$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft File: Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft (raw, json) Hash identifier: /5aeDbqtxWhk0YTOzOcW1qRiCz6k797JxoVtEwc1qjQ= Subject key identifier: 25:98:B6:70:ED:5C:74:38:0D:94:B8:89:34:4D:4E:63:FA:60:1F:1E Authority key identifier: 26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 Certificate issuer: /CN=A91A3FEB/serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft Manifest number: 0198 Signing time: Tue 04 Nov 2025 21:32:12 +0000 Manifest this update: Tue 04 Nov 2025 21:32:12 +0000 Manifest next update: Tue 11 Nov 2025 21:32:12 +0000 Files and hashes: 1: Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl (hash: +o+9zDWZFMnOPmj8nEWWRlVcc4OUGSXf0RGOrwCxivk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=26FEA0C677DDE743C2E075E1CE07AB5BD6666325 Validity Not Before: Nov 4 21:32:12 2025 GMT Not After : Nov 11 21:32:12 2025 GMT Subject: CN=690a70dc-5277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:48:63:61:44:04:cb:83:eb:79:7b:85:a7: 63:1f:bb:51:2a:07:23:ea:c6:ce:81:b9:e3:39:be: 97:44:91:d7:cf:7d:7b:66:4a:07:a1:f8:b6:31:be: 1a:17:b7:89:0d:0c:9f:65:2d:ba:e2:40:d9:93:1b: 47:38:80:4c:a1:d3:0b:37:df:35:e9:0c:c2:96:e2: d4:be:44:ff:ce:6f:cc:04:71:fd:39:b4:48:67:93: 11:7d:08:7d:e6:6b:43:bb:3a:c3:78:53:64:62:31: c9:40:2f:20:47:b2:6a:b1:a2:36:54:72:ab:41:71: 31:87:79:bc:24:a2:fb:ce:0d:c0:e1:2c:cb:5c:d9: d6:0f:7a:7e:26:70:14:66:00:4f:d2:8a:44:cc:00: e1:b1:30:54:b9:eb:4a:9d:3d:52:7c:2a:f5:a9:9b: 47:98:7c:60:bc:c4:5a:91:05:95:41:c1:b9:d8:d7: 5a:f1:5b:9f:b5:1c:c4:54:27:21:75:58:35:94:5f: 86:e4:5b:f5:29:29:a8:a2:b0:5f:7a:51:1c:53:0e: 3d:3a:f4:af:b0:89:be:5f:ab:0d:0f:68:22:f3:52: 08:45:fc:75:00:52:7a:05:90:2f:d0:a3:63:50:55: 87:b5:d1:74:d0:1b:4b:79:ca:12:cc:84:09:14:2a: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:B6:70:ED:5C:74:38:0D:94:B8:89:34:4D:4E:63:FA:60:1F:1E X509v3 Authority Key Identifier: keyid:26:FE:A0:C6:77:DD:E7:43:C2:E0:75:E1:CE:07:AB:5B:D6:66:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jv6gxnfd50PC4HXhzgerW9ZmYyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/1874C4A4486D11EE820A5576C4F9AE02/Jv6gxnfd50PC4HXhzgerW9ZmYyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:22:6c:24:fd:eb:f1:4c:4d:56:31:61:c4:38:98:b7:dd:6f: 80:ed:cc:6d:56:c5:77:e7:ad:5e:86:ee:73:a5:2e:88:ff:4a: 9b:a7:66:39:47:0a:f9:e1:67:c2:d7:b8:92:63:3c:ab:45:bc: 73:1a:eb:9a:db:ac:69:7a:eb:0c:6d:11:be:1e:0f:ec:5f:fd: e4:7e:25:b4:ae:3e:65:94:d3:fd:cb:f4:c2:ff:26:c8:56:b0: e7:1a:0f:bb:ab:de:6a:98:17:30:a4:19:97:f4:a2:6d:a5:ff: f4:dd:23:bd:8c:10:12:7f:e9:ad:14:3c:02:f6:da:0e:46:1b: 13:19:0f:42:01:25:78:d2:b6:c8:60:9e:9a:b4:ad:7d:52:ac: a6:a0:69:1a:cb:56:db:79:a7:6c:33:ed:e4:a9:c0:5b:43:2c: cd:b8:71:b4:79:d7:1a:40:6e:4a:a0:e7:6a:53:c0:a5:52:88: 78:87:a7:bb:38:e8:8e:d8:c8:6c:ee:b5:dd:bb:99:f3:a4:62: e0:82:65:43:7f:46:5a:1d:d6:91:54:d4:3e:37:e5:64:61:45: 64:7a:0f:f2:bf:3b:57:3f:de:ad:7d:99:16:9b:4e:51:d3:80: 3d:7c:58:74:67:c7:be:f9:30:fe:b6:14:cc:39:6d:94:54:fa: 34:d2:95:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKDI2RkVBMEM2NzdEREU3NDNDMkUwNzVFMUNFMDdBQjVC RDY2NjYzMjUwHhcNMjUxMTA0MjEzMjEyWhcNMjUxMTExMjEzMjEyWjAYMRYwFAYD VQQDEw02OTBhNzBkYy01Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37lIY2FEBMuD63l7hadjH7tRKgcj6sbOgbnjOb6XRJHXz317ZkoHofi2Mb4a F7eJDQyfZS264kDZkxtHOIBModMLN9816QzCluLUvkT/zm/MBHH9ObRIZ5MRfQh9 5mtDuzrDeFNkYjHJQC8gR7JqsaI2VHKrQXExh3m8JKL7zg3A4SzLXNnWD3p+JnAU ZgBP0opEzADhsTBUuetKnT1SfCr1qZtHmHxgvMRakQWVQcG52Nda8VuftRzEVCch dVg1lF+G5Fv1KSmoorBfelEcUw49OvSvsIm+X6sND2gi81IIRfx1AFJ6BZAv0KNj UFWHtdF00BtLecoSzIQJFCphRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWYtnDt XHQ4DZS4iTRNTmP6YB8eMB8GA1UdIwQYMBaAFCb+oMZ33edDwuB14c4Hq1vWZmMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi8xODc0QzRBNDQ4 NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUwUEM0SFhoemdlclc5Wm1Z eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p2Nmd4bmZkNTBQQzRIWGh6Z2VyVzlabVl5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi8xODc0QzRBNDQ4NkQxMUVFODIwQTU1NzZDNEY5QUUwMi9KdjZneG5mZDUw UEM0SFhoemdlclc5Wm1ZeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeImwk/evxTE1WMWHEOJi33W+A7cxtVsV3561ehu5zpS6I/0qbp2Y5 Rwr54WfC17iSYzyrRbxzGuua26xpeusMbRG+Hg/sX/3kfiW0rj5llNP9y/TC/ybI VrDnGg+7q95qmBcwpBmX9KJtpf/03SO9jBASf+mtFDwC9toORhsTGQ9CASV40rbI YJ6atK19UqymoGkay1bbeadsM+3kqcBbQyzNuHG0edcaQG5KoOdqU8ClUoh4h6e7 OOiO2Mhs7rXdu5nzpGLggmVDf0ZaHdaRVNQ+N+VkYUVkeg/yvztXP96tfZkWm05R 04A9fFh0Z8e++TD+thTMOW2UVPo00pVW -----END CERTIFICATE-----Generated at Wed Nov 5 07:27:27 2025 by rpki-client