$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: 2qglK/BRNZFcEE6rxizJ8gDGyqyY1pAcVdvZjqckaCk= Subject key identifier: E9:06:1A:AF:4A:4B:06:7B:47:DC:7E:B0:E8:B6:A3:28:17:3E:DE:3E Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 6C Signing time: Sun 19 Oct 2025 10:23:55 +0000 Manifest this update: Sun 19 Oct 2025 10:23:54 +0000 Manifest next update: Sun 26 Oct 2025 10:23:54 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: +dmf/I9BODAd8K4eRP/CPfStmCt+MJYxAXp6NJ3fuiA=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: SWRmAGbxh5hY7JV5X8hEzDbtYDfPhYpW9hzMkzuDG3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Oct 19 10:23:54 2025 GMT Not After : Oct 26 10:23:54 2025 GMT Subject: CN=68f4bc3a-5778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e8:e1:fe:11:a6:39:38:2b:04:08:e5:bf:63: 16:c9:9c:42:5a:c5:f3:c1:d3:d4:8c:87:5a:74:b4: 69:a0:a3:99:28:00:d5:3f:8c:ab:d9:46:d0:92:ba: 84:29:54:52:22:e9:2b:29:11:ee:20:5b:6e:14:ad: 51:6d:e8:40:7e:ae:cb:99:4f:f7:a7:49:a8:6a:24: 89:51:98:fa:f8:29:a6:e2:12:7a:47:86:bf:96:57: 49:e9:c5:62:37:4f:ab:2d:a8:ea:93:fd:36:95:7c: d2:76:da:bb:f7:48:58:c7:56:eb:74:56:1b:96:01: 88:29:c7:f9:aa:b0:bc:7b:2a:57:7a:f5:1b:63:83: 17:7d:6d:bf:61:55:2e:85:31:68:92:f0:af:2f:93: 76:8e:83:7a:2e:45:27:f8:f5:a9:fe:ca:d6:1d:ff: 74:43:1d:21:fe:94:24:63:6f:42:50:f6:b6:cc:31: e7:b9:f4:f7:90:24:78:7f:5c:c6:f6:80:33:c2:23: 2d:1c:97:82:d1:ae:64:c6:44:af:47:ab:89:84:ae: e1:2b:cf:6d:c6:82:39:08:20:60:2c:b2:c7:58:72: 4a:4e:e7:4b:68:72:f5:c4:84:d8:14:99:8d:f7:8c: 25:30:71:bf:4a:d0:1a:91:dc:e2:9e:29:32:a9:ef: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:1A:AF:4A:4B:06:7B:47:DC:7E:B0:E8:B6:A3:28:17:3E:DE:3E X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:4b:5a:1f:ed:e7:25:36:c5:2f:52:46:d3:3b:4f:89:8d:7c: c3:8a:5e:90:ef:41:56:a1:8a:9c:42:9a:42:29:de:f2:d5:d0: a0:21:f3:5d:74:6a:0c:e9:45:7b:76:80:4c:ff:23:5e:15:95: 48:d0:fa:5f:c2:c6:09:fe:c3:81:8d:e4:cc:52:5e:2a:ab:ba: b0:4d:63:7b:de:f8:27:5c:8a:77:da:55:c9:83:6f:40:f4:9b: 23:f8:98:15:3a:46:e1:74:21:dc:ea:f7:d0:92:28:73:ab:e9: 26:47:e9:ed:c6:44:fa:0d:c3:a7:38:a6:84:f6:83:60:d3:83: 44:86:85:a5:ae:b7:ea:46:b4:25:81:96:a0:2e:d6:dc:81:6d: 6b:69:4a:90:ea:7e:ad:a0:81:2d:07:20:84:20:f9:46:87:85: aa:8f:b3:71:cf:fd:60:b3:ed:64:28:a9:28:f7:5c:e4:18:4c: 41:a1:c1:75:67:77:a3:12:fb:06:ab:7b:e7:58:60:87:89:f4: 9b:0d:d4:89:2e:79:79:66:28:fc:1c:a5:37:10:c8:a9:66:81: 5f:a7:48:65:5d:ca:22:7b:70:0f:25:2f:cd:2b:0b:3c:bc:b6: 46:81:d8:12:69:56:bb:78:57:93:b3:d6:a6:70:a9:96:68:3c: d3:46:1a:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTEwMTkxMDIzNTRaFw0yNTEwMjYxMDIzNTRaMBgxFjAUBgNV BAMTDTY4ZjRiYzNhLTU3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDw6OH+EaY5OCsECOW/YxbJnEJaxfPB09SMh1p0tGmgo5koANU/jKvZRtCSuoQp VFIi6SspEe4gW24UrVFt6EB+rsuZT/enSahqJIlRmPr4KabiEnpHhr+WV0npxWI3 T6stqOqT/TaVfNJ22rv3SFjHVut0VhuWAYgpx/mqsLx7Kld69Rtjgxd9bb9hVS6F MWiS8K8vk3aOg3ouRSf49an+ytYd/3RDHSH+lCRjb0JQ9rbMMee59PeQJHh/XMb2 gDPCIy0cl4LRrmTGRK9Hq4mEruErz23GgjkIIGAsssdYckpO50tocvXEhNgUmY33 jCUwcb9K0BqR3OKeKTKp7/e/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6QYar0pL BntH3H6w6LajKBc+3j4wHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADJLWh/t5yU2xS9SRtM7T4mNfMOKXpDvQVahipxCmkIp3vLV0KAh8110 agzpRXt2gEz/I14VlUjQ+l/Cxgn+w4GN5MxSXiqrurBNY3ve+CdcinfaVcmDb0D0 myP4mBU6RuF0Idzq99CSKHOr6SZH6e3GRPoNw6c4poT2g2DTg0SGhaWut+pGtCWB lqAu1tyBbWtpSpDqfq2ggS0HIIQg+UaHhaqPs3HP/WCz7WQoqSj3XOQYTEGhwXVn d6MS+ware+dYYIeJ9JsN1IkueXlmKPwcpTcQyKlmgV+nSGVdyiJ7cA8lL80rCzy8 tkaB2BJpVrt4V5Oz1qZwqZZoPNNGGo8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:15 2025 by rpki-client