$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: 9BCjT1L/L+8eARPWlqNxk2pdzjaLw0ZMijlEEBM2pbw= Subject key identifier: F3:14:19:E1:C4:79:55:B3:61:E0:6F:75:90:54:0C:85:94:9B:0F:A0 Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02D0 Signing time: Sun 19 Oct 2025 03:30:28 +0000 Manifest this update: Sun 19 Oct 2025 03:30:27 +0000 Manifest next update: Sun 26 Oct 2025 03:30:27 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: N25GuOxT0IhI1CPL+xDaPwosgBQTsduZxRJNTJEmqpo=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Oct 19 03:30:27 2025 GMT Not After : Oct 26 03:30:27 2025 GMT Subject: CN=68f45b53-1c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:1f:3f:59:bd:8f:df:46:7d:12:9e:aa:59: 49:66:ca:fd:55:7d:97:27:ff:4b:88:c3:63:73:37: 3c:bf:db:99:0a:36:4a:5d:a7:aa:0c:7e:6b:ce:a5: 38:9b:a6:76:71:8b:04:ca:a3:e4:e6:a0:1f:a6:20: 7a:7d:26:a7:9d:ab:0d:85:cf:8b:99:92:21:81:77: a7:22:d3:7c:49:69:df:4f:8f:f4:96:b7:1f:2e:b3: 1f:76:d4:12:1b:63:ce:f6:93:44:a8:c5:6e:db:1b: 1f:a4:1d:bc:f3:30:20:28:08:85:34:82:c4:41:0f: f5:d9:b0:13:99:ec:e9:75:af:6c:a4:a8:71:45:8c: 61:2c:7d:50:8c:64:06:bc:f1:66:15:86:ab:a0:da: 09:71:47:90:11:fc:55:2c:8f:21:cf:97:4e:aa:71: 07:4f:a7:22:b0:a4:7f:10:df:0e:60:ae:ab:98:38: 8f:39:cd:33:54:9d:31:66:97:c7:92:72:80:40:a6: 51:db:e9:94:2b:2c:e8:4f:1c:0b:52:7a:e0:f6:24: 46:83:97:dd:26:c5:99:8f:cf:9d:af:da:02:09:bc: cb:29:2a:3d:a0:3a:29:e7:5f:b5:a0:a4:b2:da:b0: d7:9a:4e:96:a2:34:91:7c:f7:0a:5d:62:da:dd:f1: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:14:19:E1:C4:79:55:B3:61:E0:6F:75:90:54:0C:85:94:9B:0F:A0 X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:11:5f:f1:93:19:d8:58:c3:88:a3:c0:fd:33:8f:11:fc:7a: 8f:05:ae:72:97:e9:35:b0:d4:ea:1d:81:66:59:98:ac:26:d5: 5d:98:12:f4:be:9e:76:05:ae:5f:1e:ca:c5:30:1b:61:e1:6c: 4d:46:0b:36:43:48:79:6c:80:ac:95:51:84:dc:3b:6c:52:43: d4:aa:99:5e:4b:73:af:a5:d9:55:d4:6e:7d:a0:a3:c0:78:ad: 90:c2:bc:f4:d2:4b:81:d9:88:a8:16:8a:49:2b:9c:c6:e7:12: e2:61:6d:6a:16:85:e2:04:e1:ec:2e:5c:d8:06:81:26:74:da: d0:65:e8:bc:8e:b7:e2:14:c3:5c:c5:42:92:27:92:dc:97:5d: b8:82:b1:4b:f6:93:88:0f:7d:f1:64:d2:7c:48:b2:e6:06:5e: 15:44:bd:17:94:3b:f4:6b:05:b8:fb:74:f7:c7:3f:c3:b7:67: 85:4c:16:da:30:3d:4e:3e:70:ed:ba:05:f8:86:b0:92:f2:19: be:f5:a7:ee:08:52:54:d2:0f:2b:f9:aa:9b:22:88:8f:f0:94: e8:87:56:2a:26:27:20:88:6d:b1:69:c4:b2:7c:1b:2e:c6:1a: 43:61:9a:9e:f3:e5:4f:d5:7b:78:fa:34:7c:a5:17:19:a2:58: eb:43:49:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUxMDE5MDMzMDI3WhcNMjUxMDI2MDMzMDI3WjAYMRYwFAYD VQQDEw02OGY0NWI1My0xYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUofP1m9j99GfRKeqllJZsr9VX2XJ/9LiMNjczc8v9uZCjZKXaeqDH5rzqU4 m6Z2cYsEyqPk5qAfpiB6fSannasNhc+LmZIhgXenItN8SWnfT4/0lrcfLrMfdtQS G2PO9pNEqMVu2xsfpB288zAgKAiFNILEQQ/12bATmezpda9spKhxRYxhLH1QjGQG vPFmFYaroNoJcUeQEfxVLI8hz5dOqnEHT6cisKR/EN8OYK6rmDiPOc0zVJ0xZpfH knKAQKZR2+mUKyzoTxwLUnrg9iRGg5fdJsWZj8+dr9oCCbzLKSo9oDop51+1oKSy 2rDXmk6WojSRfPcKXWLa3fHs4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMUGeHE eVWzYeBvdZBUDIWUmw+gMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABEV/xkxnYWMOIo8D9M48R/HqPBa5yl+k1sNTqHYFmWZisJtVdmBL0 vp52Ba5fHsrFMBth4WxNRgs2Q0h5bICslVGE3DtsUkPUqpleS3OvpdlV1G59oKPA eK2Qwrz00kuB2YioFopJK5zG5xLiYW1qFoXiBOHsLlzYBoEmdNrQZei8jrfiFMNc xUKSJ5Lcl124grFL9pOID33xZNJ8SLLmBl4VRL0XlDv0awW4+3T3xz/Dt2eFTBba MD1OPnDtugX4hrCS8hm+9afuCFJU0g8r+aqbIoiP8JToh1YqJicgiG2xacSyfBsu xhpDYZqe8+VP1Xt4+jR8pRcZoljrQ0lU -----END CERTIFICATE-----Generated at Mon Oct 20 11:30:27 2025 by rpki-client