$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft File: jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json) Hash identifier: sZ2gMo6PEdv7EHazQTE0hBHxMi4Gv97f6oL4I3QiLFM= Subject key identifier: 90:80:10:B0:48:3A:49:87:A4:09:B5:39:26:52:FC:DA:0B:E9:9D:41 Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 Certificate issuer: /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft Manifest number: 0B5A Signing time: Tue 04 Nov 2025 19:14:28 +0000 Manifest this update: Tue 04 Nov 2025 19:14:28 +0000 Manifest next update: Tue 11 Nov 2025 19:14:28 +0000 Files and hashes: 1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: F+T1epPEZ5QxbGJFlUyGaQW4prMKP4FW6BRQcQBVDZU=) 2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: WrNvje3c+z7lsqTQqXn/sqPriUfd4/uYt7v0A72LhYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566 Validity Not Before: Nov 4 19:14:28 2025 GMT Not After : Nov 11 19:14:28 2025 GMT Subject: CN=690a5094-28bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:1e:c0:30:83:83:36:cf:b7:5f:9b:79:1d: b0:00:ad:a7:d6:cf:f7:e6:c6:46:98:3c:40:54:dc: 89:67:a8:47:ff:a2:97:15:8e:11:fe:de:be:5e:37: eb:bf:f1:ab:ee:65:1a:5c:50:46:d6:bd:1e:73:e4: 63:c4:49:f4:25:05:fa:ec:6c:f8:b8:b3:1c:9f:05: 52:02:fb:de:0b:89:31:39:9f:3e:26:b9:a0:3e:ee: a1:7b:f6:71:a0:27:ac:18:83:60:06:de:63:b9:e7: b6:bc:28:20:7c:bd:e6:17:06:07:33:79:16:99:1f: 14:a5:0d:ec:bf:4f:1c:24:62:3f:6f:33:11:c8:be: 2f:f0:35:56:60:ad:fa:aa:c5:10:fc:26:94:7e:d1: c8:39:d8:67:10:b0:d3:9e:ea:64:57:4f:49:ac:0e: 07:f4:61:63:2d:60:d4:49:3c:41:37:44:48:b2:04: 85:3d:96:dc:ea:d1:a4:ec:13:31:fe:71:60:5a:ee: 5a:04:9d:d2:1f:b9:34:1d:6e:11:29:55:4c:f3:93: 20:00:ea:83:1f:9c:24:f2:b6:28:49:50:02:6c:03: 15:47:e6:78:67:9c:18:f2:d3:be:1a:a6:0f:23:48: 9a:b2:13:78:40:06:14:8d:c1:8e:1a:64:e4:eb:24: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:10:B0:48:3A:49:87:A4:09:B5:39:26:52:FC:DA:0B:E9:9D:41 X509v3 Authority Key Identifier: keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:b7:cc:28:f3:3c:8e:a9:dd:8f:de:87:1b:bd:2c:64:9f: a7:74:30:9f:3f:16:d8:f5:46:6b:9c:28:1a:24:46:21:de:26: 51:17:44:b5:3e:13:ba:a6:5f:4d:15:d9:ea:85:f0:71:a5:3d: 7c:8c:22:31:d5:66:95:cd:5c:c2:f3:c4:8f:a4:b3:32:fd:69: 35:f2:21:f9:af:d2:f1:37:8d:1a:2d:fa:5c:79:22:13:59:de: e7:65:95:c3:cf:68:59:e9:3c:b2:b5:28:83:89:14:43:e2:31: 70:0d:96:2b:5b:21:aa:52:2d:33:a3:90:8d:63:cc:4c:a6:15: c4:47:5d:f3:d0:40:95:0d:2a:82:c0:6f:d0:34:9a:b2:30:68: d8:3a:dc:76:a1:25:9e:a2:35:0f:79:d8:3a:2f:56:90:62:64: 0a:18:8f:20:56:89:ea:69:de:ad:58:56:ca:7b:4e:28:44:13: ef:e6:68:69:bb:bc:b1:3e:27:90:ac:ae:3e:1d:21:9e:5b:ac: 69:75:d7:64:30:ae:3a:cb:36:40:aa:b4:84:f7:b3:14:58:e7: 8e:c9:18:60:48:47:aa:0d:ae:bd:cb:85:f4:15:02:81:9a:45: bd:56:d1:ec:6e:c0:2b:b7:db:2b:23:18:d8:49:73:8a:19:73: 31:e6:77:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx N0MyMDY1NjYwHhcNMjUxMTA0MTkxNDI4WhcNMjUxMTExMTkxNDI4WjAYMRYwFAYD VQQDEw02OTBhNTA5NC0yOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoiwewDCDgzbPt1+beR2wAK2n1s/35sZGmDxAVNyJZ6hH/6KXFY4R/t6+Xjfr v/Gr7mUaXFBG1r0ec+RjxEn0JQX67Gz4uLMcnwVSAvveC4kxOZ8+JrmgPu6he/Zx oCesGINgBt5juee2vCggfL3mFwYHM3kWmR8UpQ3sv08cJGI/bzMRyL4v8DVWYK36 qsUQ/CaUftHIOdhnELDTnupkV09JrA4H9GFjLWDUSTxBN0RIsgSFPZbc6tGk7BMx /nFgWu5aBJ3SH7k0HW4RKVVM85MgAOqDH5wk8rYoSVACbAMVR+Z4Z5wY8tO+GqYP I0iashN4QAYUjcGOGmTk6yQ62QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCAELBI OkmHpAm1OSZS/NoL6Z1BMB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx NU9oMGp0NzlQU2dYd2daV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+7fMKPM8jqndj96HG70sZJ+ndDCfPxbY9UZrnCgaJEYh3iZRF0S1 PhO6pl9NFdnqhfBxpT18jCIx1WaVzVzC88SPpLMy/Wk18iH5r9LxN40aLfpceSIT Wd7nZZXDz2hZ6TyytSiDiRRD4jFwDZYrWyGqUi0zo5CNY8xMphXER13z0ECVDSqC wG/QNJqyMGjYOtx2oSWeojUPedg6L1aQYmQKGI8gVonqad6tWFbKe04oRBPv5mhp u7yxPieQrK4+HSGeW6xpdddkMK46yzZAqrSE97MUWOeOyRhgSEeqDa69y4X0FQKB mkW9VtHsbsArt9srIxjYSXOKGXMx5nee -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:26 2025 by rpki-client