$ rpki-client -vvf rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft File: j1nI_VoLWpmrBABkQjq_TbC04IY.mft (raw, json) Hash identifier: 9s1RxrMM5RixweF2//YUl+1IjxbwjybSTqHVBUFejj0= Subject key identifier: B8:7B:D0:E2:82:DE:A8:4E:5B:FD:3A:76:6B:E0:50:34:14:31:1B:07 Authority key identifier: 8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 Certificate issuer: /CN=A91E647A/serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft Manifest number: 34E6 Signing time: Sat 18 Oct 2025 15:26:09 +0000 Manifest this update: Sat 18 Oct 2025 15:26:08 +0000 Manifest next update: Sat 25 Oct 2025 15:26:08 +0000 Files and hashes: 1: j1nI_VoLWpmrBABkQjq_TbC04IY.crl (hash: BX2qKS6CFeaPkXdyO70xpGo/mjZTplRVw2r1pemikn4=) 2: F3DC25C41E4511EFBB4DF80DC4F9AE02.roa (hash: 6cC6tQeQd87kGRdq2QumL1i69ExtEnVSm6iU0IQLUOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E647A, serialNumber=8F59C8FD5A0B5A99AB040064423ABF4DB0B4E086 Validity Not Before: Oct 18 15:26:08 2025 GMT Not After : Oct 25 15:26:08 2025 GMT Subject: CN=68f3b190-5962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:d0:d7:ea:9b:b1:73:3e:45:86:ac:08:c4: e0:42:b0:f7:5c:e5:da:93:4a:a2:01:ae:d9:16:c7: dd:c7:f5:aa:f7:56:56:41:a8:84:72:1f:e3:9c:f7: d5:8c:1c:b4:20:50:dd:28:09:89:85:f8:2e:4e:6e: cb:65:30:32:23:7c:b1:de:b5:ab:25:93:f5:b8:e9: f7:c0:26:2a:05:db:3d:48:b9:68:3f:99:ac:85:4c: 8b:b0:5e:c4:8d:9d:be:31:fd:11:e2:36:a3:b2:53: d5:6a:13:1c:e2:96:ad:0a:2a:c2:42:05:50:fa:83: 87:26:64:a4:9b:0c:3e:7d:ff:c4:d3:a5:96:35:80: fb:b2:20:6d:dc:2c:7c:19:ff:06:d2:22:aa:34:47: 1e:1c:e8:9d:00:84:13:df:8b:6b:a5:d7:fc:55:50: e2:4c:c0:f4:ab:13:ab:59:e4:3e:79:cf:3e:4f:ad: 36:2f:4b:3e:c6:c2:a5:a0:0b:20:3f:cd:27:9d:6a: 4d:da:56:a7:d3:a4:18:0f:a6:72:12:82:ae:5c:4c: c6:1c:98:fd:d0:ea:6a:56:87:e5:1b:57:24:8b:7e: 54:fa:76:68:b2:ed:15:f1:56:9e:46:a0:e2:12:2f: 45:80:12:4a:1d:98:9b:f8:72:98:de:56:b5:81:a4: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:D0:E2:82:DE:A8:4E:5B:FD:3A:76:6B:E0:50:34:14:31:1B:07 X509v3 Authority Key Identifier: keyid:8F:59:C8:FD:5A:0B:5A:99:AB:04:00:64:42:3A:BF:4D:B0:B4:E0:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1nI_VoLWpmrBABkQjq_TbC04IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E647A/7948EA1C1DA911E2BA1484A408B02CD2/j1nI_VoLWpmrBABkQjq_TbC04IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ce:36:45:68:f3:0b:75:06:0f:c1:e0:77:d2:f0:13:5e:85: 13:58:72:96:0e:98:03:cd:d0:42:d7:44:a4:39:78:d2:f5:b8: da:f3:15:bb:40:12:0f:f2:5b:33:66:0b:7f:6d:79:8f:12:86: 39:31:ec:60:4f:69:a3:34:5b:e5:97:ef:c6:81:da:4e:ec:6e: aa:9d:77:87:c3:84:6c:64:9d:05:d5:c2:c7:be:22:c7:cf:f8: 7c:c2:20:67:3d:18:7b:a6:7b:44:97:b2:b3:0f:73:d1:b8:6e: 20:ff:47:a5:e6:aa:3b:d4:19:4c:14:13:ad:2e:84:e5:b1:27: 57:0b:3a:32:49:a3:8f:26:b1:0c:31:84:12:07:6c:d5:0b:39: 93:39:de:97:bd:a5:b1:8f:8d:17:58:7a:0e:2b:4d:00:12:5a: 55:e9:ec:47:e1:ae:bc:72:9a:34:b2:f7:65:36:f7:59:3d:29: 65:6c:e8:89:06:05:cb:6d:48:05:a3:1c:d4:2d:32:21:86:8e: 1a:62:42:df:fd:37:c4:5c:a4:63:37:10:81:08:f3:fe:cc:f1: 80:3a:36:24:87:d0:49:8a:a1:d2:b5:34:3e:1f:27:45:43:8c: 28:bc:65:79:6e:bd:0f:40:b9:f8:0e:d3:33:80:b4:81:46:01: 8a:41:a6:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0N0ExMTAvBgNVBAUTKDhGNTlDOEZENUEwQjVBOTlBQjA0MDA2NDQyM0FCRjRE QjBCNEUwODYwHhcNMjUxMDE4MTUyNjA4WhcNMjUxMDI1MTUyNjA4WjAYMRYwFAYD VQQDEw02OGYzYjE5MC01OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc7Q1+qbsXM+RYasCMTgQrD3XOXak0qiAa7ZFsfdx/Wq91ZWQaiEch/jnPfV jBy0IFDdKAmJhfguTm7LZTAyI3yx3rWrJZP1uOn3wCYqBds9SLloP5mshUyLsF7E jZ2+Mf0R4jajslPVahMc4patCirCQgVQ+oOHJmSkmww+ff/E06WWNYD7siBt3Cx8 Gf8G0iKqNEceHOidAIQT34trpdf8VVDiTMD0qxOrWeQ+ec8+T602L0s+xsKloAsg P80nnWpN2lan06QYD6ZyEoKuXEzGHJj90OpqVoflG1cki35U+nZosu0V8VaeRqDi Ei9FgBJKHZib+HKY3la1gaQcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh70OKC 3qhOW/06dmvgUDQUMRsHMB8GA1UdIwQYMBaAFI9ZyP1aC1qZqwQAZEI6v02wtOCG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQ3QS83OTQ4RUExQzFE QTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdwbXJCQUJrUWpxX1RiQzA0 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxbklfVm9MV3BtckJBQmtRanFfVGJDMDRJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQ3QS83OTQ4RUExQzFEQTkxMUUyQkExNDg0QTQwOEIwMkNEMi9qMW5JX1ZvTFdw bXJCQUJrUWpxX1RiQzA0SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACzjZFaPMLdQYPweB30vATXoUTWHKWDpgDzdBC10SkOXjS9bja8xW7 QBIP8lszZgt/bXmPEoY5MexgT2mjNFvll+/GgdpO7G6qnXeHw4RsZJ0F1cLHviLH z/h8wiBnPRh7pntEl7KzD3PRuG4g/0el5qo71BlMFBOtLoTlsSdXCzoySaOPJrEM MYQSB2zVCzmTOd6XvaWxj40XWHoOK00AElpV6exH4a68cpo0svdlNvdZPSllbOiJ BgXLbUgFoxzULTIhho4aYkLf/TfEXKRjNxCBCPP+zPGAOjYkh9BJiqHStTQ+HydF Q4wovGV5br0PQLn4DtMzgLSBRgGKQaa1 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:57 2025 by rpki-client