$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: W6Y67pK4kajkDxAY36jxDpOlFXQeBIroivshOY2vO6Q= Subject key identifier: 49:B3:93:12:7A:74:D4:79:2D:C3:63:A4:52:63:BB:85:B2:3B:44:05 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0AEA Signing time: Mon 20 Oct 2025 20:11:15 +0000 Manifest this update: Mon 20 Oct 2025 20:11:15 +0000 Manifest next update: Mon 27 Oct 2025 20:11:15 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: ojp+y3mM6b4q2CgjZTdx02LVvZ/JkjTUxOVifE/TWDw=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: 3V95dG8EwbjGC7EMndTVlVAHQWvt90W2HKQwUZ++P/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Oct 20 20:11:15 2025 GMT Not After : Oct 27 20:11:15 2025 GMT Subject: CN=68f69763-f6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a7:2e:77:4c:4f:a3:f7:5f:a4:70:a4:20:e9: f0:9d:b9:10:cc:78:1d:e3:b5:8d:b7:c7:20:5c:89: e5:88:23:8c:f9:d4:0b:54:73:0a:e7:63:6b:0c:be: e8:92:00:71:02:25:21:b8:ae:5e:25:b5:db:f3:61: 6f:db:34:fc:38:21:9f:0f:09:39:08:40:83:c7:9b: 38:6f:ae:0d:1a:c2:99:cc:dc:9b:8a:41:91:00:65: 77:e0:36:86:9b:7e:9a:3a:9f:ba:ef:35:db:60:c5: d2:c9:37:ed:f3:2d:a5:c3:0f:c1:0b:4b:7d:08:32: 8c:73:49:4c:f6:15:5f:13:b9:cf:f0:8f:1b:e4:69: 88:29:e1:84:83:cd:aa:df:94:9b:e6:5d:75:7a:04: 46:a2:e2:d2:22:a0:56:a8:02:f1:2c:13:50:2a:66: 1b:da:ad:f4:35:5e:a8:75:e3:df:e3:bf:83:c6:e2: f8:eb:77:ef:e0:91:6e:11:a8:ef:4d:2d:9c:2d:f6: 64:34:d8:c0:d6:1b:4d:3b:38:4a:fa:72:60:b0:ef: 6a:75:81:90:24:ec:0a:0e:4a:5e:a2:26:64:6d:d8: 46:2e:c8:2c:47:28:05:1e:85:a0:b5:81:c8:03:79: 6a:04:da:89:58:76:d9:b9:2d:7b:7a:b0:71:c9:8c: 92:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:93:12:7A:74:D4:79:2D:C3:63:A4:52:63:BB:85:B2:3B:44:05 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:9d:2d:67:fb:1e:38:db:f5:5d:54:2f:74:a5:a1:7a:e8:11: 5e:e4:66:c2:c6:4e:f9:9b:86:c1:3b:0b:3d:16:d1:c9:df:e4: d6:24:9d:26:19:a8:5d:85:c7:68:26:70:21:f7:80:01:e7:20: 1c:c1:7c:76:e5:aa:d2:97:e6:3c:d8:22:66:b7:6b:74:fc:67: 55:91:e3:e7:e6:4e:62:f3:50:a5:4c:99:ad:21:50:ae:ed:ab: 24:01:88:ef:94:23:57:d8:83:88:44:04:b6:aa:a3:28:92:e4: 60:dd:72:f8:47:11:b7:59:3a:fc:2d:1d:45:a6:f9:d2:b1:df: 5f:94:c5:e3:f1:64:7d:18:08:71:f1:3f:ff:8e:f3:57:5f:0e: 1d:46:70:73:58:cd:5b:ba:a8:6d:fd:a4:30:bf:5d:eb:95:39: 92:0a:ec:f8:43:50:6c:52:b3:8c:78:79:b5:10:5c:d1:61:19: 69:7a:5e:fd:2b:34:b7:6e:e8:4d:79:46:9c:65:72:77:cb:9d: 04:53:0b:0d:b6:50:1c:b7:98:3f:66:da:8b:75:9a:62:9e:46: e7:df:73:41:5b:73:8d:38:f9:b3:ef:08:ce:4b:5a:a1:49:b9: 6b:82:5d:f4:06:16:11:2a:28:03:a8:8c:32:7d:ae:60:34:40: 66:93:09:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjUxMDIwMjAxMTE1WhcNMjUxMDI3MjAxMTE1WjAYMRYwFAYD VQQDEw02OGY2OTc2My1mNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6cud0xPo/dfpHCkIOnwnbkQzHgd47WNt8cgXInliCOM+dQLVHMK52NrDL7o kgBxAiUhuK5eJbXb82Fv2zT8OCGfDwk5CECDx5s4b64NGsKZzNybikGRAGV34DaG m36aOp+67zXbYMXSyTft8y2lww/BC0t9CDKMc0lM9hVfE7nP8I8b5GmIKeGEg82q 35Sb5l11egRGouLSIqBWqALxLBNQKmYb2q30NV6odePf47+DxuL463fv4JFuEajv TS2cLfZkNNjA1htNOzhK+nJgsO9qdYGQJOwKDkpeoiZkbdhGLsgsRygFHoWgtYHI A3lqBNqJWHbZuS17erBxyYyS1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmzkxJ6 dNR5LcNjpFJju4WyO0QFMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBnS1n+x442/VdVC90paF66BFe5GbCxk75m4bBOws9FtHJ3+TWJJ0m GahdhcdoJnAh94AB5yAcwXx25arSl+Y82CJmt2t0/GdVkePn5k5i81ClTJmtIVCu 7askAYjvlCNX2IOIRAS2qqMokuRg3XL4RxG3WTr8LR1FpvnSsd9flMXj8WR9GAhx 8T//jvNXXw4dRnBzWM1buqht/aQwv13rlTmSCuz4Q1BsUrOMeHm1EFzRYRlpel79 KzS3buhNeUacZXJ3y50EUwsNtlAct5g/ZtqLdZpinkbn33NBW3ONOPmz7wjOS1qh Sblrgl30BhYRKigDqIwyfa5gNEBmkwnR -----END CERTIFICATE-----Generated at Tue Oct 21 06:57:53 2025 by rpki-client