$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: QOlYguWNEwqhAeWajeBLoRpCGyIoUOzLdG08xXwCdI4= Subject key identifier: D1:51:B0:74:CE:65:FF:FF:7A:29:46:89:DD:15:C7:5C:BE:DA:ED:08 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 01C9 Signing time: Sun 19 Oct 2025 05:22:16 +0000 Manifest this update: Sun 19 Oct 2025 05:22:15 +0000 Manifest next update: Sun 26 Oct 2025 05:22:15 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: X4+B+UeXeAg16BadDochtNW8H9iHOQ7L4CNOsl6acE4=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: inMm5nvfP57Hl+fyHfmB7fCT1GborVKT6HpM1mM5xkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Oct 19 05:22:15 2025 GMT Not After : Oct 26 05:22:15 2025 GMT Subject: CN=68f47587-c32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:0f:00:fc:92:be:0c:ea:be:17:a5:d0:58: 18:41:33:e0:14:19:a4:d9:dc:aa:dc:11:41:cb:a2: 5f:65:d6:88:a7:19:79:bf:68:5e:36:9d:94:9e:31: 22:44:f0:ea:58:09:ad:76:c6:b2:e7:49:b9:21:cf: 2f:18:3a:6c:8d:60:da:3f:eb:d0:0e:70:6b:e3:16: e7:f0:3a:06:30:e8:6f:f5:8d:66:b8:b9:aa:c0:83: 8d:a2:e4:ee:54:ee:1d:42:e3:00:74:53:30:77:93: 58:60:de:59:42:70:bf:c7:3a:2e:24:33:64:42:00: 99:3a:22:cd:eb:d8:18:67:05:27:78:97:c3:b5:7f: 12:41:5c:c2:06:81:39:9d:51:d1:26:2d:a1:fb:c6: 43:ac:f9:0f:ca:5c:c9:ca:77:3e:e9:4a:46:9a:ce: 71:ca:5f:0e:9b:1d:d0:fa:86:a1:e3:b6:30:97:48: 83:e3:49:eb:b6:ba:0e:5b:64:20:64:78:dc:b7:8e: 80:a1:61:a4:92:1e:ad:62:05:91:2b:6d:63:9a:17: df:43:bb:49:67:0c:51:f1:4a:5c:fc:24:1d:42:45: c7:96:a7:e8:cb:af:3c:8c:cb:e0:cb:58:92:f8:4a: 0f:c0:80:92:f4:61:57:cc:56:d9:9f:a6:2f:81:c8: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:51:B0:74:CE:65:FF:FF:7A:29:46:89:DD:15:C7:5C:BE:DA:ED:08 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c4:70:29:ce:de:31:aa:64:1b:ef:6d:50:fd:54:4f:99:60: 79:f8:09:e4:65:29:a3:6b:4a:73:d4:a1:6f:ce:38:60:47:d7: 60:45:b5:4e:be:fc:48:98:5b:d6:a1:d0:a9:4a:66:09:af:48: f5:05:aa:af:eb:80:75:5e:c1:28:37:c6:df:22:5b:96:31:90: 1e:ae:ed:3c:8d:f9:84:46:e5:9d:13:f6:03:19:23:e3:94:80: be:ee:75:d0:43:10:f0:a2:09:08:45:84:19:e3:fa:d6:c7:02: 79:93:7f:fe:b5:42:49:1b:0d:9a:bb:90:21:ff:39:00:46:01: 35:7d:8f:f8:03:08:5c:c1:22:fe:97:b5:f1:8b:7b:34:ee:dd: 6a:03:6b:00:24:23:94:28:d3:68:a2:39:6f:2c:46:0f:55:62: ae:78:22:76:f1:f8:4c:5f:b5:e5:c1:a9:c0:09:bb:76:5f:18: 10:da:81:f0:7b:e2:00:dd:01:70:57:2d:e6:b1:06:ca:17:5b: 9c:46:5f:0d:76:a2:da:a6:53:85:c7:f8:ce:8b:0f:66:ec:23: d4:f7:8f:72:c8:3f:88:27:1b:70:86:2b:a5:2f:74:56:f9:9f: d2:37:3a:6c:4b:2a:0e:4f:90:33:d5:2a:11:4b:ae:b2:fa:ee: 89:e3:71:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUxMDE5MDUyMjE1WhcNMjUxMDI2MDUyMjE1WjAYMRYwFAYD VQQDEw02OGY0NzU4Ny1jMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIMPAPySvgzqvhel0FgYQTPgFBmk2dyq3BFBy6JfZdaIpxl5v2heNp2UnjEi RPDqWAmtdsay50m5Ic8vGDpsjWDaP+vQDnBr4xbn8DoGMOhv9Y1muLmqwIONouTu VO4dQuMAdFMwd5NYYN5ZQnC/xzouJDNkQgCZOiLN69gYZwUneJfDtX8SQVzCBoE5 nVHRJi2h+8ZDrPkPylzJync+6UpGms5xyl8Omx3Q+oah47Ywl0iD40nrtroOW2Qg ZHjct46AoWGkkh6tYgWRK21jmhffQ7tJZwxR8Upc/CQdQkXHlqfoy688jMvgy1iS +EoPwICS9GFXzFbZn6YvgcijgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFRsHTO Zf//eilGid0Vx1y+2u0IMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9xHApzt4xqmQb721Q/VRPmWB5+AnkZSmja0pz1KFvzjhgR9dgRbVO vvxImFvWodCpSmYJr0j1Baqv64B1XsEoN8bfIluWMZAeru08jfmERuWdE/YDGSPj lIC+7nXQQxDwogkIRYQZ4/rWxwJ5k3/+tUJJGw2au5Ah/zkARgE1fY/4AwhcwSL+ l7Xxi3s07t1qA2sAJCOUKNNoojlvLEYPVWKueCJ28fhMX7XlwanACbt2XxgQ2oHw e+IA3QFwVy3msQbKF1ucRl8NdqLaplOFx/jOiw9m7CPU949yyD+IJxtwhiulL3RW +Z/SNzpsSyoOT5Az1SoRS66y+u6J43GI -----END CERTIFICATE-----Generated at Mon Oct 20 21:38:46 2025 by rpki-client