$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json) Hash identifier: CbCOBYCYgRSJcOyRueqCePHV8tDG1n9gCxL8pOhIWaQ= Subject key identifier: 8E:E7:42:8A:9E:9B:EC:B8:3E:29:A2:F7:D5:A4:59:87:E5:12:47:C5 Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft Manifest number: 052D Signing time: Sun 19 Oct 2025 01:16:26 +0000 Manifest this update: Sun 19 Oct 2025 01:16:25 +0000 Manifest next update: Sun 26 Oct 2025 01:16:25 +0000 Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: 0eiWucBMJ1smJPUfqP0onB9OTLcYZ+HR+2kjS4g6FP4=) 2: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: K6zEQIX3Xs70jZXyUBIkq7itCCV+/w4+T7TPTazGJDw=) 3: F719961A1A8611ECB908E939C4F9AE02.roa (hash: K4Tk1pgMDNh5SKenYzBLQtmFUIf8LUH33Tf6G2W39As=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Oct 19 01:16:25 2025 GMT Not After : Oct 26 01:16:25 2025 GMT Subject: CN=68f43be9-deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:28:2b:af:e1:04:8d:3d:48:24:3b:cf:74: 81:c8:f5:7c:18:f4:ea:0d:24:21:6c:23:ed:ee:30: 96:7a:15:c6:23:17:80:cb:f4:25:92:09:41:91:48: 32:bb:51:50:c0:1d:fa:8e:90:a4:7f:f3:72:88:08: 97:93:9c:6d:30:73:25:ce:22:ea:a9:30:f5:23:f7: 14:5f:5d:3a:35:47:02:7f:21:f5:e6:8f:b7:2a:14: 40:c9:cb:cd:b3:28:dd:78:ee:07:6c:74:1e:e0:21: 88:e3:f5:16:de:df:39:cf:7b:71:e5:52:b6:2a:70: 16:45:f4:89:1b:f8:0b:72:6f:09:04:cc:04:db:a7: 81:7e:ff:7c:21:61:64:32:be:52:6c:66:5e:04:91: 62:65:59:e0:b7:db:c5:e6:7f:c5:7d:0f:3d:33:dc: 78:2f:19:e2:fc:20:be:37:d4:1e:98:92:4f:02:7c: 02:52:0b:a7:cf:c7:a3:40:56:c5:f8:04:f1:b1:7a: 31:98:91:98:eb:c7:7a:02:cb:f0:49:b7:9c:7b:8b: 5b:0d:b0:3e:4f:46:7c:92:61:52:a5:7c:29:66:b3: 30:eb:25:e7:3c:bc:3a:f0:2a:c6:54:07:01:25:81: f8:85:e8:42:c7:d4:7c:80:38:fd:b1:70:35:32:5a: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:42:8A:9E:9B:EC:B8:3E:29:A2:F7:D5:A4:59:87:E5:12:47:C5 X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d6:33:db:59:7e:88:b6:de:4f:1e:f1:a8:db:f1:0c:07:0f: dd:df:1e:6f:d8:a9:25:f2:88:a5:fa:56:e7:6d:6f:d4:f8:af: 1b:62:4f:fb:8c:63:b7:d1:22:f0:a9:78:ed:9e:2b:29:5e:4a: cd:63:53:0f:b3:91:97:c7:28:ec:c3:75:7f:b4:8e:49:83:55: 1e:e7:c5:21:72:b2:94:2f:9d:39:c9:98:21:c8:ec:5d:67:e4: d5:84:5b:fc:e7:2e:5f:ef:67:1a:54:df:3d:44:2f:80:2d:bd: b4:20:28:29:87:6f:8c:65:03:63:11:94:16:00:e1:44:ae:e4: 52:e8:3f:36:d4:4b:36:24:3f:aa:94:5d:cc:0f:7f:31:a7:c4: ad:b4:bc:41:66:5b:0d:50:56:e5:1a:ab:87:51:86:e6:ca:e2: 1e:af:6a:19:94:43:6c:a1:10:6f:e4:5f:4a:ef:83:3a:81:2d: 70:80:d5:6c:07:6c:e3:e6:6c:69:89:ad:bd:15:3b:d3:a6:e0: 23:7b:e0:ef:46:7e:45:0f:28:2e:51:d3:5a:09:17:7b:ab:b9: ae:36:f4:d7:86:6e:1e:84:7d:7b:6b:b4:fa:f4:d5:b5:08:fc: d8:7b:ee:97:57:93:9e:5e:db:ea:79:79:f3:af:4a:3a:fd:92: 1d:5c:df:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjUxMDE5MDExNjI1WhcNMjUxMDI2MDExNjI1WjAYMRYwFAYD VQQDEw02OGY0M2JlOS1kZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI0oK6/hBI09SCQ7z3SByPV8GPTqDSQhbCPt7jCWehXGIxeAy/QlkglBkUgy u1FQwB36jpCkf/NyiAiXk5xtMHMlziLqqTD1I/cUX106NUcCfyH15o+3KhRAycvN syjdeO4HbHQe4CGI4/UW3t85z3tx5VK2KnAWRfSJG/gLcm8JBMwE26eBfv98IWFk Mr5SbGZeBJFiZVngt9vF5n/FfQ89M9x4Lxni/CC+N9QemJJPAnwCUgunz8ejQFbF +ATxsXoxmJGY68d6AsvwSbece4tbDbA+T0Z8kmFSpXwpZrMw6yXnPLw68CrGVAcB JYH4hehCx9R8gDj9sXA1MlpBtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7nQoqe m+y4Pimi99WkWYflEkfFMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL NExkdkVlQTNMT2xoaDNyWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa1jPbWX6Itt5PHvGo2/EMBw/d3x5v2Kkl8oil+lbnbW/U+K8bYk/7 jGO30SLwqXjtnispXkrNY1MPs5GXxyjsw3V/tI5Jg1Ue58UhcrKUL505yZghyOxd Z+TVhFv85y5f72caVN89RC+ALb20ICgph2+MZQNjEZQWAOFEruRS6D821Es2JD+q lF3MD38xp8SttLxBZlsNUFblGquHUYbmyuIer2oZlENsoRBv5F9K74M6gS1wgNVs B2zj5mxpia29FTvTpuAje+DvRn5FDyguUdNaCRd7q7muNvTXhm4ehH17a7T69NW1 CPzYe+6XV5OeXtvqeXnzr0o6/ZIdXN8Y -----END CERTIFICATE-----Generated at Mon Oct 20 23:12:05 2025 by rpki-client