$ rpki-client -vvf rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft File: Jr1ToxmUC9VoemNFu1_hmIc453g.mft (raw, json) Hash identifier: dnGz1E4HY4VBE7YFG4/CYdpRlye7eyaPXO9PaTX6gFY= Subject key identifier: 8D:CE:E7:D0:81:2C:88:20:5A:E9:F4:8F:82:E4:0D:43:90:59:B0:49 Authority key identifier: 26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 Certificate issuer: /CN=A91584B7/serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft Manifest number: 017C Signing time: Mon 03 Nov 2025 03:44:19 +0000 Manifest this update: Mon 03 Nov 2025 03:44:18 +0000 Manifest next update: Mon 10 Nov 2025 03:44:18 +0000 Files and hashes: 1: Jr1ToxmUC9VoemNFu1_hmIc453g.crl (hash: NpeUni5uXn/zv2e8IHGqDeWdOhwboyov3dMBwBaI4Jo=) 2: 8D6378A0747D11EE96578C20C4F9AE02.roa (hash: CHOXnr1q1Ft+OfCJHHoV5TEgJwubnVFztuPcYTVOF9s=) 3: 8CF33914747D11EE96578C20C4F9AE02.roa (hash: QQ1nvLzNS3HD5jlf0kpVNmen2iw89rXFQV6oEoTmCT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91584B7, serialNumber=26BD53A319940BD5687A6345BB5FE1988738E778 Validity Not Before: Nov 3 03:44:18 2025 GMT Not After : Nov 10 03:44:18 2025 GMT Subject: CN=69082513-3de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:68:f5:58:52:d2:46:a6:f6:46:06:c3:4f: 6e:90:cb:b4:f1:51:b9:46:d6:8b:90:ad:46:1f:c1: 75:e8:78:15:9a:c3:99:21:d7:52:a1:2f:4b:26:13: 58:9c:9b:33:64:d0:56:a6:b8:04:29:ab:d4:22:86: 4e:db:3b:9d:e0:f3:7f:07:b7:33:e5:68:81:0e:19: 59:73:35:ed:f8:8b:bd:1f:1b:9f:1a:d6:53:ff:ab: df:45:fe:45:6e:21:e3:ae:7d:a4:d3:c2:89:58:a6: 49:cc:c7:42:a5:cf:1a:c2:4f:15:f7:4c:b2:17:de: 89:f6:5d:35:23:b6:d2:af:55:26:26:ff:61:cf:b5: da:53:14:f4:7c:78:cb:aa:68:40:de:a6:ec:2d:e9: a5:48:73:16:15:72:39:8c:2f:ff:e7:7e:1a:58:70: b8:06:2d:2b:1c:ec:69:3f:09:fb:4d:49:a3:59:3d: 24:03:3b:52:bf:20:d1:07:bd:27:57:12:50:97:72: 15:2a:7c:8e:40:47:c4:d4:81:c0:c3:79:ce:00:89: 6f:b0:68:03:07:1d:81:d5:f2:91:82:2e:1f:e0:58: 0c:07:22:40:f2:da:84:43:f6:32:b4:05:48:28:e2: e2:88:0d:ad:82:1e:5c:21:d7:33:76:64:e2:b9:6e: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CE:E7:D0:81:2C:88:20:5A:E9:F4:8F:82:E4:0D:43:90:59:B0:49 X509v3 Authority Key Identifier: keyid:26:BD:53:A3:19:94:0B:D5:68:7A:63:45:BB:5F:E1:98:87:38:E7:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jr1ToxmUC9VoemNFu1_hmIc453g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91584B7/ECBAEBA0747B11EE9A900953C4F9AE02/Jr1ToxmUC9VoemNFu1_hmIc453g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:52:f7:c4:a4:e0:b7:41:07:9e:de:83:46:48:43:10:1e: 02:95:a8:cf:c9:6a:40:69:f4:f6:a6:c8:10:33:39:8d:f4:87: fc:f4:f3:d8:fc:9b:f2:e1:b5:c3:5d:67:d9:58:4d:61:0d:4f: 19:f7:2c:8c:09:01:0f:f2:b8:6d:fc:00:21:b9:13:28:ce:87: 23:d4:51:d9:44:f3:6a:af:03:78:39:77:65:25:ba:a6:e1:39: 39:b9:84:03:05:fd:66:d3:e6:26:24:b1:c6:6b:95:9a:f7:12: 56:f0:88:a0:38:fe:e7:7c:a2:f0:41:58:72:29:11:b2:bf:61: 0d:89:46:73:b6:e9:45:fa:06:af:7a:0e:f6:ec:47:0f:4e:f4: 9e:5c:77:6f:31:46:34:24:c2:79:2d:6b:82:d6:e3:b4:35:b7: 5b:ff:b9:f5:22:e5:91:22:cb:8b:3a:68:35:98:10:98:d2:df: 8b:d0:a8:c4:cc:d8:1b:22:3b:7a:e4:3a:83:bd:0e:12:2c:bf: 7e:a8:ea:de:1d:19:d6:b3:b1:47:c2:91:08:ef:92:2e:d9:a7: 7c:22:7a:e5:e6:ea:00:0b:f2:36:68:28:06:b7:9a:27:d7:49: ba:1a:01:29:f7:39:4e:03:74:3d:18:19:a2:c4:b6:e7:73:0c: ae:ba:9c:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg0QjcxMTAvBgNVBAUTKDI2QkQ1M0EzMTk5NDBCRDU2ODdBNjM0NUJCNUZFMTk4 ODczOEU3NzgwHhcNMjUxMTAzMDM0NDE4WhcNMjUxMTEwMDM0NDE4WjAYMRYwFAYD VQQDEw02OTA4MjUxMy0zZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstJo9VhS0kam9kYGw09ukMu08VG5RtaLkK1GH8F16HgVmsOZIddSoS9LJhNY nJszZNBWprgEKavUIoZO2zud4PN/B7cz5WiBDhlZczXt+Iu9HxufGtZT/6vfRf5F biHjrn2k08KJWKZJzMdCpc8awk8V90yyF96J9l01I7bSr1UmJv9hz7XaUxT0fHjL qmhA3qbsLemlSHMWFXI5jC//534aWHC4Bi0rHOxpPwn7TUmjWT0kAztSvyDRB70n VxJQl3IVKnyOQEfE1IHAw3nOAIlvsGgDBx2B1fKRgi4f4FgMByJA8tqEQ/YytAVI KOLiiA2tgh5cIdczdmTiuW7dbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3O59CB LIggWun0j4LkDUOQWbBJMB8GA1UdIwQYMBaAFCa9U6MZlAvVaHpjRbtf4ZiHOOd4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODRCNy9FQ0JBRUJBMDc0 N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5Vm9lbU5GdTFfaG1JYzQ1 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pyMVRveG1VQzlWb2VtTkZ1MV9obUljNDUzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODRCNy9FQ0JBRUJBMDc0N0IxMUVFOUE5MDA5NTNDNEY5QUUwMi9KcjFUb3htVUM5 Vm9lbU5GdTFfaG1JYzQ1M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL5lL3xKTgt0EHnt6DRkhDEB4ClajPyWpAafT2psgQMzmN9If89PPY /Jvy4bXDXWfZWE1hDU8Z9yyMCQEP8rht/AAhuRMozocj1FHZRPNqrwN4OXdlJbqm 4Tk5uYQDBf1m0+YmJLHGa5Wa9xJW8IigOP7nfKLwQVhyKRGyv2ENiUZztulF+gav eg727EcPTvSeXHdvMUY0JMJ5LWuC1uO0Nbdb/7n1IuWRIsuLOmg1mBCY0t+L0KjE zNgbIjt65DqDvQ4SLL9+qOreHRnWs7FHwpEI75Iu2ad8Inrl5uoAC/I2aCgGt5on 10m6GgEp9zlOA3Q9GBmixLbncwyuupxY -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:24 2025 by rpki-client