$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: OuUJfkNDBz9cuyT+o7XIJ6Pf3P47a3PG+zDr0m3xF10= Subject key identifier: 03:C8:C2:D9:C5:D5:4E:64:83:56:3A:36:DC:CA:0F:10:D8:7D:DE:12 Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: 8F Signing time: Sun 19 Oct 2025 09:46:14 +0000 Manifest this update: Sun 19 Oct 2025 09:46:13 +0000 Manifest next update: Sun 26 Oct 2025 09:46:13 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: D/bsqihzIKijf+yZy3babkISM5jCQl0IDryJxwzRvKI=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: cWI1CNGvgjuWGw7j5Q/yYWJkIlWwLO+A7fIPZIXhqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Oct 19 09:46:13 2025 GMT Not After : Oct 26 09:46:13 2025 GMT Subject: CN=68f4b366-8839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:1c:02:e6:7e:d0:65:86:85:68:ea:18:98: 7e:39:99:8d:68:61:c0:ff:09:70:aa:13:df:27:84: 04:35:e2:ba:09:67:95:94:e0:32:67:f4:97:81:f9: 81:27:22:20:50:73:02:f0:a3:9e:bd:75:28:a5:e2: 52:44:b2:1b:b2:db:d8:40:f4:dd:42:cb:f8:80:7a: 3f:cc:3a:a1:d2:08:02:49:87:d9:d7:e6:1a:f3:d7: bf:19:5b:58:b1:7a:59:f4:f7:45:2a:54:00:72:4f: 11:d1:33:13:44:ef:3e:87:04:64:b6:e0:bd:c7:10: 4a:42:31:b5:5b:28:ca:13:d4:38:da:89:89:77:f0: 48:32:ff:b6:51:23:d9:5f:d6:bf:d2:3f:bd:48:26: 3f:ad:c8:a3:cd:ad:fa:82:b7:c8:0a:24:aa:54:80: 07:0a:b1:fb:d9:7b:00:16:0b:e2:70:48:fb:c1:91: a2:72:fa:77:c1:dc:9b:17:22:58:24:de:42:58:96: 9d:63:a2:91:b0:c7:54:0d:a1:d0:81:5a:79:83:a0: ca:fb:ed:52:07:18:cc:a6:cc:09:cf:68:99:19:4b: 89:4d:97:f5:b2:ec:a1:42:e5:ab:3c:f2:d9:3f:1c: f5:66:c7:44:fa:ae:d8:4f:36:ca:37:42:ed:57:5a: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C8:C2:D9:C5:D5:4E:64:83:56:3A:36:DC:CA:0F:10:D8:7D:DE:12 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:01:57:11:0d:ba:6e:bc:0f:20:4f:ed:fb:36:7b:bc:79:a7: f6:bf:1c:d7:45:90:8c:a8:13:7c:e6:a5:63:ae:aa:70:5d:66: 6d:40:9d:bd:f5:17:7d:0f:f3:24:c4:a1:a5:45:9b:e0:cc:f0: 62:34:ed:ac:f5:12:d8:69:a7:fe:dd:53:04:fa:db:6a:c1:f4: 25:5c:e7:3e:7f:33:c8:83:0c:45:4a:7a:a7:87:a9:96:3c:6d: c0:75:87:e8:90:1c:05:dd:45:d9:d2:55:01:96:13:0b:39:0b: 2b:55:06:4f:61:3d:4a:d0:c0:1c:99:9d:a0:50:1d:60:2d:11: c2:d5:a8:c9:53:5d:dc:59:5b:47:d3:77:30:6b:13:c7:44:b9: e3:55:0c:0d:2b:65:78:15:05:b1:82:bf:c6:36:07:10:c3:fd: e7:b3:8d:74:3a:81:3b:4b:fb:f2:b1:41:2d:0c:d7:58:68:3c: 6a:c4:52:f2:fd:2a:43:4e:87:aa:02:5e:4c:7b:e1:31:bb:8b: f3:35:d3:da:5c:c7:ad:f0:8b:9e:8c:95:38:91:ad:2d:4a:c2: 0e:d2:95:ea:8e:3c:e9:4b:fc:a2:67:6d:52:0a:4e:85:60:6d: 91:0d:d4:dc:74:f1:01:99:ad:96:85:70:d0:c8:2b:a9:2d:54: da:e1:37:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjUxMDE5MDk0NjEzWhcNMjUxMDI2MDk0NjEzWjAYMRYwFAYD VQQDEw02OGY0YjM2Ni04ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJwcAuZ+0GWGhWjqGJh+OZmNaGHA/wlwqhPfJ4QENeK6CWeVlOAyZ/SXgfmB JyIgUHMC8KOevXUopeJSRLIbstvYQPTdQsv4gHo/zDqh0ggCSYfZ1+Ya89e/GVtY sXpZ9PdFKlQAck8R0TMTRO8+hwRktuC9xxBKQjG1WyjKE9Q42omJd/BIMv+2USPZ X9a/0j+9SCY/rcijza36grfICiSqVIAHCrH72XsAFgvicEj7wZGicvp3wdybFyJY JN5CWJadY6KRsMdUDaHQgVp5g6DK++1SBxjMpswJz2iZGUuJTZf1suyhQuWrPPLZ Pxz1ZsdE+q7YTzbKN0LtV1qgAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPIwtnF 1U5kg1Y6NtzKDxDYfd4SMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgAVcRDbpuvA8gT+37Nnu8eaf2vxzXRZCMqBN85qVjrqpwXWZtQJ29 9Rd9D/MkxKGlRZvgzPBiNO2s9RLYaaf+3VME+ttqwfQlXOc+fzPIgwxFSnqnh6mW PG3AdYfokBwF3UXZ0lUBlhMLOQsrVQZPYT1K0MAcmZ2gUB1gLRHC1ajJU13cWVtH 03cwaxPHRLnjVQwNK2V4FQWxgr/GNgcQw/3ns410OoE7S/vysUEtDNdYaDxqxFLy /SpDToeqAl5Me+Exu4vzNdPaXMet8IuejJU4ka0tSsIO0pXqjjzpS/yiZ21SCk6F YG2RDdTcdPEBma2WhXDQyCupLVTa4TdE -----END CERTIFICATE-----Generated at Tue Oct 21 10:28:13 2025 by rpki-client