$ rpki-client -vvf rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft File: jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft (raw, json) Hash identifier: hUuoKDMhzGaTGUy+0ZtXti64ithMZW+WYdO1kvaBaJs= Subject key identifier: 27:54:FC:15:80:C3:26:95:BB:5B:FF:D4:B5:D9:D9:62:FA:FA:83:F8 Authority key identifier: 8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C Certificate issuer: /CN=A91D190A/serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft Manifest number: 0735 Signing time: Sat 18 Oct 2025 23:10:29 +0000 Manifest this update: Sat 18 Oct 2025 23:10:29 +0000 Manifest next update: Sat 25 Oct 2025 23:10:29 +0000 Files and hashes: 1: jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl (hash: HqHVLvamEnwEOG4UiiblAtH0ij57F1GUSvkfS7XDJus=) 2: 4153A4B6A55C11EE9D833C0EC4F9AE02.roa (hash: WXc8/KOS9TX2lE7Vv9xqmJ2kHbWej8tocOb7UBLG2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D190A, serialNumber=8E70D3A5240E3388A3F1C0D8F72D8F8AE159C46C Validity Not Before: Oct 18 23:10:29 2025 GMT Not After : Oct 25 23:10:29 2025 GMT Subject: CN=68f41e65-1355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:bb:9f:26:42:5c:f8:95:d5:f5:eb:73:fd: 46:55:36:03:12:46:f9:cf:7f:58:47:68:55:65:07: 82:18:6d:e6:61:c4:31:ff:52:0b:4f:33:6c:8f:68: a6:e0:62:54:b1:18:ca:4f:81:4f:ca:0f:18:3e:bb: 37:df:ea:20:b3:54:97:82:56:bf:2d:5f:eb:8d:66: 58:5d:64:24:06:e8:76:37:ee:9c:f2:a8:b4:c2:13: 1c:2f:25:d4:5b:c6:7f:94:93:ec:3b:ef:50:3b:40: 89:55:d5:a4:c6:9f:dc:cc:58:57:ef:50:72:1c:c5: 46:ed:a7:76:c4:a9:1f:8a:1f:22:8d:10:6e:7a:5d: 5e:fe:09:2b:d2:fe:41:0a:e1:56:e4:f2:d0:90:66: e5:7e:76:d5:a7:a4:09:45:64:38:f5:79:a2:02:c2: 7a:ee:4a:99:ce:f0:29:64:e7:b9:54:3a:95:f5:6a: ab:f2:67:fd:d8:30:df:20:1e:95:3c:e7:8f:f1:ed: 2a:45:f5:bc:f1:fa:9d:9d:4a:c9:a0:31:fc:df:50: a8:04:fd:3d:ca:da:f0:84:c2:96:a4:8e:8d:98:66: 05:1e:61:79:a3:63:18:27:11:a0:3d:3f:88:70:32: b1:bb:f8:7a:61:ca:52:27:a6:08:c8:0e:42:89:6b: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:FC:15:80:C3:26:95:BB:5B:FF:D4:B5:D9:D9:62:FA:FA:83:F8 X509v3 Authority Key Identifier: keyid:8E:70:D3:A5:24:0E:33:88:A3:F1:C0:D8:F7:2D:8F:8A:E1:59:C4:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jnDTpSQOM4ij8cDY9y2PiuFZxGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D190A/071C4DE4500E11EBA73A632BC4F9AE02/jnDTpSQOM4ij8cDY9y2PiuFZxGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1f:3a:ed:cf:50:9d:ed:7a:d5:12:a2:da:61:ce:9c:63:da: e9:24:cf:37:d8:31:9b:02:dd:b3:10:f2:ef:83:21:a5:5a:47: d6:07:5a:15:8f:73:65:2f:61:6a:20:6e:b0:48:8e:10:c5:a7: 5f:62:dc:6c:e7:e7:18:e1:1e:d4:d2:64:17:11:01:30:1c:0a: 4b:ff:c3:ad:98:11:8d:8c:e9:76:8d:00:c7:c5:39:62:d9:75: b3:3d:9d:e6:dc:a6:18:e3:8d:e6:ee:73:0e:56:d0:0e:2b:50: d4:82:01:ec:81:57:43:4b:10:37:a2:5e:2a:fb:b2:66:de:a3: 4f:b8:99:f1:fb:11:a0:e5:ce:6d:9d:17:13:8f:80:76:1f:10: 2d:59:1e:79:35:b3:eb:f9:5f:1e:57:f9:3d:ee:34:2b:e8:58: 81:8b:a0:6b:a3:c7:4f:6a:3a:10:e5:29:4a:fe:43:84:e7:ef: 13:d6:47:6f:e7:c8:8b:00:30:60:70:27:28:cf:08:07:f0:23: d6:9f:47:38:7a:b0:bf:ce:ad:40:7f:a6:85:e8:e5:d0:66:0c: fd:c2:e3:bc:69:f9:74:d1:66:ac:f5:cf:28:c3:90:dc:42:cd: ca:5e:ae:7c:0e:af:6f:91:28:eb:65:ae:e4:7c:52:3c:69:c4: 55:8b:58:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5MEExMTAvBgNVBAUTKDhFNzBEM0E1MjQwRTMzODhBM0YxQzBEOEY3MkQ4RjhB RTE1OUM0NkMwHhcNMjUxMDE4MjMxMDI5WhcNMjUxMDI1MjMxMDI5WjAYMRYwFAYD VQQDEw02OGY0MWU2NS0xMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymC7nyZCXPiV1fXrc/1GVTYDEkb5z39YR2hVZQeCGG3mYcQx/1ILTzNsj2im 4GJUsRjKT4FPyg8YPrs33+ogs1SXgla/LV/rjWZYXWQkBuh2N+6c8qi0whMcLyXU W8Z/lJPsO+9QO0CJVdWkxp/czFhX71ByHMVG7ad2xKkfih8ijRBuel1e/gkr0v5B CuFW5PLQkGblfnbVp6QJRWQ49XmiAsJ67kqZzvApZOe5VDqV9Wqr8mf92DDfIB6V POeP8e0qRfW88fqdnUrJoDH831CoBP09ytrwhMKWpI6NmGYFHmF5o2MYJxGgPT+I cDKxu/h6YcpSJ6YIyA5CiWtMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdU/BWA wyaVu1v/1LXZ2WL6+oP4MB8GA1UdIwQYMBaAFI5w06UkDjOIo/HA2Pctj4rhWcRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTkwQS8wNzFDNERFNDUw MEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000aWo4Y0RZOXkyUGl1Rlp4 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2puRFRwU1FPTTRpajhjRFk5eTJQaXVGWnhHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTkwQS8wNzFDNERFNDUwMEUxMUVCQTczQTYzMkJDNEY5QUUwMi9qbkRUcFNRT000 aWo4Y0RZOXkyUGl1Rlp4R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZHzrtz1Cd7XrVEqLaYc6cY9rpJM832DGbAt2zEPLvgyGlWkfWB1oV j3NlL2FqIG6wSI4QxadfYtxs5+cY4R7U0mQXEQEwHApL/8OtmBGNjOl2jQDHxTli 2XWzPZ3m3KYY443m7nMOVtAOK1DUggHsgVdDSxA3ol4q+7Jm3qNPuJnx+xGg5c5t nRcTj4B2HxAtWR55NbPr+V8eV/k97jQr6FiBi6Bro8dPajoQ5SlK/kOE5+8T1kdv 58iLADBgcCcozwgH8CPWn0c4erC/zq1Af6aF6OXQZgz9wuO8afl00Was9c8ow5Dc Qs3KXq58Dq9vkSjrZa7kfFI8acRVi1i1 -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:43 2025 by rpki-client