$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft File: jl9h83_7iMhDbtU8A0POq7F06wg.mft (raw, json) Hash identifier: FPFZv63FZ7YAsR40ix4LhBnls+6Ysraud+HCQzCUvrE= Subject key identifier: D3:3A:53:A0:36:81:9E:92:8E:8C:E4:2A:5D:A5:EE:64:25:D7:62:42 Authority key identifier: 8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 Certificate issuer: /CN=A91BC91C/serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft Manifest number: 0207 Signing time: Sun 19 Oct 2025 04:40:18 +0000 Manifest this update: Sun 19 Oct 2025 04:40:17 +0000 Manifest next update: Sun 26 Oct 2025 04:40:17 +0000 Files and hashes: 1: jl9h83_7iMhDbtU8A0POq7F06wg.crl (hash: eXZHQUdpUNUwnjqMuMdc+RquXc5Pa5tTCokugdML3z4=) 2: 715C479841DD11F08CCC0259C4F9AE02.roa (hash: fGEw+qeCcqB/RBoNg72OOghHbjbROkzgK5a78Db2wZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC91C, serialNumber=8E5F61F37FFB88C8436ED53C0343CEABB174EB08 Validity Not Before: Oct 19 04:40:17 2025 GMT Not After : Oct 26 04:40:17 2025 GMT Subject: CN=68f46bb2-107d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:a9:fd:ea:0e:9d:3b:47:00:93:8c:d6:f7: ca:54:0e:27:41:3a:ff:f3:88:53:cb:53:f8:a3:6b: 8c:d4:0d:76:10:d1:81:ef:b8:99:1e:ee:a8:0d:5a: e1:3e:3e:e5:75:5f:5e:e6:59:68:92:1f:77:f7:6b: ca:83:b8:73:80:cb:91:3f:95:4e:6e:ac:6e:ce:73: dd:2f:aa:16:69:43:ca:d0:a9:36:76:59:d6:28:5b: e2:01:a2:95:c4:39:c4:d8:e2:7f:19:36:99:0a:be: 8d:6b:c6:3c:fa:1b:bf:13:35:4a:85:6b:92:97:ab: 19:1d:60:6f:bd:1e:d6:32:93:50:f6:13:ee:4a:87: b2:23:a4:0a:6a:67:75:65:64:80:f9:d0:03:16:34: e4:63:11:14:45:e1:e7:d2:27:87:fb:22:af:4e:e5: 09:33:82:e4:4a:fe:6b:7b:26:72:a0:f0:2b:98:f9: 8c:c5:3c:bf:4f:2b:c8:79:b4:c2:a6:1b:09:42:1e: 03:a9:76:28:64:c6:c9:aa:ec:33:5b:b2:74:84:7b: b3:52:5d:ae:9c:cd:20:53:69:88:ac:83:d0:a7:03: 51:c0:4f:89:25:5c:72:cd:b4:12:e6:74:83:93:8c: 71:a3:70:a9:92:60:ee:eb:a5:8c:01:b7:63:39:c5: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3A:53:A0:36:81:9E:92:8E:8C:E4:2A:5D:A5:EE:64:25:D7:62:42 X509v3 Authority Key Identifier: keyid:8E:5F:61:F3:7F:FB:88:C8:43:6E:D5:3C:03:43:CE:AB:B1:74:EB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl9h83_7iMhDbtU8A0POq7F06wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC91C/3A5EAB4690AF11ED8739E31AC4F9AE02/jl9h83_7iMhDbtU8A0POq7F06wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a6:47:93:c5:a0:80:b9:71:9f:21:27:ba:08:f3:16:5d:9f: 1a:7a:7f:52:f7:56:2b:da:1d:ab:e1:bd:e5:eb:6a:bc:e4:71: cd:b7:9b:f5:a5:44:e6:f1:07:72:54:35:ac:4f:58:23:de:c4: d0:cc:92:c9:d4:5b:bd:a9:22:63:a1:1a:43:69:1e:41:ae:e0: 66:2f:bb:7c:ba:ed:57:5f:f7:18:46:b1:25:fe:e3:44:26:bc: 89:6f:7b:83:90:54:2b:72:3f:97:4c:2c:4a:82:37:f4:f8:2c: 10:3c:65:ef:5b:67:dc:7c:1b:b7:f7:6f:94:c3:b5:69:06:01: 90:2d:ad:8d:dc:74:ad:0f:b7:b6:cb:49:c8:1e:3f:65:22:26: 19:a3:6b:23:6c:89:dc:78:63:12:a9:ce:f6:70:a7:f0:d9:6c: bf:09:52:da:79:67:4d:7e:dc:d4:4b:7a:90:b4:be:db:87:f3: ef:c4:e4:7d:f8:28:2c:67:5a:13:29:bd:6d:66:2e:7a:68:5e: 82:1e:0d:b6:9a:b2:28:91:5a:01:dd:bf:10:c5:53:9b:1b:2f: 19:a7:35:95:74:b2:5c:5a:ce:1e:c2:64:2a:bf:00:5a:67:f2: c2:72:7f:0b:f8:2f:36:5e:9f:5b:df:0d:61:da:01:1a:dd:83: ac:61:3f:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5MUMxMTAvBgNVBAUTKDhFNUY2MUYzN0ZGQjg4Qzg0MzZFRDUzQzAzNDNDRUFC QjE3NEVCMDgwHhcNMjUxMDE5MDQ0MDE3WhcNMjUxMDI2MDQ0MDE3WjAYMRYwFAYD VQQDEw02OGY0NmJiMi0xMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyep/eoOnTtHAJOM1vfKVA4nQTr/84hTy1P4o2uM1A12ENGB77iZHu6oDVrh Pj7ldV9e5llokh9392vKg7hzgMuRP5VObqxuznPdL6oWaUPK0Kk2dlnWKFviAaKV xDnE2OJ/GTaZCr6Na8Y8+hu/EzVKhWuSl6sZHWBvvR7WMpNQ9hPuSoeyI6QKamd1 ZWSA+dADFjTkYxEUReHn0ieH+yKvTuUJM4LkSv5reyZyoPArmPmMxTy/TyvIebTC phsJQh4DqXYoZMbJquwzW7J0hHuzUl2unM0gU2mIrIPQpwNRwE+JJVxyzbQS5nSD k4xxo3CpkmDu66WMAbdjOcUynQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM6U6A2 gZ6SjozkKl2l7mQl12JCMB8GA1UdIwQYMBaAFI5fYfN/+4jIQ27VPANDzquxdOsI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzkxQy8zQTVFQUI0Njkw QUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lNaERidFU4QTBQT3E3RjA2 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2psOWg4M183aU1oRGJ0VThBMFBPcTdGMDZ3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzkxQy8zQTVFQUI0NjkwQUYxMUVEODczOUUzMUFDNEY5QUUwMi9qbDloODNfN2lN aERidFU4QTBQT3E3RjA2d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBopkeTxaCAuXGfISe6CPMWXZ8aen9S91Yr2h2r4b3l62q85HHNt5v1 pUTm8QdyVDWsT1gj3sTQzJLJ1Fu9qSJjoRpDaR5BruBmL7t8uu1XX/cYRrEl/uNE JryJb3uDkFQrcj+XTCxKgjf0+CwQPGXvW2fcfBu392+Uw7VpBgGQLa2N3HStD7e2 y0nIHj9lIiYZo2sjbInceGMSqc72cKfw2Wy/CVLaeWdNftzUS3qQtL7bh/PvxOR9 +CgsZ1oTKb1tZi56aF6CHg22mrIokVoB3b8QxVObGy8ZpzWVdLJcWs4ewmQqvwBa Z/LCcn8L+C82Xp9b3w1h2gEa3YOsYT9Y -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:52 2025 by rpki-client