$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: DPVQh0KSvt/YJ8NhsIhseaQd6dKncAld2gwSDJ5NCQs= Subject key identifier: C7:DF:A9:93:68:55:92:7A:62:B5:5E:77:E2:28:BF:A1:42:D6:9C:57 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AE0 Signing time: Sat 18 Oct 2025 20:21:59 +0000 Manifest this update: Sat 18 Oct 2025 20:21:58 +0000 Manifest next update: Sat 25 Oct 2025 20:21:58 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: RIQtEFbQPXRsDkzXUJweMKDte4FAwD1GVv/8+se5vfo=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2792 (0xae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Oct 18 20:21:58 2025 GMT Not After : Oct 25 20:21:58 2025 GMT Subject: CN=68f3f6e7-ce45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:e3:67:89:48:d7:5b:12:ea:db:22:8f:d3: 71:2a:f9:de:f7:40:0b:bb:65:e3:b0:fa:f4:bf:c1: 3c:7c:14:66:50:63:a0:f5:d7:b4:72:b4:77:a5:05: 55:7e:2b:e5:31:cb:8d:d7:93:02:3c:2d:73:3c:b4: 71:2a:e5:78:ab:12:c6:dd:11:0e:5a:d7:dd:98:02: 84:a4:c8:a9:16:63:cc:7c:4f:4c:c8:a1:5d:d4:26: ca:f4:48:e6:de:a5:43:70:71:91:d0:5c:20:11:b9: 9a:b4:d3:e7:f0:51:3b:da:da:29:64:2e:cd:e0:b4: 84:ff:dc:56:dc:c3:79:28:ea:7e:fc:ec:20:56:42: 13:53:10:d8:8f:79:1a:ee:f2:8f:a2:f7:5a:d0:1b: a9:75:f9:0e:ce:7b:bc:4b:a0:f8:a1:75:95:63:b7: dd:98:25:cd:a6:11:82:da:86:1a:bf:f6:f3:62:d0: 7a:5c:9e:26:01:df:d6:5a:a8:2a:10:45:ca:43:bc: ad:78:26:c5:5b:14:2b:6e:f7:04:43:cd:35:79:4c: 3d:a7:ee:e8:83:2e:44:4d:c1:57:cd:76:1c:f2:c9: a0:b2:2e:9e:15:97:f0:c7:2a:19:a3:5d:06:28:a4: 37:44:60:06:11:d4:43:7e:3d:ae:3f:df:da:69:3b: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DF:A9:93:68:55:92:7A:62:B5:5E:77:E2:28:BF:A1:42:D6:9C:57 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ee:f1:3d:fc:0f:4d:e5:fc:3d:10:c7:b3:58:62:87:c2:fc: f8:c9:f8:cc:aa:e7:c9:79:19:1f:06:3a:d3:6f:27:fa:ed:6a: 96:35:b1:b2:11:1d:10:d3:db:38:de:a8:3c:62:13:37:61:55: 72:b6:91:5e:02:ba:a0:d7:a2:20:29:44:e4:9e:b8:a0:2e:80: 5c:bd:9e:41:77:f5:42:50:12:3f:dc:bc:95:2a:33:1f:7c:6f: 8f:58:b5:b1:9c:d9:be:5e:7b:cb:3b:44:25:19:c1:5e:3e:6a: d9:ac:80:f7:f4:e1:43:6e:df:54:fd:1f:e9:f6:4f:98:a0:69: 03:66:85:3b:98:60:0f:48:6e:af:83:86:b4:85:98:db:63:45: c8:9c:e0:e8:8a:4b:6f:e9:0b:7d:57:0d:95:3c:53:b3:ed:1c: 24:31:f3:d0:8e:af:d3:ee:e8:b3:49:35:b3:f7:2b:92:91:aa: fc:61:5c:4e:30:12:58:db:f9:fb:b2:4d:53:47:cf:e4:7c:a0: e4:e1:20:5a:fe:13:d2:6b:cd:f6:de:38:19:ad:8f:58:37:b2: 38:52:e1:12:69:89:a7:e9:de:37:69:41:63:ba:24:e3:73:47: 2a:99:11:d6:4f:c6:5e:2e:e4:cf:48:9a:0f:d8:28:64:a0:da: 1e:bc:d2:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUxMDE4MjAyMTU4WhcNMjUxMDI1MjAyMTU4WjAYMRYwFAYD VQQDEw02OGYzZjZlNy1jZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsPjZ4lI11sS6tsij9NxKvne90ALu2XjsPr0v8E8fBRmUGOg9de0crR3pQVV fivlMcuN15MCPC1zPLRxKuV4qxLG3REOWtfdmAKEpMipFmPMfE9MyKFd1CbK9Ejm 3qVDcHGR0FwgEbmatNPn8FE72topZC7N4LSE/9xW3MN5KOp+/OwgVkITUxDYj3ka 7vKPovda0BupdfkOznu8S6D4oXWVY7fdmCXNphGC2oYav/bzYtB6XJ4mAd/WWqgq EEXKQ7yteCbFWxQrbvcEQ801eUw9p+7ogy5ETcFXzXYc8smgsi6eFZfwxyoZo10G KKQ3RGAGEdRDfj2uP9/aaTs89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMffqZNo VZJ6YrVed+Iov6FC1pxXMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv7vE9/A9N5fw9EMezWGKHwvz4yfjMqufJeRkfBjrTbyf67WqWNbGy ER0Q09s43qg8YhM3YVVytpFeArqg16IgKUTknrigLoBcvZ5Bd/VCUBI/3LyVKjMf fG+PWLWxnNm+XnvLO0QlGcFePmrZrID39OFDbt9U/R/p9k+YoGkDZoU7mGAPSG6v g4a0hZjbY0XInODoiktv6Qt9Vw2VPFOz7RwkMfPQjq/T7uizSTWz9yuSkar8YVxO MBJY2/n7sk1TR8/kfKDk4SBa/hPSa8323jgZrY9YN7I4UuESaYmn6d43aUFjuiTj c0cqmRHWT8ZeLuTPSJoP2ChkoNoevNIz -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:21 2025 by rpki-client