$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft File: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft (raw, json) Hash identifier: KQfjv+SGsqZtRLXcurXdQeZxGQ+3Jy8MxQ6cwMEGamY= Subject key identifier: 9D:DB:92:C3:5F:6F:35:08:DB:9D:C8:63:B3:A0:EC:D8:15:4D:BB:4C Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft Manifest number: 0B55 Signing time: Tue 04 Nov 2025 19:17:50 +0000 Manifest this update: Tue 04 Nov 2025 19:17:50 +0000 Manifest next update: Tue 11 Nov 2025 19:17:50 +0000 Files and hashes: 1: jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl (hash: 6p5adNiqJkSYISkPsAvAXoHeEQk1D9zVSTluRLaSMd0=) 2: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (hash: B1y/XJhc58ZxuiEanrd53aB6RU6j2Af7j8lspYzP41Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Nov 4 19:17:50 2025 GMT Not After : Nov 11 19:17:50 2025 GMT Subject: CN=690a515e-3ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:9c:a1:c3:cb:2a:de:53:a8:e0:7e:3f:f5: f7:ad:36:5b:f4:ec:9e:43:86:1a:e4:65:50:e4:e6: dc:41:92:c2:c7:a4:d0:26:35:bc:47:fd:e4:35:24: 0d:32:f1:e7:77:0f:26:6f:95:a2:f4:7b:af:27:44: 50:c7:36:57:98:0c:8d:08:0e:3e:48:93:3e:b5:8e: 5a:97:29:b6:87:f6:ce:67:ec:7d:33:ac:ff:41:26: ca:b3:0f:8a:ef:38:11:18:33:19:00:d1:df:e3:9d: e8:4c:13:32:01:31:70:53:5e:59:40:a2:bc:7b:41: 0e:90:68:9f:07:ca:31:e4:34:78:75:27:bc:d1:c7: d0:c4:dc:95:23:87:84:f8:b4:6d:e8:33:88:fa:8a: 77:9a:35:5b:63:2e:7b:5a:e2:c6:27:c4:87:0b:3b: 3e:ba:fc:68:6f:2a:15:7e:0d:d4:cc:6e:72:a1:4f: 90:8f:b3:ce:a4:31:92:b7:a4:c5:0a:63:89:2c:a8: 3b:20:f8:55:62:37:2e:a6:38:a9:dc:bd:a4:76:d9: 9e:e7:69:c7:f2:bc:b1:d9:23:92:d1:9a:28:bd:91: cc:4c:21:24:b0:28:4a:b5:fb:cb:f1:c9:4d:72:b4: 07:b9:e5:1f:a9:00:20:9a:47:ad:28:b3:1b:18:05: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:92:C3:5F:6F:35:08:DB:9D:C8:63:B3:A0:EC:D8:15:4D:BB:4C X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:64:85:c6:fb:fe:bd:f4:6d:55:a0:3d:fd:6b:43:9b:fe:e3: 43:2a:c4:4e:d8:af:ff:58:71:55:f4:cb:79:1c:82:24:40:c3: 00:6b:2f:6e:ae:01:5d:35:18:4a:99:7b:27:98:ed:e2:ba:cf: f9:db:31:97:a7:9a:de:2a:53:74:e6:e0:e4:c7:fb:4f:9e:10: 1d:9a:34:f3:21:8b:5e:7a:ca:9e:98:e3:d9:ec:b5:27:f8:c1: a3:11:9b:39:c8:b2:77:b4:52:aa:8e:20:13:33:f3:c5:1d:a5: 28:1e:fd:1b:9e:58:a4:fc:80:15:78:4a:4e:11:6e:06:ef:46: 61:71:78:9d:0c:8f:70:08:ac:6e:27:4e:7c:30:ca:20:86:be: c5:51:92:1d:94:c6:90:a5:6a:dc:3e:ec:04:00:60:7d:6b:33: a1:16:7b:3f:34:39:c9:0c:ed:8c:1e:f3:48:16:03:20:d8:72: 9a:15:91:81:a9:f1:f5:be:f5:6e:d6:48:4d:e4:ee:08:64:2a: 08:02:c1:02:df:07:9b:c6:7d:78:c5:61:a1:b6:91:a8:f2:57: ba:a6:cc:db:26:f6:2d:75:1f:7a:42:45:89:d2:6e:dc:90:ee: fb:ee:79:54:a5:64:33:64:25:d8:80:1e:a5:3c:8c:a1:f3:8b: 43:60:d8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjUxMTA0MTkxNzUwWhcNMjUxMTExMTkxNzUwWjAYMRYwFAYD VQQDEw02OTBhNTE1ZS0zYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN+cocPLKt5TqOB+P/X3rTZb9OyeQ4Ya5GVQ5ObcQZLCx6TQJjW8R/3kNSQN MvHndw8mb5Wi9HuvJ0RQxzZXmAyNCA4+SJM+tY5alym2h/bOZ+x9M6z/QSbKsw+K 7zgRGDMZANHf453oTBMyATFwU15ZQKK8e0EOkGifB8ox5DR4dSe80cfQxNyVI4eE +LRt6DOI+op3mjVbYy57WuLGJ8SHCzs+uvxobyoVfg3UzG5yoU+Qj7POpDGSt6TF CmOJLKg7IPhVYjcupjip3L2kdtme52nH8ryx2SOS0ZoovZHMTCEksChKtfvL8clN crQHueUfqQAgmketKLMbGAV4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3bksNf bzUI253IY7Og7NgVTbtMMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM4NC9CRjRCRDQ1ODQ0ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6Rkhi Q1VqN0tWOE1wUV91QUdKVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkZIXG+/699G1VoD39a0Ob/uNDKsRO2K//WHFV9Mt5HIIkQMMAay9u rgFdNRhKmXsnmO3ius/52zGXp5reKlN05uDkx/tPnhAdmjTzIYteesqemOPZ7LUn +MGjEZs5yLJ3tFKqjiATM/PFHaUoHv0bnlik/IAVeEpOEW4G70ZhcXidDI9wCKxu J058MMoghr7FUZIdlMaQpWrcPuwEAGB9azOhFns/NDnJDO2MHvNIFgMg2HKaFZGB qfH1vvVu1khN5O4IZCoIAsEC3webxn14xWGhtpGo8le6pszbJvYtdR96QkWJ0m7c kO777nlUpWQzZCXYgB6lPIyh84tDYNgx -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:58 2025 by rpki-client