$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft File: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft (raw, json) Hash identifier: gTd9T0S7levq6b/DwA0OcZ9dXzrrOX2GlZB15zcZYy4= Subject key identifier: E8:69:8B:87:7C:B3:8A:48:74:A1:57:19:C0:D5:4B:20:EC:FF:5B:4A Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft Manifest number: 04EB Signing time: Sun 02 Nov 2025 23:42:28 +0000 Manifest this update: Sun 02 Nov 2025 23:42:28 +0000 Manifest next update: Sun 09 Nov 2025 23:42:28 +0000 Files and hashes: 1: mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl (hash: v4efLUStpUuqbQ5JbEtcUWjgKyhkyk9hoUZ1C0IZmQQ=) 2: FB782FD2721311EE8754E20FC4F9AE02.roa (hash: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Nov 2 23:42:28 2025 GMT Not After : Nov 9 23:42:28 2025 GMT Subject: CN=6907ec64-f90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:dc:03:68:45:f9:90:c2:30:2a:dc:24:f3: 62:18:6b:e1:ea:11:96:e3:92:9e:ad:51:e2:bf:c0: 37:27:be:b0:26:17:8b:6b:76:15:14:97:14:70:da: 82:b6:22:04:8a:2d:18:53:59:94:56:c5:d7:d7:5e: 16:37:4d:cb:ae:b8:b8:7e:f4:51:46:4e:d6:1f:16: 7d:26:6c:c8:cf:0c:2f:a4:65:fd:fc:4d:50:a0:c0: 1d:1a:7e:78:3f:9d:31:5a:23:6a:61:b4:77:c6:c1: 65:fe:f8:e6:2d:02:81:9a:24:f9:f0:77:8d:67:92: 35:00:f3:44:b6:03:8a:ac:a8:1e:34:29:97:e8:0d: 51:bc:49:2e:28:5d:3c:d3:ef:6f:cb:af:30:8e:e5: 38:ee:d7:ff:50:e6:63:9f:52:9d:f7:d7:a8:2f:38: 15:03:2c:93:5d:ca:8f:d1:47:ba:a5:95:ca:ce:0c: 3f:80:21:f3:25:3e:83:90:82:90:6f:fd:c3:7a:24: a4:31:c3:b3:99:31:55:3c:7d:6f:4a:9a:37:cf:9e: 61:24:b1:1b:e9:ae:d6:c8:2e:af:ea:1e:62:ef:11: a8:e0:cc:62:64:e2:df:d7:d4:e1:fb:62:5a:4a:ae: 5a:9c:f3:b0:a4:33:c9:64:1b:d9:7b:28:ae:dc:b4: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:69:8B:87:7C:B3:8A:48:74:A1:57:19:C0:D5:4B:20:EC:FF:5B:4A X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:91:74:9d:bb:a9:6a:b4:92:96:e2:8b:3c:a9:06:01:5c: c0:a5:a0:7c:89:bf:38:08:c5:a8:f2:23:69:ec:81:94:a8:aa: ff:5e:46:ca:a0:de:eb:04:01:c3:20:d4:72:89:20:a7:20:d0: 98:ed:b6:9c:df:5d:c9:1c:ea:4b:7c:34:08:79:77:fd:9b:1b: 1d:bb:4a:4f:76:1e:73:0e:85:5c:e0:5d:6b:f5:1f:1b:70:53: da:a1:cb:ee:39:8e:20:59:d8:e0:f1:bc:8d:8e:89:45:e5:1c: b0:05:fa:f2:88:3a:71:ff:4d:03:c6:6c:c3:77:43:71:82:cf: 9b:14:44:7c:c6:51:96:cb:98:d8:d6:80:88:28:d2:bc:b6:9c: 36:56:41:ba:92:c4:cb:09:b5:6c:66:82:0a:b4:51:f1:00:8d: 8a:c9:38:c5:a8:f8:13:31:0f:f3:ed:37:56:63:8a:26:59:7e: a1:11:d7:61:ca:35:aa:4e:b3:3d:6c:4c:34:33:b9:04:7f:e4: 15:29:4e:0c:fe:b4:c9:01:25:b1:96:e3:38:35:8c:27:85:a2: 50:bb:75:41:e0:84:59:c4:d4:21:b1:b5:68:32:81:4c:0c:41: c5:5c:aa:a2:f4:66:d6:d9:b2:0c:11:3b:2c:7f:6c:37:32:f5: 28:82:c0:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUxMTAyMjM0MjI4WhcNMjUxMTA5MjM0MjI4WjAYMRYwFAYD VQQDEw02OTA3ZWM2NC1mOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5zcA2hF+ZDCMCrcJPNiGGvh6hGW45KerVHiv8A3J76wJheLa3YVFJcUcNqC tiIEii0YU1mUVsXX114WN03Lrri4fvRRRk7WHxZ9JmzIzwwvpGX9/E1QoMAdGn54 P50xWiNqYbR3xsFl/vjmLQKBmiT58HeNZ5I1APNEtgOKrKgeNCmX6A1RvEkuKF08 0+9vy68wjuU47tf/UOZjn1Kd99eoLzgVAyyTXcqP0Ue6pZXKzgw/gCHzJT6DkIKQ b/3DeiSkMcOzmTFVPH1vSpo3z55hJLEb6a7WyC6v6h5i7xGo4MxiZOLf19Th+2Ja Sq5anPOwpDPJZBvZeyiu3LTJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhpi4d8 s4pIdKFXGcDVSyDs/1tKMB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZEMy9FRjkzODM1QTM3OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cw cjRMWjBuMFc1VndKcHU5N3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVTpF0nbuparSSluKLPKkGAVzApaB8ib84CMWo8iNp7IGUqKr/XkbK oN7rBAHDINRyiSCnINCY7bac313JHOpLfDQIeXf9mxsdu0pPdh5zDoVc4F1r9R8b cFPaocvuOY4gWdjg8byNjolF5RywBfryiDpx/00DxmzDd0Nxgs+bFER8xlGWy5jY 1oCIKNK8tpw2VkG6ksTLCbVsZoIKtFHxAI2KyTjFqPgTMQ/z7TdWY4omWX6hEddh yjWqTrM9bEw0M7kEf+QVKU4M/rTJASWxluM4NYwnhaJQu3VB4IRZxNQhsbVoMoFM DEHFXKqi9GbW2bIMETssf2w3MvUogsBl -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:23 2025 by rpki-client