$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft File: SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft (raw, json) Hash identifier: 5ZfW09p7EpistYaTUTXSFBhuV37nTQRie20En3CxB/8= Subject key identifier: 7A:1C:2A:EA:F1:2D:78:F8:23:16:E8:76:09:37:6D:13:DD:EC:2A:24 Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 157E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft Manifest number: 1575 Signing time: Tue 04 Nov 2025 16:51:58 +0000 Manifest this update: Tue 04 Nov 2025 16:51:58 +0000 Manifest next update: Tue 11 Nov 2025 16:51:58 +0000 Files and hashes: 1: SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl (hash: BiVx4ed0SFXAxSaDCRkMGzfW6jtabP8n5kty9W9KBP4=) 2: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (hash: UB3e/BzYZNzSWafIfT/8shx3CMwEAB4npfcc5DFGpRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5502 (0x157e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: Nov 4 16:51:58 2025 GMT Not After : Nov 11 16:51:58 2025 GMT Subject: CN=690a2f2e-6eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:e2:fc:2a:bc:a9:ab:25:b4:18:3d:30:bb: 82:40:80:3f:e8:c6:7b:4a:2a:e1:be:97:20:6f:6b: 26:de:9f:cb:3d:ae:52:25:8b:24:af:63:df:d0:39: 03:4f:af:a8:d7:a6:cd:d7:81:58:52:4b:c3:d2:1e: 09:40:32:c2:87:e5:5b:c4:3c:27:26:6f:ec:f4:9d: 70:b7:b9:07:af:e5:5d:45:2f:fd:5f:dd:80:27:ae: 0a:ea:cd:6b:8d:c9:0f:0a:14:4b:98:ae:4d:4e:09: 72:f4:b6:7d:f5:91:40:e3:09:3c:53:0a:5c:76:29: 90:f6:45:2a:4a:f7:6d:1b:92:f2:ae:2f:eb:d9:1d: 41:40:62:82:d5:c1:64:4e:d9:6d:b9:9c:21:d6:0e: c6:f1:16:35:25:5e:1c:67:48:7b:b6:87:43:4f:ab: a4:70:dc:ae:f3:3d:2d:53:79:09:3c:5b:cb:bf:ab: 7d:a7:43:43:67:0d:44:0b:1c:8f:20:f4:d1:21:60: 10:7e:0d:29:5e:b5:43:e8:5d:b9:c4:5d:4d:98:d9: 0b:38:4f:98:02:5c:58:98:1f:de:88:c6:e2:08:bc: 7c:61:fa:18:05:82:c9:08:bd:dd:00:53:fb:0c:2f: f6:00:b5:49:b8:60:c7:fb:8b:1c:54:34:cc:8b:b8: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1C:2A:EA:F1:2D:78:F8:23:16:E8:76:09:37:6D:13:DD:EC:2A:24 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:f8:84:38:db:89:a1:ca:b3:25:fd:91:f8:91:7f:3d:08: 51:ad:1c:82:50:da:a1:2e:5e:00:2b:8b:4a:8d:21:41:f5:91: fc:9d:f0:49:ba:41:d1:7c:0a:5c:d8:5b:4a:b8:73:b7:a8:b8: a6:dc:f8:e4:c7:72:4c:45:50:49:bc:8f:ae:91:02:3b:20:fd: 22:e8:fb:ac:dd:12:ee:63:c7:60:ab:31:93:aa:72:86:ac:67: 82:d9:9b:a5:b7:ed:f2:f1:e7:3f:b7:d1:6c:bc:7b:00:77:37: fd:f4:33:58:64:e5:6c:8f:52:a6:90:5c:51:c5:0c:df:d2:7f: 1f:61:2a:6d:2b:96:83:58:52:8e:a3:f8:a0:5e:85:b3:ab:95: 1d:e9:4c:db:f0:08:9e:b3:95:66:77:8e:f5:9a:30:c4:ec:ba: 69:1d:f3:17:d1:cc:83:71:a0:1b:ed:53:17:d2:9f:3b:de:17: e7:f4:c2:d5:54:d4:1e:56:bc:97:0a:0c:b7:3e:5b:42:ab:35: 23:c3:52:5d:45:1b:d8:ca:41:7a:27:09:64:8f:22:7b:be:49: 3e:bf:c4:98:0f:4a:f6:86:3d:43:ec:1d:92:fa:ca:90:e6:cc: d3:11:7e:79:a9:60:c1:92:32:01:08:0d:da:4e:5e:fe:a9:3e: 17:fa:33:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUxMTA0MTY1MTU4WhcNMjUxMTExMTY1MTU4WjAYMRYwFAYD VQQDEw02OTBhMmYyZS02ZWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bHi/Cq8qasltBg9MLuCQIA/6MZ7Sirhvpcgb2sm3p/LPa5SJYskr2Pf0DkD T6+o16bN14FYUkvD0h4JQDLCh+VbxDwnJm/s9J1wt7kHr+VdRS/9X92AJ64K6s1r jckPChRLmK5NTgly9LZ99ZFA4wk8UwpcdimQ9kUqSvdtG5Lyri/r2R1BQGKC1cFk TtltuZwh1g7G8RY1JV4cZ0h7todDT6ukcNyu8z0tU3kJPFvLv6t9p0NDZw1ECxyP IPTRIWAQfg0pXrVD6F25xF1NmNkLOE+YAlxYmB/eiMbiCLx8YfoYBYLJCL3dAFP7 DC/2ALVJuGDH+4scVDTMi7g8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHocKurx LXj4Ixbodgk3bRPd7CokMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RThGNi9CMjZFNUYyRTQ2Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFj TFE2ZW9XdVlzTUl6V1Ayd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAow/iEONuJocqzJf2R+JF/PQhRrRyCUNqhLl4AK4tKjSFB9ZH8nfBJ ukHRfApc2FtKuHO3qLim3Pjkx3JMRVBJvI+ukQI7IP0i6Pus3RLuY8dgqzGTqnKG rGeC2Zult+3y8ec/t9FsvHsAdzf99DNYZOVsj1KmkFxRxQzf0n8fYSptK5aDWFKO o/igXoWzq5Ud6Uzb8Aies5Vmd471mjDE7LppHfMX0cyDcaAb7VMX0p873hfn9MLV VNQeVryXCgy3PltCqzUjw1JdRRvYykF6JwlkjyJ7vkk+v8SYD0r2hj1D7B2S+sqQ 5szTEX55qWDBkjIBCA3aTl7+qT4X+jPR -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:10 2025 by rpki-client