$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft File: jX1Dtvy5Zujhplg72gclAVesMQ8.mft (raw, json) Hash identifier: sOel2uwQNZLwi+6wr9EDlIkkR/NHHuaVbkjKpEboEpM= Subject key identifier: 30:DA:79:85:3A:98:4F:9B:4C:70:AE:12:CC:21:4C:BE:21:FE:26:43 Authority key identifier: 8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F Certificate issuer: /CN=A91D6444/serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft Manifest number: 020B Signing time: Sun 19 Oct 2025 04:40:26 +0000 Manifest this update: Sun 19 Oct 2025 04:40:26 +0000 Manifest next update: Sun 26 Oct 2025 04:40:26 +0000 Files and hashes: 1: jX1Dtvy5Zujhplg72gclAVesMQ8.crl (hash: sYDMsT4zHi0dmPfDJPPwktf7rPRAzcurWXTVAGDtDr8=) 2: 3423CAAA91A811ED97B3DB55C4F9AE02.roa (hash: uvO6HQukwYrPh3gWNmwuzQaBlS53E3Kz5eOoB+lqzW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6444, serialNumber=8D7D43B6FCB966E8E1A6583BDA07250157AC310F Validity Not Before: Oct 19 04:40:26 2025 GMT Not After : Oct 26 04:40:26 2025 GMT Subject: CN=68f46bba-e518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:da:7d:46:f5:52:75:14:4c:c6:46:78:9d: e9:45:4a:82:41:f7:68:39:91:3a:a1:b6:60:57:98: 76:12:8a:95:94:eb:2b:4a:49:51:98:db:83:45:ca: c4:cf:61:d2:f6:98:d6:a9:6c:c7:b6:8e:7d:73:62: af:61:5a:85:e8:fb:84:4f:c6:79:c0:12:db:17:5b: 8d:3e:5d:19:f9:76:1b:fa:29:15:24:5d:69:69:a4: 04:7f:b5:78:b1:b5:12:45:d1:ee:12:7a:8b:b4:3b: ab:f7:57:cb:86:d8:73:0c:61:33:98:74:62:7e:cc: 80:c2:13:1e:6f:b1:f0:f2:c2:bb:42:3a:45:fc:22: 0c:98:1e:61:69:06:2c:5a:65:3d:d9:6a:e9:c7:23: 15:16:e5:28:2a:13:65:3c:95:a0:c2:b9:f6:40:e6: 47:7a:d7:7f:0b:31:ea:a4:5f:1b:7b:ce:09:d2:02: 4c:f3:b2:fb:37:fd:2c:d3:ab:c5:d7:1f:66:5a:ab: 92:70:45:38:8c:52:f5:97:a0:4f:a2:b6:0e:59:11: 63:ba:a7:4f:5c:fe:f1:a0:dc:e7:20:9a:01:7a:19: 0b:6b:36:45:49:fc:7b:88:b3:f3:3c:87:36:28:78: a3:d7:f3:bf:dc:11:eb:21:91:69:2e:7b:49:ed:ea: 2e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:79:85:3A:98:4F:9B:4C:70:AE:12:CC:21:4C:BE:21:FE:26:43 X509v3 Authority Key Identifier: keyid:8D:7D:43:B6:FC:B9:66:E8:E1:A6:58:3B:DA:07:25:01:57:AC:31:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX1Dtvy5Zujhplg72gclAVesMQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6444/DCC76F7490BB11EDB5B5FF57C4F9AE02/jX1Dtvy5Zujhplg72gclAVesMQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b6:f8:e0:e3:5c:7d:c3:fa:c3:70:3f:62:e1:3d:7b:5d:16: 41:6a:1b:0d:94:cc:81:f5:85:d7:3a:ff:5d:ce:cc:48:e6:68: aa:46:5f:fe:c2:56:17:05:70:c8:fb:68:43:1a:e1:4b:72:7f: a4:99:c1:81:49:31:57:38:ce:6d:af:26:cf:49:b0:ce:eb:53: 01:22:62:af:30:f3:17:7d:41:49:36:ff:be:96:2f:ca:1f:f2: cc:98:70:a2:6f:47:98:fa:ab:16:70:09:9e:76:c9:be:54:ce: 8e:41:11:77:c8:90:d4:9e:e9:97:63:ca:7f:e5:e2:58:14:c6: 8a:43:62:af:36:80:b3:95:08:9f:70:09:21:f9:85:6e:14:83: 3b:56:eb:56:5c:69:4e:5f:0a:0d:b5:0e:df:2d:aa:32:57:5f: a9:7a:ce:a0:e5:bc:d6:58:ec:a0:ea:72:12:77:e8:0e:f1:90: 39:1a:db:99:36:14:08:db:4c:87:5d:5c:f6:bb:ca:44:fb:3c: 66:6b:78:5d:99:25:53:81:15:54:c9:ea:b4:52:cc:63:9e:ae: 97:8f:51:69:76:08:f2:bf:00:4f:c8:62:16:40:62:c8:c9:eb: 24:a2:17:0c:0c:91:07:71:f4:b7:97:73:27:94:f5:a6:1e:e9: 7e:2c:a4:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0NDQxMTAvBgNVBAUTKDhEN0Q0M0I2RkNCOTY2RThFMUE2NTgzQkRBMDcyNTAx NTdBQzMxMEYwHhcNMjUxMDE5MDQ0MDI2WhcNMjUxMDI2MDQ0MDI2WjAYMRYwFAYD VQQDEw02OGY0NmJiYS1lNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0nafUb1UnUUTMZGeJ3pRUqCQfdoOZE6obZgV5h2EoqVlOsrSklRmNuDRcrE z2HS9pjWqWzHto59c2KvYVqF6PuET8Z5wBLbF1uNPl0Z+XYb+ikVJF1paaQEf7V4 sbUSRdHuEnqLtDur91fLhthzDGEzmHRifsyAwhMeb7Hw8sK7QjpF/CIMmB5haQYs WmU92WrpxyMVFuUoKhNlPJWgwrn2QOZHetd/CzHqpF8be84J0gJM87L7N/0s06vF 1x9mWquScEU4jFL1l6BPorYOWRFjuqdPXP7xoNznIJoBehkLazZFSfx7iLPzPIc2 KHij1/O/3BHrIZFpLntJ7eouOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDaeYU6 mE+bTHCuEswhTL4h/iZDMB8GA1UdIwQYMBaAFI19Q7b8uWbo4aZYO9oHJQFXrDEP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ0NC9EQ0M3NkY3NDkw QkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1amhwbGc3MmdjbEFWZXNN UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pYMUR0dnk1WnVqaHBsZzcyZ2NsQVZlc01ROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ0NC9EQ0M3NkY3NDkwQkIxMUVEQjVCNUZGNTdDNEY5QUUwMi9qWDFEdHZ5NVp1 amhwbGc3MmdjbEFWZXNNUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxtvjg41x9w/rDcD9i4T17XRZBahsNlMyB9YXXOv9dzsxI5miqRl/+ wlYXBXDI+2hDGuFLcn+kmcGBSTFXOM5trybPSbDO61MBImKvMPMXfUFJNv++li/K H/LMmHCib0eY+qsWcAmedsm+VM6OQRF3yJDUnumXY8p/5eJYFMaKQ2KvNoCzlQif cAkh+YVuFIM7VutWXGlOXwoNtQ7fLaoyV1+pes6g5bzWWOyg6nISd+gO8ZA5GtuZ NhQI20yHXVz2u8pE+zxma3hdmSVTgRVUyeq0Usxjnq6Xj1FpdgjyvwBPyGIWQGLI yeskohcMDJEHcfS3l3MnlPWmHul+LKT7 -----END CERTIFICATE-----Generated at Mon Oct 20 01:50:04 2025 by rpki-client