$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft File: JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json) Hash identifier: JdSc5ksQCmnmtCIXg+Dt/uZmygkI2o+WUWqK6YKcOUs= Subject key identifier: 56:B4:DE:BC:9D:9F:D8:70:26:03:5B:F1:AF:B2:8B:CE:1F:DB:73:92 Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 1686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft Manifest number: 1675 Signing time: Sat 18 Oct 2025 17:07:01 +0000 Manifest this update: Sat 18 Oct 2025 17:07:00 +0000 Manifest next update: Sat 25 Oct 2025 17:07:00 +0000 Files and hashes: 1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: 4tWw/6D+DO3S0t3k4ckObzZa49H6RPRnTgn6zH2/Mm4=) 2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: fzz+cmf6RTjpSZhSUYFboDARUAmhNVeZcjvYZat/5Js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5766 (0x1686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Oct 18 17:07:00 2025 GMT Not After : Oct 25 17:07:00 2025 GMT Subject: CN=68f3c934-d23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:b6:50:0a:8d:bc:5f:fa:9a:1c:0d:44:da: 91:44:47:b7:00:a3:d8:17:da:39:ee:4d:7b:4e:a2: eb:a6:81:6f:8d:dc:04:d5:2e:d3:8b:b7:0c:a0:16: 95:53:7b:a1:bb:09:f1:af:6f:58:ba:7e:c4:3b:aa: 25:78:03:80:9c:14:28:65:e4:6f:ef:2a:4c:67:c2: f4:8e:ed:46:b8:a2:68:5f:85:0d:ff:e6:3a:b1:13: 1f:b4:4a:9a:72:fb:04:00:52:44:99:21:ef:ce:4c: a1:5a:fc:e9:a8:b5:78:31:57:bc:cd:fa:07:65:69: 0c:53:41:f8:77:77:b7:31:35:f6:ac:b6:a9:aa:a6: a2:4e:79:1b:60:5b:7e:cb:21:2a:e6:2e:16:ae:26: 4f:74:6f:f4:f6:d0:0c:b5:5d:bc:c8:b1:08:0e:8b: 9f:15:dc:bf:1c:9a:fa:37:f3:c3:c5:90:d0:b7:2a: 69:ac:fe:79:9f:85:78:c5:f1:27:91:26:79:26:dc: 11:b9:01:24:9d:cc:b1:ae:ed:e3:1a:e4:ba:ac:01: 2f:6d:f4:03:60:e9:76:dd:dd:b2:6f:47:f0:8e:71: d7:2c:0c:70:c7:3e:99:7a:29:1e:53:7c:3b:75:f0: 03:e0:e7:d4:88:bb:ec:fd:de:2c:93:81:63:d4:85: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B4:DE:BC:9D:9F:D8:70:26:03:5B:F1:AF:B2:8B:CE:1F:DB:73:92 X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:12:c9:2f:ad:53:7c:58:4f:aa:4b:43:dd:44:2a:31:c5:4a: ee:9d:a1:cd:86:f4:58:23:5b:98:a5:20:92:b6:5b:23:c8:db: 8e:2d:1c:f8:fb:7b:34:48:b2:02:99:2b:01:d7:ec:e5:ca:c3: 0e:6e:c8:4b:81:9b:64:b4:a0:2d:bc:83:e9:ae:99:1f:78:2f: e8:fa:6a:b3:2a:db:42:9e:0c:c8:91:f0:72:e4:87:57:5b:ef: aa:7a:0e:eb:c7:84:13:08:98:88:09:3e:c5:97:2c:00:31:7f: 3d:29:fe:fe:27:fa:a6:11:89:96:ee:09:8d:0d:bd:df:75:c0: ce:dc:0b:c4:ce:33:14:9f:0e:ef:f6:5e:ae:d1:43:33:f0:c2: b0:df:6f:db:57:e1:6e:6c:d6:9e:46:d8:e9:86:40:c2:25:03: f6:43:a5:16:9f:54:94:d3:9c:c4:f1:41:6b:1b:31:07:cd:4d: 99:e8:b4:77:f9:d9:17:42:65:6b:2c:b2:38:cc:b6:8f:38:be: 4c:d9:28:d6:1c:2f:35:26:92:a2:f8:ad:d5:6e:af:76:f4:b5: 3b:f2:46:97:82:38:70:df:fe:7c:13:91:67:6e:3a:53:69:66: 2d:e3:91:71:34:b8:db:78:71:d1:db:32:02:fe:df:de:64:d6: b0:3b:ba:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjUxMDE4MTcwNzAwWhcNMjUxMDI1MTcwNzAwWjAYMRYwFAYD VQQDEw02OGYzYzkzNC1kMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3y2UAqNvF/6mhwNRNqRREe3AKPYF9o57k17TqLrpoFvjdwE1S7Ti7cMoBaV U3uhuwnxr29Yun7EO6oleAOAnBQoZeRv7ypMZ8L0ju1GuKJoX4UN/+Y6sRMftEqa cvsEAFJEmSHvzkyhWvzpqLV4MVe8zfoHZWkMU0H4d3e3MTX2rLapqqaiTnkbYFt+ yyEq5i4WriZPdG/09tAMtV28yLEIDoufFdy/HJr6N/PDxZDQtypprP55n4V4xfEn kSZ5JtwRuQEkncyxru3jGuS6rAEvbfQDYOl23d2yb0fwjnHXLAxwxz6ZeikeU3w7 dfAD4OfUiLvs/d4sk4Fj1IWjVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa03ryd n9hwJgNb8a+yi84f23OSMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REU2OC84MEIyRjNGODE1RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGty WDlxTnR0cldMTUZjaDFBX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfEskvrVN8WE+qS0PdRCoxxUrunaHNhvRYI1uYpSCStlsjyNuOLRz4 +3s0SLICmSsB1+zlysMObshLgZtktKAtvIPprpkfeC/o+mqzKttCngzIkfBy5IdX W++qeg7rx4QTCJiICT7FlywAMX89Kf7+J/qmEYmW7gmNDb3fdcDO3AvEzjMUnw7v 9l6u0UMz8MKw32/bV+FubNaeRtjphkDCJQP2Q6UWn1SU05zE8UFrGzEHzU2Z6LR3 +dkXQmVrLLI4zLaPOL5M2SjWHC81JpKi+K3Vbq929LU78kaXgjhw3/58E5FnbjpT aWYt45FxNLjbeHHR2zIC/t/eZNawO7ot -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:37 2025 by rpki-client