$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: ipXxk+smqQxQsTCyCL9DzH264u23Wm+5McQFGYBZoMM= Subject key identifier: 1E:F0:5F:13:7E:C8:56:C3:C2:25:AC:F5:00:F2:72:3B:ED:EC:56:D3 Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: FD Signing time: Sun 19 Oct 2025 08:07:17 +0000 Manifest this update: Sun 19 Oct 2025 08:07:16 +0000 Manifest next update: Sun 26 Oct 2025 08:07:16 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: w9bbA0ecsHiGCjA+POJ4bZqa1AvbjTtiJbrLFKfBBZs=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Oct 19 08:07:16 2025 GMT Not After : Oct 26 08:07:16 2025 GMT Subject: CN=68f49c35-5e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e0:2c:36:16:c6:2e:b9:a6:24:a2:ea:c7:9d: aa:6e:f6:da:f6:38:12:b5:da:26:ed:32:73:52:77: 44:83:2f:86:1b:e9:b7:72:09:f4:35:db:a4:57:35: 0c:d7:db:cf:32:dc:35:f4:af:bf:53:02:70:29:46: e2:30:03:ac:63:89:ba:6d:5a:23:67:3f:9a:2d:ea: b6:72:b0:a7:a8:50:1a:b7:79:b6:dd:a8:c4:d2:30: 4f:39:fc:be:cb:7e:1c:3d:cf:49:6f:5e:1c:75:dc: 0c:ed:86:43:29:14:7c:37:39:b6:d5:32:76:a1:67: eb:22:12:0c:e2:e1:3c:60:0d:06:1f:48:b4:d9:fd: 13:ee:ad:43:f8:7c:05:62:0f:e3:86:c1:f5:c8:35: a2:94:cf:06:b4:5a:53:31:bc:65:fb:b4:b5:dc:37: ba:73:2b:2f:5a:44:96:83:a4:e9:24:8b:de:65:a3: c9:2c:8b:58:d9:4f:d1:b3:8c:92:72:d4:44:c3:56: a6:ee:87:03:9e:d1:7c:50:2d:fe:5e:87:75:fb:c6: 1a:37:ad:09:e6:30:7f:80:35:c9:cd:a2:52:35:e4: b6:b0:7c:e9:3f:9c:a7:c4:b2:fd:1c:33:68:2d:62: d2:ba:5f:98:29:76:b7:1f:99:47:20:ec:47:c7:7f: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:5F:13:7E:C8:56:C3:C2:25:AC:F5:00:F2:72:3B:ED:EC:56:D3 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:bc:5d:41:e5:39:56:24:0e:05:52:79:0b:c7:76:d2:0b:b4: 53:44:d1:ac:c3:db:3f:bc:a8:92:8a:93:f6:e6:1c:64:58:b7: 8c:dd:e0:f6:cf:79:cc:45:e1:58:f4:e9:b1:c6:65:5f:2a:2b: eb:05:7e:e0:a9:f6:0a:5c:8c:44:00:91:5c:94:1a:1d:50:5f: 3f:dd:ed:08:3e:b9:11:3f:3d:a8:e2:d6:98:eb:72:45:12:97: 26:92:52:02:93:38:8f:d5:42:b5:f8:81:88:10:50:f2:7e:32: 39:42:25:bf:2d:97:3e:70:34:b5:c4:dc:4c:14:8f:f7:7c:8a: b5:fe:dd:15:17:5f:27:67:54:e9:a5:87:44:77:d7:d1:da:17: 83:e0:37:21:53:3f:dd:28:9b:c2:87:5e:76:3b:5e:c6:16:73: ff:08:fd:35:77:21:8d:5b:78:a1:6d:84:4f:d2:47:ef:67:0c: 95:f7:14:8e:95:75:6f:7a:be:fd:1e:6c:8c:dc:a5:b0:26:55: 14:8c:79:32:70:f7:02:ef:eb:de:40:bd:8e:d6:25:31:5c:15: 02:f5:b8:28:32:63:4b:ad:e1:25:be:a6:86:85:16:59:00:b2: 9b:ec:4e:bd:9c:bc:98:89:e9:cb:7a:d5:0a:cc:f1:05:fc:76: 60:54:89:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUxMDE5MDgwNzE2WhcNMjUxMDI2MDgwNzE2WjAYMRYwFAYD VQQDEw02OGY0OWMzNS01ZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+AsNhbGLrmmJKLqx52qbvba9jgStdom7TJzUndEgy+GG+m3cgn0NdukVzUM 19vPMtw19K+/UwJwKUbiMAOsY4m6bVojZz+aLeq2crCnqFAat3m23ajE0jBPOfy+ y34cPc9Jb14cddwM7YZDKRR8Nzm21TJ2oWfrIhIM4uE8YA0GH0i02f0T7q1D+HwF Yg/jhsH1yDWilM8GtFpTMbxl+7S13De6cysvWkSWg6TpJIveZaPJLItY2U/Rs4yS ctREw1am7ocDntF8UC3+Xod1+8YaN60J5jB/gDXJzaJSNeS2sHzpP5ynxLL9HDNo LWLSul+YKXa3H5lHIOxHx3/RgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7wXxN+ yFbDwiWs9QDycjvt7FbTMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJvF1B5TlWJA4FUnkLx3bSC7RTRNGsw9s/vKiSipP25hxkWLeM3eD2 z3nMReFY9OmxxmVfKivrBX7gqfYKXIxEAJFclBodUF8/3e0IPrkRPz2o4taY63JF EpcmklICkziP1UK1+IGIEFDyfjI5QiW/LZc+cDS1xNxMFI/3fIq1/t0VF18nZ1Tp pYdEd9fR2heD4DchUz/dKJvCh152O17GFnP/CP01dyGNW3ihbYRP0kfvZwyV9xSO lXVver79HmyM3KWwJlUUjHkycPcC7+veQL2O1iUxXBUC9bgoMmNLreElvqaGhRZZ ALKb7E69nLyYienLetUKzPEF/HZgVIkR -----END CERTIFICATE-----Generated at Mon Oct 20 14:05:57 2025 by rpki-client