$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft File: JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json) Hash identifier: ZZgisMj5ZjW/jrvZfS6BkZcguxLls6/xnbYlBOU821o= Subject key identifier: 8A:4C:63:2B:6B:5A:80:2E:27:BE:6C:12:CF:33:57:99:41:D9:0A:8D Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft Manifest number: 076E Signing time: Sun 02 Nov 2025 21:37:25 +0000 Manifest this update: Sun 02 Nov 2025 21:37:25 +0000 Manifest next update: Sun 09 Nov 2025 21:37:25 +0000 Files and hashes: 1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: 3C7Un+MjGXwR3r5WzBtLqHaNzgKXTUqtQBCynp82hNA=) 2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=) 3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=) 4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=) 5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Nov 2 21:37:25 2025 GMT Not After : Nov 9 21:37:25 2025 GMT Subject: CN=6907cf15-a2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:0d:86:d4:1a:0f:3e:ba:f9:7e:97:0b:36: 54:fd:0d:f7:da:d5:28:64:a6:a7:a7:39:eb:43:7a: f4:5a:0a:86:5c:24:5b:ca:10:8e:cd:d4:67:49:90: 73:b7:c5:fd:b9:c0:45:40:ba:55:e6:d0:15:cf:10: 6c:30:d3:45:c1:39:ec:49:9e:7d:91:e8:00:a5:68: 75:9f:2d:28:50:f9:7c:0b:2a:a7:e8:6c:35:c2:89: b7:47:e4:c3:42:01:68:13:7f:54:d8:6b:5d:f8:34: f9:56:8d:82:ce:1b:71:bd:39:cc:31:b1:82:35:ce: 51:c2:22:3c:8d:da:5c:f1:a5:46:63:19:fa:38:d7: e9:cb:27:84:ea:66:5b:88:4a:5f:0d:c9:1e:9d:d4: 12:df:1c:54:9b:3d:4c:b9:e3:cf:86:38:71:93:6a: fc:82:70:02:72:4f:49:28:31:8e:00:43:20:bf:ea: 15:8c:ee:df:ba:6d:e8:20:a8:42:4d:ef:15:2b:a4: aa:9a:d2:0c:5a:86:53:52:34:16:fd:8c:a5:2b:bd: 63:20:83:e1:ac:4b:2b:48:5e:8b:17:a5:b9:a0:d3: 52:14:82:d7:0b:c9:60:e9:75:3d:37:d2:8b:0a:8f: 3e:9d:4f:f6:d2:3d:49:99:13:c3:6c:46:08:03:6b: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4C:63:2B:6B:5A:80:2E:27:BE:6C:12:CF:33:57:99:41:D9:0A:8D X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:00:7d:14:a1:74:a5:34:e3:66:d8:1e:22:5f:95:97:da:82: 03:7d:70:af:c5:68:8c:11:20:b1:41:b8:fd:1a:23:38:f9:61: bd:ed:63:f6:f6:fb:b5:89:95:15:97:42:9f:bc:1c:46:64:fa: 12:d8:3f:6e:6d:96:df:b4:af:a0:94:55:64:1d:06:0e:5a:10: f6:1c:83:d5:51:93:d6:c1:be:9a:2c:05:c0:fb:59:55:83:a4: f1:c2:43:f9:f1:06:ae:52:47:17:43:d3:82:89:2d:ec:28:f6: 0d:c7:5e:b9:56:8e:d0:da:6d:2f:fe:37:98:87:50:48:ff:61: e7:8e:7d:28:6d:0f:d8:a6:b6:61:54:ef:0b:9b:fb:6a:66:49: 7e:fd:89:f6:c1:1d:c8:21:4e:0b:4a:cf:57:47:31:22:fc:cd: 6a:df:dc:8b:09:37:34:59:7a:56:f7:74:20:03:f3:9f:45:0f: 75:74:56:52:49:c2:0d:51:19:00:2f:01:30:54:86:d4:1f:8b: f5:b8:79:89:36:7a:a7:bf:05:c2:fd:b7:c1:3a:9d:86:80:a8: a1:19:40:d9:3e:02:f3:50:4f:c7:f5:cb:25:a1:a8:bb:80:d6: 40:22:54:f4:b4:8d:63:bd:45:4b:a4:14:88:46:f3:c6:57:03: 58:f0:74:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjUxMTAyMjEzNzI1WhcNMjUxMTA5MjEzNzI1WjAYMRYwFAYD VQQDEw02OTA3Y2YxNS1hMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKINhtQaDz66+X6XCzZU/Q332tUoZKanpznrQ3r0WgqGXCRbyhCOzdRnSZBz t8X9ucBFQLpV5tAVzxBsMNNFwTnsSZ59kegApWh1ny0oUPl8Cyqn6Gw1wom3R+TD QgFoE39U2Gtd+DT5Vo2CzhtxvTnMMbGCNc5RwiI8jdpc8aVGYxn6ONfpyyeE6mZb iEpfDckendQS3xxUmz1MuePPhjhxk2r8gnACck9JKDGOAEMgv+oVjO7fum3oIKhC Te8VK6SqmtIMWoZTUjQW/YylK71jIIPhrEsrSF6LF6W5oNNSFILXC8lg6XU9N9KL Co8+nU/20j1JmRPDbEYIA2uRQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpMYytr WoAuJ75sEs8zV5lB2QqNMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAH0UoXSlNONm2B4iX5WX2oIDfXCvxWiMESCxQbj9GiM4+WG97WP2 9vu1iZUVl0KfvBxGZPoS2D9ubZbftK+glFVkHQYOWhD2HIPVUZPWwb6aLAXA+1lV g6TxwkP58QauUkcXQ9OCiS3sKPYNx165Vo7Q2m0v/jeYh1BI/2Hnjn0obQ/YprZh VO8Lm/tqZkl+/Yn2wR3IIU4LSs9XRzEi/M1q39yLCTc0WXpW93QgA/OfRQ91dFZS ScINURkALwEwVIbUH4v1uHmJNnqnvwXC/bfBOp2GgKihGUDZPgLzUE/H9csloai7 gNZAIlT0tI1jvUVLpBSIRvPGVwNY8HQa -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:21 2025 by rpki-client