$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft File: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft (raw, json) Hash identifier: HvMRvWBtH6NdFCMUrcMJ/VoiC95foFNcQ/xvaIubAr0= Subject key identifier: 35:52:0A:E7:0A:78:FF:83:34:3F:BD:C3:67:F4:DA:E1:18:E4:7C:43 Authority key identifier: 24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D Certificate issuer: /CN=A91E8BAF/serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Certificate serial: 34F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft Manifest number: 34DE Signing time: Sat 18 Oct 2025 15:29:06 +0000 Manifest this update: Sat 18 Oct 2025 15:29:06 +0000 Manifest next update: Sat 25 Oct 2025 15:29:06 +0000 Files and hashes: 1: JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl (hash: CfegDOwxzhU4TePMWsEnGgnuRU3XmDgHXk+HPy81Ops=) 2: F87DB8B440C811EEB681DC40C4F9AE02.roa (hash: a03YccLD26+EVq1g9SXKvWZ2v+EmXltyBYT+9f1nANI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13553 (0x34f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BAF, serialNumber=248DB1FEE5510C8A6AF85EAC810EC4CCAE8BF90D Validity Not Before: Oct 18 15:29:06 2025 GMT Not After : Oct 25 15:29:06 2025 GMT Subject: CN=68f3b242-c851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:ac:43:2f:53:81:d8:96:a6:99:e0:87:c1: 57:d9:d1:1d:2b:46:24:ff:47:35:0a:02:d3:f0:b7: b3:e7:1f:f6:fe:0c:22:ad:8d:2c:de:6a:f6:ee:b6: b5:59:ea:0a:9f:fb:a6:b1:b0:26:82:e3:eb:26:c7: 54:51:be:31:6b:f7:87:b8:3a:16:f1:25:0d:0f:fd: 55:8c:82:ea:66:d3:1d:87:b7:af:47:3d:91:3d:30: 42:57:04:15:6e:3e:88:e3:10:06:3c:bb:70:49:14: 24:5c:7c:ab:67:5a:88:d1:66:9e:bc:3e:93:5a:38: 2f:83:71:e9:0c:7e:7a:0a:a4:c1:f7:57:ae:5e:bb: d7:ac:3b:41:20:e7:69:51:ea:2b:dc:e2:e2:89:5e: 9b:99:51:d8:aa:9c:a0:1d:ed:65:3e:ee:1d:59:23: f0:a1:f7:c7:22:38:b6:c6:d5:ca:de:7d:df:ca:c5: a9:66:b7:3f:cb:2b:4c:5b:15:cb:25:39:59:c1:10: 08:0d:e4:fb:26:dc:2e:33:2f:d0:5d:4e:39:1f:ec: 70:5d:94:9a:2b:34:4e:21:7c:57:69:ba:9c:e7:83: 92:0e:81:40:4e:18:92:9b:c2:c6:46:1b:fa:da:57: 3b:46:d6:d9:e9:15:d0:38:ba:ff:4f:01:e1:dc:e4: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:52:0A:E7:0A:78:FF:83:34:3F:BD:C3:67:F4:DA:E1:18:E4:7C:43 X509v3 Authority Key Identifier: keyid:24:8D:B1:FE:E5:51:0C:8A:6A:F8:5E:AC:81:0E:C4:CC:AE:8B:F9:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BAF/32D8E22E1DAB11E2A97D23A908B02CD2/JI2x_uVRDIpq-F6sgQ7EzK6L-Q0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:a0:39:71:f4:22:5f:23:8e:bf:c9:03:bb:4f:c3:62:c6: 4d:27:9f:69:36:2b:7f:21:e8:7e:20:87:19:cb:56:da:b4:f4: d5:7c:a6:1c:e5:19:7e:a5:b8:99:6a:dc:22:44:25:67:11:6e: 26:92:21:05:97:e5:c4:c7:8a:c0:6e:71:9d:58:71:fc:c6:b0: 5f:02:4f:78:0a:89:21:41:d1:6c:4c:09:ed:fe:dc:3e:32:e2: a8:a5:83:b6:4a:95:30:43:5e:4a:5d:d5:ed:26:b8:42:5b:2a: f2:e1:95:d7:c6:5c:18:f5:43:58:0a:7b:19:84:89:58:70:45: ae:ce:3d:27:28:f9:ba:cc:98:05:fa:5a:37:d7:b7:4c:47:8b: ca:c7:d9:f5:e9:08:a2:85:16:2b:f1:57:f1:07:5e:a7:4b:bc: 50:10:18:84:3a:8e:46:6a:46:65:1f:b1:bc:f7:57:31:bb:43: ab:44:b5:01:8d:a1:30:c1:02:3e:db:97:69:d6:fe:e0:c0:57: 81:29:20:ae:36:61:da:35:19:cd:b5:50:88:2b:84:d7:53:c1: f7:d8:12:4f:be:2c:97:a0:1c:53:04:45:0b:65:8a:d0:dd:6c: 30:66:7a:7b:cf:ce:df:45:f0:77:cd:5f:d8:b1:d2:f3:23:4c: 2b:a5:86:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCQUYxMTAvBgNVBAUTKDI0OERCMUZFRTU1MTBDOEE2QUY4NUVBQzgxMEVDNEND QUU4QkY5MEQwHhcNMjUxMDE4MTUyOTA2WhcNMjUxMDI1MTUyOTA2WjAYMRYwFAYD VQQDEw02OGYzYjI0Mi1jODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDasQy9TgdiWppngh8FX2dEdK0Yk/0c1CgLT8Lez5x/2/gwirY0s3mr27ra1 WeoKn/umsbAmguPrJsdUUb4xa/eHuDoW8SUND/1VjILqZtMdh7evRz2RPTBCVwQV bj6I4xAGPLtwSRQkXHyrZ1qI0WaevD6TWjgvg3HpDH56CqTB91euXrvXrDtBIOdp Ueor3OLiiV6bmVHYqpygHe1lPu4dWSPwoffHIji2xtXK3n3fysWpZrc/yytMWxXL JTlZwRAIDeT7JtwuMy/QXU45H+xwXZSaKzROIXxXabqc54OSDoFAThiSm8LGRhv6 2lc7RtbZ6RXQOLr/TwHh3ORxsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVSCucK eP+DND+9w2f02uEY5HxDMB8GA1UdIwQYMBaAFCSNsf7lUQyKavherIEOxMyui/kN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJBRi8zMkQ4RTIyRTFE QUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJcHEtRjZzZ1E3RXpLNkwt UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJMnhfdVZSRElwcS1GNnNnUTdFeks2TC1RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJBRi8zMkQ4RTIyRTFEQUIxMUUyQTk3RDIzQTkwOEIwMkNEMi9KSTJ4X3VWUkRJ cHEtRjZzZ1E3RXpLNkwtUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCti6A5cfQiXyOOv8kDu0/DYsZNJ59pNit/Ieh+IIcZy1batPTVfKYc 5Rl+pbiZatwiRCVnEW4mkiEFl+XEx4rAbnGdWHH8xrBfAk94CokhQdFsTAnt/tw+ MuKopYO2SpUwQ15KXdXtJrhCWyry4ZXXxlwY9UNYCnsZhIlYcEWuzj0nKPm6zJgF +lo317dMR4vKx9n16QiihRYr8VfxB16nS7xQEBiEOo5GakZlH7G891cxu0OrRLUB jaEwwQI+25dp1v7gwFeBKSCuNmHaNRnNtVCIK4TXU8H32BJPviyXoBxTBEULZYrQ 3WwwZnp7z87fRfB3zV/YsdLzI0wrpYZ8 -----END CERTIFICATE-----Generated at Mon Oct 20 04:17:44 2025 by rpki-client