$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft File: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft (raw, json) Hash identifier: s300hEXVN8d3qUOYueNH8TQmBYcOCqAL4/lAn6ott9o= Subject key identifier: F0:C4:4F:18:0D:FA:F3:A3:CD:E8:4D:39:80:C1:83:76:85:26:53:CD Authority key identifier: 25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB Certificate issuer: /CN=A91E9004/serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft Manifest number: 0201 Signing time: Sun 19 Oct 2025 04:44:09 +0000 Manifest this update: Sun 19 Oct 2025 04:44:08 +0000 Manifest next update: Sun 26 Oct 2025 04:44:08 +0000 Files and hashes: 1: JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl (hash: V4CVPJPSrpGVGb8ObqIZzxx9Tn53p7TPmxmfGnJdAAo=) 2: 6722D08898C711ED81343D33C4F9AE02.roa (hash: 3o5e8hyJbXp/j4htRJibyxHdp4yx/meEymWjr2xFXpw=) 3: 660CF80498C711ED81343D33C4F9AE02.roa (hash: wDHbsG2YGl+GXnSYTXXy/M2OjHqsvE/U5hf+DhsTgZo=) 4: 6696898E98C711ED81343D33C4F9AE02.roa (hash: EIHc4Dg0/wu4RlaphcEMaQew886A3AfHSeDepZKruxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9004, serialNumber=25CA44C10EA592E42B136E59D08F6751D1818FAB Validity Not Before: Oct 19 04:44:08 2025 GMT Not After : Oct 26 04:44:08 2025 GMT Subject: CN=68f46c99-db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:a4:7a:3f:c3:79:47:5e:ce:84:36:0c:e0: 90:87:eb:1d:9e:24:ab:44:28:0f:a3:b6:e3:71:b6: 5e:16:01:8b:2e:eb:d6:63:19:f0:b3:9c:5b:4e:1e: b0:d2:be:95:c9:4b:c9:2d:ee:c3:32:ee:d7:da:e5: e6:b8:33:4b:a8:d8:6e:29:aa:41:96:8a:be:0b:31: dc:ba:36:6b:ab:ea:c0:93:b4:fb:65:90:74:dd:4b: 60:ea:40:77:36:54:a7:3c:40:d2:90:7d:73:17:73: 45:ec:28:cd:96:68:de:9c:98:39:2d:5d:a8:5f:4a: 32:4e:e3:a7:15:ed:20:f0:dd:65:bd:ac:26:db:7a: 92:2f:ae:5c:e8:3f:b2:78:7f:c2:03:08:e9:ff:3a: 02:c6:5e:87:03:b1:7b:43:59:29:86:c4:91:93:20: fa:e6:25:e6:45:5f:30:8a:81:34:97:a2:bb:e3:0e: 64:c9:18:e4:f3:dd:0b:cb:c4:28:1f:13:a7:a0:a0: d4:a0:7a:1c:a7:96:bf:73:85:5b:da:0a:19:59:a5: 39:cc:4d:42:b7:a3:fd:73:2c:6b:d1:97:53:50:9a: 01:58:5f:0c:6d:c1:bd:7e:c8:4f:f9:e2:3b:75:76: f7:98:b8:6f:a1:68:37:f2:d6:30:dc:11:2c:31:3b: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:4F:18:0D:FA:F3:A3:CD:E8:4D:39:80:C1:83:76:85:26:53:CD X509v3 Authority Key Identifier: keyid:25:CA:44:C1:0E:A5:92:E4:2B:13:6E:59:D0:8F:67:51:D1:81:8F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9004/5B82EA9098C411ED9871E431C4F9AE02/JcpEwQ6lkuQrE25Z0I9nUdGBj6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:44:8f:15:63:68:53:c9:7c:6e:e7:64:fb:30:67:55:9c:14: 29:55:e9:01:47:de:b4:05:40:fa:1e:27:43:9f:f6:86:07:f4: 93:86:8c:ee:c4:a5:84:ca:41:af:0c:31:87:89:76:13:08:d7: f1:80:ae:93:54:c5:f4:48:03:73:1a:76:ab:2c:d5:57:5f:93: 1e:70:12:09:10:36:65:37:26:26:1f:e9:29:64:78:7e:9d:f4: 21:55:e0:d0:d4:b0:c1:51:bd:72:10:8c:6f:53:db:1b:85:28: 80:30:5b:b7:dc:8f:ce:1c:1b:7e:d1:17:31:de:36:b3:22:cb: c7:1f:b0:1d:a6:40:49:fc:6c:40:9b:d9:5c:a7:97:91:e3:a2: 80:c7:b9:53:a0:68:f4:38:50:cb:63:56:0b:33:98:21:8e:4f: fe:5a:1f:ef:ad:ef:ae:9a:fe:02:15:46:aa:55:7e:5f:52:eb: dc:48:5a:5a:f3:b7:0b:96:2e:61:b7:f8:b9:06:1a:70:a4:ca: 01:69:67:b6:e8:d3:9c:62:63:8a:9d:99:c0:02:c3:84:d9:83: 3c:74:5d:4d:aa:e7:3d:27:9d:ae:d8:0f:2f:91:f5:4a:fa:9d: 36:9b:f6:08:8c:63:16:6f:6a:58:6e:02:31:40:53:c4:e2:ec: 74:0f:12:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwMDQxMTAvBgNVBAUTKDI1Q0E0NEMxMEVBNTkyRTQyQjEzNkU1OUQwOEY2NzUx RDE4MThGQUIwHhcNMjUxMDE5MDQ0NDA4WhcNMjUxMDI2MDQ0NDA4WjAYMRYwFAYD VQQDEw02OGY0NmM5OS1kYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tikej/DeUdezoQ2DOCQh+sdniSrRCgPo7bjcbZeFgGLLuvWYxnws5xbTh6w 0r6VyUvJLe7DMu7X2uXmuDNLqNhuKapBloq+CzHcujZrq+rAk7T7ZZB03Utg6kB3 NlSnPEDSkH1zF3NF7CjNlmjenJg5LV2oX0oyTuOnFe0g8N1lvawm23qSL65c6D+y eH/CAwjp/zoCxl6HA7F7Q1kphsSRkyD65iXmRV8wioE0l6K74w5kyRjk890Ly8Qo HxOnoKDUoHocp5a/c4Vb2goZWaU5zE1Ct6P9cyxr0ZdTUJoBWF8MbcG9fshP+eI7 dXb3mLhvoWg38tYw3BEsMTtTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDETxgN +vOjzehNOYDBg3aFJlPNMB8GA1UdIwQYMBaAFCXKRMEOpZLkKxNuWdCPZ1HRgY+r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTAwNC81QjgyRUE5MDk4 QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1UXJFMjVaMEk5blVkR0Jq NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pjcEV3UTZsa3VRckUyNVowSTluVWRHQmo2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTAwNC81QjgyRUE5MDk4QzQxMUVEOTg3MUU0MzFDNEY5QUUwMi9KY3BFd1E2bGt1 UXJFMjVaMEk5blVkR0JqNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTRI8VY2hTyXxu52T7MGdVnBQpVekBR960BUD6HidDn/aGB/SThozu xKWEykGvDDGHiXYTCNfxgK6TVMX0SANzGnarLNVXX5MecBIJEDZlNyYmH+kpZHh+ nfQhVeDQ1LDBUb1yEIxvU9sbhSiAMFu33I/OHBt+0Rcx3jazIsvHH7AdpkBJ/GxA m9lcp5eR46KAx7lToGj0OFDLY1YLM5ghjk/+Wh/vre+umv4CFUaqVX5fUuvcSFpa 87cLli5ht/i5BhpwpMoBaWe26NOcYmOKnZnAAsOE2YM8dF1Nquc9J52u2A8vkfVK +p02m/YIjGMWb2pYbgIxQFPE4ux0DxIe -----END CERTIFICATE-----Generated at Mon Oct 20 14:07:44 2025 by rpki-client