$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft File: RjCksCapPQ36qOzsV5zFITguTlg.mft (raw, json) Hash identifier: z/9oqUTq0wyNuhICRkpSurHEGcReQBzXh+N6BkWywfY= Subject key identifier: 81:9A:87:C8:9C:FC:87:C3:73:A9:11:5E:53:1D:30:C4:BB:41:6E:02 Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft Manifest number: 0106 Signing time: Wed 05 Nov 2025 05:15:13 +0000 Manifest this update: Wed 05 Nov 2025 05:15:13 +0000 Manifest next update: Wed 12 Nov 2025 05:15:13 +0000 Files and hashes: 1: RjCksCapPQ36qOzsV5zFITguTlg.crl (hash: c9HqPNSmz1kWkpUG0uZFpVhWnlEN0bY5biPe2dZwTQA=) 2: 074283A632A511EF84ECD41AC4F9AE02.roa (hash: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5, serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Validity Not Before: Nov 5 05:15:13 2025 GMT Not After : Nov 12 05:15:13 2025 GMT Subject: CN=690add61-e76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:a6:7f:e1:bd:da:e7:2b:06:0e:c6:93:6f: 94:1c:57:1f:ff:8e:b0:e6:3c:a3:10:c7:90:0b:95: 2b:57:de:22:19:fa:90:33:a1:43:00:33:a1:5b:26: a0:17:75:97:ed:85:37:49:a8:da:3c:0e:6f:5e:d6: f5:5b:93:19:17:c3:5a:28:88:3f:f7:d5:49:24:e1: 82:c2:6d:2f:3a:09:e2:21:79:57:97:f3:f5:ac:56: e7:ad:bf:46:0c:36:04:30:dc:8a:d6:08:7c:9e:23: 03:c8:b6:a4:2f:03:e4:4e:ca:18:98:4a:80:a7:94: c2:f5:f8:14:00:99:eb:da:b1:a2:c6:a2:57:f8:8b: de:e3:be:27:87:21:a8:84:33:bd:43:90:71:8a:4c: 01:0b:59:2a:a2:35:d6:c3:49:9c:58:23:52:27:df: 1f:48:14:78:32:b2:00:04:2e:c4:be:c9:db:a6:37: 44:74:27:9c:1e:25:ea:34:52:24:a2:34:1f:05:c9: fc:a5:c7:e9:a6:d9:24:ae:94:3b:bd:ac:1c:ed:04: ae:ba:1e:e0:b4:82:e0:44:aa:00:63:73:4d:b1:d7: 48:0a:a6:a5:48:ad:2d:15:64:da:dc:72:2e:bf:2d: 97:f6:81:b4:fd:f2:d7:0b:b7:ba:10:b4:50:f1:c1: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:87:C8:9C:FC:87:C3:73:A9:11:5E:53:1D:30:C4:BB:41:6E:02 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9a:12:e1:ab:90:41:18:1f:48:99:52:17:75:7d:ae:6c:84: 80:32:28:85:d2:8c:c9:c9:21:d6:80:03:34:cd:e6:25:51:a3: 4e:8e:5a:cd:63:2f:c2:91:52:85:eb:e3:dc:bd:95:4c:a3:e9: 98:80:0d:cd:35:cd:5f:9b:89:74:a6:ef:61:1e:58:ad:0d:2d: 60:20:13:00:c5:31:25:3a:0a:96:b8:f0:52:73:5a:05:02:3c: 18:0b:44:c7:95:5c:6e:81:42:1c:e3:f9:66:ab:a3:00:23:75: 3b:64:e0:56:9d:c7:38:63:68:42:b9:ee:c9:db:b4:55:77:23: a7:f2:36:22:32:e3:7c:ed:e3:7c:d5:bb:4c:fd:96:39:6f:e4: 57:1d:7b:75:67:a5:d0:f4:e1:ec:ed:3b:be:d9:17:71:87:b8: d9:30:db:59:d0:bd:cd:96:85:0e:81:0c:96:31:9e:a3:6c:59: f4:dc:a8:a8:97:58:96:19:03:90:3e:3b:86:d3:49:08:a5:08: c8:ff:bb:bd:e8:99:03:93:49:a0:05:0c:45:87:f3:8f:0d:4e: 5f:e4:1e:e3:5f:4b:e7:06:d3:3b:3a:4c:64:bb:5b:d5:cd:cc: 1c:fe:6a:e3:d4:bc:2e:4e:e2:32:1d:b2:1c:9c:bd:63:4e:81: cc:7c:fc:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUxMTA1MDUxNTEzWhcNMjUxMTEyMDUxNTEzWjAYMRYwFAYD VQQDEw02OTBhZGQ2MS1lNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3Cmf+G92ucrBg7Gk2+UHFcf/46w5jyjEMeQC5UrV94iGfqQM6FDADOhWyag F3WX7YU3SajaPA5vXtb1W5MZF8NaKIg/99VJJOGCwm0vOgniIXlXl/P1rFbnrb9G DDYEMNyK1gh8niMDyLakLwPkTsoYmEqAp5TC9fgUAJnr2rGixqJX+Ive474nhyGo hDO9Q5BxikwBC1kqojXWw0mcWCNSJ98fSBR4MrIABC7EvsnbpjdEdCecHiXqNFIk ojQfBcn8pcfpptkkrpQ7vawc7QSuuh7gtILgRKoAY3NNsddICqalSK0tFWTa3HIu vy2X9oG0/fLXC7e6ELRQ8cH8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGah8ic /IfDc6kRXlMdMMS7QW4CMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NERBNS9CRDM0NTQ5QzMyQTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBR MzZxT3pzVjV6RklUZ3VUbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNmhLhq5BBGB9ImVIXdX2ubISAMiiF0ozJySHWgAM0zeYlUaNOjlrN Yy/CkVKF6+PcvZVMo+mYgA3NNc1fm4l0pu9hHlitDS1gIBMAxTElOgqWuPBSc1oF AjwYC0THlVxugUIc4/lmq6MAI3U7ZOBWncc4Y2hCue7J27RVdyOn8jYiMuN87eN8 1btM/ZY5b+RXHXt1Z6XQ9OHs7Tu+2Rdxh7jZMNtZ0L3NloUOgQyWMZ6jbFn03Kio l1iWGQOQPjuG00kIpQjI/7u96JkDk0mgBQxFh/OPDU5f5B7jX0vnBtM7Okxku1vV zcwc/mrj1LwuTuIyHbIcnL1jToHMfPxF -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:34 2025 by rpki-client