$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: lr3FaDVG+4GXZ3HpsdT0CjuRYxPxdBHSNqrNQlIpYWQ= Subject key identifier: 16:07:4F:9D:4C:DD:83:DB:1B:D9:BE:50:B5:CB:D6:8F:69:23:0D:B9 Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: DE Signing time: Mon 03 Nov 2025 05:30:02 +0000 Manifest this update: Mon 03 Nov 2025 05:30:02 +0000 Manifest next update: Mon 10 Nov 2025 05:30:02 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: vPMk1F+hCJhcrm2YFvacLTj7ZLW6/MPCajMREgGayWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Nov 3 05:30:02 2025 GMT Not After : Nov 10 05:30:02 2025 GMT Subject: CN=69083dda-8f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:54:a4:cf:91:9e:03:96:69:9c:79:59:6a: c6:98:11:70:e7:53:91:75:f4:25:10:96:2c:0e:7b: a4:68:71:5d:c0:44:94:3d:ef:b7:85:49:fc:9f:34: cd:4e:52:68:59:37:dc:8d:b3:b0:20:08:fb:31:a3: ba:2b:f8:d5:09:4c:53:71:60:cc:8d:fc:c2:f6:4f: b9:fa:bf:23:d0:5b:cc:1b:15:42:48:07:90:ae:6a: d4:8d:73:3a:85:61:78:ff:d4:5a:6e:4a:2f:fb:85: 28:fe:43:d7:af:22:87:45:f8:e2:d1:73:8c:b5:d0: 1e:38:4a:fd:a3:f8:8d:3b:61:2b:b2:28:e5:b8:e5: e4:0e:db:e2:27:2a:b5:af:bf:02:b7:ea:63:3d:bc: 12:a3:25:f5:98:41:5f:d6:98:3a:bd:1e:d3:c8:56: ac:eb:fa:ba:b6:5f:85:40:05:b3:95:92:e0:54:5f: bd:51:8a:11:04:f1:2c:3b:bf:69:40:d1:6b:b2:61: 4f:a2:2b:b2:57:6d:e1:77:81:4a:22:38:a9:26:ed: 4a:65:0e:25:c4:c0:54:d9:9c:f8:60:f5:35:dd:ae: 3a:25:bf:ca:95:04:2b:53:ec:4e:8c:ef:46:0e:86: e0:a3:d2:bc:35:1c:74:e1:2f:1d:b0:84:69:51:bb: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:4F:9D:4C:DD:83:DB:1B:D9:BE:50:B5:CB:D6:8F:69:23:0D:B9 X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:37:24:83:50:db:74:52:99:92:5a:51:be:8f:93:0b:32:a9: 18:87:d5:16:bb:fa:f6:fb:5e:2d:01:89:c7:f5:a3:a8:07:35: 8b:3b:23:be:38:66:ba:e8:56:32:f2:1c:49:1f:12:4d:f1:64: 20:e4:0c:15:e5:05:21:b3:cc:0c:a0:fd:55:4d:64:bf:a7:c9: 39:be:a1:f9:41:07:d4:b3:36:4c:01:bb:64:b4:03:0f:d4:77: a3:a5:96:eb:5c:42:9f:ca:c9:b0:89:5e:f8:14:99:54:a4:07: 33:f9:39:64:d0:1e:ee:7f:17:db:0b:8c:cc:62:30:2c:9a:ef: 29:ea:59:28:8c:56:b9:22:a5:f7:af:c4:a9:3a:00:08:35:64: 9e:fb:c7:d5:6a:86:3f:e3:4c:63:51:36:45:4d:79:4e:65:d4: 9e:06:e4:01:bd:47:cb:81:d3:a7:5d:2d:58:37:56:eb:2d:6b: b0:3e:d2:65:a8:0f:ec:58:c4:06:5c:8d:e5:45:8f:56:1e:8d: 51:23:2f:31:1b:66:97:50:7b:fe:6c:72:fe:e0:b2:4e:89:85: c5:51:54:a2:c2:9e:7f:d5:f0:2e:d6:22:80:19:67:33:04:53: ea:2e:88:3b:8e:3f:72:68:43:c9:fd:70:fb:fa:31:67:39:63: ed:21:87:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUxMTAzMDUzMDAyWhcNMjUxMTEwMDUzMDAyWjAYMRYwFAYD VQQDEw02OTA4M2RkYS04ZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+pUpM+RngOWaZx5WWrGmBFw51ORdfQlEJYsDnukaHFdwESUPe+3hUn8nzTN TlJoWTfcjbOwIAj7MaO6K/jVCUxTcWDMjfzC9k+5+r8j0FvMGxVCSAeQrmrUjXM6 hWF4/9Rabkov+4Uo/kPXryKHRfji0XOMtdAeOEr9o/iNO2ErsijluOXkDtviJyq1 r78Ct+pjPbwSoyX1mEFf1pg6vR7TyFas6/q6tl+FQAWzlZLgVF+9UYoRBPEsO79p QNFrsmFPoiuyV23hd4FKIjipJu1KZQ4lxMBU2Zz4YPU13a46Jb/KlQQrU+xOjO9G Dobgo9K8NRx04S8dsIRpUbuGAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYHT51M 3YPbG9m+ULXL1o9pIw25MB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkNySDUNt0UpmSWlG+j5MLMqkYh9UWu/r2+14tAYnH9aOoBzWLOyO+ OGa66FYy8hxJHxJN8WQg5AwV5QUhs8wMoP1VTWS/p8k5vqH5QQfUszZMAbtktAMP 1HejpZbrXEKfysmwiV74FJlUpAcz+Tlk0B7ufxfbC4zMYjAsmu8p6lkojFa5IqX3 r8SpOgAINWSe+8fVaoY/40xjUTZFTXlOZdSeBuQBvUfLgdOnXS1YN1brLWuwPtJl qA/sWMQGXI3lRY9WHo1RIy8xG2aXUHv+bHL+4LJOiYXFUVSiwp5/1fAu1iKAGWcz BFPqLog7jj9yaEPJ/XD7+jFnOWPtIYcq -----END CERTIFICATE-----Generated at Tue Nov 4 18:35:40 2025 by rpki-client