$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft File: J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json) Hash identifier: Zrn+XXQHc4nAJat+DtqplPSfdODEVz2ZDollLjKOZgs= Subject key identifier: 01:8B:E7:BC:81:D7:6A:99:84:7E:CD:DC:FA:F3:C2:B4:53:28:8F:F5 Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD Certificate issuer: /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft Manifest number: 0791 Signing time: Sat 18 Oct 2025 22:47:33 +0000 Manifest this update: Sat 18 Oct 2025 22:47:32 +0000 Manifest next update: Sat 25 Oct 2025 22:47:32 +0000 Files and hashes: 1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: NivZ36O+aoqLRNVtS8COB9ESm44G3j/4+nBiQ1jnvOQ=) 2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD Validity Not Before: Oct 18 22:47:32 2025 GMT Not After : Oct 25 22:47:32 2025 GMT Subject: CN=68f41905-4038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:1f:8e:fe:9f:14:8e:17:a7:82:35:07:b9: bf:fd:c7:68:56:08:bd:5f:45:bf:a0:bb:b3:8d:d2: 06:d8:9a:36:b1:23:53:7c:8f:38:e3:1d:e1:df:ef: 36:d2:21:ff:51:57:1d:e4:fd:f0:0d:65:ee:c5:d4: 49:b7:8a:2e:78:24:00:08:4f:f9:58:dd:2a:f7:d2: 0a:6a:5f:0d:9a:7f:ab:63:f0:c1:48:2b:f7:5e:5d: 72:a7:33:b7:f5:8f:3f:b8:8a:8c:a3:b3:79:a0:c4: 6c:2f:4c:67:3f:ef:e1:5a:bf:05:7c:69:d2:45:10: 44:12:36:fa:57:17:d5:6d:f2:90:1e:ac:e0:b8:9f: e5:73:e7:6a:3d:fd:dc:e5:cd:f6:70:46:cd:cc:82: 94:a7:02:df:bd:90:60:22:04:5a:21:79:99:4c:3c: 69:ef:01:b8:b0:24:8f:da:f5:0b:ae:75:ab:ed:aa: f1:64:1a:c8:05:1b:e0:de:8d:ca:77:5e:b0:04:f1: c2:dc:d4:6a:d9:f9:c5:39:96:c9:d6:d6:e2:18:80: e4:95:34:5d:0b:95:56:d9:f0:ea:46:31:bb:86:ec: d1:ba:af:e9:35:4a:ef:55:7a:68:60:4d:35:6a:1b: c0:4c:30:c6:f2:d9:3c:58:64:7c:5b:18:30:43:4c: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:E7:BC:81:D7:6A:99:84:7E:CD:DC:FA:F3:C2:B4:53:28:8F:F5 X509v3 Authority Key Identifier: keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:09:f1:90:70:33:5e:db:89:b8:c7:58:38:85:16:a6:23:3f: be:4d:83:8a:ef:f3:32:9d:6f:ba:e0:3c:69:08:5c:25:3e:0b: 5b:dc:b8:04:ae:1e:8c:7c:04:b3:1c:bb:86:52:1a:9d:ef:76: c3:f6:e1:80:e8:87:c6:e6:98:7a:54:2e:9e:5e:3d:83:ae:04: 62:0b:31:69:d8:80:a0:76:46:41:47:2d:5d:56:cd:56:4d:ec: fd:3a:f7:02:66:93:7a:79:87:5f:45:dd:2f:68:01:ee:f8:9c: c9:30:27:85:dd:b6:61:e2:fb:0b:ae:40:d6:08:7f:c3:19:92: 77:27:6f:82:5f:59:63:9a:3d:20:9c:37:8c:c7:e6:63:8b:5a: 45:f6:e1:b0:59:e3:37:c5:73:e8:7b:bf:0f:36:21:45:cb:a2: 8d:04:08:35:d6:22:35:53:df:5c:ac:f2:6e:22:c9:ea:72:19: d0:5e:2c:87:59:16:eb:e2:b9:db:a1:e7:e5:c9:e7:a1:9d:3d: c8:ee:19:21:1e:ad:63:f3:94:5d:03:96:b9:8a:57:23:f3:44: 23:ea:15:93:e0:70:56:2e:d8:ce:ec:88:5a:67:81:ed:e6:b5: e4:98:56:c0:2d:2e:fd:d0:6c:c9:2a:68:3a:3f:cc:e6:67:b6: 7e:9a:f9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD REU0NjQ0QUQwHhcNMjUxMDE4MjI0NzMyWhcNMjUxMDI1MjI0NzMyWjAYMRYwFAYD VQQDEw02OGY0MTkwNS00MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylAfjv6fFI4Xp4I1B7m//cdoVgi9X0W/oLuzjdIG2Jo2sSNTfI844x3h3+82 0iH/UVcd5P3wDWXuxdRJt4oueCQACE/5WN0q99IKal8Nmn+rY/DBSCv3Xl1ypzO3 9Y8/uIqMo7N5oMRsL0xnP+/hWr8FfGnSRRBEEjb6VxfVbfKQHqzguJ/lc+dqPf3c 5c32cEbNzIKUpwLfvZBgIgRaIXmZTDxp7wG4sCSP2vULrnWr7arxZBrIBRvg3o3K d16wBPHC3NRq2fnFOZbJ1tbiGIDklTRdC5VW2fDqRjG7huzRuq/pNUrvVXpoYE01 ahvATDDG8tk8WGR8WxgwQ0wz0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGL57yB 12qZhH7N3PrzwrRTKI/1MB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4 OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp TExjZW1wRG9GWFRONUdSSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYCfGQcDNe24m4x1g4hRamIz++TYOK7/MynW+64DxpCFwlPgtb3LgE rh6MfASzHLuGUhqd73bD9uGA6IfG5ph6VC6eXj2DrgRiCzFp2ICgdkZBRy1dVs1W Tez9OvcCZpN6eYdfRd0vaAHu+JzJMCeF3bZh4vsLrkDWCH/DGZJ3J2+CX1ljmj0g nDeMx+Zji1pF9uGwWeM3xXPoe78PNiFFy6KNBAg11iI1U99crPJuIsnqchnQXiyH WRbr4rnboeflyeehnT3I7hkhHq1j85RdA5a5ilcj80Qj6hWT4HBWLtjO7IhaZ4Ht 5rXkmFbALS790GzJKmg6P8zmZ7Z+mvle -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:59 2025 by rpki-client