$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft File: jenQdP88jVFUFevw8OVqwD7q3To.mft (raw, json) Hash identifier: d5hJ9zs9+NdyMP6l52QYHkraK0MNvq7dmiYcoU7oAUc= Subject key identifier: 04:F0:4E:25:0F:F9:69:D8:8A:D3:E6:B5:9E:CB:30:3F:2A:2B:DE:AB Authority key identifier: 8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A Certificate issuer: /CN=A91C9B37/serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 10:46:39 +0000 Manifest this update: Sun 19 Oct 2025 10:46:38 +0000 Manifest next update: Sun 26 Oct 2025 10:46:38 +0000 Files and hashes: 1: jenQdP88jVFUFevw8OVqwD7q3To.crl (hash: QZDwWedIYVAgEtCEvdwkr+HqJljjVPAYU/WtT1softU=) 2: 7EBD7FAA6DFD11F09A43321EC4F9AE02.roa (hash: tOvv14j7PVKjZOUCL/zHGwFCXfHBrWhMTrZ97/b78ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=8DE9D074FF3C8D515415EBF0F0E56AC03EEADD3A Validity Not Before: Oct 19 10:46:38 2025 GMT Not After : Oct 26 10:46:38 2025 GMT Subject: CN=68f4c18f-f2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:34:f0:92:7a:80:b8:f0:67:8a:36:49:65: 86:1c:f8:11:b2:22:a7:41:1d:be:57:5b:61:f6:5a: df:32:db:62:91:8f:90:b2:24:55:92:27:05:70:2f: 6e:3f:32:9a:0b:eb:35:a1:57:05:10:6f:63:53:33: df:d1:ce:43:f2:95:76:d8:3e:83:66:93:a2:96:e6: 78:05:b9:db:a8:b2:98:87:c4:bb:21:24:ff:54:31: ba:15:9f:77:03:12:29:7d:fc:82:98:62:e7:d3:ef: 1a:e1:5d:15:92:9a:98:97:13:e8:38:e9:f1:d9:80: d4:c4:16:bb:60:fa:93:6b:b3:61:1c:85:50:e9:a7: 00:1b:aa:51:08:db:78:b5:64:a1:d0:27:9a:aa:5f: df:e1:fc:05:1e:fc:a6:ca:5b:ae:2f:b3:c6:54:bb: 2a:32:73:f1:5b:5a:4f:7a:69:89:77:69:a7:88:60: 2c:b4:e3:32:ff:ff:e9:89:01:b6:73:e4:53:79:80: dd:e3:7f:35:c4:3f:6c:b7:46:50:99:7d:50:bf:03: e9:03:22:4e:98:a4:b3:cd:10:4f:7f:8b:5b:c0:a8: 59:d3:42:de:ef:3d:a6:5e:c7:f4:f5:18:66:cc:fc: b3:b0:d1:c1:ce:b2:8c:c9:60:34:43:3b:41:49:43: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F0:4E:25:0F:F9:69:D8:8A:D3:E6:B5:9E:CB:30:3F:2A:2B:DE:AB X509v3 Authority Key Identifier: keyid:8D:E9:D0:74:FF:3C:8D:51:54:15:EB:F0:F0:E5:6A:C0:3E:EA:DD:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jenQdP88jVFUFevw8OVqwD7q3To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/3D8AC5463CA311F08A495C2FC4F9AE02/jenQdP88jVFUFevw8OVqwD7q3To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:21:cd:ef:c3:48:6a:99:a4:02:ce:76:d6:18:ad:99:8b:61: cf:74:be:f3:b0:24:d5:02:56:5f:ae:e2:71:86:04:97:6f:57: c4:e5:1a:6e:21:2d:a9:5c:1c:b0:1a:ac:34:cf:f4:24:33:80: 07:c8:7e:a3:16:c4:09:5a:b0:ed:cb:f7:ad:29:9a:bd:1b:cb: 3e:49:d5:95:ca:6c:4f:49:95:a2:a3:7c:cb:64:39:cf:c1:9e: 7d:98:13:bc:59:16:c2:a0:08:37:4a:c1:63:28:dc:0e:ae:7c: f5:d8:95:fb:e6:8a:ed:a6:f4:cc:c6:0b:19:63:73:22:3f:cb: 46:cb:31:88:80:38:5a:4a:21:de:4a:8b:3f:6d:64:45:d8:65: b5:25:3a:8f:9c:8d:50:6b:04:c9:9f:6e:cf:ee:69:5f:40:f9: 20:81:cc:9f:6c:7a:de:0e:b3:86:49:4a:65:c0:af:3e:f2:e3: 3b:00:da:30:a1:d7:10:f4:11:c8:31:35:79:53:ea:6e:41:20: fd:3e:d2:d3:39:e9:95:3e:e6:37:1a:0c:78:b7:ca:25:11:ef: df:1c:52:97:b0:d7:d3:02:d3:eb:ae:1d:4a:ec:c8:81:f3:42: cc:18:4f:e2:d7:7c:af:35:17:9e:0b:1e:60:a5:b6:1a:f2:6d: 74:af:c4:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoOERFOUQwNzRGRjNDOEQ1MTU0MTVFQkYwRjBFNTZBQzAz RUVBREQzQTAeFw0yNTEwMTkxMDQ2MzhaFw0yNTEwMjYxMDQ2MzhaMBgxFjAUBgNV BAMTDTY4ZjRjMThmLWYyYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuWDTwknqAuPBnijZJZYYc+BGyIqdBHb5XW2H2Wt8y22KRj5CyJFWSJwVwL24/ MpoL6zWhVwUQb2NTM9/RzkPylXbYPoNmk6KW5ngFuduospiHxLshJP9UMboVn3cD Eil9/IKYYufT7xrhXRWSmpiXE+g46fHZgNTEFrtg+pNrs2EchVDppwAbqlEI23i1 ZKHQJ5qqX9/h/AUe/KbKW64vs8ZUuyoyc/FbWk96aYl3aaeIYCy04zL//+mJAbZz 5FN5gN3jfzXEP2y3RlCZfVC/A+kDIk6YpLPNEE9/i1vAqFnTQt7vPaZex/T1GGbM /LOw0cHOsozJYDRDO0FJQ415AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBPBOJQ/5 adiK0+a1nsswPyor3qswHwYDVR0jBBgwFoAUjenQdP88jVFUFevw8OVqwD7q3Tow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzNEOEFDNTQ2M0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZGVUZldnc4T1Zxd0Q3cTNU by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamVuUWRQODhqVkZVRmV2dzhPVnF3RDdxM1RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzNEOEFDNTQ2M0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL2plblFkUDg4alZG VUZldnc4T1Zxd0Q3cTNUby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM0hze/DSGqZpALOdtYYrZmLYc90vvOwJNUCVl+u4nGGBJdvV8TlGm4h LalcHLAarDTP9CQzgAfIfqMWxAlasO3L960pmr0byz5J1ZXKbE9JlaKjfMtkOc/B nn2YE7xZFsKgCDdKwWMo3A6ufPXYlfvmiu2m9MzGCxljcyI/y0bLMYiAOFpKId5K iz9tZEXYZbUlOo+cjVBrBMmfbs/uaV9A+SCBzJ9set4Os4ZJSmXArz7y4zsA2jCh 1xD0EcgxNXlT6m5BIP0+0tM56ZU+5jcaDHi3yiUR798cUpew19MC0+uuHUrsyIHz QswYT+LXfK81F54LHmClthrybXSvxHo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:42 2025 by rpki-client