$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: Mk7oJlCOhV3dvs6l85ZH87NzjATCwo3syGkI4rO3pnw= Subject key identifier: 3E:3A:BB:83:0F:5C:4E:08:DD:32:0D:87:D9:90:47:C8:E4:DC:63:6A Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 02E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 02D7 Signing time: Mon 03 Nov 2025 01:17:59 +0000 Manifest this update: Mon 03 Nov 2025 01:17:58 +0000 Manifest next update: Mon 10 Nov 2025 01:17:58 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: 3zeqaPXQvJjTG18ouowZNN3Stz0pGU1LEuu77jzSYuk=) 2: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: eeihbPUCNIm6wOFP5OHLweAd8KKgDQdtMhUILkD0GVg=) 3: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: Or6QdVGJ8KlEltpgE/vRaVt3d7tmMydHusIypsTqbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Nov 3 01:17:58 2025 GMT Not After : Nov 10 01:17:58 2025 GMT Subject: CN=690802c6-6cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:1e:e4:a4:24:cf:1a:a6:2b:98:e3:aa:f7: dc:39:ac:e1:36:3f:65:04:9d:10:28:c0:98:75:ef: d8:a7:51:6a:fb:b1:25:93:46:d5:13:a5:84:49:87: 03:6b:ea:d6:ea:2a:e4:be:ab:45:d9:82:1a:2f:44: 70:bc:e0:5f:d6:7d:fb:c9:00:18:50:22:b5:ed:71: 50:ec:79:a3:d9:42:52:2f:8c:58:92:32:1d:d3:c0: bf:1e:a6:dc:e3:a4:8c:dd:ba:3b:58:ab:8a:54:10: 13:4c:7a:ab:72:1f:f8:a7:bf:69:e4:0d:22:0d:2f: 21:5f:7a:55:46:42:e8:0b:83:b6:e6:11:b2:8f:d7: 23:9a:56:76:ea:de:3b:ba:47:46:94:d2:b8:c8:2b: 7f:f0:fe:40:96:3d:1a:6b:04:e5:e8:49:01:d4:78: e4:46:a3:00:92:ce:92:a2:98:76:59:95:6b:31:1b: 17:35:37:4f:c4:66:99:63:cf:53:0a:f1:ae:e7:49: 87:e3:84:86:c5:3b:fd:b7:83:43:79:77:d3:fa:0c: 12:6a:26:1f:83:0d:bb:91:55:8d:3e:f5:1f:1e:95: 81:0f:1f:6d:63:01:d8:f1:53:17:0c:21:e8:d6:44: 1e:1c:73:a2:94:41:56:28:ce:a2:1f:6b:70:0a:19: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3A:BB:83:0F:5C:4E:08:DD:32:0D:87:D9:90:47:C8:E4:DC:63:6A X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:5c:bd:99:d2:1d:b5:f8:31:46:f3:f4:81:57:2b:d1:32:49: b7:8b:33:ae:48:32:f9:f3:b6:b5:e5:35:ba:0b:46:19:8b:81: de:d0:e2:c3:97:4d:6f:04:42:4a:3e:2b:94:aa:fa:aa:e2:71: 01:f6:ac:83:60:84:f3:75:a7:7a:48:23:24:f7:b2:df:d7:af: 23:46:6f:f6:ca:90:43:c0:fa:c1:4e:53:a4:90:bd:f0:f9:fa: 2f:18:b7:23:96:bb:9f:c4:40:6e:b9:7d:6a:25:64:0c:ac:40: 84:3e:c9:1c:82:4c:6c:72:24:2b:bd:7a:bd:13:e9:bf:cb:ca: 71:81:f2:d8:cc:a6:3c:e5:a5:60:79:90:88:f8:e9:d9:ab:da: 74:d2:48:0d:87:c4:cf:5e:bc:b0:a3:3a:cd:02:64:d3:47:97: e8:80:77:5a:d6:02:a5:63:12:48:0e:ef:3b:0d:19:52:ac:23: de:de:94:36:7d:a9:8e:85:12:fa:42:9c:9d:06:08:53:ed:6f: 07:d5:a6:bc:62:d7:7d:0f:8f:4b:a9:d4:31:4f:10:d5:1b:60: 28:f8:cb:45:63:05:30:a2:f5:71:ce:a5:ee:18:eb:e8:72:e5: d8:8c:2c:94:c1:8d:9a:e1:b2:b6:3d:51:fe:50:d7:2f:25:f7: f7:00:43:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjUxMTAzMDExNzU4WhcNMjUxMTEwMDExNzU4WjAYMRYwFAYD VQQDEw02OTA4MDJjNi02Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvYe5KQkzxqmK5jjqvfcOazhNj9lBJ0QKMCYde/Yp1Fq+7Elk0bVE6WESYcD a+rW6irkvqtF2YIaL0RwvOBf1n37yQAYUCK17XFQ7Hmj2UJSL4xYkjId08C/Hqbc 46SM3bo7WKuKVBATTHqrch/4p79p5A0iDS8hX3pVRkLoC4O25hGyj9cjmlZ26t47 ukdGlNK4yCt/8P5Alj0aawTl6EkB1HjkRqMAks6Soph2WZVrMRsXNTdPxGaZY89T CvGu50mH44SGxTv9t4NDeXfT+gwSaiYfgw27kVWNPvUfHpWBDx9tYwHY8VMXDCHo 1kQeHHOilEFWKM6iH2twChlzZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD46u4MP XE4I3TINh9mQR8jk3GNqMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZXL2Z0h21+DFG8/SBVyvRMkm3izOuSDL587a15TW6C0YZi4He0OLD l01vBEJKPiuUqvqq4nEB9qyDYITzdad6SCMk97Lf168jRm/2ypBDwPrBTlOkkL3w +fovGLcjlrufxEBuuX1qJWQMrECEPskcgkxsciQrvXq9E+m/y8pxgfLYzKY85aVg eZCI+OnZq9p00kgNh8TPXrywozrNAmTTR5fogHda1gKlYxJIDu87DRlSrCPe3pQ2 famOhRL6QpydBghT7W8H1aa8Ytd9D49LqdQxTxDVG2Ao+MtFYwUwovVxzqXuGOvo cuXYjCyUwY2a4bK2PVH+UNcvJff3AEP9 -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:53 2025 by rpki-client