$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft File: _J3Ma6xPPZvsntHpBk2bytz5o6k.mft (raw, json) Hash identifier: vIewVGGMKZGG0TYUn8KygzJtgnEwnDEsFNAEbOtoX4M= Subject key identifier: 4B:1D:67:B3:D9:7B:62:4E:FD:24:73:FB:46:72:31:E3:90:4D:AB:A2 Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 Certificate issuer: /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft Manifest number: DD Signing time: Sun 19 Oct 2025 08:34:18 +0000 Manifest this update: Sun 19 Oct 2025 08:34:17 +0000 Manifest next update: Sun 26 Oct 2025 08:34:17 +0000 Files and hashes: 1: _J3Ma6xPPZvsntHpBk2bytz5o6k.crl (hash: PnhdxtbX/QpU4Sbf8WtZTxoXEGRba0zsPNmircQHHKs=) 2: 390757225E1511EFB04EDA1DC4F9AE02.roa (hash: TNYuuYwAvBi+/pUa2qwV1wTrBwuN862kPVZbu/phpjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9 Validity Not Before: Oct 19 08:34:17 2025 GMT Not After : Oct 26 08:34:17 2025 GMT Subject: CN=68f4a289-6dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:34:1f:76:71:38:b8:94:d6:69:60:70:2a: 9a:58:39:b9:0f:87:57:4a:61:ec:f9:d7:71:68:28: 57:ab:a3:65:c3:bb:b6:a1:19:fd:68:47:5a:6c:6e: a3:cb:fc:e0:a5:b9:11:35:0c:cc:f5:b3:61:5b:01: 2d:bc:23:f5:39:1f:c4:15:f7:be:fc:0b:9e:ce:bf: 43:fe:db:30:3f:14:89:30:ea:10:85:bb:b4:1a:f5: 38:55:67:5a:04:30:4f:b9:81:66:1e:e1:bc:4f:d4: 42:be:21:f3:68:9d:68:75:01:c2:6f:3e:aa:c8:7d: 82:a4:d2:52:34:d1:c4:bf:09:29:30:af:a0:de:ca: da:58:fa:c2:ef:fc:26:fc:d3:7e:58:86:d2:a6:46: 0a:a9:41:a0:4d:e7:12:74:5d:40:7c:7e:bb:2f:b6: 3e:57:57:fd:f3:41:4a:f5:0b:90:2f:53:31:1e:6f: c5:02:f8:ee:70:7f:5e:a8:37:88:e3:86:0c:dc:88: b4:20:df:25:9e:1b:8a:c3:a5:03:a3:a6:78:fc:5f: e2:6a:12:03:81:47:f0:65:b1:37:62:2f:d7:a9:6a: 88:f7:e6:db:c2:6e:d1:d6:57:ef:52:0a:e1:c1:34: df:e9:79:b5:1a:f9:1a:36:13:4e:78:9c:23:81:04: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:67:B3:D9:7B:62:4E:FD:24:73:FB:46:72:31:E3:90:4D:AB:A2 X509v3 Authority Key Identifier: keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2c:d6:af:19:40:7b:2d:7f:5f:9a:16:14:b7:05:63:e7:38: 23:26:76:1f:ad:4e:33:5a:8f:5d:d2:70:06:6a:82:24:66:5e: ef:89:33:0e:07:e2:bd:25:5e:e9:3a:2b:dc:a6:b9:19:86:d3: 78:aa:72:d0:c7:d2:55:22:d1:fb:18:d3:7d:23:d0:94:f2:a7: e6:eb:3d:e4:ac:48:3e:bf:e1:60:fa:f0:fd:bd:1a:27:be:5c: d5:b1:1b:4b:e7:bd:6f:6f:6a:2a:62:0b:63:a9:52:6d:a7:73: 13:30:00:26:0f:5c:07:c0:b1:3b:26:6d:02:93:61:91:89:f7: 15:f1:8a:47:f7:f0:39:ef:47:5d:9b:94:0d:e2:5c:61:76:2a: 78:a7:f0:80:97:19:c2:77:08:4b:37:3e:0b:84:15:4c:8d:7d: fa:49:76:0a:84:59:e8:05:03:b8:78:e7:1a:40:a4:4c:32:31: 8c:a2:29:e9:a2:c0:51:81:9e:b0:87:4c:a5:a9:c8:30:7b:59: d0:b4:3d:e3:c0:9a:1c:c0:bb:dc:c8:88:50:e9:70:bb:90:ba: b0:92:ee:71:90:6a:f5:94:55:fc:a3:b2:d9:03:89:21:c7:cb: f3:67:0b:cd:ee:09:03:10:2d:29:1e:3b:21:81:35:cf:99:a0: e8:08:26:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKEZDOURDQzZCQUM0RjNEOUJFQzlFRDFFOTA2NEQ5QkNB RENGOUEzQTkwHhcNMjUxMDE5MDgzNDE3WhcNMjUxMDI2MDgzNDE3WjAYMRYwFAYD VQQDEw02OGY0YTI4OS02ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGM0H3ZxOLiU1mlgcCqaWDm5D4dXSmHs+ddxaChXq6Nlw7u2oRn9aEdabG6j y/zgpbkRNQzM9bNhWwEtvCP1OR/EFfe+/Auezr9D/tswPxSJMOoQhbu0GvU4VWda BDBPuYFmHuG8T9RCviHzaJ1odQHCbz6qyH2CpNJSNNHEvwkpMK+g3sraWPrC7/wm /NN+WIbSpkYKqUGgTecSdF1AfH67L7Y+V1f980FK9QuQL1MxHm/FAvjucH9eqDeI 44YM3Ii0IN8lnhuKw6UDo6Z4/F/iahIDgUfwZbE3Yi/XqWqI9+bbwm7R1lfvUgrh wTTf6Xm1GvkaNhNOeJwjgQQzZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsdZ7PZ e2JO/SRz+0ZyMeOQTauiMB8GA1UdIwQYMBaAFPydzGusTz2b7J7R6QZNm8rc+aOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi83OTQ2MzBDQzVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBadnNudEhwQmsyYnl0ejVv NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19KM01hNnhQUFp2c250SHBCazJieXR6NW82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi83OTQ2MzBDQzVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9fSjNNYTZ4UFBa dnNudEhwQmsyYnl0ejVvNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLNavGUB7LX9fmhYUtwVj5zgjJnYfrU4zWo9d0nAGaoIkZl7viTMO B+K9JV7pOivcprkZhtN4qnLQx9JVItH7GNN9I9CU8qfm6z3krEg+v+Fg+vD9vRon vlzVsRtL571vb2oqYgtjqVJtp3MTMAAmD1wHwLE7Jm0Ck2GRifcV8YpH9/A570dd m5QN4lxhdip4p/CAlxnCdwhLNz4LhBVMjX36SXYKhFnoBQO4eOcaQKRMMjGMoinp osBRgZ6wh0ylqcgwe1nQtD3jwJocwLvcyIhQ6XC7kLqwku5xkGr1lFX8o7LZA4kh x8vzZwvN7gkDEC0pHjshgTXPmaDoCCbc -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:44 2025 by rpki-client