$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft File: jH1rofFVCazzExWCWX1crZ5Bm08.mft (raw, json) Hash identifier: xXOQ83AscAJe/e8R4JTNqXtfddUgG7MUrA47O4C4ogg= Subject key identifier: 50:C0:5F:B0:2F:F5:B6:C3:59:63:C5:6E:D5:18:73:E5:92:6E:54:D4 Authority key identifier: 8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F Certificate issuer: /CN=A91E46B1/serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Certificate serial: 14D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft Manifest number: 14C7 Signing time: Mon 20 Oct 2025 17:14:57 +0000 Manifest this update: Mon 20 Oct 2025 17:14:56 +0000 Manifest next update: Mon 27 Oct 2025 17:14:56 +0000 Files and hashes: 1: jH1rofFVCazzExWCWX1crZ5Bm08.crl (hash: xHXgM2MLnDyh8oAB9P77SpJCQ5h7YAUfcBRXae8T09c=) 2: 39D4D290CB8311E88E74AD83C4F9AE02.roa (hash: mRh05D/XShHwy0gj5RK1ka6rqzpFsAG0dDwaNHbPs7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5329 (0x14d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46B1, serialNumber=8C7D6BA1F15509ACF3131582597D5CAD9E419B4F Validity Not Before: Oct 20 17:14:56 2025 GMT Not After : Oct 27 17:14:56 2025 GMT Subject: CN=68f66e10-d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:c9:cb:a9:c6:db:b4:60:d2:bb:e2:95:2f: 73:c6:2d:1b:fa:f7:74:4f:79:80:46:95:0f:06:4f: 08:b3:dd:35:14:9b:29:99:bf:03:57:96:d4:0b:4c: 8d:63:de:9c:9c:29:53:2d:7b:21:4f:1e:d7:bd:86: 82:e2:b5:b2:60:e4:4b:73:a6:4c:8a:1b:f1:c4:3c: fc:46:8f:67:fc:87:0d:18:77:69:27:84:05:0f:fe: 5e:41:57:53:20:1d:fe:31:18:70:d2:c9:c2:02:ee: ac:a1:a9:95:3d:e0:0d:77:3e:c3:44:cf:1a:65:00: 55:fb:f2:af:e6:54:92:ad:cd:d1:70:2f:2a:12:a6: fb:72:ac:a1:5d:6a:21:7d:6e:2e:a9:85:90:8e:ea: 37:a2:46:d4:54:7a:94:f6:c2:cd:2a:4c:5a:e6:02: 2e:5c:8f:70:1f:1a:95:5e:c6:15:29:76:11:67:8a: f0:79:cf:6f:3c:f2:66:ce:f2:f5:14:b7:76:6e:ac: 93:7d:97:42:93:0e:4f:8d:09:de:8e:04:3c:88:bc: e3:73:b6:b8:82:c2:59:d9:e6:cd:78:36:27:a5:ef: 01:cf:b8:bb:a0:f2:99:c7:7f:77:93:78:4a:8a:ab: f2:10:9c:dd:53:57:36:9e:11:00:8c:9a:94:e6:a0: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:5F:B0:2F:F5:B6:C3:59:63:C5:6E:D5:18:73:E5:92:6E:54:D4 X509v3 Authority Key Identifier: keyid:8C:7D:6B:A1:F1:55:09:AC:F3:13:15:82:59:7D:5C:AD:9E:41:9B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jH1rofFVCazzExWCWX1crZ5Bm08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F90D9476679711E8A7891C48C4F9AE02/jH1rofFVCazzExWCWX1crZ5Bm08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:15:26:2f:f7:28:49:6c:01:90:04:71:73:62:58:2f:cc:0a: be:2a:0e:fb:6f:79:ca:32:29:8b:31:6b:1a:dc:83:e2:e3:90: 95:6b:81:19:a7:94:d1:aa:51:ab:2e:0e:bc:b9:e1:b6:76:7f: 51:b4:a2:0c:1c:2e:2d:77:2d:67:21:e4:ec:e7:00:f9:6a:78: 11:6f:f2:14:c7:79:8f:5a:e5:3a:9b:69:1f:49:3f:b3:d1:f0: c9:ec:09:77:b7:ce:04:1f:01:ff:ef:16:47:9c:52:0c:24:7a: 2f:bb:1c:9f:2d:a7:b9:3e:3f:70:57:a9:76:1d:d2:20:52:06: 24:68:27:87:9d:a2:d8:1a:b5:ec:38:7e:58:b5:74:0c:4f:6d: 9e:8f:80:6f:7a:bf:e2:01:70:eb:b2:f9:37:00:b9:3d:73:6b: ca:e5:b8:2f:10:60:6b:2b:79:56:24:e8:b6:b8:7f:96:a9:2a: d4:7c:37:11:47:ca:c3:10:9d:10:30:b0:2f:fb:5c:8e:02:1c: 53:58:5b:08:46:eb:43:1c:80:85:7b:f3:49:5b:f2:76:d3:90: 50:6e:fc:84:6b:eb:0f:69:01:33:f6:2b:3d:13:3c:e8:6f:82: c8:b3:28:cf:29:44:6f:68:2c:f0:4d:2e:41:86:94:2a:84:fb: 14:60:fb:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QjExMTAvBgNVBAUTKDhDN0Q2QkExRjE1NTA5QUNGMzEzMTU4MjU5N0Q1Q0FE OUU0MTlCNEYwHhcNMjUxMDIwMTcxNDU2WhcNMjUxMDI3MTcxNDU2WjAYMRYwFAYD VQQDEw02OGY2NmUxMC1kNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkTJy6nG27Rg0rvilS9zxi0b+vd0T3mARpUPBk8Is901FJspmb8DV5bUC0yN Y96cnClTLXshTx7XvYaC4rWyYORLc6ZMihvxxDz8Ro9n/IcNGHdpJ4QFD/5eQVdT IB3+MRhw0snCAu6soamVPeANdz7DRM8aZQBV+/Kv5lSSrc3RcC8qEqb7cqyhXWoh fW4uqYWQjuo3okbUVHqU9sLNKkxa5gIuXI9wHxqVXsYVKXYRZ4rwec9vPPJmzvL1 FLd2bqyTfZdCkw5PjQnejgQ8iLzjc7a4gsJZ2ebNeDYnpe8Bz7i7oPKZx393k3hK iqvyEJzdU1c2nhEAjJqU5qCOAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDAX7Av 9bbDWWPFbtUYc+WSblTUMB8GA1UdIwQYMBaAFIx9a6HxVQms8xMVgll9XK2eQZtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZCMS9GOTBEOTQ3NjY3 OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNhenpFeFdDV1gxY3JaNUJt MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pIMXJvZkZWQ2F6ekV4V0NXWDFjclo1Qm0wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZCMS9GOTBEOTQ3NjY3OTcxMUU4QTc4OTFDNDhDNEY5QUUwMi9qSDFyb2ZGVkNh enpFeFdDV1gxY3JaNUJtMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVFSYv9yhJbAGQBHFzYlgvzAq+Kg77b3nKMimLMWsa3IPi45CVa4EZ p5TRqlGrLg68ueG2dn9RtKIMHC4tdy1nIeTs5wD5angRb/IUx3mPWuU6m2kfST+z 0fDJ7Al3t84EHwH/7xZHnFIMJHovuxyfLae5Pj9wV6l2HdIgUgYkaCeHnaLYGrXs OH5YtXQMT22ej4Bver/iAXDrsvk3ALk9c2vK5bgvEGBrK3lWJOi2uH+WqSrUfDcR R8rDEJ0QMLAv+1yOAhxTWFsIRutDHICFe/NJW/J205BQbvyEa+sPaQEz9is9Ezzo b4LIsyjPKURvaCzwTS5BhpQqhPsUYPtv -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:09 2025 by rpki-client