$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft File: 0JnuqfXNtv5MbvmOjYzzNkudYmE.mft (raw, json) Hash identifier: Kth26T9gS3jLU1AN6uAgZx3VHhA9P7EXAY3RlnWCI2g= Subject key identifier: FF:68:35:65:FA:55:6F:AF:FF:1E:1F:29:FB:2E:A8:27:D6:8B:BF:EB Authority key identifier: D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 Certificate issuer: /CN=A91B0D88/serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft Manifest number: EE Signing time: Sun 19 Oct 2025 08:17:16 +0000 Manifest this update: Sun 19 Oct 2025 08:17:16 +0000 Manifest next update: Sun 26 Oct 2025 08:17:16 +0000 Files and hashes: 1: 0JnuqfXNtv5MbvmOjYzzNkudYmE.crl (hash: NCLskhfbmnhXglzc53YNqUI69AcAlJqcwQV6Bo9LmrU=) 2: 63CE609A48CB11EF94C2AA83C4F9AE02.roa (hash: Gd34BZHumVDMQlkFxhkn9zZUBjwQGIsnWxDTTynzeE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0D88, serialNumber=D099EEA9F5CDB6FE4C6EF98E8D8CF3364B9D6261 Validity Not Before: Oct 19 08:17:16 2025 GMT Not After : Oct 26 08:17:16 2025 GMT Subject: CN=68f49e8c-7367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:f3:e7:86:b2:bd:39:cb:39:ef:d0:31:2b: d3:67:b9:a4:db:d5:0c:2d:2d:cd:0f:02:85:fd:65: 84:93:2d:61:ba:f4:ca:cf:6e:60:ae:80:35:0b:b8: 4e:43:5f:73:c6:ce:88:d7:fe:ac:86:ee:d3:d2:58: c3:87:20:8d:ed:73:e0:e9:be:27:73:21:47:70:31: 04:7d:49:8f:91:aa:ac:26:c5:0d:5a:9e:7c:69:f4: 13:dc:0c:80:b5:5f:d9:5c:76:30:75:63:3e:1e:34: 71:83:54:72:ac:4d:8b:60:6d:86:f4:12:0d:dd:97: 7e:f7:31:52:e3:5c:f1:07:2c:e7:5f:0f:c5:fb:47: b1:93:41:ec:95:96:b3:9f:de:fc:57:5b:d0:db:db: b5:e6:af:3c:19:21:b5:bf:54:3e:81:ed:80:0d:f4: f8:97:82:ac:10:32:cd:5e:ff:ef:28:a7:98:35:f4: d0:f9:5e:25:66:cf:92:e5:7e:32:47:a8:9d:a2:c6: fe:e4:d4:7c:98:f7:ce:68:9b:ca:44:35:f8:ac:ad: b7:11:fb:99:37:40:33:47:6b:0a:10:29:a6:7c:94: c0:74:c9:f2:03:30:73:1f:61:01:49:6e:89:1f:21: 43:32:cd:50:79:af:0e:01:8e:7f:c5:c8:85:b9:ac: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:68:35:65:FA:55:6F:AF:FF:1E:1F:29:FB:2E:A8:27:D6:8B:BF:EB X509v3 Authority Key Identifier: keyid:D0:99:EE:A9:F5:CD:B6:FE:4C:6E:F9:8E:8D:8C:F3:36:4B:9D:62:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0JnuqfXNtv5MbvmOjYzzNkudYmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D88/B986D91A431011EF88411782C4F9AE02/0JnuqfXNtv5MbvmOjYzzNkudYmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:8d:9e:29:a9:6e:ae:c2:0d:39:03:ff:45:ad:52:d3:9b:9e: 42:bb:ad:16:86:6f:a7:9d:80:08:cc:86:d6:61:0a:d1:77:da: 31:db:50:10:89:0a:b2:87:3b:3c:74:8c:a4:f4:84:d1:63:8e: c7:89:f2:46:fd:8b:57:d4:c5:56:94:27:19:f5:ab:13:b1:81: 0a:f1:a8:02:23:a6:9b:7c:20:a6:26:0c:04:29:90:bc:1e:4f: 32:ef:9c:89:bd:1e:13:e3:7f:75:cc:27:a8:4d:24:58:94:30: 01:37:d7:f3:bc:1b:ed:bf:8c:4e:aa:91:55:6e:50:51:07:21: ec:0d:9d:1b:8f:fb:fc:91:c7:70:9d:1e:87:d2:14:04:79:16: f3:88:36:e2:15:b9:d8:20:ee:52:23:78:00:d0:b5:1c:a1:b3: 24:bc:67:51:36:20:18:34:98:b3:70:d4:35:51:77:8b:8c:c5: bf:93:f6:44:69:b4:ea:fc:db:3e:82:62:87:bb:9c:4e:36:8b: 21:1f:48:ad:ef:2f:96:fb:79:c7:8c:16:ff:b2:32:ef:59:83: 20:2a:a0:d1:28:40:fa:55:1d:74:8c:b6:78:1a:d8:71:04:5d: 81:b5:18:1b:d0:18:21:eb:5a:a0:29:37:97:5c:aa:7c:dd:76: 95:eb:d7:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBEODgxMTAvBgNVBAUTKEQwOTlFRUE5RjVDREI2RkU0QzZFRjk4RThEOENGMzM2 NEI5RDYyNjEwHhcNMjUxMDE5MDgxNzE2WhcNMjUxMDI2MDgxNzE2WjAYMRYwFAYD VQQDEw02OGY0OWU4Yy03MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLrz54ayvTnLOe/QMSvTZ7mk29UMLS3NDwKF/WWEky1huvTKz25groA1C7hO Q19zxs6I1/6shu7T0ljDhyCN7XPg6b4ncyFHcDEEfUmPkaqsJsUNWp58afQT3AyA tV/ZXHYwdWM+HjRxg1RyrE2LYG2G9BIN3Zd+9zFS41zxByznXw/F+0exk0HslZaz n978V1vQ29u15q88GSG1v1Q+ge2ADfT4l4KsEDLNXv/vKKeYNfTQ+V4lZs+S5X4y R6idosb+5NR8mPfOaJvKRDX4rK23EfuZN0AzR2sKECmmfJTAdMnyAzBzH2EBSW6J HyFDMs1Qea8OAY5/xciFuaxXSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9oNWX6 VW+v/x4fKfsuqCfWi7/rMB8GA1UdIwQYMBaAFNCZ7qn1zbb+TG75jo2M8zZLnWJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEQ4OC9COTg2RDkxQTQz MTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2NU1idm1Pall6ek5rdWRZ bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBKbnVxZlhOdHY1TWJ2bU9qWXp6Tmt1ZFltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEQ4OC9COTg2RDkxQTQzMTAxMUVGODg0MTE3ODJDNEY5QUUwMi8wSm51cWZYTnR2 NU1idm1Pall6ek5rdWRZbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpjZ4pqW6uwg05A/9FrVLTm55Cu60Whm+nnYAIzIbWYQrRd9ox21AQ iQqyhzs8dIyk9ITRY47HifJG/YtX1MVWlCcZ9asTsYEK8agCI6abfCCmJgwEKZC8 Hk8y75yJvR4T4391zCeoTSRYlDABN9fzvBvtv4xOqpFVblBRByHsDZ0bj/v8kcdw nR6H0hQEeRbziDbiFbnYIO5SI3gA0LUcobMkvGdRNiAYNJizcNQ1UXeLjMW/k/ZE abTq/Ns+gmKHu5xONoshH0it7y+W+3nHjBb/sjLvWYMgKqDRKED6VR10jLZ4Gthx BF2BtRgb0Bgh61qgKTeXXKp83XaV69eD -----END CERTIFICATE-----Generated at Mon Oct 20 19:28:41 2025 by rpki-client