$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft File: jGb5wOZorJCB33ENYELfR0kLCrk.mft (raw, json) Hash identifier: JAPMSSXcvo4/a9LJ1eQ9OiYntjoCugDOwaYhIB547+4= Subject key identifier: 2B:94:C0:99:17:A9:D2:CB:00:6F:8E:09:85:3F:67:62:07:D2:19:AD Authority key identifier: 8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 Certificate issuer: /CN=A91A97F0/serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft Manifest number: 0C66 Signing time: Sat 18 Oct 2025 19:24:44 +0000 Manifest this update: Sat 18 Oct 2025 19:24:44 +0000 Manifest next update: Sat 25 Oct 2025 19:24:44 +0000 Files and hashes: 1: jGb5wOZorJCB33ENYELfR0kLCrk.crl (hash: 0SGqnEuN5XqSsK1DoCF1XiX8I2lm0onMx9ZBRlGHnfU=) 2: 90576660E19711EFA11C2227C4F9AE02.roa (hash: 4znOjftmOLUP9F0sqZtn3shUbp4rIvm9xbYnsSSpuqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A97F0, serialNumber=8C66F9C0E668AC9081DF710D6042DF47490B0AB9 Validity Not Before: Oct 18 19:24:44 2025 GMT Not After : Oct 25 19:24:44 2025 GMT Subject: CN=68f3e97c-afd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:16:72:c9:cb:ad:d5:0c:8e:d7:9e:5a:ca: 8d:e1:80:19:df:0e:a4:99:9b:1e:4a:6e:fb:c1:2f: 0f:4d:74:0d:3f:8e:17:d3:0c:b2:26:f7:26:2e:33: ab:e9:b4:c1:8e:c3:55:ea:65:a8:09:14:b6:a1:d6: b4:1b:d3:66:5d:95:3a:2e:e9:0b:f6:2d:36:62:c0: 0f:ea:64:ac:f1:67:5f:a7:9a:0e:f6:a5:e0:20:c6: e6:8a:bd:d7:5c:41:87:a5:26:be:b0:ff:e8:56:3e: 70:08:f6:87:ad:05:d9:cb:0e:ee:76:6a:09:5c:86: 4c:e7:0c:68:d6:2a:00:d2:b1:00:01:37:8f:b5:76: ef:0c:27:cd:0f:b9:e1:1d:78:6c:3f:a9:02:30:ac: 15:ab:87:86:0f:d2:99:f3:86:92:13:b4:7c:7f:ae: 96:f7:33:c1:7b:9e:65:44:b9:c6:91:27:4b:5d:59: d4:40:7b:d6:65:6a:34:86:20:9b:bb:18:28:79:e4: ad:8f:4b:14:40:0e:fe:0f:83:88:c1:3a:bd:77:54: 3b:b0:0a:10:12:27:6a:ad:98:db:30:15:8d:fa:22: 52:bd:9f:2b:66:93:a7:8f:9a:81:6a:8a:16:9b:6b: 46:47:b8:8b:91:5b:5c:7e:ab:55:8e:ac:d8:30:e3: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:94:C0:99:17:A9:D2:CB:00:6F:8E:09:85:3F:67:62:07:D2:19:AD X509v3 Authority Key Identifier: keyid:8C:66:F9:C0:E6:68:AC:90:81:DF:71:0D:60:42:DF:47:49:0B:0A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jGb5wOZorJCB33ENYELfR0kLCrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97F0/A66319F012D911EAA16A4B61C4F9AE02/jGb5wOZorJCB33ENYELfR0kLCrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2b:d6:1b:c6:ac:1d:3c:58:55:92:bf:85:ea:52:6f:cf:50: 6f:70:cf:83:00:98:8b:b3:48:f9:15:a9:80:5b:6c:6a:1c:15: ec:78:b2:c4:aa:8f:cb:f5:83:7c:98:9f:64:5d:23:32:1c:0c: 6a:d7:38:cc:83:6f:a3:92:0f:3d:b2:3f:be:80:2f:8b:d5:f0: 68:67:ec:20:9f:0a:8d:4b:10:04:e3:01:bf:89:f1:80:5d:d3: 7d:04:9e:39:c8:74:6c:7c:c1:eb:75:19:84:1a:fb:5c:e5:78: cc:ca:e6:b6:91:92:dc:b1:30:a8:ff:00:81:99:43:ad:3c:8e: 75:22:38:9e:72:a7:dc:6a:5c:b4:6e:a0:74:fd:e2:e6:7b:0a: af:d5:8a:74:b4:28:b4:dd:6f:05:e3:97:10:0d:23:25:2c:e4: 29:d7:f0:af:f3:84:47:61:27:fc:63:62:b7:a3:0e:e9:8f:81: c4:78:f6:97:e2:01:26:b5:63:06:e2:eb:07:a1:19:24:f7:a9: ce:ce:c6:60:f5:dd:ed:9e:52:f3:1a:89:b4:2a:b3:d6:1b:05: ca:1c:6f:b2:fe:b1:79:fd:44:ac:5e:53:cc:83:9d:df:da:36: fa:09:b2:d0:ec:80:ab:06:09:52:b8:14:f3:3e:b2:11:d7:64: 52:4b:ad:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk3RjAxMTAvBgNVBAUTKDhDNjZGOUMwRTY2OEFDOTA4MURGNzEwRDYwNDJERjQ3 NDkwQjBBQjkwHhcNMjUxMDE4MTkyNDQ0WhcNMjUxMDI1MTkyNDQ0WjAYMRYwFAYD VQQDEw02OGYzZTk3Yy1hZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XwWcsnLrdUMjteeWsqN4YAZ3w6kmZseSm77wS8PTXQNP44X0wyyJvcmLjOr 6bTBjsNV6mWoCRS2oda0G9NmXZU6LukL9i02YsAP6mSs8Wdfp5oO9qXgIMbmir3X XEGHpSa+sP/oVj5wCPaHrQXZyw7udmoJXIZM5wxo1ioA0rEAATePtXbvDCfND7nh HXhsP6kCMKwVq4eGD9KZ84aSE7R8f66W9zPBe55lRLnGkSdLXVnUQHvWZWo0hiCb uxgoeeStj0sUQA7+D4OIwTq9d1Q7sAoQEidqrZjbMBWN+iJSvZ8rZpOnj5qBaooW m2tGR7iLkVtcfqtVjqzYMONCFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuUwJkX qdLLAG+OCYU/Z2IH0hmtMB8GA1UdIwQYMBaAFIxm+cDmaKyQgd9xDWBC30dJCwq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTdGMC9BNjYzMTlGMDEy RDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JKQ0IzM0VOWUVMZlIwa0xD cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pHYjV3T1pvckpDQjMzRU5ZRUxmUjBrTENyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTdGMC9BNjYzMTlGMDEyRDkxMUVBQTE2QTRCNjFDNEY5QUUwMi9qR2I1d09ab3JK Q0IzM0VOWUVMZlIwa0xDcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnK9YbxqwdPFhVkr+F6lJvz1BvcM+DAJiLs0j5FamAW2xqHBXseLLE qo/L9YN8mJ9kXSMyHAxq1zjMg2+jkg89sj++gC+L1fBoZ+wgnwqNSxAE4wG/ifGA XdN9BJ45yHRsfMHrdRmEGvtc5XjMyua2kZLcsTCo/wCBmUOtPI51Ijiecqfcaly0 bqB0/eLmewqv1Yp0tCi03W8F45cQDSMlLOQp1/Cv84RHYSf8Y2K3ow7pj4HEePaX 4gEmtWMG4usHoRkk96nOzsZg9d3tnlLzGom0KrPWGwXKHG+y/rF5/USsXlPMg53f 2jb6CbLQ7ICrBglSuBTzPrIR12RSS62M -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:42 2025 by rpki-client