$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft File: J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft (raw, json) Hash identifier: 2ZNj1L5+kRkgIGVdyiGUnf9VHipANduJtEHmJWxDjGo= Subject key identifier: 23:5A:95:06:61:DE:13:46:D7:26:2A:36:A3:8E:25:CF:48:20:37:78 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft Manifest number: 34E6 Signing time: Tue 04 Nov 2025 14:22:39 +0000 Manifest this update: Tue 04 Nov 2025 14:22:39 +0000 Manifest next update: Tue 11 Nov 2025 14:22:39 +0000 Files and hashes: 1: J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl (hash: e1ojNedsnqswJRZ9kW8smxFXryszyRubd6fgrvkGJn0=) 2: D5C188B88DBD11E9877F5B11C4F9AE02.roa (hash: eIHncqSLzAK4hT66bMDG+FBpRTxCSLp9MqrqHufX4PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Nov 4 14:22:39 2025 GMT Not After : Nov 11 14:22:39 2025 GMT Subject: CN=690a0c2f-e93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:f3:b4:d4:37:46:09:b3:02:18:6c:63:da: 1a:78:69:75:04:fd:85:30:da:f9:be:55:dd:f5:04: 23:a3:bb:78:34:c6:3c:41:57:f3:4e:96:ab:27:0f: 2d:73:d0:50:8c:62:66:16:57:dc:bc:cb:73:b2:7f: 1a:c9:20:c6:54:73:03:3e:e9:75:aa:b8:d6:f1:6e: 01:32:97:ad:eb:e9:52:6f:96:5b:46:2a:f5:2e:2d: 49:9f:03:b4:af:77:41:2f:16:85:3d:a5:5b:15:f5: ac:4b:83:fc:aa:7f:39:3b:c6:1b:4a:9e:96:c0:ef: e5:e5:0c:31:06:96:58:5e:56:92:ac:64:a8:ba:16: a4:52:10:29:be:b2:fe:ca:38:f1:31:a2:09:44:d0: 1d:9d:62:85:0f:2f:69:c4:55:af:92:f4:8c:83:57: 55:13:91:f2:ed:58:a5:eb:b6:7b:db:35:cf:e5:04: cb:66:a7:16:83:7d:87:9b:4a:39:91:49:37:79:d7: 21:a3:e1:5c:d2:d3:5b:7d:a8:bb:ba:12:ec:1c:96: cb:86:b5:79:84:b2:0a:26:de:5e:dc:40:74:29:5d: 1f:87:87:2f:62:a6:09:c4:2c:5e:45:70:94:f8:1e: 67:a1:bf:78:53:bf:84:3e:3c:e4:cf:b0:7e:c9:8f: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:95:06:61:DE:13:46:D7:26:2A:36:A3:8E:25:CF:48:20:37:78 X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:62:4e:60:a7:dc:4d:c4:a7:15:00:47:78:0d:b8:54:73:27: 4b:91:b2:b5:88:85:65:be:56:bd:25:e9:c5:fe:63:47:90:a4: 71:22:21:1f:e5:ad:c9:f4:da:e0:69:c4:e9:cf:80:58:5e:cc: c5:36:3e:57:90:82:04:3d:24:2d:4e:65:c3:7d:8d:5d:c7:c7: 13:d3:5a:02:6b:f8:68:9e:a1:d0:93:f0:c9:34:72:11:5a:86: b0:35:3e:a3:5a:b0:0a:d0:16:13:7c:54:4b:8a:b3:8b:99:2a: 04:48:29:63:f1:4c:4e:0c:e8:38:3a:ea:86:bd:ac:23:5a:c0: bb:5e:db:91:6e:15:09:c5:dc:fc:28:bf:c5:b6:fa:fc:20:59: 7f:0f:67:da:47:ff:16:21:16:cb:16:0e:c3:c3:c9:96:6b:49: b7:16:af:c9:c1:bd:24:4c:6d:b0:4a:c6:26:86:fe:a6:78:14: 05:7b:71:bd:71:be:af:6d:c6:68:c9:94:59:5b:ab:96:78:21: c4:55:2e:07:98:8f:d6:a2:14:e8:c7:39:29:3d:f3:f4:d4:87: af:d4:8c:17:5e:a0:3b:af:6d:97:39:ca:66:9a:96:97:e2:4b: 83:4f:32:9d:37:03:36:84:ad:17:be:a6:85:f1:56:41:7c:0a: d7:2f:6d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjUxMTA0MTQyMjM5WhcNMjUxMTExMTQyMjM5WjAYMRYwFAYD VQQDEw02OTBhMGMyZi1lOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJjztNQ3RgmzAhhsY9oaeGl1BP2FMNr5vlXd9QQjo7t4NMY8QVfzTparJw8t c9BQjGJmFlfcvMtzsn8aySDGVHMDPul1qrjW8W4BMpet6+lSb5ZbRir1Li1JnwO0 r3dBLxaFPaVbFfWsS4P8qn85O8YbSp6WwO/l5QwxBpZYXlaSrGSouhakUhApvrL+ yjjxMaIJRNAdnWKFDy9pxFWvkvSMg1dVE5Hy7Vil67Z72zXP5QTLZqcWg32Hm0o5 kUk3edcho+Fc0tNbfai7uhLsHJbLhrV5hLIKJt5e3EB0KV0fh4cvYqYJxCxeRXCU +B5nob94U7+EPjzkz7B+yY9UzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNalQZh 3hNG1yYqNqOOJc9IIDd4MB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTdGQS8xOTc4MDQ0QTFEODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlT eGppMmxqTENMSmRxR0dMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyYk5gp9xNxKcVAEd4DbhUcydLkbK1iIVlvla9JenF/mNHkKRxIiEf 5a3J9NrgacTpz4BYXszFNj5XkIIEPSQtTmXDfY1dx8cT01oCa/honqHQk/DJNHIR WoawNT6jWrAK0BYTfFRLirOLmSoESClj8UxODOg4OuqGvawjWsC7XtuRbhUJxdz8 KL/Ftvr8IFl/D2faR/8WIRbLFg7Dw8mWa0m3Fq/Jwb0kTG2wSsYmhv6meBQFe3G9 cb6vbcZoyZRZW6uWeCHEVS4HmI/WohToxzkpPfP01Iev1IwXXqA7r22XOcpmmpaX 4kuDTzKdNwM2hK0XvqaF8VZBfArXL21d -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:07 2025 by rpki-client