$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: 58D3vi46CU5tRa79I2eTTIclh0kaO7H1fT1rfCUseQg= Subject key identifier: 7F:4A:7C:3F:22:60:EA:BC:26:0A:9A:D7:64:E2:1E:B7:DD:12:94:68 Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A76 Signing time: Sat 18 Oct 2025 20:36:01 +0000 Manifest this update: Sat 18 Oct 2025 20:36:00 +0000 Manifest next update: Sat 25 Oct 2025 20:36:00 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: tR5SSi8PULHVXXYLGwjMWds1+B9J4RRzidcR9o13k18=) 2: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2688 (0xa80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Oct 18 20:36:00 2025 GMT Not After : Oct 25 20:36:00 2025 GMT Subject: CN=68f3fa31-b562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:dc:b1:bf:b1:e6:aa:d5:e5:cd:d0:eb:d1: cf:98:67:5a:ae:5d:2b:37:bf:6b:b7:b6:62:65:56: 65:fd:67:70:52:49:42:a2:4e:da:82:e3:22:94:bd: 96:b8:bb:71:6f:5a:e1:28:a8:7f:1c:e7:fa:9d:8f: b6:59:a2:6b:b6:fc:1c:f0:d1:97:3b:dc:24:45:04: f1:3b:c2:82:a1:d9:b7:37:77:2a:40:cd:01:15:c9: 9a:c8:db:17:da:4c:9c:06:1c:3a:f8:2f:4a:61:6e: 78:d7:5e:eb:29:c9:ab:dc:a7:00:4b:69:36:c1:4f: 1b:43:fd:ea:33:80:c6:b2:5c:6c:7d:e5:ec:fe:ab: b8:e4:82:5c:29:cf:95:f8:1f:bd:72:ce:bf:8f:0e: a1:18:88:1c:0a:63:05:40:3b:64:31:d8:a2:f7:92: b6:71:eb:47:aa:9e:b1:ce:c2:8c:17:ec:fb:50:df: 8d:ce:cb:e7:70:db:cc:10:e2:16:14:2e:aa:6b:83: c2:60:82:31:56:12:84:8a:5e:e9:a5:60:06:0d:49: c7:8f:0e:26:f7:a1:99:41:2e:c7:0e:2d:4b:b4:5b: a2:d7:d3:6e:da:ac:89:13:90:f9:d4:0b:ee:ee:54: 0f:9c:3f:90:1c:cc:0b:4d:7b:24:4b:25:dd:04:b9: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4A:7C:3F:22:60:EA:BC:26:0A:9A:D7:64:E2:1E:B7:DD:12:94:68 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2b:95:af:bf:13:eb:8a:98:4f:b9:52:e5:fa:2b:93:ac:9c: 8a:60:fd:20:93:4a:55:24:42:84:f5:f9:e3:af:d0:b5:13:a3: 87:dd:f8:f2:fe:c6:a3:a5:db:5c:8f:28:bd:5d:c1:de:bc:a4: 67:16:d7:ed:77:af:03:7c:eb:0f:6d:27:01:b1:d3:bb:ea:16: 00:3a:dc:d9:af:1e:45:2f:be:76:f4:ba:78:51:95:13:bb:ce: 22:f6:d6:0f:bc:e8:12:f0:90:68:2c:24:59:5d:b7:fd:a3:f0: b7:20:87:ab:09:ce:05:d8:ff:bd:a9:77:cf:5e:bb:09:54:ef: a0:7d:15:28:18:de:b1:be:1f:45:34:98:c1:cd:15:81:4b:20: 3f:48:d5:27:53:a2:90:d7:6e:a1:f0:52:cc:9c:33:0c:fe:79: 39:d0:fc:a2:43:73:71:f6:f9:dd:73:9f:b1:88:36:b5:f8:f2: 93:f5:b6:cf:67:fc:07:56:b9:c6:70:d6:aa:a4:c4:d2:ed:88: 70:a2:a5:d7:52:19:28:64:dd:0f:c4:3a:ac:7e:94:81:74:1e: f8:c8:89:47:e1:b2:63:00:02:16:da:2b:af:47:b5:fa:37:c1: f2:53:2a:83:d1:3f:08:31:fa:38:3e:4c:5b:19:d8:dc:9f:c7: 94:ce:fe:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUxMDE4MjAzNjAwWhcNMjUxMDI1MjAzNjAwWjAYMRYwFAYD VQQDEw02OGYzZmEzMS1iNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMzcsb+x5qrV5c3Q69HPmGdarl0rN79rt7ZiZVZl/WdwUklCok7aguMilL2W uLtxb1rhKKh/HOf6nY+2WaJrtvwc8NGXO9wkRQTxO8KCodm3N3cqQM0BFcmayNsX 2kycBhw6+C9KYW54117rKcmr3KcAS2k2wU8bQ/3qM4DGslxsfeXs/qu45IJcKc+V +B+9cs6/jw6hGIgcCmMFQDtkMdii95K2cetHqp6xzsKMF+z7UN+NzsvncNvMEOIW FC6qa4PCYIIxVhKEil7ppWAGDUnHjw4m96GZQS7HDi1LtFui19Nu2qyJE5D51Avu 7lQPnD+QHMwLTXskSyXdBLlzBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9KfD8i YOq8Jgqa12TiHrfdEpRoMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+K5WvvxPriphPuVLl+iuTrJyKYP0gk0pVJEKE9fnjr9C1E6OH3fjy /sajpdtcjyi9XcHevKRnFtftd68DfOsPbScBsdO76hYAOtzZrx5FL7529Lp4UZUT u84i9tYPvOgS8JBoLCRZXbf9o/C3IIerCc4F2P+9qXfPXrsJVO+gfRUoGN6xvh9F NJjBzRWBSyA/SNUnU6KQ126h8FLMnDMM/nk50PyiQ3Nx9vndc5+xiDa1+PKT9bbP Z/wHVrnGcNaqpMTS7YhwoqXXUhkoZN0PxDqsfpSBdB74yIlH4bJjAAIW2iuvR7X6 N8HyUyqD0T8IMfo4PkxbGdjcn8eUzv6h -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:44 2025 by rpki-client