$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: 5c7+vCVekdQe0oFRsBD1C97CBKDl3AVzcZFUFkAhNB4= Subject key identifier: B7:57:6E:9C:B9:1F:07:34:83:A7:92:1F:B5:36:05:0B:62:D1:50:47 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0EC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0EB4 Signing time: Sat 18 Oct 2025 18:16:46 +0000 Manifest this update: Sat 18 Oct 2025 18:16:45 +0000 Manifest next update: Sat 25 Oct 2025 18:16:45 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: cv4wbhuYYBmRIFqjlP/aBgt+Q2d23apKKKan4UUhvyY=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3779 (0xec3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Oct 18 18:16:45 2025 GMT Not After : Oct 25 18:16:45 2025 GMT Subject: CN=68f3d98d-5c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:a0:f6:72:d2:99:3d:a0:ff:b8:56:61:cc: 29:ee:e6:67:bb:57:d8:f2:d6:29:6c:3c:4c:da:b6: 94:31:eb:76:b0:da:92:5d:ac:d6:06:13:f4:7c:de: 40:ae:c5:89:e5:8c:e5:72:19:a9:de:52:2a:27:26: 59:f8:32:f4:df:37:81:0d:b7:8b:f9:8b:a8:90:ff: 78:eb:65:bc:40:6b:1b:10:2a:be:d8:24:ed:86:2e: 89:32:f1:5c:2f:42:2e:6b:7b:e9:ba:7c:77:17:35: 77:b6:c1:0a:aa:e2:d9:66:b1:55:d7:c6:36:e6:49: fc:36:98:de:6e:3f:0f:42:73:56:52:f2:25:0b:68: fa:43:f5:b2:59:2b:43:e8:a9:79:11:42:0f:d2:b9: 60:05:c0:82:4e:e2:39:68:3a:d1:53:5f:8a:42:97: a9:7b:11:21:68:21:16:64:d8:88:8d:d4:44:f4:53: ad:99:f0:52:59:27:dd:84:9d:d8:42:97:8e:3d:25: 50:07:50:88:ae:98:be:9e:b8:2b:83:28:61:70:b9: c7:4c:99:6c:2e:a9:e9:33:66:92:da:c4:d1:14:f4: 34:3b:33:e9:3a:b3:9a:cf:44:9d:3e:d7:d3:fe:bb: 8e:cd:fe:fc:29:ae:b9:fc:c9:e0:5b:b6:e2:a4:c7: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:57:6E:9C:B9:1F:07:34:83:A7:92:1F:B5:36:05:0B:62:D1:50:47 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:59:18:f5:f0:ef:ad:19:e0:34:b4:e5:21:87:a5:bd:68:62: 30:f9:3c:04:fb:52:6a:d9:23:a6:9a:6e:97:c6:ab:59:1e:07: 23:49:28:04:c2:10:d5:29:46:35:eb:0b:28:2e:a3:47:06:30: c8:3b:08:d1:27:e9:80:12:a6:32:59:5f:eb:47:e9:c6:4a:55: 68:f7:62:dd:db:75:8f:3b:36:e3:b9:aa:c6:01:bd:93:8a:55: 52:1f:20:39:d4:41:fc:ea:eb:68:79:b8:16:7d:81:30:12:6b: 26:0a:fd:2f:54:15:a8:e6:f6:a4:b6:10:83:b9:30:05:7c:43: f1:6e:be:20:81:75:d2:2d:56:19:7d:e7:5e:d7:7b:62:55:b0: 12:f3:92:f0:b3:c6:88:92:a7:d1:e1:b1:a6:77:9a:03:de:e5: 40:fe:39:d6:31:72:4c:81:b0:71:d1:6b:73:78:62:6e:57:2d: a4:52:9a:38:90:58:f6:51:78:25:d8:5b:8b:9e:e6:8b:f7:4a: 29:85:5d:6a:13:1d:ca:9c:75:4f:8e:1e:c4:39:c4:6e:95:76: 4b:03:74:07:7b:c4:88:df:2e:16:ac:78:c0:01:91:f3:83:62: a0:b3:c9:8d:cc:17:0f:b2:7a:d1:66:b5:49:d9:e8:85:be:8d: 1f:9d:12:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUxMDE4MTgxNjQ1WhcNMjUxMDI1MTgxNjQ1WjAYMRYwFAYD VQQDEw02OGYzZDk4ZC01YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYSg9nLSmT2g/7hWYcwp7uZnu1fY8tYpbDxM2raUMet2sNqSXazWBhP0fN5A rsWJ5Yzlchmp3lIqJyZZ+DL03zeBDbeL+YuokP9462W8QGsbECq+2CTthi6JMvFc L0Iua3vpunx3FzV3tsEKquLZZrFV18Y25kn8Npjebj8PQnNWUvIlC2j6Q/WyWStD 6Kl5EUIP0rlgBcCCTuI5aDrRU1+KQpepexEhaCEWZNiIjdRE9FOtmfBSWSfdhJ3Y QpeOPSVQB1CIrpi+nrgrgyhhcLnHTJlsLqnpM2aS2sTRFPQ0OzPpOrOaz0SdPtfT /ruOzf78Ka65/MngW7bipMdcGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdXbpy5 Hwc0g6eSH7U2BQti0VBHMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUWRj18O+tGeA0tOUhh6W9aGIw+TwE+1Jq2SOmmm6XxqtZHgcjSSgE whDVKUY16wsoLqNHBjDIOwjRJ+mAEqYyWV/rR+nGSlVo92Ld23WPOzbjuarGAb2T ilVSHyA51EH86utoebgWfYEwEmsmCv0vVBWo5vakthCDuTAFfEPxbr4ggXXSLVYZ fede13tiVbAS85Lws8aIkqfR4bGmd5oD3uVA/jnWMXJMgbBx0WtzeGJuVy2kUpo4 kFj2UXgl2FuLnuaL90ophV1qEx3KnHVPjh7EOcRulXZLA3QHe8SI3y4WrHjAAZHz g2Kgs8mNzBcPsnrRZrVJ2eiFvo0fnRLD -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:21 2025 by rpki-client