$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft File: mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json) Hash identifier: nQQHqpfpTkZEE9641VIdGcsSsEPLWWl9VrwaG9SwtC8= Subject key identifier: 97:25:A2:8D:92:B1:2C:35:CE:F1:B1:11:99:40:71:D9:1F:FB:78:7A Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft Manifest number: 0AAF Signing time: Tue 04 Nov 2025 19:38:59 +0000 Manifest this update: Tue 04 Nov 2025 19:38:59 +0000 Manifest next update: Tue 11 Nov 2025 19:38:59 +0000 Files and hashes: 1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: e78yOwSn9NY1/1Fg2u7GDTyG8Zu1Nu+qmRghunoc9aM=) 2: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=) 3: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=) 4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=) 5: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=) 6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=) 7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=) 8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=) 9: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=) 10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=) 11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=) 12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=) 13: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=) 14: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Nov 4 19:38:59 2025 GMT Not After : Nov 11 19:38:59 2025 GMT Subject: CN=690a5653-3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:8b:d2:69:d6:c0:cf:1e:ed:c4:2f:44:ff: 98:45:63:21:a7:3d:a5:ea:4c:c8:aa:ea:e9:c1:a6: 70:47:7f:bd:ff:ac:c1:62:0d:63:14:c9:d6:ee:88: c9:3c:4d:b7:21:c7:f2:83:c9:59:08:d1:50:e5:9e: a7:ea:1b:43:d4:b9:4c:17:1c:a9:1f:08:d3:9d:9c: 86:66:91:6c:4f:fc:2c:ac:2c:c7:9a:26:ce:32:c5: 73:59:b6:d6:b1:73:39:82:83:85:64:0f:3e:6a:15: ac:30:62:d6:00:64:6b:5f:fb:71:f8:06:96:d1:60: f0:53:fa:da:4a:bc:a1:dc:75:5a:a1:6f:b9:6d:90: 82:f0:91:9a:8b:3c:7a:89:56:9a:ee:23:43:ab:f1: 81:84:7d:28:93:13:c6:27:32:a1:2c:20:d6:76:bf: 35:4c:76:48:a8:1a:06:60:cd:8c:f9:c1:6b:18:d8: 23:ec:1b:b3:62:3f:75:09:1b:4a:b5:dd:97:c1:67: b0:59:2c:64:a1:52:78:d0:00:42:4a:72:e5:1a:56: f5:3b:40:53:16:4f:8b:68:c8:6a:f5:4a:c8:29:55: be:13:c5:f3:c4:64:1c:0e:bb:51:57:d0:e8:3d:7a: 5c:f7:ec:e0:4c:0a:49:a6:c7:23:7f:32:69:1c:4e: b1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:A2:8D:92:B1:2C:35:CE:F1:B1:11:99:40:71:D9:1F:FB:78:7A X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:27:67:0b:86:0c:0a:77:e6:09:b3:cc:bc:15:8c:fe:44:9c: 32:6f:b3:d4:76:05:d5:15:49:ed:df:57:9c:df:65:5b:0a:e9: 6a:2b:bd:20:39:98:56:bd:c2:01:e2:19:70:ac:e8:cb:e0:1c: 77:4b:90:32:08:f5:af:b3:63:8e:5c:7c:29:3b:ea:cc:2d:e6: 09:03:c9:e4:df:e8:7a:59:cb:3c:28:69:82:c3:89:ee:a0:3f: 09:2c:fd:4b:15:62:04:0a:cb:a7:19:83:87:f8:2f:fb:e7:0c: 2a:4f:fe:b2:7b:6f:90:f3:a3:87:68:89:e7:93:4f:2b:43:4c: 23:1a:0f:c6:ea:0e:ae:ec:13:56:55:f1:bc:7d:f7:9c:77:a1: 49:a9:1a:8d:bf:b0:d2:07:60:a0:66:e5:6b:37:60:35:2b:ce: 3f:cf:5e:9d:7e:ff:d8:50:8e:84:82:1f:f9:08:b9:57:ee:b5: e7:d7:15:30:08:61:37:d9:05:62:d4:0a:db:81:07:2e:bf:c9: 18:62:1a:35:ed:5e:1d:ee:a0:d1:e4:aa:aa:ee:5c:a5:87:92: b7:a3:30:d4:64:0c:45:11:49:6a:3f:47:63:a4:c3:ed:63:58: e2:ea:bc:94:3f:57:de:9c:e1:8d:22:84:fb:0c:09:b4:da:d9: 1d:23:df:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjUxMTA0MTkzODU5WhcNMjUxMTExMTkzODU5WjAYMRYwFAYD VQQDEw02OTBhNTY1My0zODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyWL0mnWwM8e7cQvRP+YRWMhpz2l6kzIqurpwaZwR3+9/6zBYg1jFMnW7ojJ PE23Icfyg8lZCNFQ5Z6n6htD1LlMFxypHwjTnZyGZpFsT/wsrCzHmibOMsVzWbbW sXM5goOFZA8+ahWsMGLWAGRrX/tx+AaW0WDwU/raSryh3HVaoW+5bZCC8JGaizx6 iVaa7iNDq/GBhH0okxPGJzKhLCDWdr81THZIqBoGYM2M+cFrGNgj7BuzYj91CRtK td2XwWewWSxkoVJ40ABCSnLlGlb1O0BTFk+LaMhq9UrIKVW+E8XzxGQcDrtRV9Do PXpc9+zgTApJpscjfzJpHE6xzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcloo2S sSw1zvGxEZlAcdkf+3h6MB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX MC0zWWdHRHRUWkdEeS1HR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkJ2cLhgwKd+YJs8y8FYz+RJwyb7PUdgXVFUnt31ec32VbCulqK70g OZhWvcIB4hlwrOjL4Bx3S5AyCPWvs2OOXHwpO+rMLeYJA8nk3+h6Wcs8KGmCw4nu oD8JLP1LFWIECsunGYOH+C/75wwqT/6ye2+Q86OHaInnk08rQ0wjGg/G6g6u7BNW VfG8ffecd6FJqRqNv7DSB2CgZuVrN2A1K84/z16dfv/YUI6Egh/5CLlX7rXn1xUw CGE32QVi1ArbgQcuv8kYYho17V4d7qDR5Kqq7lylh5K3ozDUZAxFEUlqP0djpMPt Y1ji6ryUP1fenOGNIoT7DAm02tkdI99P -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:50 2025 by rpki-client