$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft File: JojUjjQhkrX9qNttrWLMFch1A_o.mft (raw, json) Hash identifier: qBDLpsbPycwSBwPvkY5gQtaU2bUu6+p2MQq8Kq+C9UE= Subject key identifier: 2A:98:3C:49:14:EF:63:81:21:63:00:BD:CA:EF:EB:B7:3D:1B:78:16 Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 1692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft Manifest number: 1680 Signing time: Tue 04 Nov 2025 16:47:05 +0000 Manifest this update: Tue 04 Nov 2025 16:47:04 +0000 Manifest next update: Tue 11 Nov 2025 16:47:04 +0000 Files and hashes: 1: JojUjjQhkrX9qNttrWLMFch1A_o.crl (hash: UQW8WBFSTt6ZFp9PpLCaz2G2dCDXDfCOLhB3smfVVYQ=) 2: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (hash: LZTeBlzg8LIIGWYRTbkSXJOmZLTYgbOTP4Uq6deoib8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5778 (0x1692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Nov 4 16:47:04 2025 GMT Not After : Nov 11 16:47:04 2025 GMT Subject: CN=690a2e09-0ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:01:5e:d9:aa:d1:6e:70:05:64:a9:87:c0:83: 60:9d:07:04:8d:41:71:4c:c5:b5:e7:54:67:0f:f3: 88:5d:0b:7b:58:7b:2b:48:4f:4d:1c:a1:6b:ff:63: 1f:87:87:cd:85:94:01:d7:99:0c:34:50:b8:92:bf: e5:12:3c:4f:d0:60:44:25:a1:0b:e4:63:eb:36:1d: 22:d9:e9:bb:28:a5:69:a1:44:32:c3:d8:fc:42:96: 3f:77:24:21:9b:26:63:65:fb:34:96:e9:ab:d9:3f: 1c:76:02:37:df:c5:3b:a9:19:ee:10:11:57:61:12: b6:5f:2c:84:96:a4:25:b6:0b:65:d9:c8:65:53:e4: be:1e:b1:75:92:7e:1b:76:f9:84:2b:21:65:89:c5: b7:7a:c8:ae:ac:47:02:18:f9:41:10:ba:d3:b4:77: 12:3e:05:a3:15:e3:d3:5e:90:b1:10:b1:95:e6:3a: 54:2a:f6:60:62:a6:a4:0c:3b:f2:5f:99:b4:55:85: 9b:2d:94:0a:5a:81:7c:8c:d6:05:d8:a0:c0:48:4e: be:5c:e3:6c:86:24:da:de:0c:3b:f6:50:30:ce:d5: e4:36:35:1b:04:87:ca:c7:02:09:79:47:6f:61:b0: 83:60:96:15:9d:0a:6e:37:3d:ca:47:95:06:9c:62: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:3C:49:14:EF:63:81:21:63:00:BD:CA:EF:EB:B7:3D:1B:78:16 X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:91:84:64:4e:49:33:a6:6d:26:7e:8d:7a:aa:e2:f3:cf: 9f:1a:2c:14:ca:e5:45:97:9c:09:a5:5d:de:cf:de:c8:cc:37: 44:26:00:a8:b7:21:0e:64:ff:85:74:43:ac:3f:df:3a:f6:e3: 75:2f:8f:48:2e:d0:67:dc:67:ab:89:b9:4f:c6:f1:e0:15:ba: 3b:91:2c:27:dd:3d:0a:22:00:b4:d6:a4:1c:d2:2d:6f:1f:47: c8:bb:16:7f:c8:63:79:90:55:f5:cc:36:e3:05:39:6b:ac:5a: 16:0f:8b:f2:89:fa:56:21:35:5f:b2:d4:47:f1:dd:93:50:f5: 26:b9:df:ad:9b:fb:83:fb:9b:ca:14:de:66:ff:50:a9:90:6f: 9d:6f:43:da:e2:13:bc:db:dd:f1:4e:7f:f2:1d:bc:c9:f8:7c: fd:1e:38:50:17:fb:68:c7:35:3e:ce:9b:72:f0:07:61:fe:a5: 42:a2:37:72:6c:19:b7:8d:b0:e2:93:c3:11:42:73:44:f4:23: 33:2f:ab:0e:1f:63:82:9a:cb:83:bc:78:4a:94:5e:7c:6c:bd: 73:32:56:ca:b2:fe:a9:50:de:e7:10:e5:ab:8c:ca:8d:eb:84: cd:13:1a:da:4b:ac:50:4c:84:8d:02:60:97:45:f5:47:87:c0: 23:5b:f5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjUxMTA0MTY0NzA0WhcNMjUxMTExMTY0NzA0WjAYMRYwFAYD VQQDEw02OTBhMmUwOS0wY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gFe2arRbnAFZKmHwINgnQcEjUFxTMW151RnD/OIXQt7WHsrSE9NHKFr/2Mf h4fNhZQB15kMNFC4kr/lEjxP0GBEJaEL5GPrNh0i2em7KKVpoUQyw9j8QpY/dyQh myZjZfs0lumr2T8cdgI338U7qRnuEBFXYRK2XyyElqQltgtl2chlU+S+HrF1kn4b dvmEKyFlicW3esiurEcCGPlBELrTtHcSPgWjFePTXpCxELGV5jpUKvZgYqakDDvy X5m0VYWbLZQKWoF8jNYF2KDASE6+XONshiTa3gw79lAwztXkNjUbBIfKxwIJeUdv YbCDYJYVnQpuNz3KR5UGnGIupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqYPEkU 72OBIWMAvcrv67c9G3gWMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REU2OC84MEIyRjNGODE1RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGty WDlxTnR0cldMTUZjaDFBX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy2pGEZE5JM6ZtJn6Neqri88+fGiwUyuVFl5wJpV3ez97IzDdEJgCo tyEOZP+FdEOsP9869uN1L49ILtBn3GeriblPxvHgFbo7kSwn3T0KIgC01qQc0i1v H0fIuxZ/yGN5kFX1zDbjBTlrrFoWD4vyifpWITVfstRH8d2TUPUmud+tm/uD+5vK FN5m/1CpkG+db0Pa4hO8293xTn/yHbzJ+Hz9HjhQF/toxzU+zpty8Adh/qVCojdy bBm3jbDik8MRQnNE9CMzL6sOH2OCmsuDvHhKlF58bL1zMlbKsv6pUN7nEOWrjMqN 64TNExraS6xQTISNAmCXRfVHh8AjW/U6 -----END CERTIFICATE-----Generated at Wed Nov 5 15:48:45 2025 by rpki-client