$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft File: jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json) Hash identifier: PQfy8AUmiqTXRUD946+6zCuUjbRkV3QpQDlZiUF2uOU= Subject key identifier: 56:16:DF:D4:97:A9:28:26:72:81:E8:4F:87:4D:96:B7:49:5A:F6:5B Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft Manifest number: 0150 Signing time: Wed 05 Nov 2025 04:23:16 +0000 Manifest this update: Wed 05 Nov 2025 04:23:16 +0000 Manifest next update: Wed 12 Nov 2025 04:23:16 +0000 Files and hashes: 1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: dR/9XIHimD6eEahj5oWQeAKxw+pwtHDgAQ2H3f7cdTc=) 2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: Nov 5 04:23:16 2025 GMT Not After : Nov 12 04:23:16 2025 GMT Subject: CN=690ad134-9b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:de:7d:b8:c0:7a:90:b4:ab:20:e2:d9:77: 12:5a:02:19:36:7d:b3:59:60:3c:aa:fe:80:ab:49: 1e:dd:8c:92:87:8e:9a:d6:bd:86:da:09:43:ff:49: 42:44:18:95:11:4c:28:48:b1:b3:40:12:20:c2:79: 48:7c:9a:1e:8b:b9:f7:a7:46:ab:27:74:e0:d3:9c: cf:8c:4c:e1:28:4d:2d:04:e4:65:b4:95:59:16:bb: 2d:0c:d7:ee:04:f7:17:8f:28:c6:05:f0:c4:60:9a: b8:85:14:18:c3:38:d9:87:a1:d2:97:33:0e:2c:04: 81:d6:c4:c0:9a:81:73:8c:e5:32:23:27:0c:77:90: 49:cf:b7:7f:50:15:85:a8:8a:14:76:5b:2d:b4:01: 0c:f2:e8:ba:8f:71:54:74:09:46:54:97:3a:c8:17: 95:67:f1:c0:ca:00:35:57:46:ba:12:d3:13:13:9b: 33:69:1b:cd:49:1d:dc:63:fb:1c:64:05:d6:32:8c: 1e:40:2b:41:46:4e:1e:9a:70:91:5b:a4:d6:df:6d: 10:16:c5:b6:7f:87:91:67:58:5a:19:24:70:e0:b8: 43:d6:b8:4c:47:84:bc:a7:da:9b:05:3b:18:36:3b: 2b:ef:fb:86:81:d9:f4:b6:57:54:d2:23:ba:43:0c: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:16:DF:D4:97:A9:28:26:72:81:E8:4F:87:4D:96:B7:49:5A:F6:5B X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:67:15:ef:f8:28:76:1b:99:f4:f4:2b:bb:7e:04:08:8d: f7:90:4d:a9:ad:07:b6:0b:dc:43:44:14:cf:0b:25:38:a7:2a: 5f:48:cd:4f:08:2e:78:f7:94:5f:b2:db:7b:c2:69:a4:aa:de: 2a:b0:04:83:e7:3d:7b:35:99:9c:47:c9:79:09:bb:3a:e2:7e: 09:7c:26:89:62:7e:67:92:43:6d:d4:4f:8e:20:1c:64:73:fd: 87:94:68:a2:10:45:9d:31:28:e9:fb:da:aa:58:d7:20:84:e0: a7:49:54:2d:46:0b:8b:20:b9:02:84:86:00:5f:19:12:fd:21: 6c:03:08:5b:9f:2e:85:55:ed:5c:dd:12:bd:20:aa:3b:e6:70: 0c:ce:dc:a5:10:69:44:e3:61:98:09:89:dd:0f:74:96:4c:90: 69:06:19:ed:44:09:1c:17:34:e8:9d:4e:5d:24:b4:38:0c:ce: 06:6e:c6:b9:52:f5:4a:4c:8a:0c:cd:45:44:43:83:e7:ee:4f: fb:0f:ba:5c:f9:b6:2f:43:35:6c:ef:29:bc:17:13:21:b9:91: 14:72:3f:91:17:6c:0c:6c:e4:a5:48:76:20:98:56:41:8b:24: ae:3c:02:89:22:73:f5:7b:2c:05:bd:85:2c:6d:00:7e:5c:4d: 3b:26:6e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUxMTA1MDQyMzE2WhcNMjUxMTEyMDQyMzE2WjAYMRYwFAYD VQQDEw02OTBhZDEzNC05Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxo7efbjAepC0qyDi2XcSWgIZNn2zWWA8qv6Aq0ke3YySh46a1r2G2glD/0lC RBiVEUwoSLGzQBIgwnlIfJoei7n3p0arJ3Tg05zPjEzhKE0tBORltJVZFrstDNfu BPcXjyjGBfDEYJq4hRQYwzjZh6HSlzMOLASB1sTAmoFzjOUyIycMd5BJz7d/UBWF qIoUdlsttAEM8ui6j3FUdAlGVJc6yBeVZ/HAygA1V0a6EtMTE5szaRvNSR3cY/sc ZAXWMoweQCtBRk4emnCRW6TW320QFsW2f4eRZ1haGSRw4LhD1rhMR4S8p9qbBTsY Njsr7/uGgdn0tldU0iO6Qwyu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYW39SX qSgmcoHoT4dNlrdJWvZbMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzNCOC84NEE0QTEwQ0I4QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNn dEpvSEVvNTNjM0lGaW1rRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeAWcV7/godhuZ9PQru34ECI33kE2prQe2C9xDRBTPCyU4pypfSM1P CC5495Rfstt7wmmkqt4qsASD5z17NZmcR8l5Cbs64n4JfCaJYn5nkkNt1E+OIBxk c/2HlGiiEEWdMSjp+9qqWNcghOCnSVQtRguLILkChIYAXxkS/SFsAwhbny6FVe1c 3RK9IKo75nAMztylEGlE42GYCYndD3SWTJBpBhntRAkcFzTonU5dJLQ4DM4Gbsa5 UvVKTIoMzUVEQ4Pn7k/7D7pc+bYvQzVs7ym8FxMhuZEUcj+RF2wMbOSlSHYgmFZB iySuPAKJInP1eywFvYUsbQB+XE07Jm6p -----END CERTIFICATE-----Generated at Wed Nov 5 11:57:43 2025 by rpki-client