$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft File: sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json) Hash identifier: YXWZn1M1oF4pbNX97ine88RLM5WhACPsw840qFKnzPM= Subject key identifier: E3:48:71:69:2A:A4:BB:53:F0:61:0F:01:8B:64:FB:86:B3:DA:4E:0B Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft Manifest number: 0639 Signing time: Sun 02 Nov 2025 22:42:54 +0000 Manifest this update: Sun 02 Nov 2025 22:42:53 +0000 Manifest next update: Sun 09 Nov 2025 22:42:53 +0000 Files and hashes: 1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: VvBFhmpiPrM7eEWG8N2uGQ4D+/PTSmYoY/ltAVx/nJU=) 2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: h5dvfa3FRBYPtcjjdPkOqAVQA/qeLJ42SQi+kECAh1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Nov 2 22:42:53 2025 GMT Not After : Nov 9 22:42:53 2025 GMT Subject: CN=6907de6d-2215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ec:8b:ce:95:77:6d:e8:94:ed:f2:51:50:5c: 8e:f8:f3:e0:3a:1c:d4:0f:15:67:55:e9:bc:8a:a1: 3a:51:88:ff:09:5f:4c:bf:7a:da:d5:42:d5:f4:1e: 39:8d:e9:c9:88:ea:22:88:99:e6:ac:c5:a1:cf:d0: 7b:f6:13:00:66:09:a5:60:c6:9b:f1:82:0e:03:c2: ca:cc:ad:ad:13:9d:ec:c3:4f:1f:cf:8c:3e:4a:c1: 47:f3:b6:c0:fd:72:d4:40:5d:5c:42:9c:c8:36:b2: ed:71:61:2f:7e:4f:48:8c:e7:ef:ff:9a:3e:12:20: fb:03:b2:bb:f3:b9:de:f0:9f:aa:e5:e2:a2:10:d1: f0:65:ac:36:38:c6:05:46:eb:6d:d6:e7:57:25:27: 48:9e:c3:ef:5a:e9:e6:46:5d:4c:24:bd:7d:b9:86: 42:8f:3d:bc:9b:86:8d:89:fb:0f:3a:a4:54:6f:bc: 3c:f4:24:ce:91:a4:b4:cf:9f:34:c9:34:ca:91:a5: 87:56:d9:ed:b5:b2:8b:0b:2a:cd:c9:01:81:ab:8c: fa:1f:1f:68:b9:47:81:33:85:f8:bf:e6:80:25:e8: 36:c4:84:9e:e3:32:10:c4:a0:3c:9b:07:4d:06:a6: 56:bc:75:64:65:86:4d:da:51:81:3a:54:37:a6:4c: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:48:71:69:2A:A4:BB:53:F0:61:0F:01:8B:64:FB:86:B3:DA:4E:0B X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1d:2b:35:81:4b:64:9e:98:52:da:26:27:d6:46:4d:15:28: 79:1c:4a:de:0f:dc:b1:e9:b0:32:c9:ab:d9:11:6f:2b:ad:d4: 61:52:99:01:94:cc:39:fe:7d:c6:55:e1:15:66:63:e3:9b:ab: 73:c2:fa:b9:19:f1:59:55:85:1f:23:e7:70:65:06:bd:d3:cb: 89:71:9a:bb:56:60:01:cb:68:bf:fc:42:40:f0:3f:2b:c2:14: a9:8d:10:19:03:f9:53:4b:39:96:ba:c4:e2:c7:9b:c2:cd:8c: fa:ad:62:ad:e7:5d:a3:63:43:82:ec:d6:da:1e:62:18:0f:43: 65:86:d1:3b:37:bc:b6:46:93:8b:f3:9c:8f:7f:c4:ca:a2:b2: e3:04:5b:3e:c2:1a:ac:70:87:83:11:54:83:98:f5:ec:66:e5: 78:b1:60:0a:c0:b1:26:ac:06:a5:9e:27:01:aa:f5:de:f9:7c: 67:83:90:52:7a:8f:d5:c0:6b:4b:14:5d:36:a7:0e:12:37:67: 00:59:fe:35:84:8a:c6:34:fb:e7:35:f3:26:9c:56:77:55:6f: 8a:b9:43:9e:b8:40:a4:ab:6a:85:8f:a1:73:0a:1b:83:2b:22: 20:55:9a:bb:bf:6b:bf:5e:14:0b:b8:72:45:14:6a:74:65:a6: 69:b2:1d:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjUxMTAyMjI0MjUzWhcNMjUxMTA5MjI0MjUzWjAYMRYwFAYD VQQDEw02OTA3ZGU2ZC0yMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuyLzpV3beiU7fJRUFyO+PPgOhzUDxVnVem8iqE6UYj/CV9Mv3ra1ULV9B45 jenJiOoiiJnmrMWhz9B79hMAZgmlYMab8YIOA8LKzK2tE53sw08fz4w+SsFH87bA /XLUQF1cQpzINrLtcWEvfk9IjOfv/5o+EiD7A7K787ne8J+q5eKiENHwZaw2OMYF Rutt1udXJSdInsPvWunmRl1MJL19uYZCjz28m4aNifsPOqRUb7w89CTOkaS0z580 yTTKkaWHVtnttbKLCyrNyQGBq4z6Hx9ouUeBM4X4v+aAJeg2xISe4zIQxKA8mwdN BqZWvHVkZYZN2lGBOlQ3pkxQIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONIcWkq pLtT8GEPAYtk+4az2k4LMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQHSs1gUtknphS2iYn1kZNFSh5HEreD9yx6bAyyavZEW8rrdRhUpkB lMw5/n3GVeEVZmPjm6tzwvq5GfFZVYUfI+dwZQa908uJcZq7VmABy2i//EJA8D8r whSpjRAZA/lTSzmWusTix5vCzYz6rWKt512jY0OC7NbaHmIYD0NlhtE7N7y2RpOL 85yPf8TKorLjBFs+whqscIeDEVSDmPXsZuV4sWAKwLEmrAalnicBqvXe+Xxng5BS eo/VwGtLFF02pw4SN2cAWf41hIrGNPvnNfMmnFZ3VW+KuUOeuECkq2qFj6FzChuD KyIgVZq7v2u/XhQLuHJFFGp0ZaZpsh2/ -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:15 2025 by rpki-client