$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft File: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft (raw, json) Hash identifier: 6PB9d/9PXMNDY/73OM9AXE8gXVkp+z77xzSawheqxTg= Subject key identifier: 66:2E:0B:2C:68:53:05:BA:E6:E8:84:EC:21:C8:BE:67:23:96:D7:7E Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft Manifest number: 0163 Signing time: Wed 05 Nov 2025 04:11:09 +0000 Manifest this update: Wed 05 Nov 2025 04:11:09 +0000 Manifest next update: Wed 12 Nov 2025 04:11:09 +0000 Files and hashes: 1: JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl (hash: 8Y8zqj6lviN9eqOIrV1QjQ1zTOkCAhiidzePDBBEOGg=) 2: 3F69EB4C1D0B11F08389C829C4F9AE02.roa (hash: RZQLqgkDqewk5axvH6Oc8EUFZmGFnVcsr5Jv2NK8MAw=) 3: 3EA78B421D0B11F08389C829C4F9AE02.roa (hash: Zom0iTa1l4g+6GEwfgEYM14KGZ3hjzTabgrahTulsVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1, serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Nov 5 04:11:09 2025 GMT Not After : Nov 12 04:11:09 2025 GMT Subject: CN=690ace5d-ce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:00:11:75:b9:4d:4c:54:f1:26:47:a9:67: 9b:7a:0c:39:f6:77:b3:b2:51:0f:81:79:f7:b8:d4: 12:e3:0e:74:69:e9:db:3c:87:1d:07:1d:71:51:5c: 0c:eb:3d:bf:46:6c:24:74:44:8d:d6:74:81:88:ab: 55:4c:3e:69:91:5e:f3:b9:f4:5c:38:53:77:65:f4: ec:ff:40:f6:c3:c2:38:e5:0a:94:18:aa:4a:8c:97: 4f:07:e8:2b:83:6d:a5:8b:93:01:9f:a8:73:d1:67: 01:2d:a6:34:d6:2e:e1:eb:f1:83:93:51:61:fb:96: 70:c5:3c:e8:66:cb:3a:f9:9d:72:50:17:af:c0:ba: 3f:9a:41:47:40:66:e1:4b:32:42:70:ad:3c:c7:1a: 09:03:ec:ee:91:d1:73:66:3c:07:d4:0a:ba:c5:be: c5:00:16:0c:5d:dd:62:d0:6a:46:1f:39:60:44:37: 19:31:f8:34:c8:f7:43:e8:8b:04:19:c2:a2:c5:47: cc:9b:34:a4:d0:d0:5c:1c:98:f3:92:f9:44:ef:33: 7a:2e:6d:5d:f0:2f:a4:8b:7f:29:4e:12:25:6a:aa: d9:35:69:11:28:b2:f5:3a:1f:83:cd:13:3b:6d:29: e9:14:e7:46:79:39:f6:7d:80:c1:9d:96:79:96:ee: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2E:0B:2C:68:53:05:BA:E6:E8:84:EC:21:C8:BE:67:23:96:D7:7E X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:0b:74:33:99:59:c0:67:f5:30:82:96:88:57:00:cf:3e: 3c:e6:a2:dd:e8:aa:b5:51:fd:7e:3a:b8:16:e2:ba:89:35:d8: 8a:3c:c6:27:e6:7c:70:74:5f:2d:e7:0e:0b:1c:d1:ef:fc:1e: 1f:a7:bf:e7:6c:d4:c7:41:96:43:a9:45:96:b7:4d:6c:70:82: 48:b1:23:47:a1:75:4b:05:d2:f2:b3:49:c8:2c:fc:e8:73:22: a1:da:ac:1e:51:77:41:22:53:85:3e:31:3e:c5:b6:b1:c0:e7: 74:e6:86:3e:a8:00:b3:f2:bd:b0:a7:00:95:e7:e4:68:0a:e9: 7a:94:0d:16:e8:6b:7f:42:ed:a9:58:5f:76:ff:22:26:d0:28: 41:0a:99:01:00:a3:ab:d0:1e:8a:93:90:8b:33:53:f9:6d:86: 2b:ba:92:d5:a1:70:ea:2c:ed:4f:f9:05:5f:50:e2:24:bb:d7: 05:de:60:c5:53:b0:cd:33:ff:db:37:ba:6d:6a:a0:7b:c0:bb: f7:60:79:c2:0c:38:2b:cb:d0:75:5e:7e:4e:25:3e:1a:c8:b0: 09:82:31:e6:35:16:de:69:2a:49:dd:ba:59:46:b6:61:fb:ed: f0:89:d2:6b:fd:45:15:58:95:5c:69:64:2b:fa:2a:17:39:34: 33:60:e3:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU0QTExMTAvBgNVBAUTKDI0N0I1RDZFNjJFNEE0OUU5REY0REMyNEMzMUVDQTZF RDdBNDNCMjgwHhcNMjUxMTA1MDQxMTA5WhcNMjUxMTEyMDQxMTA5WjAYMRYwFAYD VQQDEw02OTBhY2U1ZC1jZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvswAEXW5TUxU8SZHqWebegw59nezslEPgXn3uNQS4w50aenbPIcdBx1xUVwM 6z2/RmwkdESN1nSBiKtVTD5pkV7zufRcOFN3ZfTs/0D2w8I45QqUGKpKjJdPB+gr g22li5MBn6hz0WcBLaY01i7h6/GDk1Fh+5ZwxTzoZss6+Z1yUBevwLo/mkFHQGbh SzJCcK08xxoJA+zukdFzZjwH1Aq6xb7FABYMXd1i0GpGHzlgRDcZMfg0yPdD6IsE GcKixUfMmzSk0NBcHJjzkvlE7zN6Lm1d8C+ki38pThIlaqrZNWkRKLL1Oh+DzRM7 bSnpFOdGeTn2fYDBnZZ5lu5ozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYuCyxo UwW65uiE7CHIvmcjltd+MB8GA1UdIwQYMBaAFCR7XW5i5KSenfTcJMMeym7XpDso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTRBMS83NDAyRDhEODlC NjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BKNmQ5Tndrd3g3S2J0ZWtP eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9KSHRkYm1Ma3BK NmQ5Tndrd3g3S2J0ZWtPeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdSAt0M5lZwGf1MIKWiFcAzz485qLd6Kq1Uf1+OrgW4rqJNdiKPMYn 5nxwdF8t5w4LHNHv/B4fp7/nbNTHQZZDqUWWt01scIJIsSNHoXVLBdLys0nILPzo cyKh2qweUXdBIlOFPjE+xbaxwOd05oY+qACz8r2wpwCV5+RoCul6lA0W6Gt/Qu2p WF92/yIm0ChBCpkBAKOr0B6Kk5CLM1P5bYYrupLVoXDqLO1P+QVfUOIku9cF3mDF U7DNM//bN7ptaqB7wLv3YHnCDDgry9B1Xn5OJT4ayLAJgjHmNRbeaSpJ3bpZRrZh ++3widJr/UUVWJVcaWQr+ioXOTQzYONE -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:13 2025 by rpki-client