$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: +1q9umd6V3FjUfOpDqJKkHNiPKtiHW5WQg13+1pzYW8= Subject key identifier: 64:F1:A3:30:FE:EC:AF:4E:AF:B6:9F:98:7C:81:47:C2:D3:1A:77:25 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FE3 Signing time: Sat 18 Oct 2025 18:04:09 +0000 Manifest this update: Sat 18 Oct 2025 18:04:08 +0000 Manifest next update: Sat 25 Oct 2025 18:04:08 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: l4P22Xw0M1ZMz4ocNv/iWS1NOMmxnwx9GVu/alS9ZTY=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: E7M9ff2lqZ9KItEYB6uL3gelJHB2f4xodQAgicwzP+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4074 (0xfea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Oct 18 18:04:08 2025 GMT Not After : Oct 25 18:04:08 2025 GMT Subject: CN=68f3d698-21a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:dd:dd:64:23:f2:4e:42:08:21:3b:91:c2: 2c:83:95:60:1a:70:82:2c:fb:9c:8b:af:14:34:4d: 4e:69:6b:fb:09:00:94:b8:db:26:7d:2a:10:e9:4b: 9c:77:24:94:cc:22:4d:16:94:e7:f2:ad:73:17:51: 16:3d:5b:76:7a:d0:70:98:80:fc:6d:3b:e5:cf:6f: 49:9b:72:5e:c1:8f:78:2e:2d:c0:45:2e:97:7b:de: 55:53:93:84:3f:01:2c:72:62:4f:1c:91:87:7d:29: 71:7b:41:a5:2f:f9:02:e1:5c:63:39:b7:75:d1:b8: 60:e3:7a:35:42:da:00:31:83:c2:f7:e8:8c:ea:9f: d3:63:fa:09:b3:6c:9e:62:28:53:0f:33:16:0e:eb: b8:9d:ae:c2:b0:42:b4:cd:84:6d:6b:ee:d2:d1:9b: 9c:d8:c1:04:f6:22:ed:b6:15:a3:69:9a:7b:19:68: 43:32:42:a8:48:22:31:65:43:ba:b7:e4:8c:96:2b: f1:f6:80:18:52:28:cf:5e:f4:42:2c:00:ca:61:b0: 0e:06:4c:0e:bf:a0:19:d0:ca:a3:3c:2d:d5:8a:6e: b1:0e:56:8a:c6:40:94:f9:50:b6:63:a3:f2:7f:b5: 7e:c7:57:a0:5d:5e:53:cd:83:93:82:9f:b8:e9:86: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F1:A3:30:FE:EC:AF:4E:AF:B6:9F:98:7C:81:47:C2:D3:1A:77:25 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:a3:5a:94:b9:42:b9:e6:72:25:dc:ee:cc:37:19:ca:c4: 18:8c:83:c2:54:42:79:32:5a:0a:85:68:19:e2:35:62:2b:2f: e9:38:c7:b4:dc:0e:93:5d:fd:a2:8f:59:df:85:89:aa:80:c6: d4:a5:5c:37:ec:35:62:6d:fc:63:6a:b3:fb:a6:3a:e1:d7:ef: 0e:2b:74:a9:43:5f:c0:84:d4:a1:54:e5:99:c4:00:51:5d:41: 84:45:8e:7b:07:46:ce:ab:a3:45:4f:dd:54:d2:18:04:ef:54: 32:90:e8:4b:5f:03:21:b1:d8:c6:5e:4e:f0:b8:f6:20:07:bc: 6e:fd:77:2f:20:88:e4:cf:4d:30:bd:a0:6c:72:35:0d:45:62: af:5e:ae:a4:4a:5c:89:7d:9c:48:a3:ea:df:de:40:8f:b1:54: 0f:ec:92:ec:55:49:88:2b:a1:c6:eb:74:97:6d:c2:3b:be:88: d3:a2:6a:b9:cb:60:52:82:de:80:d3:22:7a:62:5e:7a:50:ba: 28:00:c0:fc:6a:c5:c5:f3:43:43:8e:54:27:1c:28:d1:e9:c9: e0:88:eb:03:ba:34:97:d2:7f:06:4d:82:62:3f:98:bc:3f:fc: 48:5a:09:54:1e:0b:77:49:11:2b:d2:4e:93:93:54:49:90:b0: ed:fa:0f:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMDE4MTgwNDA4WhcNMjUxMDI1MTgwNDA4WjAYMRYwFAYD VQQDEw02OGYzZDY5OC0yMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlTd3WQj8k5CCCE7kcIsg5VgGnCCLPuci68UNE1OaWv7CQCUuNsmfSoQ6Uuc dySUzCJNFpTn8q1zF1EWPVt2etBwmID8bTvlz29Jm3JewY94Li3ARS6Xe95VU5OE PwEscmJPHJGHfSlxe0GlL/kC4VxjObd10bhg43o1QtoAMYPC9+iM6p/TY/oJs2ye YihTDzMWDuu4na7CsEK0zYRta+7S0Zuc2MEE9iLtthWjaZp7GWhDMkKoSCIxZUO6 t+SMlivx9oAYUijPXvRCLADKYbAOBkwOv6AZ0MqjPC3Vim6xDlaKxkCU+VC2Y6Py f7V+x1egXV5TzYOTgp+46YZPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTxozD+ 7K9Or7afmHyBR8LTGnclMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASR6NalLlCueZyJdzuzDcZysQYjIPCVEJ5MloKhWgZ4jViKy/pOMe0 3A6TXf2ij1nfhYmqgMbUpVw37DVibfxjarP7pjrh1+8OK3SpQ1/AhNShVOWZxABR XUGERY57B0bOq6NFT91U0hgE71QykOhLXwMhsdjGXk7wuPYgB7xu/XcvIIjkz00w vaBscjUNRWKvXq6kSlyJfZxIo+rf3kCPsVQP7JLsVUmIK6HG63SXbcI7vojTomq5 y2BSgt6A0yJ6Yl56ULooAMD8asXF80NDjlQnHCjR6cngiOsDujSX0n8GTYJiP5i8 P/xIWglUHgt3SREr0k6Tk1RJkLDt+g+H -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:03 2025 by rpki-client