$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: 6+dxFBSLJgQ9+7HLU9I0I2jHivHh2jqdsTUDi2Y3ZHA= Subject key identifier: EF:42:18:40:E6:FB:2B:0A:68:34:30:6C:5B:06:58:1C:09:01:73:99 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34DE Signing time: Mon 20 Oct 2025 14:23:22 +0000 Manifest this update: Mon 20 Oct 2025 14:23:21 +0000 Manifest next update: Mon 27 Oct 2025 14:23:21 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: 8e/W4pbdJCepqr+B+Vw8y0NpPefm7SNEtiXcu7FrxRU=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Oct 20 14:23:21 2025 GMT Not After : Oct 27 14:23:21 2025 GMT Subject: CN=68f645da-4404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:43:8f:cb:2d:76:de:0b:96:fb:62:d7:eb: 39:05:8e:9d:4d:ea:d9:e4:99:4c:a3:dd:4c:9d:fc: 7c:d2:f1:89:c7:88:99:cd:a2:ff:28:97:e1:3e:be: 25:52:7b:02:11:63:4f:6e:a4:81:da:bd:60:4a:08: a0:0c:c0:bd:07:09:64:7f:f2:ee:11:c6:73:8e:b1: 79:4d:a7:c4:4e:28:a2:5f:78:50:27:13:d9:49:55: 78:b2:a1:e1:62:29:5d:e3:2b:3e:0c:e9:24:58:fd: 00:bb:76:e3:69:3c:7b:6e:a8:5f:21:2b:e6:ed:74: 9d:a7:ae:f0:d1:ee:59:d3:6e:b1:2e:b5:26:03:d4: 49:e2:7b:b2:91:7f:fd:7a:be:20:cd:7d:9c:52:f3: a0:c8:0a:18:41:f4:c7:50:2f:e3:b8:28:36:f5:64: 96:c7:55:6f:34:2d:6e:81:76:27:af:d8:2b:65:0e: 07:fc:a7:60:6c:8e:ee:ab:2d:59:59:bf:07:58:59: 05:86:e6:76:b6:e3:80:f6:99:4b:fc:d3:3b:fd:7a: 3e:73:a7:ff:6b:22:de:3b:dd:d6:e0:26:31:4a:8b: 6c:4a:0c:41:f8:7e:5e:2d:5b:da:29:7c:96:3b:45: 0e:f6:88:89:f3:36:9e:eb:37:29:a8:ac:9d:0e:68: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:18:40:E6:FB:2B:0A:68:34:30:6C:5B:06:58:1C:09:01:73:99 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:55:b9:43:8a:60:5a:09:79:d3:b5:6d:4e:f7:94:2d:55:08: 0e:53:7f:00:88:64:30:0d:82:d7:f2:11:b8:80:ee:50:54:e3: 24:52:1c:67:b6:cf:4e:0a:d5:ca:27:31:2d:59:0b:10:51:3a: a0:63:ce:e6:16:0b:db:4d:93:bb:d9:8b:4a:72:a5:7c:2f:4f: 53:56:43:d7:5e:ee:20:ac:01:d8:35:64:a9:ad:fb:7f:e9:c6: 31:81:ed:28:8f:15:31:e8:4d:05:39:75:56:98:8a:21:60:53: f4:e7:2c:94:8f:54:05:d6:81:8a:86:08:08:07:ec:eb:bd:b9: d2:55:f5:6b:11:f4:18:8f:c5:74:9e:9d:d9:d9:56:b4:a9:2e: a8:2b:dc:7b:7f:0e:b7:6b:64:e2:34:06:40:05:b1:09:61:26: 95:07:3e:8d:d3:e9:79:f0:f2:27:1b:65:7a:c7:2f:be:8e:d0: 33:38:b5:61:d0:f6:78:9e:f6:0e:21:e0:5f:83:ff:dc:b6:a0: b4:c4:62:91:3b:70:50:92:78:9c:41:2b:61:63:d4:12:57:9d: 0d:65:fb:d9:83:e1:b2:a9:45:50:f3:30:86:fc:2d:c8:aa:11: 5c:79:c6:d0:a8:46:1a:94:f7:e8:ab:3d:f9:34:0d:01:28:af: b5:b5:a0:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUxMDIwMTQyMzIxWhcNMjUxMDI3MTQyMzIxWjAYMRYwFAYD VQQDEw02OGY2NDVkYS00NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVBDj8stdt4Llvti1+s5BY6dTerZ5JlMo91Mnfx80vGJx4iZzaL/KJfhPr4l UnsCEWNPbqSB2r1gSgigDMC9Bwlkf/LuEcZzjrF5TafETiiiX3hQJxPZSVV4sqHh Yild4ys+DOkkWP0Au3bjaTx7bqhfISvm7XSdp67w0e5Z026xLrUmA9RJ4nuykX/9 er4gzX2cUvOgyAoYQfTHUC/juCg29WSWx1VvNC1ugXYnr9grZQ4H/KdgbI7uqy1Z Wb8HWFkFhuZ2tuOA9plL/NM7/Xo+c6f/ayLeO93W4CYxSotsSgxB+H5eLVvaKXyW O0UO9oiJ8zae6zcpqKydDmhMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9CGEDm +ysKaDQwbFsGWBwJAXOZMB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOVblDimBaCXnTtW1O95QtVQgOU38AiGQwDYLX8hG4gO5QVOMkUhxn ts9OCtXKJzEtWQsQUTqgY87mFgvbTZO72YtKcqV8L09TVkPXXu4grAHYNWSprft/ 6cYxge0ojxUx6E0FOXVWmIohYFP05yyUj1QF1oGKhggIB+zrvbnSVfVrEfQYj8V0 np3Z2Va0qS6oK9x7fw63a2TiNAZABbEJYSaVBz6N0+l58PInG2V6xy++jtAzOLVh 0PZ4nvYOIeBfg//ctqC0xGKRO3BQknicQSthY9QSV50NZfvZg+GyqUVQ8zCG/C3I qhFcecbQqEYalPfoqz35NA0BKK+1taAx -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:19 2025 by rpki-client