$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft File: _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json) Hash identifier: Ij7VFF55VFLUBKkiYTjpogE+ecEgA9gteSwGZCjPKsA= Subject key identifier: 79:F0:D7:86:18:5E:DA:83:8E:B6:A6:0B:6B:4C:B8:D2:F7:AB:7A:64 Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Certificate serial: 0B27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft Manifest number: 0A6C Signing time: Tue 04 Nov 2025 20:01:18 +0000 Manifest this update: Tue 04 Nov 2025 20:01:18 +0000 Manifest next update: Tue 11 Nov 2025 20:01:18 +0000 Files and hashes: 1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: dy3PF8Ws2lOmhDBa0smMwpgUhRhETVMnxCoBxe3f3QE=) 2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=) 3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=) 4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A Validity Not Before: Nov 4 20:01:18 2025 GMT Not After : Nov 11 20:01:18 2025 GMT Subject: CN=690a5b8e-8a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:16:45:93:62:c3:41:41:15:3a:37:e8:c4: a3:53:fe:a2:bc:0b:9f:30:12:40:02:79:43:59:8b: 74:d9:bb:b2:67:01:de:26:32:c4:f8:e7:e5:fd:ae: d2:5e:af:6a:f1:e0:14:95:41:71:d8:bb:c0:b3:9a: 2e:60:b3:fa:77:c0:68:f2:6c:7a:2f:33:9b:b7:78: b4:6d:c3:ad:56:b8:1b:1b:91:10:0f:5e:e5:7a:50: 1e:28:5b:30:ce:82:b2:e4:ba:2b:b6:90:cf:9a:cb: 5d:ec:c1:4a:a1:8c:53:7e:41:02:f8:81:67:9d:d6: ac:76:a4:96:03:72:8c:ab:4a:af:b4:a3:7f:a7:6d: ab:76:02:c9:75:d0:10:61:a4:22:fd:d1:47:64:88: e9:98:0b:48:2f:52:7b:84:35:eb:82:d9:4f:33:4e: 25:a0:16:6f:c6:61:a1:7e:71:15:86:d7:58:99:83: 2c:fd:b1:2a:6f:86:58:7f:c0:3a:53:21:05:57:fe: 9d:a6:55:75:a1:05:d8:67:64:6d:72:eb:4f:0a:b1: 2a:db:4f:40:88:6f:fd:87:9f:8b:37:9f:84:8c:e4: 3b:48:1c:b9:8e:8b:f9:2a:c1:91:be:73:f7:37:ba: 11:4d:0d:88:7c:f9:5e:ef:1b:71:29:13:62:d7:7e: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F0:D7:86:18:5E:DA:83:8E:B6:A6:0B:6B:4C:B8:D2:F7:AB:7A:64 X509v3 Authority Key Identifier: keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f2:78:39:39:d1:ee:63:8b:04:ba:89:ff:37:95:cb:28:a0: 1a:8c:19:f2:2d:ce:5c:95:3c:73:e5:ff:0b:96:85:cf:f6:43: 52:df:14:e1:95:98:57:7a:d6:4d:7d:e5:a7:51:e3:a9:62:49: a3:b6:d0:a8:43:b0:ea:b3:d0:f5:14:24:73:7d:7d:32:07:27: 57:2a:62:a2:b2:88:2a:be:22:1f:f8:71:b1:68:3d:25:70:65: b9:b3:c4:8b:35:26:af:cf:5a:d8:79:c1:e9:e5:79:2c:b4:7d: 21:2c:80:bc:73:19:a9:73:23:5f:41:e5:7b:99:6b:c8:c8:8f: 3e:c1:6a:30:81:0c:49:3e:5f:84:dd:97:8a:ff:c2:35:23:2a: ff:7b:26:4d:62:23:f7:91:b6:28:1c:ac:84:d3:cc:ca:1d:53: 5b:a9:85:91:b9:20:d4:06:f6:d9:ae:c5:23:3b:5c:d1:b2:86: 76:ba:27:7c:88:5f:14:8d:af:8d:de:23:3f:ab:a5:ae:03:ee: 23:88:c7:e7:dd:42:3e:10:5d:ea:ed:e6:71:75:72:d0:79:9a: 67:72:56:bf:2c:e1:40:ed:77:be:8d:fe:79:20:ce:52:ef:60: fc:1d:39:c6:6b:8e:48:78:0e:a3:30:0f:e6:b5:0f:d1:2c:cf: 03:b9:c2:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI2RUIxMTAvBgNVBAUTKEZDOUJENDYzRDAyRTlGRDJERkMzQzM5QUU0Q0Q1QUIz MjI2NThDMkEwHhcNMjUxMTA0MjAwMTE4WhcNMjUxMTExMjAwMTE4WjAYMRYwFAYD VQQDEw02OTBhNWI4ZS04YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx08WRZNiw0FBFTo36MSjU/6ivAufMBJAAnlDWYt02buyZwHeJjLE+Ofl/a7S Xq9q8eAUlUFx2LvAs5ouYLP6d8Bo8mx6LzObt3i0bcOtVrgbG5EQD17lelAeKFsw zoKy5LortpDPmstd7MFKoYxTfkEC+IFnndasdqSWA3KMq0qvtKN/p22rdgLJddAQ YaQi/dFHZIjpmAtIL1J7hDXrgtlPM04loBZvxmGhfnEVhtdYmYMs/bEqb4ZYf8A6 UyEFV/6dplV1oQXYZ2RtcutPCrEq209AiG/9h5+LN5+EjOQ7SBy5jov5KsGRvnP3 N7oRTQ2IfPle7xtxKRNi134WrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnw14YY XtqDjramC2tMuNL3q3pkMB8GA1UdIwQYMBaAFPyb1GPQLp/S38PDmuTNWrMiZYwq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjZFQi8wMTM5MUIwMDhF MkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45TGZ3OE9hNU0xYXN5Smxq Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19KdlVZOUF1bjlMZnc4T2E1TTFhc3lKbGpDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjZFQi8wMTM5MUIwMDhFMkIxMUVBQkY4NkRBNENDNEY5QUUwMi9fSnZVWTlBdW45 TGZ3OE9hNU0xYXN5SmxqQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT8ng5OdHuY4sEuon/N5XLKKAajBnyLc5clTxz5f8LloXP9kNS3xTh lZhXetZNfeWnUeOpYkmjttCoQ7Dqs9D1FCRzfX0yBydXKmKisogqviIf+HGxaD0l cGW5s8SLNSavz1rYecHp5XkstH0hLIC8cxmpcyNfQeV7mWvIyI8+wWowgQxJPl+E 3ZeK/8I1Iyr/eyZNYiP3kbYoHKyE08zKHVNbqYWRuSDUBvbZrsUjO1zRsoZ2uid8 iF8Uja+N3iM/q6WuA+4jiMfn3UI+EF3q7eZxdXLQeZpncla/LOFA7Xe+jf55IM5S 72D8HTnGa45IeA6jMA/mtQ/RLM8DucK9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:34 2025 by rpki-client