$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: MAa/ZoROAaUF2Y9RH2tM/lYhWXVRnioYMI3WZSVaLUA= Subject key identifier: C0:4D:79:14:0F:1F:0A:B3:0E:E5:B0:DB:1A:CB:BD:48:39:84:30:38 Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 1C Signing time: Sun 19 Oct 2025 11:24:59 +0000 Manifest this update: Sun 19 Oct 2025 11:24:58 +0000 Manifest next update: Sun 26 Oct 2025 11:24:58 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: SXz92W2lzVIRSPDB8tRDVqsfa3C9Zet6agCNyq+0IhY=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Oct 19 11:24:58 2025 GMT Not After : Oct 26 11:24:58 2025 GMT Subject: CN=68f4ca8b-82f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:0d:c9:85:c2:36:7e:2c:95:f5:19:fb:41: b7:30:22:fd:1f:ec:2d:c0:97:4b:a1:63:ac:cd:13: 59:b3:36:bd:07:49:b4:da:70:c4:95:e5:b2:37:dc: b6:56:c1:8b:86:c2:4f:c6:0e:ee:fb:af:d8:dd:da: 62:87:bd:23:3b:ba:df:38:4b:7b:63:67:c6:60:df: dc:80:66:59:a7:ed:e5:cc:b6:a2:cb:25:5a:19:93: 15:19:ad:a8:2a:ed:27:93:fc:9e:85:e9:2b:dd:29: 1b:a3:d8:9a:6f:bb:a5:bb:42:76:56:0f:ed:08:bf: 67:a2:d1:9b:c0:35:90:74:48:bd:59:a4:db:06:92: 9e:d0:86:d4:17:c2:94:ba:cd:77:6d:c2:da:08:be: ef:f5:67:a9:bb:78:a1:40:28:3f:bb:02:98:4f:66: 0d:c9:d3:0d:38:f8:a6:99:f9:d9:26:89:7c:9b:8b: e6:c9:0c:9b:51:df:0e:6b:3b:fa:8b:68:e7:14:33: 3c:36:2a:a7:12:c7:a0:d4:9f:ea:0f:82:b5:7a:43: 18:21:f7:35:d6:f3:db:c7:98:c2:c8:5f:23:d8:b9: 26:be:0e:53:bb:92:c2:67:fc:a2:b4:ef:35:18:d8: 02:c4:4c:42:4f:69:65:49:e0:72:66:1f:29:ea:10: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4D:79:14:0F:1F:0A:B3:0E:E5:B0:DB:1A:CB:BD:48:39:84:30:38 X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:98:b0:59:a1:f3:1c:92:5e:40:5a:7b:b4:ce:13:db:e6:91: 87:b2:9e:28:d9:b1:7e:d8:59:f5:2e:40:2e:34:84:8e:aa:d1: 90:a3:dc:41:e1:00:93:12:9d:f5:89:33:17:13:f6:17:2d:be: 5d:b8:66:46:5d:d8:99:b1:31:d6:7e:9f:81:ef:3d:7f:90:a9: 35:80:79:60:9d:c7:65:3d:62:73:5b:3d:1d:ad:97:e3:fd:2f: 43:67:ef:b6:65:10:cd:27:ad:c7:5a:13:90:55:a0:d0:99:b0: df:24:54:5b:13:2b:6e:9f:92:c3:ba:b7:20:3c:34:29:92:e4: 43:57:5e:03:21:69:63:32:83:91:8d:60:8a:4b:63:8a:dc:8b: d3:91:ed:a0:cf:1e:37:78:43:70:da:40:cb:cf:ed:4a:40:a3: 2c:c6:3d:86:08:d0:ef:9a:79:09:02:00:f9:37:13:70:1a:a9: 1d:0c:da:21:bb:7b:ec:ee:ed:dc:54:b5:62:f0:1a:31:0a:b9: 21:5c:85:e6:50:b3:c2:60:16:eb:96:f8:4f:0b:0f:c8:c2:4e: b8:e9:48:d7:33:a6:de:0e:03:33:97:74:34:b6:5c:39:a3:5a: 7c:c1:53:d5:8b:44:cc:6a:4b:84:9b:8f:42:47:06:88:c3:9d: 7c:ea:ab:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTEwMTkxMTI0NThaFw0yNTEwMjYxMTI0NThaMBgxFjAUBgNV BAMTDTY4ZjRjYThiLTgyZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWZA3JhcI2fiyV9Rn7QbcwIv0f7C3Al0uhY6zNE1mzNr0HSbTacMSV5bI33LZW wYuGwk/GDu77r9jd2mKHvSM7ut84S3tjZ8Zg39yAZlmn7eXMtqLLJVoZkxUZragq 7SeT/J6F6SvdKRuj2Jpvu6W7QnZWD+0Iv2ei0ZvANZB0SL1ZpNsGkp7QhtQXwpS6 zXdtwtoIvu/1Z6m7eKFAKD+7AphPZg3J0w04+KaZ+dkmiXybi+bJDJtR3w5rO/qL aOcUMzw2KqcSx6DUn+oPgrV6Qxgh9zXW89vHmMLIXyPYuSa+DlO7ksJn/KK07zUY 2ALETEJPaWVJ4HJmHynqEGM5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwE15FA8f CrMO5bDbGsu9SDmEMDgwHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyYsFmh8xySXkBae7TOE9vmkYeynijZsX7YWfUuQC40hI6q0ZCj3EHh AJMSnfWJMxcT9hctvl24ZkZd2JmxMdZ+n4HvPX+QqTWAeWCdx2U9YnNbPR2tl+P9 L0Nn77ZlEM0nrcdaE5BVoNCZsN8kVFsTK26fksO6tyA8NCmS5ENXXgMhaWMyg5GN YIpLY4rci9OR7aDPHjd4Q3DaQMvP7UpAoyzGPYYI0O+aeQkCAPk3E3AaqR0M2iG7 e+zu7dxUtWLwGjEKuSFcheZQs8JgFuuW+E8LD8jCTrjpSNczpt4OAzOXdDS2XDmj WnzBU9WLRMxqS4Sbj0JHBojDnXzqq6c= -----END CERTIFICATE-----Generated at Tue Oct 21 03:25:29 2025 by rpki-client