$ rpki-client -vvf rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft File: jsMzdX42OhcRsAJzJQRG_htJONs.mft (raw, json) Hash identifier: CRf6Pnv2OlcxkX7L9EyDkp+6XIm1FXKqXDj7/ZEWDRc= Subject key identifier: 85:1F:70:FD:7F:B8:D5:F7:D0:FC:AD:1C:4A:38:BE:F2:3F:82:95:21 Authority key identifier: 8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB Certificate issuer: /CN=A91A43EE/serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft Manifest number: 029B Signing time: Sun 19 Oct 2025 03:48:40 +0000 Manifest this update: Sun 19 Oct 2025 03:48:40 +0000 Manifest next update: Sun 26 Oct 2025 03:48:40 +0000 Files and hashes: 1: jsMzdX42OhcRsAJzJQRG_htJONs.crl (hash: /ao021STKphBnVSfW0vexilnZ0jQvJXC5jj6WOJ+aN8=) 2: E1870478616C11F0A254E10BC4F9AE02.roa (hash: PUky37fAI8Ys1qLflElYkqRy1kwJKllU0o6ewDp0S2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A43EE, serialNumber=8EC333757E363A1711B00273250446FE1B4938DB Validity Not Before: Oct 19 03:48:40 2025 GMT Not After : Oct 26 03:48:40 2025 GMT Subject: CN=68f45f98-21cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:47:0c:47:72:ad:89:2a:25:cb:c3:df:74:6e: c9:d9:2f:7b:9f:25:ec:4a:3e:24:1f:5c:aa:1b:33: 79:3a:2d:38:7e:65:2b:39:af:52:cc:fe:6f:39:12: d1:15:33:7b:bd:fb:2c:3b:1d:9d:61:14:65:d2:66: 9c:9a:89:2b:13:25:d8:be:66:6e:03:e7:f4:5c:90: 89:ce:3a:25:9d:f9:00:ed:bc:57:15:64:f0:6b:12: 36:5d:8e:d0:37:e0:db:4d:80:2d:6e:db:ce:e1:9d: de:e2:08:54:d5:b4:31:31:b6:ea:9f:b4:bb:4e:e0: c2:3d:b8:bf:e9:a2:7e:da:e1:cf:31:54:45:27:86: ee:76:5f:6e:d2:c7:42:72:c6:c9:1f:3a:b3:74:c0: ee:78:24:1b:d3:48:b0:dd:93:e4:ec:16:53:2f:a4: bf:eb:87:82:40:9c:25:8f:40:fb:5d:66:f0:ac:d3: 33:2d:01:4b:90:3b:f0:d7:d9:75:64:c4:63:93:7a: 36:bc:8a:b4:bf:69:21:c8:60:fb:f3:f3:cd:df:a3: 8a:1d:0c:e2:94:8b:18:0c:6e:b5:91:2f:9c:79:de: 34:ac:34:90:9c:ba:38:21:8d:29:a1:8e:c3:5b:9e: 6e:f0:31:94:fe:26:be:ae:83:31:0c:cb:4d:36:ff: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1F:70:FD:7F:B8:D5:F7:D0:FC:AD:1C:4A:38:BE:F2:3F:82:95:21 X509v3 Authority Key Identifier: keyid:8E:C3:33:75:7E:36:3A:17:11:B0:02:73:25:04:46:FE:1B:49:38:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jsMzdX42OhcRsAJzJQRG_htJONs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A43EE/01E4E69623CB11EDA8E3583EC4F9AE02/jsMzdX42OhcRsAJzJQRG_htJONs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e7:62:27:92:c5:8c:0a:3e:31:b1:c8:81:0f:ba:dd:72:84: 9c:55:e6:91:6e:72:b0:5e:84:99:23:6b:39:05:9a:80:e7:29: 06:dd:7c:10:27:6d:8a:f3:3e:f7:0f:5c:11:03:30:5a:78:0f: 54:09:cd:4e:0c:4e:50:c9:16:50:49:8b:81:cb:5f:f5:59:40: 46:50:c9:df:16:42:75:34:d2:99:c8:bd:9b:2d:a6:3a:d1:d3: d8:fc:3e:5e:e6:ff:33:b2:ad:ad:8f:44:18:3b:2c:16:1a:3a: e5:66:c8:c3:35:2c:3a:df:21:24:22:20:6c:18:bc:49:68:7e: 95:f5:75:1b:dd:3e:6d:fb:90:fc:3b:d6:dd:e0:74:7c:c0:de: d3:c2:44:37:d9:3f:ef:4c:a2:4e:8f:27:ef:41:6a:80:06:c7: 1c:95:6c:51:c7:f1:ff:11:be:e8:1f:13:4e:d6:39:cc:ed:60: ed:56:1b:72:a5:98:02:05:6a:27:77:db:27:45:ef:2d:e2:90: 9b:f7:6e:30:de:77:ee:fd:39:06:91:66:6c:16:00:fe:79:e1: 5c:ba:43:9a:67:21:fe:1f:42:1a:8b:6a:cd:77:b6:07:d8:03: d1:e0:83:09:de:2f:7e:f5:cc:8e:c8:c8:c1:fd:3b:a1:17:a5: 25:53:d1:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQzRUUxMTAvBgNVBAUTKDhFQzMzMzc1N0UzNjNBMTcxMUIwMDI3MzI1MDQ0NkZF MUI0OTM4REIwHhcNMjUxMDE5MDM0ODQwWhcNMjUxMDI2MDM0ODQwWjAYMRYwFAYD VQQDEw02OGY0NWY5OC0yMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UcMR3KtiSoly8PfdG7J2S97nyXsSj4kH1yqGzN5Oi04fmUrOa9SzP5vORLR FTN7vfssOx2dYRRl0macmokrEyXYvmZuA+f0XJCJzjolnfkA7bxXFWTwaxI2XY7Q N+DbTYAtbtvO4Z3e4ghU1bQxMbbqn7S7TuDCPbi/6aJ+2uHPMVRFJ4budl9u0sdC csbJHzqzdMDueCQb00iw3ZPk7BZTL6S/64eCQJwlj0D7XWbwrNMzLQFLkDvw19l1 ZMRjk3o2vIq0v2khyGD78/PN36OKHQzilIsYDG61kS+ced40rDSQnLo4IY0poY7D W55u8DGU/ia+roMxDMtNNv+eXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUfcP1/ uNX30PytHEo4vvI/gpUhMB8GA1UdIwQYMBaAFI7DM3V+NjoXEbACcyUERv4bSTjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDNFRS8wMUU0RTY5NjIz Q0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9oY1JzQUp6SlFSR19odEpP TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pzTXpkWDQyT2hjUnNBSnpKUVJHX2h0Sk9Ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDNFRS8wMUU0RTY5NjIzQ0IxMUVEQThFMzU4M0VDNEY5QUUwMi9qc016ZFg0Mk9o Y1JzQUp6SlFSR19odEpPTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD52InksWMCj4xsciBD7rdcoScVeaRbnKwXoSZI2s5BZqA5ykG3XwQ J22K8z73D1wRAzBaeA9UCc1ODE5QyRZQSYuBy1/1WUBGUMnfFkJ1NNKZyL2bLaY6 0dPY/D5e5v8zsq2tj0QYOywWGjrlZsjDNSw63yEkIiBsGLxJaH6V9XUb3T5t+5D8 O9bd4HR8wN7TwkQ32T/vTKJOjyfvQWqABscclWxRx/H/Eb7oHxNO1jnM7WDtVhty pZgCBWond9snRe8t4pCb924w3nfu/TkGkWZsFgD+eeFcukOaZyH+H0Iai2rNd7YH 2APR4IMJ3i9+9cyOyMjB/TuhF6UlU9HZ -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:38 2025 by rpki-client