$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: VZ+ev26NSdvTiQqSa2WxdQxq1eG1E3AiMOEZSR0T868= Subject key identifier: DA:51:9A:6B:5A:7A:EE:D6:8A:6D:7D:B5:D0:5E:DB:BD:29:D9:B8:D2 Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0C1B Signing time: Sat 18 Oct 2025 19:30:56 +0000 Manifest this update: Sat 18 Oct 2025 19:30:55 +0000 Manifest next update: Sat 25 Oct 2025 19:30:55 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: 1IwnA6ng3nFwoLhYqZblYKUwJNAEsdoAvUqGVFQEFlU=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Oct 18 19:30:55 2025 GMT Not After : Oct 25 19:30:55 2025 GMT Subject: CN=68f3eaf0-bbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:b6:2f:5c:d6:86:e5:be:5a:b9:ce:79:ca: 00:f5:d8:8a:a0:49:c0:51:dc:0c:0d:62:cf:cb:89: 40:c0:86:90:f8:27:61:64:23:05:1c:b3:c9:c5:c4: 9a:ee:71:95:a9:7f:e9:49:09:8d:b5:17:60:1e:b2: e1:51:98:c4:7c:48:ba:a2:ce:31:55:e7:ae:f7:9a: bf:4b:c3:a7:99:75:88:e9:10:a1:48:66:3b:ed:35: a1:83:13:55:3f:4e:db:e0:fc:39:b3:42:df:83:da: da:a2:c7:26:6b:b2:6f:08:1a:cd:e2:ed:47:6f:cb: d1:c2:9a:26:88:38:a8:6c:82:b3:c2:34:71:12:d1: be:c3:e5:ed:8f:d9:d6:48:09:e9:c6:d8:b0:ae:c8: f5:11:f7:53:43:de:65:d7:70:51:95:7b:e1:d0:ac: 82:ba:08:12:3a:ca:1d:86:b2:ee:f0:c6:4a:1c:ea: 88:5e:c5:f0:56:74:82:de:f4:1b:9a:55:8d:45:44: 57:6b:f7:1c:7c:b7:7c:01:43:c6:03:f3:0e:0e:f4: fd:e8:21:4a:61:3d:4f:08:f5:e8:07:b7:37:13:95: 7d:0f:bc:57:7f:fc:d6:c2:5f:b5:be:eb:dd:de:05: 68:11:bf:21:5c:fe:ed:42:08:fd:fd:5a:c4:35:42: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:51:9A:6B:5A:7A:EE:D6:8A:6D:7D:B5:D0:5E:DB:BD:29:D9:B8:D2 X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:07:ec:e8:4c:e4:9e:f1:77:37:04:b9:b0:86:57:18:fd:cf: 02:63:d4:db:2b:68:d2:b5:61:4b:d4:8d:3a:4a:30:cc:ad:c5: c3:1a:d8:1c:ad:cf:97:51:16:f6:e5:ca:c9:bf:26:5f:5d:7d: 3f:36:9f:7e:21:81:1e:87:7b:89:34:5a:04:ef:de:53:c8:32: 5b:8d:ee:8a:e6:8f:1a:d8:85:ba:47:cb:32:78:ec:ce:a3:cf: 2a:68:6e:cd:3d:6b:f0:e2:94:00:f9:47:55:69:88:57:83:f7: f7:3a:3e:4a:1b:a2:32:3c:52:26:9c:60:69:93:e2:bb:57:ec: 1f:19:4b:60:a9:e0:61:0e:15:52:1f:3b:aa:3b:23:f7:23:e4: c4:02:30:65:d5:ce:90:79:00:58:b2:b3:65:e6:06:2b:54:63: c9:8e:a3:f7:90:c0:74:07:92:cd:6b:d1:8c:53:e7:0f:02:41: 06:91:89:71:ee:9e:39:e0:0d:35:32:fe:f2:d7:8d:19:ae:cf: 84:39:55:83:31:73:99:bc:c2:af:e2:2a:54:95:4f:18:b9:ed: dd:b3:fb:aa:a2:6c:43:70:99:31:c2:99:11:91:6e:3b:53:0b: a5:b8:c3:5e:3f:f8:95:d7:62:81:64:6a:87:cc:af:81:87:ef: 44:25:5c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUxMDE4MTkzMDU1WhcNMjUxMDI1MTkzMDU1WjAYMRYwFAYD VQQDEw02OGYzZWFmMC1iYmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwve2L1zWhuW+WrnOecoA9diKoEnAUdwMDWLPy4lAwIaQ+CdhZCMFHLPJxcSa 7nGVqX/pSQmNtRdgHrLhUZjEfEi6os4xVeeu95q/S8OnmXWI6RChSGY77TWhgxNV P07b4Pw5s0Lfg9raoscma7JvCBrN4u1Hb8vRwpomiDiobIKzwjRxEtG+w+Xtj9nW SAnpxtiwrsj1EfdTQ95l13BRlXvh0KyCuggSOsodhrLu8MZKHOqIXsXwVnSC3vQb mlWNRURXa/ccfLd8AUPGA/MODvT96CFKYT1PCPXoB7c3E5V9D7xXf/zWwl+1vuvd 3gVoEb8hXP7tQgj9/VrENUJUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpRmmta eu7Wim19tdBe270p2bjSMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtB+zoTOSe8Xc3BLmwhlcY/c8CY9TbK2jStWFL1I06SjDMrcXDGtgc rc+XURb25crJvyZfXX0/Np9+IYEeh3uJNFoE795TyDJbje6K5o8a2IW6R8syeOzO o88qaG7NPWvw4pQA+UdVaYhXg/f3Oj5KG6IyPFImnGBpk+K7V+wfGUtgqeBhDhVS HzuqOyP3I+TEAjBl1c6QeQBYsrNl5gYrVGPJjqP3kMB0B5LNa9GMU+cPAkEGkYlx 7p454A01Mv7y140Zrs+EOVWDMXOZvMKv4ipUlU8Yue3ds/uqomxDcJkxwpkRkW47 UwuluMNeP/iV12KBZGqHzK+Bh+9EJVx7 -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:05 2025 by rpki-client