$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: eNa4oVNz1m2fPke03p1ydmqO8Sq1gB0Vc0VgWUUewD8= Subject key identifier: 9F:B7:C9:D9:09:63:D3:FA:6D:19:1E:53:18:DF:28:BE:8C:80:71:45 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07B4 Signing time: Sat 18 Oct 2025 22:45:34 +0000 Manifest this update: Sat 18 Oct 2025 22:45:34 +0000 Manifest next update: Sat 25 Oct 2025 22:45:34 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: 9VHl2ALCPBB1ES/m+OcwUKR+sYGLrlypqTewDqjzzcM=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Oct 18 22:45:34 2025 GMT Not After : Oct 25 22:45:34 2025 GMT Subject: CN=68f4188e-fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:b9:55:d2:23:bb:4e:c9:20:01:fe:67:89: 1d:22:49:57:32:ca:09:8b:27:83:43:3a:ed:99:68: d1:e5:80:4a:61:66:6d:d7:b7:2c:ad:ff:6b:53:16: 56:bd:6b:1d:4a:0e:ea:d7:9a:e7:ce:19:92:b8:fa: c6:b5:de:67:9e:d6:e6:23:2a:ef:c7:29:2d:58:fb: f9:f3:a4:22:fc:8f:70:dc:fe:4a:95:82:7a:e2:63: 43:01:4d:65:fc:df:1d:c1:19:55:4b:c7:f9:4c:aa: a2:59:14:ed:3e:b4:91:78:a3:20:a9:5f:01:55:06: e7:bc:9e:d2:5a:04:16:89:43:45:32:fc:3b:9f:a2: 34:44:23:7a:8b:27:37:9a:b0:ca:97:97:2c:70:2d: 00:03:7c:76:1a:3d:b8:75:10:5a:cd:64:0d:20:4e: 20:4e:81:74:73:15:56:7f:d8:14:0f:ac:61:68:36: ee:f1:87:27:30:0c:d2:e4:e5:43:26:00:59:61:54: e7:96:7a:4f:8c:d1:f0:63:b1:23:6e:2f:03:12:37: ad:0f:ef:73:bb:5c:8f:b9:8e:c1:c0:18:b2:08:35: de:d1:13:a5:18:23:d9:d1:6d:f5:78:aa:7c:b8:db: a6:2c:3c:6a:06:a7:d8:7c:fa:a2:af:b6:e6:b8:40: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:C9:D9:09:63:D3:FA:6D:19:1E:53:18:DF:28:BE:8C:80:71:45 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c6:fa:c9:92:09:e6:25:de:62:a4:e7:07:26:21:db:37:c3: 7c:f6:9c:e0:8c:93:7c:f8:e6:75:6b:4c:2f:ae:d1:e9:7d:40: 5f:99:ee:8e:9d:bb:6f:f1:a0:21:33:2b:1f:f1:22:9e:44:97: f7:a6:46:ae:e9:0e:58:62:06:d9:ab:85:69:ba:b0:ad:a6:d7: b5:91:5d:ad:73:8f:a6:97:2e:cb:31:3d:5b:a0:99:ac:10:c8: 1f:96:14:c0:0e:4c:89:37:5e:48:de:95:8e:d9:f0:1c:ee:7f: 22:44:b2:fb:b6:e4:f3:88:73:4f:26:60:1d:ac:af:a1:dd:3e: 38:88:83:fb:91:52:24:40:26:9b:6e:53:4a:9c:96:75:88:3b: 6e:b7:aa:87:fa:c1:04:c4:83:38:c3:78:92:5a:0c:f7:4c:ab: 0b:0e:4b:c8:7a:a2:1f:30:ca:6b:17:b4:b3:0e:1f:c4:8e:d9: bd:fb:8e:58:33:8a:79:f8:b6:9b:a3:04:59:98:49:19:d1:c0: 00:0b:9d:b7:b7:80:d8:8a:0c:31:f3:c3:f3:88:d6:1d:32:73: 2b:a0:af:c7:56:c7:82:82:0c:0d:bf:a6:68:ba:18:0c:c2:c7: ca:96:56:05:03:da:85:3e:06:59:ac:a0:18:7d:22:39:b1:5a: 0d:af:bd:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMDE4MjI0NTM0WhcNMjUxMDI1MjI0NTM0WjAYMRYwFAYD VQQDEw02OGY0MTg4ZS1mYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgq5VdIju07JIAH+Z4kdIklXMsoJiyeDQzrtmWjR5YBKYWZt17csrf9rUxZW vWsdSg7q15rnzhmSuPrGtd5nntbmIyrvxyktWPv586Qi/I9w3P5KlYJ64mNDAU1l /N8dwRlVS8f5TKqiWRTtPrSReKMgqV8BVQbnvJ7SWgQWiUNFMvw7n6I0RCN6iyc3 mrDKl5cscC0AA3x2Gj24dRBazWQNIE4gToF0cxVWf9gUD6xhaDbu8YcnMAzS5OVD JgBZYVTnlnpPjNHwY7Ejbi8DEjetD+9zu1yPuY7BwBiyCDXe0ROlGCPZ0W31eKp8 uNumLDxqBqfYfPqir7bmuECpEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+3ydkJ Y9P6bRkeUxjfKL6MgHFFMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqxvrJkgnmJd5ipOcHJiHbN8N89pzgjJN8+OZ1a0wvrtHpfUBfme6O nbtv8aAhMysf8SKeRJf3pkau6Q5YYgbZq4VpurCtpte1kV2tc4+mly7LMT1boJms EMgflhTADkyJN15I3pWO2fAc7n8iRLL7tuTziHNPJmAdrK+h3T44iIP7kVIkQCab blNKnJZ1iDtut6qH+sEExIM4w3iSWgz3TKsLDkvIeqIfMMprF7SzDh/Ejtm9+45Y M4p5+LabowRZmEkZ0cAAC523t4DYigwx88PziNYdMnMroK/HVseCggwNv6ZouhgM wsfKllYFA9qFPgZZrKAYfSI5sVoNr72+ -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:26 2025 by rpki-client