$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: DpJ8bfoerSG9rVC6bo/CoggFQMJAfBLg+Z4nrwbQyRg= Subject key identifier: 82:D8:B7:E1:16:BA:B9:99:49:62:4E:DE:69:80:D8:92:69:AE:58:87 Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: 51 Signing time: Wed 05 Nov 2025 07:28:20 +0000 Manifest this update: Wed 05 Nov 2025 07:28:19 +0000 Manifest next update: Wed 12 Nov 2025 07:28:19 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: 8+Yhpoky4O8SzWsFexmkw/eP4oAXdtMMBsfvnqL51YE=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: Lf3alCeyUDstgnP7x5+oblCm0tv/uJ2YmuuNF6Xn0z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Nov 5 07:28:19 2025 GMT Not After : Nov 12 07:28:19 2025 GMT Subject: CN=690afc94-5d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:72:cd:4b:74:68:c9:92:f9:c9:cf:30:3f: 15:ae:be:16:e9:b8:e9:d6:c6:d9:77:ce:fc:dc:04: 5d:0a:f0:0d:1e:9f:a1:2c:6d:7f:3a:29:8f:68:26: 93:15:2b:87:de:a3:6e:77:4a:c3:e7:d6:ed:01:0b: 7c:0a:e2:59:f9:6b:88:22:4c:64:a4:bd:a0:31:5a: 5a:ba:a9:15:61:29:54:eb:f2:ca:cb:34:32:3d:28: 58:cf:6e:ab:21:2b:2a:59:6b:73:c8:76:c2:2e:e1: a9:51:1d:53:84:0b:0f:0d:a0:5e:1b:46:00:a8:15: 77:37:73:78:b4:c6:10:97:38:93:49:26:a5:9a:51: 20:9d:71:83:84:89:dd:22:08:52:18:56:af:1d:20: 3f:44:62:f8:06:14:a1:78:7b:0f:62:c5:37:14:14: 53:04:69:39:48:e0:45:2d:a2:fe:93:e4:57:ea:0e: 0c:0d:b3:fa:62:d7:6b:b3:2b:53:09:41:2f:f6:de: 99:92:9e:04:aa:18:d3:38:80:e9:3d:5c:e9:df:85: 9f:d5:1f:17:b6:8c:8a:ab:05:73:f7:e7:3d:cb:eb: 92:5b:c4:82:ff:b2:35:65:ff:4a:ec:c4:9d:e5:d1: c6:8f:20:c9:b7:fc:56:b6:11:d1:e1:75:e2:04:13: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D8:B7:E1:16:BA:B9:99:49:62:4E:DE:69:80:D8:92:69:AE:58:87 X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:02:11:b2:0b:a8:2f:ca:57:36:84:60:7c:c1:8a:43:5c:fc: d0:fb:9a:5b:1a:4f:5a:57:2d:db:b7:ce:14:c3:5a:03:9e:42: b9:df:da:b0:f9:04:ca:ef:e9:88:d0:20:59:03:ad:af:0b:2f: 50:25:0f:ab:f8:b9:e2:a1:67:cc:c5:a7:60:61:75:3b:3a:d3: 1c:b4:75:28:20:d2:d1:bd:3e:08:54:1b:68:36:1e:bf:1d:f1: 49:cf:3c:df:9a:a7:9f:84:8a:93:62:1d:39:be:14:ed:a4:c2: af:0d:dd:26:60:e1:8c:5a:e5:7d:cd:b9:09:5c:61:00:cd:2d: 8c:1e:c7:21:09:39:bd:37:e4:8f:3c:fd:0a:74:8c:9f:21:6f: 74:ab:9b:0b:f7:57:34:3a:5b:19:a1:e5:0f:76:cb:6c:70:64: 0e:fc:bb:d1:1d:e1:4f:b4:70:3c:2e:5f:13:1a:29:56:fe:0c: ea:5e:a5:ad:13:ee:b6:43:62:bc:77:40:bb:10:dc:cc:b1:cb: 08:f6:e2:de:8b:c6:0e:a4:b5:b7:72:81:de:40:a6:9e:95:7a: 6b:82:3b:48:31:7b:28:fc:f0:5b:85:ad:db:8f:16:6f:65:c3: ef:c4:f0:5c:50:35:d6:9e:dc:46:90:7c:e2:f5:ae:86:86:34: dc:50:9b:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REYyQjExMC8GA1UEBRMoOENEMTkwQTE0M0FBMkUxRTQ4NzMwM0IxM0RDMDUzRUQx N0JDRUIxRTAeFw0yNTExMDUwNzI4MTlaFw0yNTExMTIwNzI4MTlaMBgxFjAUBgNV BAMTDTY5MGFmYzk0LTVkMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf3XLNS3RoyZL5yc8wPxWuvhbpuOnWxtl3zvzcBF0K8A0en6EsbX86KY9oJpMV K4feo253SsPn1u0BC3wK4ln5a4giTGSkvaAxWlq6qRVhKVTr8srLNDI9KFjPbqsh KypZa3PIdsIu4alRHVOECw8NoF4bRgCoFXc3c3i0xhCXOJNJJqWaUSCdcYOEid0i CFIYVq8dID9EYvgGFKF4ew9ixTcUFFMEaTlI4EUtov6T5FfqDgwNs/pi12uzK1MJ QS/23pmSngSqGNM4gOk9XOnfhZ/VHxe2jIqrBXP35z3L65JbxIL/sjVl/0rsxJ3l 0caPIMm3/Fa2EdHhdeIEE0PlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgti34Ra6 uZlJYk7eaYDYkmmuWIcwHwYDVR0jBBgwFoAUjNGQoUOqLh5IcwOxPcBT7Re86x4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERjJCLzZDMkI3QjFDNDFC QjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5HUW9VT3FMaDVJY3dPeFBjQlQ3UmU4Nng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE RjJCLzZDMkI3QjFDNDFCQjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1 SWN3T3hQY0JUN1JlODZ4NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALwCEbILqC/KVzaEYHzBikNc/ND7mlsaT1pXLdu3zhTDWgOeQrnf2rD5 BMrv6YjQIFkDra8LL1AlD6v4ueKhZ8zFp2BhdTs60xy0dSgg0tG9PghUG2g2Hr8d 8UnPPN+ap5+EipNiHTm+FO2kwq8N3SZg4Yxa5X3NuQlcYQDNLYwexyEJOb035I88 /Qp0jJ8hb3Srmwv3VzQ6Wxmh5Q92y2xwZA78u9Ed4U+0cDwuXxMaKVb+DOpepa0T 7rZDYrx3QLsQ3Myxywj24t6Lxg6ktbdygd5App6VemuCO0gxeyj88FuFrduPFm9l w+/E8FxQNdae3EaQfOL1roaGNNxQm+s= -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:50 2025 by rpki-client