$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft File: JCmj7lCI89RTcqjjs2g0x16ubSk.mft (raw, json) Hash identifier: JmIknJyLlLRlVcRzw/v4nJhKb3o5rmVpnLabcU5tTOU= Subject key identifier: 07:20:41:EC:2C:F0:2E:6A:AD:A6:67:D0:8A:88:82:4C:F7:4E:9F:7C Authority key identifier: 24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 Certificate issuer: /CN=A91EE96E/serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft Manifest number: 84 Signing time: Sun 19 Oct 2025 10:01:16 +0000 Manifest this update: Sun 19 Oct 2025 10:01:15 +0000 Manifest next update: Sun 26 Oct 2025 10:01:15 +0000 Files and hashes: 1: JCmj7lCI89RTcqjjs2g0x16ubSk.crl (hash: mBIYU3AVRVM+sF4n2fBDRJCy7GhwUD6EHSDZx4F/4Ek=) 2: 92B377C82CB011F0A2E86B16C4F9AE02.roa (hash: FoDHZvXeH5e/XFJzf3AymBW0SIuGnIL2DXJhgfsRixg=) 3: 7F639A182CB011F08B722116C4F9AE02.roa (hash: 8SOJ6SdOtJ/q3NwLkWGRY6LjHM44wHGZjzKG2cwDOuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE96E, serialNumber=2429A3EE5088F3D45372A8E3B36834C75EAE6D29 Validity Not Before: Oct 19 10:01:15 2025 GMT Not After : Oct 26 10:01:15 2025 GMT Subject: CN=68f4b6ec-5377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:8a:2f:62:bc:61:3e:bd:bf:2d:dc:95:43: bc:14:7d:0c:8b:92:96:21:96:4c:fe:07:ac:9f:97: 15:42:42:ca:bb:66:c3:95:4a:f3:11:6d:62:f5:b8: f4:46:85:d0:9e:7f:36:a7:46:3f:06:f7:b5:1c:be: 28:85:33:2a:8c:c4:3e:b6:57:b1:24:e9:18:f2:4f: 88:a6:1f:1f:10:b8:82:24:95:49:fd:ba:59:e1:b3: 91:f5:b8:e9:0a:05:07:97:05:28:ed:eb:39:22:8d: 4d:76:eb:43:86:3d:63:be:28:37:5a:25:fd:c8:e2: 5a:6c:77:28:27:56:a3:e8:a8:11:1a:a5:6c:51:ea: 91:27:48:b7:7d:55:59:44:36:88:37:ac:ec:97:21: fa:34:df:0e:c2:9d:49:01:c0:62:46:1d:49:74:36: ab:6c:30:09:c1:43:e1:c5:c9:34:ae:68:97:ef:45: 0d:a2:22:58:06:3e:2f:ab:f2:46:c6:8e:20:2c:44: cd:4c:44:ac:cd:d4:21:df:73:b0:06:4a:81:30:d2: d4:89:d2:8e:92:1b:48:69:b0:91:08:01:a7:ae:12: 80:06:a6:41:a9:b8:f1:98:cf:83:3c:c4:d5:18:ac: 61:40:02:3f:d8:1a:d3:44:9f:43:24:87:69:c0:49: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:20:41:EC:2C:F0:2E:6A:AD:A6:67:D0:8A:88:82:4C:F7:4E:9F:7C X509v3 Authority Key Identifier: keyid:24:29:A3:EE:50:88:F3:D4:53:72:A8:E3:B3:68:34:C7:5E:AE:6D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCmj7lCI89RTcqjjs2g0x16ubSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE96E/23D2F16EEC2111EFA355605FC4F9AE02/JCmj7lCI89RTcqjjs2g0x16ubSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ea:5d:99:8b:db:70:e0:cb:78:f6:d6:ee:66:67:8b:02:ef: 4b:3f:3a:83:f7:79:6c:e4:fe:3e:94:f8:9f:18:97:8a:43:24: dc:68:a1:0a:2f:e5:69:b9:c4:85:d3:c3:4a:72:49:9e:62:d6: 4e:32:24:45:5d:5a:8d:5f:4f:7a:7d:1b:38:40:97:a8:c8:d0: 84:1b:da:bc:72:2b:4e:d3:36:a8:b6:fe:2a:0c:eb:47:95:6d: 04:cd:30:f9:52:3f:e1:d5:bc:1a:66:86:b2:be:4a:af:42:bb: 35:07:2d:4f:63:4c:06:2e:0b:3b:2b:aa:61:a9:1b:30:06:62: d9:d2:95:ab:de:06:ae:4e:6f:11:2f:07:a5:90:a3:49:2d:fe: 2d:37:d2:89:59:1d:2d:f1:6b:2b:66:2f:9f:a9:4e:04:b6:64: 75:4a:0c:8d:2b:82:77:d3:c3:a6:b1:31:61:3a:cf:78:22:5a: e0:32:7e:dc:b7:2e:7a:a0:7a:38:95:60:4d:19:94:6b:92:e8: 72:20:cc:ad:15:ca:5d:f1:b8:02:31:cd:34:76:79:95:35:31: 9e:e5:29:ab:19:cb:68:59:46:38:25:86:d3:8d:b1:8f:16:81: 7f:52:78:cf:2d:e7:ac:c4:42:51:82:69:5b:55:8c:cf:5f:99: c4:84:40:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5NkUxMTAvBgNVBAUTKDI0MjlBM0VFNTA4OEYzRDQ1MzcyQThFM0IzNjgzNEM3 NUVBRTZEMjkwHhcNMjUxMDE5MTAwMTE1WhcNMjUxMDI2MTAwMTE1WjAYMRYwFAYD VQQDEw02OGY0YjZlYy01Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKGKL2K8YT69vy3clUO8FH0Mi5KWIZZM/gesn5cVQkLKu2bDlUrzEW1i9bj0 RoXQnn82p0Y/Bve1HL4ohTMqjMQ+tlexJOkY8k+Iph8fELiCJJVJ/bpZ4bOR9bjp CgUHlwUo7es5Io1NdutDhj1jvig3WiX9yOJabHcoJ1aj6KgRGqVsUeqRJ0i3fVVZ RDaIN6zslyH6NN8Owp1JAcBiRh1JdDarbDAJwUPhxck0rmiX70UNoiJYBj4vq/JG xo4gLETNTESszdQh33OwBkqBMNLUidKOkhtIabCRCAGnrhKABqZBqbjxmM+DPMTV GKxhQAI/2BrTRJ9DJIdpwEmewQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcgQews 8C5qraZn0IqIgkz3Tp98MB8GA1UdIwQYMBaAFCQpo+5QiPPUU3Ko47NoNMderm0p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTk2RS8yM0QyRjE2RUVD MjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5UlRjcWpqczJnMHgxNnVi U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pDbWo3bENJODlSVGNxampzMmcweDE2dWJTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTk2RS8yM0QyRjE2RUVDMjExMUVGQTM1NTYwNUZDNEY5QUUwMi9KQ21qN2xDSTg5 UlRjcWpqczJnMHgxNnViU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6l2Zi9tw4Mt49tbuZmeLAu9LPzqD93ls5P4+lPifGJeKQyTcaKEK L+VpucSF08NKckmeYtZOMiRFXVqNX096fRs4QJeoyNCEG9q8citO0zaotv4qDOtH lW0EzTD5Uj/h1bwaZoayvkqvQrs1By1PY0wGLgs7K6phqRswBmLZ0pWr3gauTm8R LwelkKNJLf4tN9KJWR0t8WsrZi+fqU4EtmR1SgyNK4J308OmsTFhOs94IlrgMn7c ty56oHo4lWBNGZRrkuhyIMytFcpd8bgCMc00dnmVNTGe5SmrGctoWUY4JYbTjbGP FoF/UnjPLeesxEJRgmlbVYzPX5nEhEB9 -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:12 2025 by rpki-client