$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft File: J3U8_U6dmOtMNus3e6tt4vkua-g.mft (raw, json) Hash identifier: LynMsg0/hqlmSBtUTwgfZ6nbAyIzJ1Buke6pI1kiOVw= Subject key identifier: 45:46:09:40:E3:36:D8:67:C3:81:AB:19:1E:93:B2:49:72:BB:15:86 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 0FF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft Manifest number: 0FEF Signing time: Tue 04 Nov 2025 17:33:51 +0000 Manifest this update: Tue 04 Nov 2025 17:33:51 +0000 Manifest next update: Tue 11 Nov 2025 17:33:51 +0000 Files and hashes: 1: J3U8_U6dmOtMNus3e6tt4vkua-g.crl (hash: LpDo8x5X1NYxVJAGiwy1WFOpcpoH0YROlRqnZ9EjU0E=) 2: C5FC427C5C1911E997A2ED42C4F9AE02.roa (hash: nXcUac3MS90vWtMTrdvd36wOBCE4zfd0e2DObXaS7L4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4087 (0xff7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Nov 4 17:33:51 2025 GMT Not After : Nov 11 17:33:51 2025 GMT Subject: CN=690a38ff-1bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:29:0b:b9:36:f5:a9:0e:04:cb:6b:73:c2: 87:5f:5a:a3:64:8b:2d:30:ce:d4:2f:20:ca:2a:e7: 28:92:80:a1:53:4d:de:ff:e5:0c:c9:6e:31:50:37: 6b:ef:90:70:08:56:2a:5e:76:2e:41:a9:e1:fd:5e: 4f:f3:0b:21:3d:39:ea:ca:eb:68:e0:d4:85:77:56: 5a:af:cc:39:7f:f3:35:0c:c0:05:8e:5b:11:5c:39: 38:6a:31:86:21:b9:eb:ce:33:57:23:ea:ac:36:27: 7a:08:34:26:7b:4b:56:23:3c:af:49:2f:d1:fe:9d: 78:10:70:dd:f2:70:bf:de:99:4f:5e:37:0a:bd:18: a0:43:34:29:18:e0:a0:be:7f:e2:d4:14:e3:13:15: a3:14:01:03:1b:86:ad:15:e4:17:02:e4:6f:25:d4: a8:a0:f7:1c:4f:f8:e6:9d:37:fd:6e:0b:9f:dc:52: 7d:6f:ef:3a:6b:23:7c:77:1a:73:8b:2d:1d:2c:f8: 8d:c8:52:54:05:38:5e:04:f7:a9:8d:88:d9:50:4a: 09:8c:07:e8:95:c4:f0:52:07:60:48:25:91:5d:ff: d3:04:2a:57:40:35:ef:ec:85:a7:ec:11:83:f6:21: 34:a7:69:bd:cb:c3:2c:91:9e:ba:20:60:f5:b3:57: 35:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:46:09:40:E3:36:D8:67:C3:81:AB:19:1E:93:B2:49:72:BB:15:86 X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5e:a6:34:1d:45:3e:3d:41:b7:b2:62:d1:f8:58:24:13:3b: 06:df:34:f5:29:3c:55:17:10:7c:a1:fb:91:95:b4:f5:dc:a6: d2:95:47:60:2e:29:ec:06:a3:fe:10:85:b7:fa:e5:e0:d4:9a: 02:05:3f:8e:f4:70:26:38:c9:c1:2e:9b:d8:47:91:2b:4c:9e: 03:da:9b:90:6a:41:ba:8a:5a:c9:d9:b4:bf:54:0b:a9:8b:97: 58:1b:db:0b:07:94:17:df:39:6a:ab:32:81:f1:6d:ce:bf:85: 5b:f8:d7:92:a4:ba:ee:ea:90:97:f1:a6:ec:d8:11:a0:39:46: 22:bf:c2:6b:3e:0e:59:8f:e1:cd:5d:ed:fc:48:9b:cd:c5:74: 4c:c7:4c:d6:3b:c5:eb:0a:25:4f:5f:24:5c:e2:06:6d:01:71: 2f:bf:24:91:b7:22:f1:8c:21:0a:b9:63:95:9d:bd:51:a3:9a: 0a:c5:82:27:49:12:f2:23:cc:86:4b:57:93:89:e1:dc:92:29: 56:db:8f:3a:7e:54:81:cc:6f:96:55:c8:d6:f1:7e:6b:c0:a2: a5:0a:0d:40:85:b3:52:92:fb:76:82:18:4e:d1:25:89:45:ce: 67:8b:74:da:6e:df:2b:0d:49:a4:cd:39:31:c8:5a:20:bb:59: f9:af:30:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMTA0MTczMzUxWhcNMjUxMTExMTczMzUxWjAYMRYwFAYD VQQDEw02OTBhMzhmZi0xYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq4pC7k29akOBMtrc8KHX1qjZIstMM7ULyDKKucokoChU03e/+UMyW4xUDdr 75BwCFYqXnYuQanh/V5P8wshPTnqyuto4NSFd1Zar8w5f/M1DMAFjlsRXDk4ajGG IbnrzjNXI+qsNid6CDQme0tWIzyvSS/R/p14EHDd8nC/3plPXjcKvRigQzQpGOCg vn/i1BTjExWjFAEDG4atFeQXAuRvJdSooPccT/jmnTf9bguf3FJ9b+86ayN8dxpz iy0dLPiNyFJUBTheBPepjYjZUEoJjAfolcTwUgdgSCWRXf/TBCpXQDXv7IWn7BGD 9iE0p2m9y8MskZ66IGD1s1c1iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVGCUDj Nthnw4GrGR6TsklyuxWGMB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEFGMS9DQTFBMDNDMjVDMTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1P dE1OdXMzZTZ0dDR2a3VhLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXqY0HUU+PUG3smLR+FgkEzsG3zT1KTxVFxB8ofuRlbT13KbSlUdg LinsBqP+EIW3+uXg1JoCBT+O9HAmOMnBLpvYR5ErTJ4D2puQakG6ilrJ2bS/VAup i5dYG9sLB5QX3zlqqzKB8W3Ov4Vb+NeSpLru6pCX8abs2BGgOUYiv8JrPg5Zj+HN Xe38SJvNxXRMx0zWO8XrCiVPXyRc4gZtAXEvvySRtyLxjCEKuWOVnb1Ro5oKxYIn SRLyI8yGS1eTieHckilW2486flSBzG+WVcjW8X5rwKKlCg1AhbNSkvt2ghhO0SWJ Rc5ni3Tabt8rDUmkzTkxyFogu1n5rzBp -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:48 2025 by rpki-client