$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft File: jmUKcS3ITyK4m48YuGTCn53XE8U.mft (raw, json) Hash identifier: /l/3Jz2KvWfA6f3Wz5LdaqQHgfx7xQC6xOXH+PMJ37E= Subject key identifier: 48:1E:FA:47:D8:3C:D2:31:57:5E:69:69:D0:93:44:C6:51:62:14:86 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft Manifest number: 012A Signing time: Sun 19 Oct 2025 07:36:48 +0000 Manifest this update: Sun 19 Oct 2025 07:36:48 +0000 Manifest next update: Sun 26 Oct 2025 07:36:48 +0000 Files and hashes: 1: jmUKcS3ITyK4m48YuGTCn53XE8U.crl (hash: R9KX83ZymEo4nnU+5euHFZjNImrWg4MkdTLPjq7ZDY8=) 2: C9104DDAF63511EE9461F649C4F9AE02.roa (hash: CrS1BOQfUtfYsoDDfEg4MA2bZyv3T+7ETvt6uxazdh0=) 3: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (hash: k7/BYTs5AWckPfc2XRwU2AWPU1bg1726dtxN6yLvkRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Oct 19 07:36:48 2025 GMT Not After : Oct 26 07:36:48 2025 GMT Subject: CN=68f49510-48e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:65:3d:0f:bb:44:58:4f:74:5f:59:7e:03: e7:0b:46:cc:d2:19:75:90:21:e3:e3:6a:c9:7a:e8: 14:90:ff:1a:cd:e5:8d:76:9f:08:08:86:95:2e:b0: 79:32:3c:97:ac:87:eb:a3:57:96:25:aa:a9:36:57: c2:29:c2:28:1b:79:b0:0a:15:b0:ac:8a:31:9f:af: 20:d7:ed:bb:f3:31:59:6b:33:e9:24:33:91:cf:96: 39:30:e8:18:2b:4e:ce:c5:28:c5:b0:0b:f6:9c:08: bd:6b:47:02:ba:93:8b:8c:ba:6b:0f:ce:df:a8:73: 3c:06:77:9b:e7:48:35:9e:be:e8:ac:1f:c9:21:bc: f1:09:36:2c:36:e0:d9:69:90:da:10:da:56:db:32: 82:e8:a0:b7:00:ba:98:de:ac:48:1f:7b:db:ab:22: 0b:09:76:8a:87:76:e8:8f:1f:8c:4a:2f:c0:97:13: 61:6e:c8:2e:ed:ae:07:d7:77:7b:89:5c:73:71:9e: cc:a5:48:65:2a:36:91:e8:bf:d2:6e:53:2a:5f:8e: 08:eb:cf:4e:c2:f2:2e:e8:39:4c:01:3a:12:5e:08: 11:8e:fa:bc:40:45:be:8b:ad:19:0a:f0:b2:28:6b: a3:e4:f3:ca:43:af:70:72:60:f8:59:8b:15:3b:1a: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:FA:47:D8:3C:D2:31:57:5E:69:69:D0:93:44:C6:51:62:14:86 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ad:a4:6e:d5:66:b9:5f:36:e8:9c:a0:e2:d6:c3:eb:5b:1e: fe:74:b1:db:42:14:c7:41:54:f8:c0:29:82:d6:96:c8:47:29: 41:8a:fa:a1:e6:7c:76:e9:88:12:13:6b:19:3f:25:34:d9:d4: ad:45:1e:f2:d4:12:b9:1d:e6:10:6a:12:74:dc:a1:c5:e0:38: f2:97:05:02:ca:96:a3:7f:f3:92:0d:ee:e7:7b:e6:97:69:11: 30:db:98:11:a9:9e:47:a5:30:82:0a:1f:91:4a:23:8a:65:22: 2b:07:61:90:a9:1a:37:09:00:66:0e:b6:3f:e5:f7:57:b4:71: 69:65:64:2a:1c:58:97:52:0b:ba:dd:c1:27:e8:f8:fd:fc:17: 51:3a:3e:46:60:5a:d8:78:dc:83:53:52:88:5b:a8:bc:1c:e8: 37:fe:a2:b6:bd:eb:96:3a:71:92:af:49:4d:a0:02:41:3d:ed: c3:d1:34:b2:a4:ec:c6:8b:c6:25:04:d8:8a:7e:21:8f:dd:5e: 72:00:2d:3f:44:cf:be:02:8b:61:20:c3:c8:6a:12:e3:52:ed: 64:d2:f8:80:30:3a:d4:82:a8:11:e6:f0:7c:6b:d1:a3:19:f7: 0a:ef:41:bf:5e:bc:06:8d:80:29:69:c6:39:59:cb:4b:1f:5f: 10:76:8c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUxMDE5MDczNjQ4WhcNMjUxMDI2MDczNjQ4WjAYMRYwFAYD VQQDEw02OGY0OTUxMC00OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo9lPQ+7RFhPdF9ZfgPnC0bM0hl1kCHj42rJeugUkP8azeWNdp8ICIaVLrB5 MjyXrIfro1eWJaqpNlfCKcIoG3mwChWwrIoxn68g1+278zFZazPpJDORz5Y5MOgY K07OxSjFsAv2nAi9a0cCupOLjLprD87fqHM8Bneb50g1nr7orB/JIbzxCTYsNuDZ aZDaENpW2zKC6KC3ALqY3qxIH3vbqyILCXaKh3bojx+MSi/AlxNhbsgu7a4H13d7 iVxzcZ7MpUhlKjaR6L/SblMqX44I689OwvIu6DlMAToSXggRjvq8QEW+i60ZCvCy KGuj5PPKQ69wcmD4WYsVOxqVKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEge+kfY PNIxV15padCTRMZRYhSGMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0ExRS9GMDA2MkYyOEY2MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5 SzRtNDhZdUdUQ241M1hFOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgraRu1Wa5XzbonKDi1sPrWx7+dLHbQhTHQVT4wCmC1pbIRylBivqh 5nx26YgSE2sZPyU02dStRR7y1BK5HeYQahJ03KHF4DjylwUCypajf/OSDe7ne+aX aREw25gRqZ5HpTCCCh+RSiOKZSIrB2GQqRo3CQBmDrY/5fdXtHFpZWQqHFiXUgu6 3cEn6Pj9/BdROj5GYFrYeNyDU1KIW6i8HOg3/qK2veuWOnGSr0lNoAJBPe3D0TSy pOzGi8YlBNiKfiGP3V5yAC0/RM++AothIMPIahLjUu1k0viAMDrUgqgR5vB8a9Gj GfcK70G/XrwGjYApacY5WctLH18QdoyM -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:57 2025 by rpki-client