$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: R6npAWxAPJ7NXRVf3nWSDnlPKhhtJ9cLUHZRtcWYad8= Subject key identifier: D6:5D:5B:0C:AB:7D:7D:36:F3:E1:06:CB:F7:60:02:A9:F5:BA:23:41 Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 0190 Signing time: Sat 18 Oct 2025 22:47:51 +0000 Manifest this update: Sat 18 Oct 2025 22:47:51 +0000 Manifest next update: Sat 25 Oct 2025 22:47:51 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: sw9E0W8Eg2rCZPT9V3fRNGc7sWy3FMUJ7cQFNY9f3B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Oct 18 22:47:51 2025 GMT Not After : Oct 25 22:47:51 2025 GMT Subject: CN=68f41917-cf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:7f:55:cb:4a:fa:5c:6a:61:c0:f5:cc:90: 8f:74:47:2c:1c:76:31:c4:99:b5:0e:80:6e:05:20: 2f:33:91:8a:8f:60:4d:03:0f:34:fa:4c:c0:04:43: 57:42:0a:5a:a5:f5:ae:3d:db:2d:bf:f8:ef:4a:f0: 81:df:b2:03:53:c4:a0:1e:11:47:70:e1:13:60:4a: d8:fd:bf:b2:ed:e7:3c:ff:d1:a2:7b:ce:13:6d:f9: d0:73:32:cb:0d:a7:99:77:82:41:fb:8a:81:0b:6e: 49:46:8f:b7:dc:e7:d8:f8:53:1e:63:d1:38:a2:71: c2:7d:e0:1f:71:a4:a1:c2:9d:62:e5:29:b7:84:3e: 01:e1:f1:0f:7d:9e:3c:19:13:2f:c7:12:7c:8d:0b: a8:5c:64:b1:a2:ce:4e:a2:4a:58:78:02:95:54:9f: 82:41:70:d8:7c:36:0b:fa:f9:81:b4:52:0a:c7:6f: f1:e6:8e:90:b7:0d:3a:e9:57:0c:50:29:38:08:1c: cc:64:d7:3a:39:93:3a:28:ec:7e:5c:c4:6e:5c:2d: a0:c3:70:2d:a0:04:33:23:1f:8c:ef:89:ef:81:8e: 14:8b:0e:39:2a:ba:d6:55:f4:46:6a:5d:55:b2:1f: fe:31:d0:d4:fe:8e:af:c9:b9:06:da:56:f2:b2:6d: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:5B:0C:AB:7D:7D:36:F3:E1:06:CB:F7:60:02:A9:F5:BA:23:41 X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:79:af:1e:2d:df:5c:d7:f9:7b:9b:b9:d1:73:29:9a:e7:c2: b4:f5:33:5e:94:31:5d:b9:c3:e5:82:76:da:64:e7:ef:5b:25: dc:ac:36:a4:a0:ab:f0:00:cf:4e:60:d3:5b:4e:00:e0:a8:3e: 29:33:3b:f7:4f:e0:ce:fb:c2:db:cd:b5:6a:c9:81:e9:98:56: 12:1b:5d:de:74:5c:cc:9d:b2:d4:23:95:ca:74:e1:5e:69:98: 0c:18:0e:3b:79:d1:40:3a:1e:88:40:7f:3a:fb:ae:85:37:64: 10:1f:5d:cc:1d:44:83:93:5d:78:11:09:5c:f9:7e:ed:3b:45: 70:c5:90:f9:cf:94:73:09:a7:8c:15:b9:0d:0e:9b:54:62:f5: 9f:27:6c:d6:aa:2d:6e:d6:f2:4b:e8:1f:c2:f2:6c:cf:4c:0d: 3f:30:11:0a:45:b4:33:8e:eb:ec:46:69:c5:88:e3:a6:26:18: 70:1a:af:79:63:d4:61:3f:1c:a0:e9:c9:cd:e5:ca:b5:13:bd: 1c:50:67:27:91:6f:cf:37:2e:01:42:a7:67:8e:57:77:a0:bc: 98:74:72:66:f4:9c:1e:3a:af:73:d2:7b:97:25:b2:b0:44:ef: 58:6b:8a:ed:71:cf:2b:1f:33:44:eb:af:83:53:5b:1d:47:6a: 07:da:ec:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUxMDE4MjI0NzUxWhcNMjUxMDI1MjI0NzUxWjAYMRYwFAYD VQQDEw02OGY0MTkxNy1jZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw91/VctK+lxqYcD1zJCPdEcsHHYxxJm1DoBuBSAvM5GKj2BNAw80+kzABENX QgpapfWuPdstv/jvSvCB37IDU8SgHhFHcOETYErY/b+y7ec8/9Gie84TbfnQczLL DaeZd4JB+4qBC25JRo+33OfY+FMeY9E4onHCfeAfcaShwp1i5Sm3hD4B4fEPfZ48 GRMvxxJ8jQuoXGSxos5OokpYeAKVVJ+CQXDYfDYL+vmBtFIKx2/x5o6Qtw066VcM UCk4CBzMZNc6OZM6KOx+XMRuXC2gw3AtoAQzIx+M74nvgY4Uiw45KrrWVfRGal1V sh/+MdDU/o6vybkG2lbysm2eiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZdWwyr fX028+EGy/dgAqn1uiNBMB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoea8eLd9c1/l7m7nRcyma58K09TNelDFducPlgnbaZOfvWyXcrDak oKvwAM9OYNNbTgDgqD4pMzv3T+DO+8LbzbVqyYHpmFYSG13edFzMnbLUI5XKdOFe aZgMGA47edFAOh6IQH86+66FN2QQH13MHUSDk114EQlc+X7tO0VwxZD5z5RzCaeM FbkNDptUYvWfJ2zWqi1u1vJL6B/C8mzPTA0/MBEKRbQzjuvsRmnFiOOmJhhwGq95 Y9RhPxyg6cnN5cq1E70cUGcnkW/PNy4BQqdnjld3oLyYdHJm9JweOq9z0nuXJbKw RO9Ya4rtcc8rHzNE66+DU1sdR2oH2uxa -----END CERTIFICATE-----Generated at Tue Oct 21 02:05:00 2025 by rpki-client