$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft File: J3d5rGk2otMhSl8XQCE_25JWxqM.mft (raw, json) Hash identifier: zgDCgKhAbiNtg/Q3nXbGn0AzdwWB4GgxTZFL2N6Bvmg= Subject key identifier: 1D:B3:DD:8E:CF:50:EF:20:2B:EA:03:E5:9A:D0:68:90:66:A9:09:64 Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft Manifest number: 02C7 Signing time: Sun 19 Oct 2025 03:32:33 +0000 Manifest this update: Sun 19 Oct 2025 03:32:32 +0000 Manifest next update: Sun 26 Oct 2025 03:32:32 +0000 Files and hashes: 1: J3d5rGk2otMhSl8XQCE_25JWxqM.crl (hash: hoSdMaeMoCfuPAACjpoTSomHoBQtlQBlavRI393Yf/s=) 2: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (hash: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91770B7, serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Validity Not Before: Oct 19 03:32:32 2025 GMT Not After : Oct 26 03:32:32 2025 GMT Subject: CN=68f45bd0-780b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:9f:f6:ca:54:0b:fc:f1:71:4d:70:41:9a: e2:58:d2:20:17:ca:ee:b8:18:04:a1:50:54:e2:d5: 7f:ca:75:5b:41:46:3d:1e:7d:92:75:c1:6a:ec:b6: 09:09:35:b5:08:9e:90:6e:b4:4e:00:29:72:eb:e3: a2:c3:2e:e4:c1:2d:48:3f:53:a1:fe:6a:b1:bb:d3: 3b:26:57:7e:0f:4a:f3:a3:6c:5e:30:29:7f:b2:0e: e8:d3:09:a5:cf:75:b8:97:0c:c6:09:7f:61:4c:e5: 80:00:50:fd:7b:45:38:ac:25:7b:f9:0c:b1:56:09: 4b:0b:12:b8:85:a6:1a:30:26:33:49:87:c6:4a:e3: 22:32:30:3c:72:6f:7f:85:5b:93:1a:c6:a7:0c:53: 7c:73:c2:3b:ec:6e:26:7d:f7:dc:fa:f7:eb:a4:f3: 5c:a0:3b:b6:a9:43:64:b9:a1:d8:03:48:e5:0c:c8: 36:8f:b4:71:8d:08:b0:e8:3b:42:ca:ab:11:7d:f2: 68:75:f1:ba:bc:98:e6:9f:ab:75:09:c2:05:b9:3a: 19:d3:04:d7:40:34:25:91:89:f9:93:48:db:a3:33: db:20:49:3e:d7:05:a8:9f:63:15:81:0d:a6:ff:1d: dc:00:89:26:a9:b1:81:61:a1:c0:58:53:46:49:ca: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B3:DD:8E:CF:50:EF:20:2B:EA:03:E5:9A:D0:68:90:66:A9:09:64 X509v3 Authority Key Identifier: keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:76:99:21:4a:dc:31:4a:ed:77:09:d7:49:03:3b:88:17:ce: f9:f6:df:f7:10:aa:77:35:06:f3:e2:df:48:d0:3c:a1:53:9c: 6c:df:44:8d:81:b2:7c:13:df:9f:4e:ad:67:1d:a0:db:14:34: 8b:c9:e8:18:da:bc:45:bb:f0:7e:f6:5f:2c:b6:c2:a6:b6:a4: 7f:00:05:a4:bc:bc:a0:1c:de:3e:79:6d:eb:2c:8d:9c:c1:2f: 3c:97:f7:6e:c5:57:bc:1d:73:74:75:25:04:de:54:30:6c:e3: 25:06:8a:e8:5a:9c:9d:7a:09:43:35:53:3a:ab:7b:62:b6:8a: 7b:1a:ba:7a:44:41:bd:a1:5b:32:ed:2b:8a:d4:38:bc:29:d6: 96:6f:5d:6d:c2:44:f5:12:55:2f:ba:2f:8d:84:6f:d2:9a:3c: 5f:b8:54:62:0e:e3:dd:bc:6a:a4:64:b5:f1:f7:c5:43:ae:a6: 04:c3:5d:64:32:5c:75:68:8c:38:04:9e:62:83:ba:e3:d5:44: bb:b2:40:e6:b3:32:f0:56:ec:12:be:7b:df:ec:0b:f0:bb:6f: 86:aa:8f:31:52:3f:9e:fa:1d:b2:d9:01:cf:d9:5d:7c:70:70: 04:88:9c:ec:b1:b2:1f:ce:83:07:4f:d7:ad:fa:83:4c:95:cd: 5e:89:4e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcwQjcxMTAvBgNVBAUTKDI3Nzc3OUFDNjkzNkEyRDMyMTRBNUYxNzQwMjEzRkRC OTI1NkM2QTMwHhcNMjUxMDE5MDMzMjMyWhcNMjUxMDI2MDMzMjMyWjAYMRYwFAYD VQQDEw02OGY0NWJkMC03ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnf2f9spUC/zxcU1wQZriWNIgF8ruuBgEoVBU4tV/ynVbQUY9Hn2SdcFq7LYJ CTW1CJ6QbrROACly6+Oiwy7kwS1IP1Oh/mqxu9M7Jld+D0rzo2xeMCl/sg7o0wml z3W4lwzGCX9hTOWAAFD9e0U4rCV7+QyxVglLCxK4haYaMCYzSYfGSuMiMjA8cm9/ hVuTGsanDFN8c8I77G4mfffc+vfrpPNcoDu2qUNkuaHYA0jlDMg2j7RxjQiw6DtC yqsRffJodfG6vJjmn6t1CcIFuToZ0wTXQDQlkYn5k0jbozPbIEk+1wWon2MVgQ2m /x3cAIkmqbGBYaHAWFNGScp2TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2z3Y7P UO8gK+oD5ZrQaJBmqQlkMB8GA1UdIwQYMBaAFCd3eaxpNqLTIUpfF0AhP9uSVsaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzBCNy9BNTI2NEVFMDBC REQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90TWhTbDhYUUNFXzI1Sld4 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozZDVyR2syb3RNaFNsOFhRQ0VfMjVKV3hxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzBCNy9BNTI2NEVFMDBCREQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90 TWhTbDhYUUNFXzI1Sld4cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedpkhStwxSu13CddJAzuIF8759t/3EKp3NQbz4t9I0DyhU5xs30SN gbJ8E9+fTq1nHaDbFDSLyegY2rxFu/B+9l8stsKmtqR/AAWkvLygHN4+eW3rLI2c wS88l/duxVe8HXN0dSUE3lQwbOMlBoroWpydeglDNVM6q3titop7Grp6REG9oVsy 7SuK1Di8KdaWb11twkT1ElUvui+NhG/SmjxfuFRiDuPdvGqkZLXx98VDrqYEw11k Mlx1aIw4BJ5ig7rj1US7skDmszLwVuwSvnvf7Avwu2+Gqo8xUj+e+h2y2QHP2V18 cHAEiJzssbIfzoMHT9et+oNMlc1eiU6M -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:38 2025 by rpki-client