$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: VlvckeHnxhzVRzC3RlmAmaspohPEcXoKvVsq9yIwnEI= Subject key identifier: D8:B9:3A:12:84:A6:8A:E2:1B:16:FD:27:B6:14:1D:79:E8:4A:16:D4 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0DB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0DA8 Signing time: Sat 18 Oct 2025 18:34:50 +0000 Manifest this update: Sat 18 Oct 2025 18:34:50 +0000 Manifest next update: Sat 25 Oct 2025 18:34:50 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: 950L2vwTv41PnBAC410f3xPca2ZbQW+oV1Ak8PigrPA=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: rQKpubYv7cW6+A5yMDDdgzCiTmEdYXOtyG9cRX0uQPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3504 (0xdb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Oct 18 18:34:50 2025 GMT Not After : Oct 25 18:34:50 2025 GMT Subject: CN=68f3ddca-18ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:28:b7:b0:c6:13:f4:89:d4:f9:77:e5:4f: c8:de:f4:29:a2:d4:2b:b6:af:3b:da:ea:38:c6:97: ba:17:c8:dc:fb:3f:f5:97:07:cb:36:cb:27:4f:12: ba:4a:73:06:94:13:d0:96:5d:3e:b5:38:80:79:7b: 21:8b:8e:ae:f3:20:5a:cb:58:56:4a:66:58:6d:27: 0f:aa:4f:e7:53:36:0d:cd:74:a3:b6:1b:98:fb:e6: a0:43:09:84:30:1b:03:c1:b4:37:ca:5b:fe:fd:43: 3a:e0:ea:b7:bd:14:ed:c4:f6:03:e3:05:c9:d2:0f: 26:de:e0:8f:14:1f:cb:1f:23:88:fd:5d:0d:6e:45: 1c:66:a4:e1:2a:0c:c9:ae:4a:01:47:cb:f5:ee:93: 0f:bc:3f:10:3d:17:be:d2:18:99:5d:56:a9:dc:b4: d1:d8:73:a3:8c:0f:ea:9d:89:cb:e1:db:e6:3e:bf: 6c:8c:e4:d7:ef:87:07:95:b5:a3:ac:56:06:71:e8: 69:88:d6:39:07:18:7a:f7:87:1d:cc:c4:a2:f2:ce: f3:40:1b:81:46:58:e9:0c:92:bb:66:3a:63:34:e2: 55:de:b2:e9:75:9f:92:0d:f7:b1:b6:bc:15:f3:f2: 9a:84:d9:67:0d:39:23:5c:be:25:70:63:79:0a:a6: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:3A:12:84:A6:8A:E2:1B:16:FD:27:B6:14:1D:79:E8:4A:16:D4 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:99:22:2b:c4:bd:87:86:e7:1e:f9:88:d8:66:87:4c:2e: 51:00:86:1e:df:c7:44:7b:31:c7:c6:90:12:32:2a:c2:02:5f: e2:e1:80:ab:4b:ae:1c:61:b6:98:a2:93:87:fd:a1:68:c8:42: 7e:88:0b:d6:ce:ea:0b:b7:cb:b3:a8:e6:a5:cd:6f:41:fd:db: f3:11:7b:55:a9:98:6c:10:ea:fd:d5:7b:ef:c9:a3:2a:d4:d7: 54:bc:4c:18:55:71:d5:bc:c7:69:71:97:53:13:05:af:b8:15: 6c:e2:5a:69:7c:50:30:9d:4c:d2:22:09:a3:5b:64:a7:8e:38: 6c:76:e8:2b:1e:e2:e5:6b:97:47:34:28:68:71:aa:d4:eb:a9: 62:c5:78:d0:f2:da:fb:62:c7:62:71:3a:d2:d8:01:2b:65:a8: 13:8b:36:ca:85:74:ca:9f:32:7d:14:37:35:95:8b:4c:12:f8: b1:ca:a9:f7:f2:d5:69:f5:c2:f2:e6:d7:67:7a:ec:be:41:5e: 76:c3:6a:28:40:8f:37:1b:1d:97:20:03:33:bd:8d:37:01:ab: ba:bc:bc:d1:00:ba:ee:5d:af:1a:a7:f3:59:56:79:54:66:3d: b3:b7:06:18:a0:7f:61:fc:a8:c4:47:0f:57:dc:35:88:fa:8b: 08:63:db:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUxMDE4MTgzNDUwWhcNMjUxMDI1MTgzNDUwWjAYMRYwFAYD VQQDEw02OGYzZGRjYS0xOGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6Iot7DGE/SJ1Pl35U/I3vQpotQrtq872uo4xpe6F8jc+z/1lwfLNssnTxK6 SnMGlBPQll0+tTiAeXshi46u8yBay1hWSmZYbScPqk/nUzYNzXSjthuY++agQwmE MBsDwbQ3ylv+/UM64Oq3vRTtxPYD4wXJ0g8m3uCPFB/LHyOI/V0NbkUcZqThKgzJ rkoBR8v17pMPvD8QPRe+0hiZXVap3LTR2HOjjA/qnYnL4dvmPr9sjOTX74cHlbWj rFYGcehpiNY5Bxh694cdzMSi8s7zQBuBRljpDJK7ZjpjNOJV3rLpdZ+SDfextrwV 8/KahNlnDTkjXL4lcGN5CqbRPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi5OhKE poriGxb9J7YUHXnoShbUMB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApZ5kiK8S9h4bnHvmI2GaHTC5RAIYe38dEezHHxpASMirCAl/i4YCr S64cYbaYopOH/aFoyEJ+iAvWzuoLt8uzqOalzW9B/dvzEXtVqZhsEOr91XvvyaMq 1NdUvEwYVXHVvMdpcZdTEwWvuBVs4lppfFAwnUzSIgmjW2SnjjhsdugrHuLla5dH NChocarU66lixXjQ8tr7YsdicTrS2AErZagTizbKhXTKnzJ9FDc1lYtMEvixyqn3 8tVp9cLy5tdneuy+QV52w2ooQI83Gx2XIAMzvY03Aau6vLzRALruXa8ap/NZVnlU Zj2ztwYYoH9h/KjERw9X3DWI+osIY9ue -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:07 2025 by rpki-client