$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft File: jwaGnO_NXCcjEy4--c23pGHQGxk.mft (raw, json) Hash identifier: gUFZMgtE2cyaYBc93RY1w0Qxr4HkuBCRj1hWhZok0g0= Subject key identifier: 21:A4:F2:E1:1C:26:40:62:61:DE:F6:A9:E9:45:CD:09:40:16:76:09 Authority key identifier: 8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 Certificate issuer: /CN=A91CD1A2/serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft Manifest number: 0160 Signing time: Sun 19 Oct 2025 06:49:53 +0000 Manifest this update: Sun 19 Oct 2025 06:49:53 +0000 Manifest next update: Sun 26 Oct 2025 06:49:53 +0000 Files and hashes: 1: jwaGnO_NXCcjEy4--c23pGHQGxk.crl (hash: 3CGmaJC7JZ/OppyTjIVFRDufwTniRWrRdMTuajRAbaU=) 2: 883D22EE9B3E11EE92E35D68C4F9AE02.roa (hash: MD/nzbD2nOVlPocaRCfyouATKmI9+KQw4/brLtSFFd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=8F06869CEFCD5C2723132E3EF9CDB7A461D01B19 Validity Not Before: Oct 19 06:49:53 2025 GMT Not After : Oct 26 06:49:53 2025 GMT Subject: CN=68f48a11-b5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:2d:b8:21:d5:64:cb:7e:8c:89:3b:1a:7d: e0:b9:82:0b:5a:12:8b:71:46:e4:2a:ec:86:7a:96: a9:50:6e:eb:79:2d:31:7c:54:f5:d8:30:54:3c:88: 6c:77:21:05:d5:1d:39:58:61:b2:9d:8e:74:d6:cd: fb:11:8a:85:7d:94:ab:f1:97:f6:d9:91:96:bd:54: 12:1d:3e:e0:5f:d3:63:30:84:6a:d9:27:b2:71:9c: 58:da:10:7a:4a:5c:af:48:d5:39:97:e5:5c:a8:8a: a7:f1:86:a2:f2:8b:5c:e5:a2:45:4f:2d:be:8d:bb: d3:7d:a8:84:6c:3c:ec:18:cf:74:5f:3e:c4:32:34: 30:6a:8b:7a:2d:55:d7:a9:6d:36:71:51:19:f2:81: 5d:74:b0:09:18:77:5f:48:a6:3d:43:21:37:02:5f: ef:09:6d:60:8a:f8:ac:7d:f1:94:9b:44:2b:96:f4: d1:94:4b:5c:6c:34:9c:a0:76:45:62:a4:0b:41:03: 86:5e:54:21:1e:a8:dc:23:67:f4:2d:b0:81:26:6d: 10:e9:81:65:44:d8:4c:d5:16:67:4e:88:a1:5c:0a: 2c:1b:31:07:7c:9c:68:e2:18:ca:3e:cc:08:65:d4: 6a:ce:4a:2e:cb:06:15:2c:4f:f2:de:fe:9c:3a:32: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:F2:E1:1C:26:40:62:61:DE:F6:A9:E9:45:CD:09:40:16:76:09 X509v3 Authority Key Identifier: keyid:8F:06:86:9C:EF:CD:5C:27:23:13:2E:3E:F9:CD:B7:A4:61:D0:1B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwaGnO_NXCcjEy4--c23pGHQGxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/EFE0404A9B3C11EEB3FCAD49C4F9AE02/jwaGnO_NXCcjEy4--c23pGHQGxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ca:e1:6f:9e:59:c6:2a:7d:9a:ed:fd:63:ee:3d:25:af:09: 18:95:9d:83:da:f8:b7:bf:e2:4f:f8:f6:af:9e:6e:32:59:25: 50:7e:fa:5c:65:cd:8d:3b:62:d8:33:d1:9c:e2:1b:8b:70:d7: 1c:fe:ae:b3:b4:54:c4:06:66:4e:b7:7f:9d:a2:24:b7:ac:51: 05:89:8a:4a:77:30:e4:de:34:be:b9:ef:61:24:72:fc:66:e3: 0d:29:8d:7d:d3:8e:bd:49:0a:57:73:42:0a:6d:51:3f:63:5e: 3c:f2:a9:7f:18:e9:5a:a8:a4:f2:6c:5c:14:00:97:50:94:60: dd:a0:5b:d9:ff:9b:88:b1:84:16:58:43:ab:6d:60:d7:7f:63: 19:97:ea:41:01:66:63:44:c0:5b:68:15:da:e6:a6:f7:a1:f5: 22:3e:a4:2e:12:46:e0:c2:c1:3f:68:23:62:1d:5e:94:19:d2: 94:aa:d6:8d:22:3d:91:db:a2:44:53:1a:c6:36:a9:3a:13:c0: a2:2a:54:80:26:89:22:58:0f:9f:3b:e6:09:0c:14:1d:45:2a: 80:a6:28:87:7d:ce:ef:01:49:95:28:89:01:b7:d1:28:f4:b2: 66:d1:ed:37:ad:6b:29:ee:b1:a5:7a:e0:76:3f:0b:66:1c:d5: bf:cc:df:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKDhGMDY4NjlDRUZDRDVDMjcyMzEzMkUzRUY5Q0RCN0E0 NjFEMDFCMTkwHhcNMjUxMDE5MDY0OTUzWhcNMjUxMDI2MDY0OTUzWjAYMRYwFAYD VQQDEw02OGY0OGExMS1iNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHYtuCHVZMt+jIk7Gn3guYILWhKLcUbkKuyGepapUG7reS0xfFT12DBUPIhs dyEF1R05WGGynY501s37EYqFfZSr8Zf22ZGWvVQSHT7gX9NjMIRq2SeycZxY2hB6 SlyvSNU5l+VcqIqn8Yai8otc5aJFTy2+jbvTfaiEbDzsGM90Xz7EMjQwaot6LVXX qW02cVEZ8oFddLAJGHdfSKY9QyE3Al/vCW1givisffGUm0QrlvTRlEtcbDScoHZF YqQLQQOGXlQhHqjcI2f0LbCBJm0Q6YFlRNhM1RZnToihXAosGzEHfJxo4hjKPswI ZdRqzkouywYVLE/y3v6cOjLgMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGk8uEc JkBiYd72qelFzQlAFnYJMB8GA1UdIwQYMBaAFI8GhpzvzVwnIxMuPvnNt6Rh0BsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi9FRkUwNDA0QTlC M0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhDY2pFeTQtLWMyM3BHSFFH eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p3YUduT19OWENjakV5NC0tYzIzcEdIUUd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi9FRkUwNDA0QTlCM0MxMUVFQjNGQ0FENDlDNEY5QUUwMi9qd2FHbk9fTlhD Y2pFeTQtLWMyM3BHSFFHeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYyuFvnlnGKn2a7f1j7j0lrwkYlZ2D2vi3v+JP+Pavnm4yWSVQfvpc Zc2NO2LYM9Gc4huLcNcc/q6ztFTEBmZOt3+doiS3rFEFiYpKdzDk3jS+ue9hJHL8 ZuMNKY190469SQpXc0IKbVE/Y1488ql/GOlaqKTybFwUAJdQlGDdoFvZ/5uIsYQW WEOrbWDXf2MZl+pBAWZjRMBbaBXa5qb3ofUiPqQuEkbgwsE/aCNiHV6UGdKUqtaN Ij2R26JEUxrGNqk6E8CiKlSAJokiWA+fO+YJDBQdRSqApiiHfc7vAUmVKIkBt9Eo 9LJm0e03rWsp7rGleuB2PwtmHNW/zN+Z -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:40 2025 by rpki-client