$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft File: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft (raw, json) Hash identifier: Pv+fsk42BHFhL6cwBdVKFjPPUR89tXViqGDvLFbYpng= Subject key identifier: CA:A9:B9:A9:0E:DF:38:CF:D5:62:86:F1:78:5B:7F:87:55:71:DF:95 Authority key identifier: 24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 Certificate issuer: /CN=A91DD34D/serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft Manifest number: 06C7 Signing time: Sat 18 Oct 2025 23:30:24 +0000 Manifest this update: Sat 18 Oct 2025 23:30:23 +0000 Manifest next update: Sat 25 Oct 2025 23:30:23 +0000 Files and hashes: 1: JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl (hash: IiVaEYzbFHhatAZzr6y5H2PwPPmNUAKdlvzG3jyBECo=) 2: 97871B1E759A11EBB06FC386C4F9AE02.roa (hash: 49srunPdeNBbO8KuwS63EgzNwnXuXm104MEIjX60d+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD34D, serialNumber=24DAA24F58FC3C268067E5AFE49FAEF5579EC069 Validity Not Before: Oct 18 23:30:23 2025 GMT Not After : Oct 25 23:30:23 2025 GMT Subject: CN=68f4230f-fd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d3:30:53:e2:8c:02:40:e0:fb:4c:39:c3:9e: 74:0b:21:13:eb:0a:03:9f:c1:ac:b6:67:e4:bd:b9: 97:dd:47:df:ea:11:84:67:34:d5:34:d3:23:c4:06: dc:51:b6:61:90:c1:2d:6d:ad:e5:87:0d:10:34:ce: 9d:dc:5b:cf:dc:05:f9:98:6c:cd:4b:d4:e5:b9:0a: 99:e7:4f:06:e1:2b:99:83:69:c2:63:cd:9a:35:89: f6:7b:f8:b3:02:41:74:3e:12:4a:f4:34:6d:7e:90: 6b:cd:a8:bc:f4:eb:d4:45:2e:7f:1c:e4:fa:62:b2: 46:cc:89:84:6f:73:99:10:c0:d9:47:e2:13:39:8e: 4e:fa:09:38:0e:af:bf:0e:e5:a4:f7:ce:72:b4:b4: 27:fc:71:f1:3a:20:5d:41:71:d9:ec:9e:45:7e:5d: 86:7b:34:92:df:21:ea:bb:3e:a0:fd:3e:b9:2c:53: 38:76:1b:08:45:28:67:67:1f:2c:80:79:e1:98:c0: fc:fa:f3:5b:c1:7b:c9:64:ec:da:ad:c4:e1:3f:1e: 35:c8:d3:e6:84:ea:53:dd:e7:d0:8d:92:38:2a:07: b1:a7:86:76:7c:53:26:63:3a:a2:2f:09:ea:e3:e4: a3:fa:12:96:b4:40:ba:62:33:ca:2c:93:04:d2:37: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:B9:A9:0E:DF:38:CF:D5:62:86:F1:78:5B:7F:87:55:71:DF:95 X509v3 Authority Key Identifier: keyid:24:DA:A2:4F:58:FC:3C:26:80:67:E5:AF:E4:9F:AE:F5:57:9E:C0:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD34D/A794B4AA759811EBB9825F84C4F9AE02/JNqiT1j8PCaAZ-Wv5J-u9VeewGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:95:c8:eb:90:ed:d8:dd:4f:e0:4d:a8:3b:29:c8:de:c8:50: 87:a8:00:ad:0d:e6:87:ec:85:75:83:65:0c:93:26:51:17:a8: 71:90:dc:15:0b:78:f1:21:8d:54:45:af:e1:62:c1:9d:d1:c4: f6:26:59:de:1c:33:fb:51:83:19:db:30:af:33:81:29:f4:18: 9c:63:15:8d:48:a6:74:38:3d:08:6e:19:8c:45:af:da:2e:f9: 0f:c4:47:ae:35:7d:57:87:75:5b:cd:94:f5:7d:9d:55:66:c7: 6b:8c:2b:7f:87:70:2d:36:52:ac:2b:ec:48:16:a5:76:ae:c5: 79:9a:c6:a2:05:e7:9b:c8:d4:9c:1b:1e:6a:4c:e5:cf:74:b1: 4c:a4:85:b7:5c:b5:ad:7d:c4:2d:aa:f7:1f:54:ed:ee:8b:b6: 54:56:14:06:b8:8f:2c:f6:88:a2:60:2a:cb:76:5e:79:fc:0b: f1:b8:c0:2d:de:b8:04:2b:70:06:ae:e5:1c:e3:1c:96:52:11: de:b6:b5:32:a8:3d:ad:b4:f0:2d:7f:2b:08:52:9d:82:38:59: be:70:cb:c2:a5:58:6d:c1:4b:08:83:dc:2e:ad:25:99:53:7d: df:de:ff:a0:62:36:48:68:5f:e0:1d:00:04:fb:57:50:61:20: a6:69:3b:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzNEQxMTAvBgNVBAUTKDI0REFBMjRGNThGQzNDMjY4MDY3RTVBRkU0OUZBRUY1 NTc5RUMwNjkwHhcNMjUxMDE4MjMzMDIzWhcNMjUxMDI1MjMzMDIzWjAYMRYwFAYD VQQDEw02OGY0MjMwZi1mZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtMwU+KMAkDg+0w5w550CyET6woDn8GstmfkvbmX3Uff6hGEZzTVNNMjxAbc UbZhkMEtba3lhw0QNM6d3FvP3AX5mGzNS9TluQqZ508G4SuZg2nCY82aNYn2e/iz AkF0PhJK9DRtfpBrzai89OvURS5/HOT6YrJGzImEb3OZEMDZR+ITOY5O+gk4Dq+/ DuWk985ytLQn/HHxOiBdQXHZ7J5Ffl2GezSS3yHquz6g/T65LFM4dhsIRShnZx8s gHnhmMD8+vNbwXvJZOzarcThPx41yNPmhOpT3efQjZI4Kgexp4Z2fFMmYzqiLwnq 4+Sj+hKWtEC6YjPKLJME0jcFUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqpuakO 3zjP1WKG8Xhbf4dVcd+VMB8GA1UdIwQYMBaAFCTaok9Y/DwmgGflr+SfrvVXnsBp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM0RC9BNzk0QjRBQTc1 OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBDYUFaLVd2NUotdTlWZWV3 R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pOcWlUMWo4UENhQVotV3Y1Si11OVZlZXdHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM0RC9BNzk0QjRBQTc1OTgxMUVCQjk4MjVGODRDNEY5QUUwMi9KTnFpVDFqOFBD YUFaLVd2NUotdTlWZWV3R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTlcjrkO3Y3U/gTag7KcjeyFCHqACtDeaH7IV1g2UMkyZRF6hxkNwV C3jxIY1URa/hYsGd0cT2JlneHDP7UYMZ2zCvM4Ep9BicYxWNSKZ0OD0IbhmMRa/a LvkPxEeuNX1Xh3VbzZT1fZ1VZsdrjCt/h3AtNlKsK+xIFqV2rsV5msaiBeebyNSc Gx5qTOXPdLFMpIW3XLWtfcQtqvcfVO3ui7ZUVhQGuI8s9oiiYCrLdl55/AvxuMAt 3rgEK3AGruUc4xyWUhHetrUyqD2ttPAtfysIUp2COFm+cMvCpVhtwUsIg9wurSWZ U33f3v+gYjZIaF/gHQAE+1dQYSCmaTu/ -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:01 2025 by rpki-client