44:5f:74: 2d:55:da:e6:21:c1:7b:1d:a0:e4:65:6f:07:57:5b:d4:59:d7: 8a:ba:ac:dd:8c:b5:ef:76:16:a5:bb:49:3a:81:16:56:a3:31: 84:de:1b:54:c3:7e:17:e3:b1:19:a0:c5:cb:11:6d:ff:16:57: 10:70:49:ee:01:2a:55:98:3f:5c:a9:75:86:64:ef:43:00:da: 58:fc:e1:5e:32:01:82:3d:3c:86:1d:63:88:ea:01:6f:f2:b2: 53:4a:c6:39:b8:0a:47:95:35:0f:af:f4:6f:4d:8c:46:dc:c0: 50:9a:f4:60:45:71:ed:fb:a5:93:ad:c3:1f:86:de:28:6e:11: 3a:3d:db:7f:b1:83:24:88:fd:2f:0c:50:af:78:a5:cd:c7:35: fc:e0:36:9c:9d:5f:c2:24:8b:7a:0f:53:39:88:3c:f0:88:c8: 9d:58:07:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjUxMDE4MTk0NzE4WhcNMjUxMDI1MTk0NzE4WjAYMRYwFAYD VQQDEw02OGYzZWVjNi1hNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yfGPwxfjvQUd5oF0cg5FXvtd2iEzQBsQARjtjtwiYzjDQ8SyevaoJdrUYMg j7piZJt1t5cA2H+tEt2MyeBZvHuKeiiCtu4qyYsmrZ3BD0iJIESSFvvLbpG47Aoa QhaMwfeL8MALJ4q5mHLQGdK8kUzWF/coy3lDri6MJQcsX48eZOKmzGl39uR+Qog8 9eRaQlqbrk4cYl2YKigD78qFQCWMM+4iuIg9JFHuKkblkMpWTFGYeC8uGg87gJBE Vh+5OZyEEaMyZKASlG/RrIiQ+Wb0UOZEt8jUckt13GhQU560eYiDl7rYZb1xxv7a Ju+qcbUmegF4LyMG/yl3YzW+LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDajmeF6 WjIak8tJJdtIDCA0e5LEMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcRfYroNAiiGJiRUHY3jy/nOSkLTLuZFFDZzSVHJ+fdg5a2ykLy/yQ /Z2SZhf/51iu3kN8DOaFIUp+kZUMev9g2RAY2O/PcMXFf7K3ybHrJxQEXtURR2hE X3QtVdrmIcF7HaDkZW8HV1vUWdeKuqzdjLXvdhalu0k6gRZWozGE3htUw34X47EZ oMXLEW3/FlcQcEnuASpVmD9cqXWGZO9DANpY/OFeMgGCPTyGHWOI6gFv8rJTSsY5 uApHlTUPr/RvTYxG3MBQmvRgRXHt+6WTrcMfht4obhE6Pdt/sYMkiP0vDFCveKXN xzX84DacnV/CJIt6D1M5iDzwiMidWAeh -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:13 2025 by rpki-client