$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft File: J-tZLJ988hJyXHoADi9tDZbKUjU.mft (raw, json) Hash identifier: 4XPYTy33NYeC7o6saijNUTHKFFyTdPXPAvpyuq+Ng7k= Subject key identifier: B7:3C:4A:D1:10:D4:63:C1:04:8B:EC:CF:D1:EE:2B:4F:E8:64:EE:A2 Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35 Certificate issuer: /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft Manifest number: 73 Signing time: Wed 05 Nov 2025 07:12:18 +0000 Manifest this update: Wed 05 Nov 2025 07:12:18 +0000 Manifest next update: Wed 12 Nov 2025 07:12:18 +0000 Files and hashes: 1: J-tZLJ988hJyXHoADi9tDZbKUjU.crl (hash: O1p3ncvDqCm2h4AofAp8vaDt905N85RC8W+LUbJFwyk=) 2: F5EDCE6AB36511F094291E78C4F9AE02.roa (hash: 1w9VMm7tvSU/XOrKGdiaMMEmKiG1Tmee3OIweuqliMQ=) 3: B0B186606D4D11F0A6237A81C4F9AE02.roa (hash: aC4kk1rth4LsuwPOVGwe1jps1XdQvpav+QaOFdq3CE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235 Validity Not Before: Nov 5 07:12:18 2025 GMT Not After : Nov 12 07:12:18 2025 GMT Subject: CN=690af8d2-ca5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:00:09:6b:8a:b1:93:16:52:df:07:e4:18: ae:10:89:da:a4:a3:56:f1:29:5f:75:fb:5e:90:ba: 65:c5:98:ef:1a:23:19:ec:22:2f:dd:a8:e2:95:87: d0:7f:81:43:5d:81:16:2d:7d:fc:9b:03:33:1c:68: 8d:de:9a:f4:3c:af:11:f9:0e:80:79:ad:e4:e8:26: f3:49:ec:44:97:1c:de:cf:b9:11:36:66:74:63:80: 3f:95:0b:da:0b:28:27:44:7d:2f:74:d4:b1:06:67: a4:df:54:f9:b0:3f:28:77:78:79:5b:2a:14:79:dc: 5f:87:3e:69:bb:c8:80:67:2f:87:f0:b3:13:b5:93: c4:19:8e:67:e6:92:74:98:ce:b1:72:c3:5b:6e:1b: 06:12:a0:a7:65:34:07:db:0d:99:b6:39:7a:a8:6d: 78:f3:09:e0:a7:a5:98:67:3a:1c:bf:66:35:ff:a7: 99:90:6d:3b:9e:9a:58:e3:1d:d0:f0:7e:ad:32:58: fb:f6:ba:ff:17:a7:c9:d5:33:0b:d9:6a:f4:e9:38: e9:c6:e1:6d:cf:3b:7d:e1:54:c6:c5:e0:3c:4b:ba: 27:61:87:76:16:2e:a2:02:f9:64:48:f3:85:40:88: 5e:2e:94:08:0e:86:43:d7:6c:c5:ca:fb:ff:e7:fc: 3d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3C:4A:D1:10:D4:63:C1:04:8B:EC:CF:D1:EE:2B:4F:E8:64:EE:A2 X509v3 Authority Key Identifier: keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:14:b3:eb:36:a4:18:ea:65:a3:eb:dd:9e:81:36:9e:0d:af: 92:64:16:98:c8:5b:f0:b1:89:81:c0:b0:17:de:ff:85:43:97: 39:4d:96:d6:ca:a3:6f:f9:a8:fd:b3:5e:4c:f2:36:b5:87:f2: d4:64:eb:03:49:21:e9:9b:ac:46:42:fd:90:7c:0f:fe:96:d0: a1:61:c9:65:69:e1:38:8f:73:5e:59:cc:0b:9a:96:98:f8:e5: 15:06:f3:71:4e:6d:27:93:77:89:ec:cd:53:5b:0e:61:9e:6f: ae:cd:07:b2:8d:98:ed:09:16:63:9d:58:ee:72:c8:82:d2:af: a2:41:4a:a4:f0:dd:21:bb:b6:f3:11:80:e8:01:16:71:18:6b: 52:cd:dc:0f:69:fe:0d:b9:47:4f:0a:b4:38:46:17:81:0b:d1: c0:3b:70:85:65:9f:04:e4:bd:44:d8:51:b1:4c:55:94:91:93: 5b:61:23:14:f0:4d:a7:b3:66:54:3e:21:7a:89:15:2c:6b:20: 87:2b:d4:d6:48:eb:c3:d0:6e:fb:4d:85:6c:db:a3:2b:a7:65: 4f:a4:f1:db:96:5f:75:d8:6f:36:7b:28:87:87:3e:9e:d9:98: 7b:74:61:22:00:e1:8c:19:77:29:30:ba:e9:91:27:af:78:6b: d6:bc:d3:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODZBQjExMC8GA1UEBRMoMjdFQjU5MkM5RjdDRjIxMjcyNUM3QTAwMEUyRjZEMEQ5 NkNBNTIzNTAeFw0yNTExMDUwNzEyMThaFw0yNTExMTIwNzEyMThaMBgxFjAUBgNV BAMTDTY5MGFmOGQyLWNhNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJGgAJa4qxkxZS3wfkGK4Qidqko1bxKV91+16QumXFmO8aIxnsIi/dqOKVh9B/ gUNdgRYtffybAzMcaI3emvQ8rxH5DoB5reToJvNJ7ESXHN7PuRE2ZnRjgD+VC9oL KCdEfS901LEGZ6TfVPmwPyh3eHlbKhR53F+HPmm7yIBnL4fwsxO1k8QZjmfmknSY zrFyw1tuGwYSoKdlNAfbDZm2OXqobXjzCeCnpZhnOhy/ZjX/p5mQbTuemljjHdDw fq0yWPv2uv8Xp8nVMwvZavTpOOnG4W3PO33hVMbF4DxLuidhh3YWLqIC+WRI84VA iF4ulAgOhkPXbMXK+//n/D3/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtzxK0RDU Y8EEi+zP0e4rT+hk7qIwHwYDVR0jBBgwFoAUJ+tZLJ988hJyXHoADi9tDZbKUjUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NkFCLzc1ODEwMjMyMUM1 ODExRjA4QzRFOTc0REM0RjlBRTAyL0otdFpMSjk4OGhKeVhIb0FEaTl0RFpiS1Vq VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSi10WkxKOTg4aEp5WEhvQURpOXREWmJLVWpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 NkFCLzc1ODEwMjMyMUM1ODExRjA4QzRFOTc0REM0RjlBRTAyL0otdFpMSjk4OGhK eVhIb0FEaTl0RFpiS1VqVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgUs+s2pBjqZaPr3Z6BNp4Nr5JkFpjIW/CxiYHAsBfe/4VDlzlNltbK o2/5qP2zXkzyNrWH8tRk6wNJIembrEZC/ZB8D/6W0KFhyWVp4TiPc15ZzAualpj4 5RUG83FObSeTd4nszVNbDmGeb67NB7KNmO0JFmOdWO5yyILSr6JBSqTw3SG7tvMR gOgBFnEYa1LN3A9p/g25R08KtDhGF4EL0cA7cIVlnwTkvUTYUbFMVZSRk1thIxTw TaezZlQ+IXqJFSxrIIcr1NZI68PQbvtNhWzboyunZU+k8duWX3XYbzZ7KIeHPp7Z mHt0YSIA4YwZdykwuumRJ694a9a806Y= -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:44 2025 by rpki-client