$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft File: JXqeaRTVinRbDuar5UjNvgIEiNQ.mft (raw, json) Hash identifier: B7PsKoPX6vQjsRehEuQkY1BNpKcN8skUIJTsifwYYBE= Subject key identifier: 6B:18:5B:5B:B0:F4:85:67:CD:4C:00:1F:3C:2E:EE:58:50:6F:9B:4B Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft Manifest number: 0280 Signing time: Sun 19 Oct 2025 04:25:43 +0000 Manifest this update: Sun 19 Oct 2025 04:25:42 +0000 Manifest next update: Sun 26 Oct 2025 04:25:42 +0000 Files and hashes: 1: JXqeaRTVinRbDuar5UjNvgIEiNQ.crl (hash: mZOybZQFDbQVsYiDTk9tZA71A06FHqJhtdqcbC7Cvtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: Oct 19 04:25:42 2025 GMT Not After : Oct 26 04:25:42 2025 GMT Subject: CN=68f46847-0da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:23:b6:27:05:41:34:54:aa:82:45:9b:47: 88:7c:3e:3e:05:57:3c:21:72:1b:a2:0d:80:d7:fc: d1:71:0a:54:50:95:64:92:33:f4:ee:83:a2:12:77: ca:82:59:70:f0:9f:f4:e7:d2:91:b0:5b:62:ac:ef: f0:f0:da:25:4c:00:7e:65:d9:d2:3a:3a:61:5c:3f: 79:3a:30:5b:7e:52:4f:04:32:d6:b7:b6:db:0a:76: 77:f9:03:6e:22:34:03:6e:dd:c4:18:60:b6:17:5c: 8e:84:20:b8:fe:84:e8:9d:5e:43:4e:49:24:bc:f7: aa:61:09:0a:d0:78:c9:10:4a:a3:54:c1:00:0d:1d: b0:ae:c1:69:c0:d3:68:08:61:78:fc:83:83:e7:87: 8c:31:99:9a:f2:ad:0f:67:d6:22:a1:fa:33:d5:ca: ac:65:8e:4b:16:f8:11:1b:98:ba:34:76:09:45:6d: 7a:43:18:28:d0:e5:61:b1:02:ee:3e:c3:da:38:c4: 43:d5:de:d8:76:b0:b2:a2:10:bf:ad:e8:22:a8:73: ae:ab:ee:c7:2f:50:f3:f8:3b:8c:c4:2e:8c:dc:1c: 9d:87:da:a5:43:5c:19:04:9a:d4:58:33:d3:c5:05: 97:bf:d4:2d:3f:24:e9:de:35:f0:5b:09:d2:f7:9b: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:5B:5B:B0:F4:85:67:CD:4C:00:1F:3C:2E:EE:58:50:6F:9B:4B X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a7:ab:ee:42:19:83:f3:45:33:3a:67:4a:03:8a:67:4f:85: ce:20:24:cd:9d:bb:dc:e0:f5:40:7f:53:cc:a7:e6:f0:cc:ff: bb:93:35:20:86:f4:3f:b0:87:a6:a4:0f:01:df:62:88:92:21: 35:72:0a:07:69:8f:eb:1a:d1:26:79:74:b5:97:da:31:f9:8c: a5:74:82:ac:6e:3a:83:d8:9d:d5:a8:18:22:07:44:34:e4:ac: d4:00:6b:88:ad:7a:a1:3f:64:7e:e3:93:d6:6f:a7:e7:47:3e: 36:b4:52:e5:71:09:aa:de:99:94:28:a9:ec:87:cc:cd:62:12: b5:f3:a3:46:ae:b3:90:a8:73:9c:ac:ea:28:1c:3c:32:f8:41: 68:db:a3:32:55:6d:b8:d6:e7:12:37:fe:74:0a:b1:89:8e:5a: 58:7d:bb:7f:4d:2b:8b:58:4c:26:c6:43:7b:80:a5:71:9c:84: f5:31:6a:af:54:dc:47:1e:fc:79:91:7e:bf:23:5c:e4:ee:68: 8c:3c:b0:16:32:a2:ec:4a:f6:31:48:54:73:cd:46:98:3f:99: a0:65:12:4f:57:5e:64:88:b5:6d:2e:e3:f5:70:5c:2b:03:27: ea:50:b5:e2:cd:bf:ef:49:61:0c:e1:95:6d:23:33:9d:9c:6b: 5e:81:d4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUxMDE5MDQyNTQyWhcNMjUxMDI2MDQyNTQyWjAYMRYwFAYD VQQDEw02OGY0Njg0Ny0wZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA064jticFQTRUqoJFm0eIfD4+BVc8IXIbog2A1/zRcQpUUJVkkjP07oOiEnfK gllw8J/059KRsFtirO/w8NolTAB+ZdnSOjphXD95OjBbflJPBDLWt7bbCnZ3+QNu IjQDbt3EGGC2F1yOhCC4/oTonV5DTkkkvPeqYQkK0HjJEEqjVMEADR2wrsFpwNNo CGF4/IOD54eMMZma8q0PZ9Yiofoz1cqsZY5LFvgRG5i6NHYJRW16Qxgo0OVhsQLu PsPaOMRD1d7YdrCyohC/regiqHOuq+7HL1Dz+DuMxC6M3Bydh9qlQ1wZBJrUWDPT xQWXv9QtPyTp3jXwWwnS95tOrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsYW1uw 9IVnzUwAHzwu7lhQb5tLMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDE1RC82QzQ3NDkyMDczMTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmlu UmJEdWFyNVVqTnZnSUVpTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHp6vuQhmD80UzOmdKA4pnT4XOICTNnbvc4PVAf1PMp+bwzP+7kzUg hvQ/sIempA8B32KIkiE1cgoHaY/rGtEmeXS1l9ox+YyldIKsbjqD2J3VqBgiB0Q0 5KzUAGuIrXqhP2R+45PWb6fnRz42tFLlcQmq3pmUKKnsh8zNYhK186NGrrOQqHOc rOooHDwy+EFo26MyVW241ucSN/50CrGJjlpYfbt/TSuLWEwmxkN7gKVxnIT1MWqv VNxHHvx5kX6/I1zk7miMPLAWMqLsSvYxSFRzzUaYP5mgZRJPV15kiLVtLuP1cFwr AyfqULXizb/vSWEM4ZVtIzOdnGtegdS7 -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:45 2025 by rpki-client