$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft File: jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft (raw, json) Hash identifier: qPfYRqQT1KXQXs8dEPaaZHyeDJTmEjOJHWrN46R0HuI= Subject key identifier: CC:FB:57:C8:9A:4D:36:E9:0F:40:FC:A6:22:82:91:CA:60:73:48:6B Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1ACC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft Manifest number: 1AC5 Signing time: Sat 18 Oct 2025 15:55:47 +0000 Manifest this update: Sat 18 Oct 2025 15:55:46 +0000 Manifest next update: Sat 25 Oct 2025 15:55:46 +0000 Files and hashes: 1: jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl (hash: GO0CkPDmvbta45vhhS/bJZK9AWfeRM2Zife3BaBlaZ8=) 2: AFA37450139811EA807F1A26C4F9AE02.roa (hash: EvR5gfpmDfAVmSaNBVyf31LRk9wTqTU6OTSsCqxA5UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6860 (0x1acc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74, serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: Oct 18 15:55:46 2025 GMT Not After : Oct 25 15:55:46 2025 GMT Subject: CN=68f3b882-f607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:c6:c1:6c:e5:a1:53:4d:b4:d3:c0:37:bb: 25:63:5d:3c:3e:6a:90:82:d7:7c:71:9c:df:4f:c9: 1c:2e:67:33:8e:88:2f:4c:f6:1d:07:93:9b:f8:5a: 68:d8:2c:81:f5:3c:e1:6c:20:0f:e6:7b:88:77:ac: bf:e6:de:43:e0:92:c1:7f:37:1f:45:c1:94:26:5c: ee:a4:97:40:54:53:7c:2f:57:2c:c7:fe:65:f5:e1: 08:fd:3a:f0:57:f7:87:b7:1d:63:b1:8b:a8:4c:81: 27:55:82:d0:d5:6a:d5:29:50:d5:1b:98:ae:e7:a3: d8:78:ea:9a:df:77:e3:3e:0e:d1:63:3e:99:17:4d: 1b:f4:92:35:ce:92:d8:0b:a0:b7:29:b8:b1:64:af: d6:1a:e4:b5:13:8f:71:4d:07:e8:38:20:f0:0b:18: 8f:bd:2b:01:64:9a:65:06:f9:a7:bf:e9:89:99:92: da:e3:de:a0:3e:4b:92:72:50:c2:09:2d:b9:84:07: c7:85:af:81:bf:a1:ca:c3:7b:7d:71:1e:13:a6:3e: 0b:e4:dd:94:ef:89:57:bb:28:48:8a:f4:12:86:09: 28:8d:bd:7e:7d:d4:d0:f9:f9:74:0e:9c:8b:ae:94: 64:f0:8b:b7:3e:0d:79:d7:5c:02:f2:43:c4:98:ea: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FB:57:C8:9A:4D:36:E9:0F:40:FC:A6:22:82:91:CA:60:73:48:6B X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:5c:05:f9:cf:d4:cd:14:52:97:9b:56:87:56:c7:e7:3f: 0e:25:a3:24:e2:32:75:1e:45:3c:23:1c:67:f9:df:40:b0:6c: e4:e6:d4:fc:db:42:45:d7:1f:c4:12:60:c3:19:39:50:2b:87: 90:aa:a4:92:9f:18:4f:82:dd:4c:6a:8c:1e:46:6a:e9:ee:ad: f0:ed:f9:72:f4:58:2c:fd:55:0a:20:de:b0:72:22:c0:42:b9: 5b:62:c6:73:52:4d:16:76:58:dc:0b:2f:07:e3:0a:4c:b2:e3: 8b:d9:3e:60:f9:4c:d1:6b:7e:42:5a:c1:7a:88:7f:7b:31:0f: 78:a9:17:6f:37:c4:49:0c:9d:38:8e:cc:fd:ec:26:b9:41:01: a4:81:1f:22:7c:56:0b:42:ce:8d:38:d7:52:76:0d:1d:cb:4e: 19:07:4f:6f:07:65:bb:9c:46:6a:60:2a:b1:27:24:35:48:20: da:83:5d:dd:2e:70:f1:5c:d1:57:ac:ff:d8:74:0a:68:fc:e9: c3:3f:b9:97:5a:7f:a4:cf:f7:9d:44:bc:46:43:96:4d:b0:b7: ed:ce:a7:d8:88:86:18:d3:78:7b:8f:cf:32:a3:c9:cf:9e:19: 92:4c:0a:0e:7a:e5:74:b7:64:93:75:fe:d9:e0:de:1f:04:bf: a7:9d:93:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjUxMDE4MTU1NTQ2WhcNMjUxMDI1MTU1NTQ2WjAYMRYwFAYD VQQDEw02OGYzYjg4Mi1mNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya/GwWzloVNNtNPAN7slY108PmqQgtd8cZzfT8kcLmczjogvTPYdB5Ob+Fpo 2CyB9TzhbCAP5nuId6y/5t5D4JLBfzcfRcGUJlzupJdAVFN8L1csx/5l9eEI/Trw V/eHtx1jsYuoTIEnVYLQ1WrVKVDVG5iu56PYeOqa33fjPg7RYz6ZF00b9JI1zpLY C6C3KbixZK/WGuS1E49xTQfoOCDwCxiPvSsBZJplBvmnv+mJmZLa496gPkuSclDC CS25hAfHha+Bv6HKw3t9cR4Tpj4L5N2U74lXuyhIivQShgkojb1+fdTQ+fl0DpyL rpRk8Iu3Pg1511wC8kPEmOoRBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz7V8ia TTbpD0D8piKCkcpgc0hrMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0E3NC83NTNENzFFRTNBQjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5 SjdoT3N0VW1jTW9YVDV4RHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8VwF+c/UzRRSl5tWh1bH5z8OJaMk4jJ1HkU8Ixxn+d9AsGzk5tT8 20JF1x/EEmDDGTlQK4eQqqSSnxhPgt1MaoweRmrp7q3w7fly9Fgs/VUKIN6wciLA QrlbYsZzUk0WdljcCy8H4wpMsuOL2T5g+UzRa35CWsF6iH97MQ94qRdvN8RJDJ04 jsz97Ca5QQGkgR8ifFYLQs6NONdSdg0dy04ZB09vB2W7nEZqYCqxJyQ1SCDag13d LnDxXNFXrP/YdApo/OnDP7mXWn+kz/edRLxGQ5ZNsLftzqfYiIYY03h7j88yo8nP nhmSTAoOeuV0t2STdf7Z4N4fBL+nnZMb -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:00 2025 by rpki-client