$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: 4obzPnpqOZyTfgRv/2dU5+kZDp3oyj9aUmu3pTWE5Mc= Subject key identifier: 9A:9D:78:F6:63:2B:B3:EC:C8:C9:1D:6D:F2:16:A4:92:21:02:BD:08 Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0148 Signing time: Sun 19 Oct 2025 07:04:11 +0000 Manifest this update: Sun 19 Oct 2025 07:04:11 +0000 Manifest next update: Sun 26 Oct 2025 07:04:11 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: 4Ge7csKuGeld3lbK/LbN/fuQcJx/izjGaI/X7AUxX/s=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Oct 19 07:04:11 2025 GMT Not After : Oct 26 07:04:11 2025 GMT Subject: CN=68f48d6b-5d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:54:31:14:64:41:83:98:9b:91:7e:3a:48: ab:64:eb:0d:18:c8:37:25:cb:f5:9b:e6:63:2f:f7: 7d:99:7e:c3:c8:77:ef:57:57:c2:da:dd:e9:de:77: ca:03:2a:f9:38:e9:35:3b:ab:72:f4:fc:3a:28:29: 50:c3:26:5a:e3:37:74:df:23:f8:b2:3a:37:e7:88: ec:f7:b1:ab:fd:08:a3:0a:ea:e8:ce:30:d0:80:99: 6f:e7:71:2c:ad:24:23:8d:c7:45:3c:19:b4:65:17: 9c:2a:4a:69:78:7d:91:95:ad:d8:11:f6:ce:48:dc: 14:98:d8:20:43:9a:79:e6:25:13:c6:d8:18:0e:02: 97:b0:23:63:21:1c:bf:56:96:db:71:80:30:52:6d: 4f:3c:93:0a:3d:0a:0a:97:e5:5c:5c:85:4d:b0:74: fb:02:e0:d4:1d:16:6c:d7:30:22:ed:e4:97:21:e2: 24:ee:e5:fa:67:34:c6:ba:5b:53:9c:7c:9b:ed:14: bc:d2:b0:d5:42:fc:42:07:d0:cf:f8:2b:f6:64:25: 32:72:00:5f:e2:ff:55:c1:7f:5f:38:5b:23:0a:cc: 08:74:b9:61:2c:ee:e4:20:03:00:99:6e:8a:ce:c8: fc:c5:95:93:4d:37:16:00:b1:11:eb:2f:0f:df:f9: a9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:78:F6:63:2B:B3:EC:C8:C9:1D:6D:F2:16:A4:92:21:02:BD:08 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:11:e4:7c:f1:59:80:b7:10:d2:71:17:83:ba:0b:51:20:b6: 53:31:6f:3c:3f:60:d4:49:fb:bf:0f:a5:1b:ff:2f:f5:9f:83: c6:93:e5:00:7d:55:69:20:28:7c:ee:76:fb:69:cd:f8:f8:a3: c9:87:f1:95:af:c0:58:f1:09:35:f3:d5:93:08:08:89:8d:82: 57:c7:e7:5c:45:48:84:21:fe:38:e8:f7:bf:19:69:ab:6b:6c: 74:52:f2:1c:29:39:b9:74:9b:56:a3:ae:06:0b:c4:f8:0c:0b: 7c:ab:93:31:25:3a:7c:eb:f1:7e:e2:2d:1e:eb:02:4d:70:7a: d3:66:49:a5:e4:68:39:96:ee:ef:88:9b:28:f0:cc:ce:54:9d: 66:ea:6c:ff:c0:8d:0e:a9:b1:87:a3:54:42:a1:c4:d2:f1:b3: 68:78:db:51:b8:b1:47:13:be:45:3b:4e:28:2d:47:09:ee:e1: 5c:5a:7b:56:34:1f:35:00:9d:6a:88:d6:a7:df:52:0d:ca:10: fb:0e:b5:38:b0:7c:29:38:fa:f9:48:89:44:12:16:4e:6b:21: 69:cf:b5:8e:77:c8:89:6c:11:47:6e:bb:cb:6a:a4:1c:b8:11: ff:f1:ff:60:10:75:a4:45:89:bb:4c:84:82:fe:91:74:e3:6e: 8e:bf:4a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUxMDE5MDcwNDExWhcNMjUxMDI2MDcwNDExWjAYMRYwFAYD VQQDEw02OGY0OGQ2Yi01ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2VUMRRkQYOYm5F+OkirZOsNGMg3Jcv1m+ZjL/d9mX7DyHfvV1fC2t3p3nfK Ayr5OOk1O6ty9Pw6KClQwyZa4zd03yP4sjo354js97Gr/QijCurozjDQgJlv53Es rSQjjcdFPBm0ZRecKkppeH2Rla3YEfbOSNwUmNggQ5p55iUTxtgYDgKXsCNjIRy/ VpbbcYAwUm1PPJMKPQoKl+VcXIVNsHT7AuDUHRZs1zAi7eSXIeIk7uX6ZzTGultT nHyb7RS80rDVQvxCB9DP+Cv2ZCUycgBf4v9VwX9fOFsjCswIdLlhLO7kIAMAmW6K zsj8xZWTTTcWALER6y8P3/mptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqdePZj K7PsyMkdbfIWpJIhAr0IMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsEeR88VmAtxDScReDugtRILZTMW88P2DUSfu/D6Ub/y/1n4PGk+UA fVVpICh87nb7ac34+KPJh/GVr8BY8Qk189WTCAiJjYJXx+dcRUiEIf446Pe/GWmr a2x0UvIcKTm5dJtWo64GC8T4DAt8q5MxJTp86/F+4i0e6wJNcHrTZkml5Gg5lu7v iJso8MzOVJ1m6mz/wI0OqbGHo1RCocTS8bNoeNtRuLFHE75FO04oLUcJ7uFcWntW NB81AJ1qiNan31INyhD7DrU4sHwpOPr5SIlEEhZOayFpz7WOd8iJbBFHbrvLaqQc uBH/8f9gEHWkRYm7TISC/pF0426Ov0pd -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:23 2025 by rpki-client