$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft File: jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft (raw, json) Hash identifier: wkn7rjXCJtUaQTde7Bc9y/k2cUEvrkKd9CoulScKbHk= Subject key identifier: A0:40:7A:21:67:30:81:DE:A2:9B:A2:7A:E5:E6:D6:20:E6:90:52:18 Authority key identifier: 8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF Certificate issuer: /CN=A91CEE6D/serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft Manifest number: 0F Signing time: Sun 19 Oct 2025 11:31:53 +0000 Manifest this update: Sun 19 Oct 2025 11:31:52 +0000 Manifest next update: Sun 26 Oct 2025 11:31:52 +0000 Files and hashes: 1: jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl (hash: I61tJf5BonvNul7Zip+wFKzJdhxnObH1ohWEVFpZ+FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=8CD3E1BCFC77888873F6F586F64A6431A3B56CFF Validity Not Before: Oct 19 11:31:52 2025 GMT Not After : Oct 26 11:31:52 2025 GMT Subject: CN=68f4cc29-d2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:53:22:bf:48:49:87:0d:37:0c:b9:de:cd:05: fe:79:51:eb:67:18:55:63:d2:0a:92:40:8e:ba:8f: 85:6e:a8:eb:02:08:a7:f9:65:b2:5e:ba:14:ba:74: 0b:cc:d0:a1:9b:e5:73:6f:a5:fb:74:c9:78:65:fa: cb:c0:06:e2:d2:d3:1e:44:7f:d1:a6:8b:fd:5d:9c: f9:d2:3d:a9:6b:a2:b4:43:0b:6c:d3:de:36:d1:05: 2b:47:b7:27:b6:00:5b:64:e7:36:37:6d:4e:9c:17: 32:40:f0:06:04:97:eb:b7:8b:40:6b:f5:c3:7b:88: df:76:63:f8:97:a3:08:fc:60:6c:db:0e:0c:c9:c3: 79:7a:18:67:04:fc:37:c2:d3:8f:8f:14:b8:5f:31: e3:0c:ee:53:f1:f8:17:3a:85:07:29:f4:59:a2:19: 16:bd:60:f2:ce:62:24:55:a3:6d:7a:ea:3f:ac:1b: 68:34:16:01:15:e7:e1:c8:26:29:3c:88:80:06:03: 50:b8:ad:b0:60:b7:f1:22:b4:8f:7b:86:bd:3c:b6: 17:81:77:16:67:53:e8:bd:50:fc:77:0b:c9:9e:7f: c7:01:c6:61:41:20:4d:45:11:27:f0:93:ce:8f:2a: 38:b7:57:51:c4:c6:0b:38:3d:91:7f:96:94:b7:ce: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:7A:21:67:30:81:DE:A2:9B:A2:7A:E5:E6:D6:20:E6:90:52:18 X509v3 Authority Key Identifier: keyid:8C:D3:E1:BC:FC:77:88:88:73:F6:F5:86:F6:4A:64:31:A3:B5:6C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNPhvPx3iIhz9vWG9kpkMaO1bP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/5A29AB1E976511F0923A670CC4F9AE02/jNPhvPx3iIhz9vWG9kpkMaO1bP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:47:3e:6e:74:b6:e8:4d:d3:43:0a:37:27:fa:b5:6f:d3:e5: 95:e7:9b:a2:c2:91:8b:89:5a:0b:3b:5a:bc:ee:a1:54:c7:a7: 7d:0e:c7:7f:42:de:f9:8a:ce:e7:61:11:3b:fa:7f:7c:41:d5: 56:bf:c8:bf:b4:d6:a0:a1:ae:e0:76:2d:20:ad:85:11:1a:fd: de:92:8a:ef:0a:3e:c3:73:7a:51:12:05:a8:6b:c7:2a:67:a1: e3:80:2e:71:dc:ec:9f:07:65:46:cf:bd:83:f2:08:38:0a:63: 12:46:b8:18:be:8b:7b:72:d2:98:41:3a:65:84:c6:ca:fc:24: 0f:02:67:ce:31:27:d2:2a:58:fe:c2:75:cd:5b:4f:e7:82:6e: 85:31:fb:07:fb:87:fa:05:1f:a9:00:a3:3b:10:cc:cf:97:f8: 40:c9:34:7f:97:ae:8d:aa:4b:8b:30:6a:8d:25:af:e7:34:10: 67:f0:50:34:49:0a:75:b2:dc:87:e6:17:b4:5d:13:0f:44:ca: 7e:4a:87:e5:76:8a:0d:71:6b:3a:26:84:d9:d3:13:c6:64:ef: 8a:24:6f:1a:d8:18:1e:b9:02:81:52:e4:61:54:bd:f8:64:ea: af:e4:02:a5:96:f0:cd:77:7d:2b:e6:f2:b7:5e:06:9b:76:68: 04:f9:0e:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoOENEM0UxQkNGQzc3ODg4ODczRjZGNTg2RjY0QTY0MzFB M0I1NkNGRjAeFw0yNTEwMTkxMTMxNTJaFw0yNTEwMjYxMTMxNTJaMBgxFjAUBgNV BAMTDTY4ZjRjYzI5LWQyZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXUyK/SEmHDTcMud7NBf55UetnGFVj0gqSQI66j4VuqOsCCKf5ZbJeuhS6dAvM 0KGb5XNvpft0yXhl+svABuLS0x5Ef9Gmi/1dnPnSPalrorRDC2zT3jbRBStHtye2 AFtk5zY3bU6cFzJA8AYEl+u3i0Br9cN7iN92Y/iXowj8YGzbDgzJw3l6GGcE/DfC 04+PFLhfMeMM7lPx+Bc6hQcp9FmiGRa9YPLOYiRVo2166j+sG2g0FgEV5+HIJik8 iIAGA1C4rbBgt/EitI97hr08theBdxZnU+i9UPx3C8mef8cBxmFBIE1FESfwk86P Kji3V1HExgs4PZF/lpS3zt4TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoEB6IWcw gd6im6J65ebWIOaQUhgwHwYDVR0jBBgwFoAUjNPhvPx3iIhz9vWG9kpkMaO1bP8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzVBMjlBQjFFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUloejl2V0c5a3BrTWFPMWJQ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5QaHZQeDNpSWh6OXZXRzlrcGtNYU8xYlA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzVBMjlBQjFFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL2pOUGh2UHgzaUlo ejl2V0c5a3BrTWFPMWJQOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9HPm50tuhN00MKNyf6tW/T5ZXnm6LCkYuJWgs7WrzuoVTHp30Ox39C 3vmKzudhETv6f3xB1Va/yL+01qChruB2LSCthREa/d6Siu8KPsNzelESBahrxypn oeOALnHc7J8HZUbPvYPyCDgKYxJGuBi+i3ty0phBOmWExsr8JA8CZ84xJ9IqWP7C dc1bT+eCboUx+wf7h/oFH6kAozsQzM+X+EDJNH+Xro2qS4swao0lr+c0EGfwUDRJ CnWy3IfmF7RdEw9Eyn5Kh+V2ig1xazomhNnTE8Zk74okbxrYGB65AoFS5GFUvfhk 6q/kAqWW8M13fSvm8rdeBpt2aAT5Dno= -----END CERTIFICATE-----Generated at Mon Oct 20 10:11:03 2025 by rpki-client