$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: g0JBrDi2XbBg7R5pdCIzzhrfZ5ZkpPcwaFBIWw73BjY= Subject key identifier: 3D:D9:69:4F:31:8A:91:CF:FA:34:D4:A9:E7:83:E6:60:8E:B0:42:8D Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A29 Signing time: Sat 18 Oct 2025 20:46:18 +0000 Manifest this update: Sat 18 Oct 2025 20:46:18 +0000 Manifest next update: Sat 25 Oct 2025 20:46:18 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: g5IHidC3Qg5XAbisIhaSi8aV8isuiUCAVktmfzJz0iw=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Oct 18 20:46:18 2025 GMT Not After : Oct 25 20:46:18 2025 GMT Subject: CN=68f3fc9a-0f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:34:1b:02:d9:0c:f2:aa:bc:ae:7d:54:f7: 6e:df:92:d7:75:2e:e3:d3:97:f8:cd:ab:85:b6:90: 8c:06:6c:f4:b8:dc:b8:79:86:f0:42:05:1e:7e:bf: d6:7e:9b:60:a7:00:72:7f:01:8d:8b:f8:61:f5:ef: 04:13:aa:6f:fa:0b:3d:5d:a1:e7:d0:af:7e:ac:bc: e9:5b:ac:3c:02:8f:4c:00:b7:c9:e6:d6:35:b2:9a: b0:87:ac:76:64:e9:3a:c0:cf:33:0f:74:de:f2:4f: 6a:97:42:9d:ef:55:e2:5e:0b:a7:ae:55:d2:4b:7a: 27:50:19:55:81:9f:de:4d:c7:27:23:c7:40:83:d6: 08:93:8c:2d:d4:85:4b:28:80:97:0e:84:42:50:3d: f9:24:c9:f4:95:91:da:a9:73:f2:29:73:b2:0c:6d: 0c:d7:bd:c7:ab:ac:41:cd:af:9e:82:93:7d:e1:57: 50:78:ea:71:ef:94:24:16:68:83:cc:51:a3:5d:f6: 7b:72:46:9b:d1:6f:4f:a1:6d:61:19:97:97:d1:8c: d9:1f:2c:51:2c:73:03:f6:a6:e6:cd:86:90:24:e8: d6:6b:d7:83:38:25:71:29:e1:63:79:95:96:e6:94: 31:37:b6:43:86:73:a7:cc:b8:4d:73:8d:33:af:ed: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D9:69:4F:31:8A:91:CF:FA:34:D4:A9:E7:83:E6:60:8E:B0:42:8D X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c9:b0:37:29:b5:1f:b1:cf:65:c3:f8:e0:8e:93:1f:10:3d: aa:48:c4:ef:8f:34:d4:24:81:5a:4c:27:5e:25:57:c4:91:2e: 76:43:19:0f:56:8a:72:36:2e:2e:4b:90:2a:06:de:78:16:e7: 6a:91:fc:e5:0e:6b:2b:e2:8a:ed:a6:85:36:3f:df:7a:35:49: 2d:24:e9:4e:76:ab:c9:e4:6f:ff:8b:d4:b9:49:68:78:60:b5: 6e:48:e2:a3:7c:b2:65:af:b5:24:1b:0d:6a:12:02:b1:4d:8a: 45:21:da:56:07:26:db:59:a7:11:83:25:cf:41:26:da:ae:94: e9:7c:0f:b3:45:02:2d:1f:84:b2:9e:76:28:7c:de:7a:e6:9c: 6a:6b:f1:de:e7:48:65:e7:cb:39:e9:90:10:ec:f5:0c:ba:e3: 91:78:b5:52:11:77:41:d7:d6:2e:34:2e:61:d1:61:d8:e7:82: 73:7e:68:b8:76:9d:ea:8e:5a:4d:b0:81:4b:47:27:18:c3:d4: 2d:11:69:f6:bf:87:bd:b4:9c:c9:8b:1d:9b:e3:50:ce:b9:2c: a4:42:5f:4a:9e:2a:ab:9e:73:ad:0e:1e:e5:5f:bc:89:a2:96: 45:0a:dc:bd:bd:6f:ad:54:0d:4b:de:a1:f0:c7:58:fe:9f:52: 8f:66:35:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUxMDE4MjA0NjE4WhcNMjUxMDI1MjA0NjE4WjAYMRYwFAYD VQQDEw02OGYzZmM5YS0wZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOI0GwLZDPKqvK59VPdu35LXdS7j05f4zauFtpCMBmz0uNy4eYbwQgUefr/W fptgpwByfwGNi/hh9e8EE6pv+gs9XaHn0K9+rLzpW6w8Ao9MALfJ5tY1spqwh6x2 ZOk6wM8zD3Te8k9ql0Kd71XiXgunrlXSS3onUBlVgZ/eTccnI8dAg9YIk4wt1IVL KICXDoRCUD35JMn0lZHaqXPyKXOyDG0M173Hq6xBza+egpN94VdQeOpx75QkFmiD zFGjXfZ7ckab0W9PoW1hGZeX0YzZHyxRLHMD9qbmzYaQJOjWa9eDOCVxKeFjeZWW 5pQxN7ZDhnOnzLhNc40zr+1CkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3ZaU8x ipHP+jTUqeeD5mCOsEKNMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiybA3KbUfsc9lw/jgjpMfED2qSMTvjzTUJIFaTCdeJVfEkS52QxkP VopyNi4uS5AqBt54FudqkfzlDmsr4ortpoU2P996NUktJOlOdqvJ5G//i9S5SWh4 YLVuSOKjfLJlr7UkGw1qEgKxTYpFIdpWBybbWacRgyXPQSbarpTpfA+zRQItH4Sy nnYofN565pxqa/He50hl58s56ZAQ7PUMuuOReLVSEXdB19YuNC5h0WHY54Jzfmi4 dp3qjlpNsIFLRycYw9QtEWn2v4e9tJzJix2b41DOuSykQl9KniqrnnOtDh7lX7yJ opZFCty9vW+tVA1L3qHwx1j+n1KPZjWY -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:53 2025 by rpki-client