$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft File: jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json) Hash identifier: n/i0gxQz17t9pK0Rr2JUTT4xswP/RhgpqVaQ/7rVQb0= Subject key identifier: A8:76:C8:ED:10:3F:19:28:86:DA:F5:3C:3D:ED:A6:68:24:5D:EA:CC Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft Manifest number: 0A80 Signing time: Wed 05 Nov 2025 04:48:21 +0000 Manifest this update: Wed 05 Nov 2025 04:48:21 +0000 Manifest next update: Wed 12 Nov 2025 04:48:21 +0000 Files and hashes: 1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: fpsDaNpJsJ1YPoFkbGl9nF5KYXK3LK7MmCRERlyD74k=) 2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: OtbmYjd+mWe6biEFLJDUdTXgoAn8SFa04cxMhMepJCc=) 3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: r0RKRgF0/rDGEDAesBgC29Z43qYpMBwutyEjFMfF0YY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Nov 5 04:48:21 2025 GMT Not After : Nov 12 04:48:21 2025 GMT Subject: CN=690ad715-ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:0d:27:ba:1a:c4:d8:c1:17:f7:5e:64:26: 66:d5:b5:12:81:3c:f1:7c:41:b6:d5:7b:d3:9c:90: ce:b7:fe:80:0f:85:de:62:be:ff:0e:68:12:86:4d: 30:06:74:e5:3d:17:53:a2:e9:72:1e:3e:4b:0a:7c: 92:0f:1f:30:4d:36:6c:a8:c1:bc:bf:d3:dc:f7:75: 45:17:03:90:d1:cc:6c:e8:6b:3c:22:e7:fe:e7:ad: cd:f7:25:47:a8:e3:db:01:b5:24:42:98:8d:d3:7d: e6:30:ed:63:d0:7c:10:4f:79:33:d1:1b:c5:b8:58: e7:4b:82:d6:cf:8c:5f:cd:76:cf:cd:a4:41:35:4f: b7:5a:f0:17:f2:1f:77:8d:8e:f9:4f:fb:fa:29:02: c0:21:bb:00:26:37:ef:a8:32:01:1c:67:0e:bb:8f: 22:1b:89:47:83:8c:18:0e:70:45:1d:05:b2:61:c2: ce:c7:0a:d2:f5:34:f5:97:03:84:c0:6c:bb:53:fc: 54:5e:51:7c:97:5c:c9:fe:60:29:7e:16:5b:ab:fc: 57:51:a6:68:d6:4b:60:c1:39:59:80:87:70:dc:29: 6b:da:98:cb:49:e6:58:67:c7:51:a8:89:5b:06:c1: 1f:43:c1:15:4d:50:db:d2:12:c0:2f:78:ca:f6:90: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:76:C8:ED:10:3F:19:28:86:DA:F5:3C:3D:ED:A6:68:24:5D:EA:CC X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:59:8f:77:57:b0:e3:d7:e7:90:0a:c0:b0:18:a9:97:b2:db: 71:ce:99:03:e1:5e:67:db:92:ad:ec:56:e1:e6:5e:ae:e5:e3: 77:65:80:ee:72:dc:9a:d4:be:bb:0a:ca:24:48:d5:3f:37:20: e7:ec:f1:c9:f4:4b:01:83:4a:2e:2b:58:53:b0:7f:52:f6:26: e4:8e:e5:ed:e1:1a:76:ff:15:88:94:63:6f:ec:79:75:1f:8f: e9:94:23:29:8f:9f:92:23:c4:3b:92:eb:13:db:5c:61:73:49: 92:07:7b:52:fc:a1:af:4e:63:9f:fa:63:01:81:57:98:f5:24: 47:73:5c:0a:e3:c6:79:e0:86:c9:8f:81:11:b8:15:45:60:23: 20:4f:02:1e:83:7a:06:0f:1c:47:31:4d:e2:f2:3e:07:f2:ce: 88:80:79:61:37:37:2a:3d:12:92:b5:30:ae:67:25:0f:a4:de: e2:34:eb:13:d3:64:d4:64:56:30:cc:68:8b:e3:57:93:4e:28: a0:cf:21:6a:11:93:fb:3d:30:38:f1:14:58:07:ab:cf:56:b9: 2d:8a:75:65:d1:9b:91:f1:08:77:7c:16:61:82:67:84:6a:89: 7d:05:67:88:33:e7:e6:8c:7e:68:60:48:c3:be:54:d1:24:fc: 3c:89:d3:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUxMTA1MDQ0ODIxWhcNMjUxMTEyMDQ0ODIxWjAYMRYwFAYD VQQDEw02OTBhZDcxNS1mZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF4NJ7oaxNjBF/deZCZm1bUSgTzxfEG21XvTnJDOt/6AD4XeYr7/DmgShk0w BnTlPRdToulyHj5LCnySDx8wTTZsqMG8v9Pc93VFFwOQ0cxs6Gs8Iuf+563N9yVH qOPbAbUkQpiN033mMO1j0HwQT3kz0RvFuFjnS4LWz4xfzXbPzaRBNU+3WvAX8h93 jY75T/v6KQLAIbsAJjfvqDIBHGcOu48iG4lHg4wYDnBFHQWyYcLOxwrS9TT1lwOE wGy7U/xUXlF8l1zJ/mApfhZbq/xXUaZo1ktgwTlZgIdw3Clr2pjLSeZYZ8dRqIlb BsEfQ8EVTVDb0hLAL3jK9pCMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh2yO0Q Pxkohtr1PD3tpmgkXerMMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkE2Ri9DQURGRjJGRTZFMzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3 Snc2dmh1Nk1ETFpWR3JsOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMWY93V7Dj1+eQCsCwGKmXsttxzpkD4V5n25Kt7Fbh5l6u5eN3ZYDu ctya1L67CsokSNU/NyDn7PHJ9EsBg0ouK1hTsH9S9ibkjuXt4Rp2/xWIlGNv7Hl1 H4/plCMpj5+SI8Q7kusT21xhc0mSB3tS/KGvTmOf+mMBgVeY9SRHc1wK48Z54IbJ j4ERuBVFYCMgTwIeg3oGDxxHMU3i8j4H8s6IgHlhNzcqPRKStTCuZyUPpN7iNOsT 02TUZFYwzGiL41eTTiigzyFqEZP7PTA48RRYB6vPVrktinVl0ZuR8Qh3fBZhgmeE aol9BWeIM+fmjH5oYEjDvlTRJPw8idOe -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:48 2025 by rpki-client