$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft File: jdQUSFkXzUyAFnvaGdcklkawZyU.mft (raw, json) Hash identifier: i7XDdTnRu5uEft6fMTb0PSGeHlGz2d10vph7Ma0Tl9M= Subject key identifier: 5D:8A:77:5E:74:B8:32:21:04:CE:32:DF:BD:03:2C:E3:B8:E5:73:B0 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft Manifest number: D0 Signing time: Sun 19 Oct 2025 08:49:44 +0000 Manifest this update: Sun 19 Oct 2025 08:49:43 +0000 Manifest next update: Sun 26 Oct 2025 08:49:43 +0000 Files and hashes: 1: jdQUSFkXzUyAFnvaGdcklkawZyU.crl (hash: sK6BjfBwbLuTwvNHD7L98GOQtp1WTNFYvDBtkQPi19c=) 2: FF3D553675B711EF83FAAE42C4F9AE02.roa (hash: 2GAN4cx4QTuzJoHXcS0SxuhQPJxWZFMWGY3rZM3hC3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Oct 19 08:49:43 2025 GMT Not After : Oct 26 08:49:43 2025 GMT Subject: CN=68f4a628-4afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:93:0d:e7:48:b3:73:00:bc:99:dd:86:92: ac:ea:80:30:07:56:c0:0b:9c:2b:ce:aa:0b:44:b2: 22:df:74:d4:d8:4e:a1:49:85:4a:b0:97:50:a2:f6: 54:d3:53:0d:f3:c0:e9:c2:75:28:17:98:4f:b5:6a: d7:3a:df:65:cd:c2:5c:fb:d5:d6:43:ea:a1:fe:d1: 1f:d5:bc:bb:33:96:d1:89:6d:44:9f:30:7f:f6:0b: 53:e9:21:04:65:53:e2:44:74:1f:22:17:35:82:74: e7:27:cc:1d:47:8e:33:3e:a6:4e:3e:29:3c:4d:c8: 65:de:79:66:c3:b5:9a:9e:2a:17:fa:10:7e:06:72: 4b:37:6f:e8:fb:e1:8b:82:dc:c4:3e:6a:0d:e5:6d: fe:89:b5:68:2c:0c:77:7b:4f:2a:b1:e8:7b:3b:79: c5:ed:c2:df:ad:cb:62:f3:21:12:65:6f:8a:d5:2d: ae:55:eb:43:46:f3:7c:18:01:71:c2:78:04:02:54: 92:92:6b:a6:6c:2e:5e:5e:80:d7:58:0b:69:8b:27: ed:80:94:db:c1:52:f9:71:7f:0d:4b:a0:3d:bb:ae: 5f:ac:12:b3:19:b8:ff:43:37:f6:31:2a:66:90:df: 45:d1:5f:36:f1:82:b0:15:53:29:63:3a:93:ac:7b: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8A:77:5E:74:B8:32:21:04:CE:32:DF:BD:03:2C:E3:B8:E5:73:B0 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e2:e5:b7:fe:24:93:97:76:ba:c0:2c:ff:aa:f6:f4:2d:a5: c3:68:d1:f9:c7:d1:eb:88:9b:27:3d:f5:ba:c8:39:7d:61:a3: ed:21:12:bc:ed:31:16:e2:d1:09:58:6a:bb:8d:59:5e:60:c9: 5c:02:9f:51:10:70:24:27:e3:81:cd:13:70:fd:65:54:f6:97: 52:85:be:c3:48:18:42:bf:79:24:83:d5:90:3d:0f:26:2a:64: b8:5f:cd:1f:f7:01:01:e4:3f:06:78:ea:4f:63:33:57:76:71: 52:36:1f:27:91:ba:a7:bd:da:a4:0a:f3:90:ac:0d:c2:3c:35: 9b:1e:48:ae:bf:d4:28:25:32:cf:ff:0c:3d:61:ff:48:ee:c1: 0d:8b:40:ab:aa:da:82:9b:6e:6e:ba:50:e7:54:bc:9f:e9:fa: b1:d1:49:5b:fb:1a:d3:29:21:ec:25:22:6c:7e:93:2b:5d:02: b0:dd:8a:17:f5:f7:97:ee:2d:fe:43:86:5d:15:4a:6a:28:e8: 50:ae:88:5c:33:d4:70:87:fd:52:da:b9:72:bf:7e:12:0f:99: c0:a9:7a:a9:c0:22:cb:b9:d3:28:8a:a4:6a:37:17:eb:55:44: e8:e4:d2:95:c5:49:92:1b:0f:fc:dc:58:61:9f:b7:6c:82:5e: 85:07:b9:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDhERDQxNDQ4NTkxN0NENEM4MDE2N0JEQTE5RDcyNDk2 NDZCMDY3MjUwHhcNMjUxMDE5MDg0OTQzWhcNMjUxMDI2MDg0OTQzWjAYMRYwFAYD VQQDEw02OGY0YTYyOC00YWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhaTDedIs3MAvJndhpKs6oAwB1bAC5wrzqoLRLIi33TU2E6hSYVKsJdQovZU 01MN88DpwnUoF5hPtWrXOt9lzcJc+9XWQ+qh/tEf1by7M5bRiW1EnzB/9gtT6SEE ZVPiRHQfIhc1gnTnJ8wdR44zPqZOPik8Tchl3nlmw7WanioX+hB+BnJLN2/o++GL gtzEPmoN5W3+ibVoLAx3e08qseh7O3nF7cLfrcti8yESZW+K1S2uVetDRvN8GAFx wngEAlSSkmumbC5eXoDXWAtpiyftgJTbwVL5cX8NS6A9u65frBKzGbj/Qzf2MSpm kN9F0V828YKwFVMpYzqTrHuGDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2Kd150 uDIhBM4y370DLOO45XOwMB8GA1UdIwQYMBaAFI3UFEhZF81MgBZ72hnXJJZGsGcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EMjdDOTE1Qzc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpVeUFGbnZhR2Rja2xrYXda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9qZFFVU0ZrWHpV eUFGbnZhR2Rja2xrYXdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC4uW3/iSTl3a6wCz/qvb0LaXDaNH5x9HriJsnPfW6yDl9YaPtIRK8 7TEW4tEJWGq7jVleYMlcAp9REHAkJ+OBzRNw/WVU9pdShb7DSBhCv3kkg9WQPQ8m KmS4X80f9wEB5D8GeOpPYzNXdnFSNh8nkbqnvdqkCvOQrA3CPDWbHkiuv9QoJTLP /ww9Yf9I7sENi0CrqtqCm25uulDnVLyf6fqx0Ulb+xrTKSHsJSJsfpMrXQKw3YoX 9feX7i3+Q4ZdFUpqKOhQrohcM9Rwh/1S2rlyv34SD5nAqXqpwCLLudMoiqRqNxfr VUTo5NKVxUmSGw/83Fhhn7dsgl6FB7nY -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:40 2025 by rpki-client