$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft File: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft (raw, json) Hash identifier: lFVygJHGeLNtgB5UbbsQB3g61Hk8z7mvUtmqWD00Iis= Subject key identifier: 56:4D:6C:FD:94:74:FB:38:B6:9B:CA:50:93:8D:18:5E:8A:36:73:AC Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 16C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft Manifest number: 1693 Signing time: Tue 04 Nov 2025 16:47:19 +0000 Manifest this update: Tue 04 Nov 2025 16:47:19 +0000 Manifest next update: Tue 11 Nov 2025 16:47:19 +0000 Files and hashes: 1: _jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl (hash: t8OMn2CtSg7EWAeuSU69+jD6X5vswMaEDfZAaGUG2Y8=) 2: 86BBD3DE994C11EC82BA3978C4F9AE02.roa (hash: ttMgb6ONjjqlxH7NcYS6FYVe7vqQ8UVMk9Tx3etFzQ0=) 3: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (hash: 4whCD3BefA16gco8GRXsiAdGqv5E31DbZxV0ybOWul8=) 4: 87D45318994C11EC82BA3978C4F9AE02.roa (hash: vU1HGyruT0rWn1hdwhJaA7GCZtlR47+81PGq+koUgEQ=) 5: 1AD64F18D23411EAAFD6AA3AC4F9AE02.roa (hash: C40oyBiTxjQqMGzoY7zwrfSLtJR/TE6dpDn0DYUL1uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5829 (0x16c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Nov 4 16:47:19 2025 GMT Not After : Nov 11 16:47:19 2025 GMT Subject: CN=690a2e17-c82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:04:11:c7:90:75:1b:fe:4b:ae:fa:56:91: 82:d1:48:8a:ba:ac:a4:01:3c:b0:d5:d7:f8:d7:fe: 7c:dc:79:be:80:d5:24:5b:1f:7f:77:34:d5:7a:67: 14:07:cd:6c:50:aa:a7:a0:77:d2:a6:b3:05:ef:4a: cb:b4:39:ec:68:ca:99:9b:57:fe:0a:a9:47:5c:9b: b3:41:2a:7b:77:87:b2:5c:aa:fd:50:0d:c2:80:0c: a3:3a:08:89:75:8c:10:e5:7f:30:a0:16:97:3b:3c: 25:fd:71:aa:01:d7:ac:e8:b8:a0:0c:92:90:8a:09: dc:46:51:86:ae:8d:a9:58:18:93:a8:7d:3c:45:25: d4:54:39:bb:95:40:72:6b:ac:fc:b9:5f:f5:a7:ca: 14:b5:3c:0a:57:f2:74:8c:d4:15:5b:4a:da:6b:af: 2b:21:36:0d:01:41:3e:57:fe:45:b7:12:b0:ed:3b: 85:17:53:5f:88:20:85:0f:b2:6b:24:2d:f2:74:b9: 70:89:f6:66:c2:b2:39:36:9a:d3:93:18:fe:69:f6: d9:e3:33:05:f7:40:8f:ee:fe:a5:58:e7:38:ab:c7: 9e:70:ec:15:00:bd:ff:e1:1d:5f:b1:55:5a:63:b5: 20:06:db:f4:b4:63:12:a6:0a:d1:6a:ba:df:96:4d: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:6C:FD:94:74:FB:38:B6:9B:CA:50:93:8D:18:5E:8A:36:73:AC X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e1:0e:1f:71:bd:bb:db:52:99:51:a7:93:6b:e6:30:70:12: 0c:7d:ff:8c:b1:a9:86:ab:93:77:36:0a:6e:31:b2:38:e1:61: cc:8d:63:52:d0:e7:b5:72:27:e3:71:57:6a:3a:55:a5:b4:2c: f8:85:e9:95:78:4c:6c:62:51:5e:11:5d:0d:0e:28:5b:f3:48: 45:3c:e1:e9:86:28:4b:5d:71:7e:98:e1:77:0b:20:40:97:cd: d1:f5:97:86:4c:c8:5c:40:c0:be:85:4a:2f:12:93:54:93:2b: 85:11:c5:08:ef:49:4c:94:5c:f6:33:8d:3c:20:6f:85:11:2f: ac:3b:47:72:de:8a:dc:38:4a:d7:90:59:5d:e7:9b:36:ff:2c: a0:b8:cf:94:a0:4a:a3:f6:53:4a:78:23:a9:cc:82:67:cc:c2: e0:70:d8:35:5f:1c:46:c6:b7:3d:fb:12:a3:f9:5f:38:da:ab: 63:06:0f:1d:2b:2f:c2:3d:eb:2b:09:0d:1e:b8:73:56:a2:b5: 8b:c3:9c:8c:38:9a:ce:2b:c9:7d:c7:e1:92:4d:0a:11:53:73: e9:52:ee:b1:f7:58:52:6e:d1:1a:d5:d6:1a:66:05:d5:b1:d2: 91:64:91:7e:42:63:31:fc:c4:c9:45:14:ef:ec:a1:0a:78:7b: 3b:4a:7d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjUxMTA0MTY0NzE5WhcNMjUxMTExMTY0NzE5WjAYMRYwFAYD VQQDEw02OTBhMmUxNy1jODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva8EEceQdRv+S676VpGC0UiKuqykATyw1df41/583Hm+gNUkWx9/dzTVemcU B81sUKqnoHfSprMF70rLtDnsaMqZm1f+CqlHXJuzQSp7d4eyXKr9UA3CgAyjOgiJ dYwQ5X8woBaXOzwl/XGqAdes6LigDJKQigncRlGGro2pWBiTqH08RSXUVDm7lUBy a6z8uV/1p8oUtTwKV/J0jNQVW0raa68rITYNAUE+V/5FtxKw7TuFF1NfiCCFD7Jr JC3ydLlwifZmwrI5NprTkxj+afbZ4zMF90CP7v6lWOc4q8eecOwVAL3/4R1fsVVa Y7UgBtv0tGMSpgrRarrflk0tAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZNbP2U dPs4tpvKUJONGF6KNnOsMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTE4NS8zRUE5REQzQTE2MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09D TUh0UG5WXzlWLWxfRWg4Rk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk4Q4fcb2721KZUaeTa+YwcBIMff+MsamGq5N3NgpuMbI44WHMjWNS 0Oe1cifjcVdqOlWltCz4hemVeExsYlFeEV0NDihb80hFPOHphihLXXF+mOF3CyBA l83R9ZeGTMhcQMC+hUovEpNUkyuFEcUI70lMlFz2M408IG+FES+sO0dy3orcOErX kFld55s2/yyguM+UoEqj9lNKeCOpzIJnzMLgcNg1XxxGxrc9+xKj+V842qtjBg8d Ky/CPesrCQ0euHNWorWLw5yMOJrOK8l9x+GSTQoRU3PpUu6x91hSbtEa1dYaZgXV sdKRZJF+QmMx/MTJRRTv7KEKeHs7Sn2r -----END CERTIFICATE-----Generated at Tue Nov 4 18:41:59 2025 by rpki-client