$ rpki-client -vvf rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft File: j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft (raw, json) Hash identifier: ddJUe7UjuGnQSEk4ctwS/Rz3gHtN2QzEUxEAXIvwUeI= Subject key identifier: CB:1E:8D:D2:27:F2:30:95:CA:12:A6:33:E4:6D:A3:48:A7:6D:7F:4B Authority key identifier: 8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E Certificate issuer: /CN=A91C81E8/serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft Manifest number: 0C24 Signing time: Tue 04 Nov 2025 18:48:20 +0000 Manifest this update: Tue 04 Nov 2025 18:48:19 +0000 Manifest next update: Tue 11 Nov 2025 18:48:19 +0000 Files and hashes: 1: j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl (hash: eJeFqfrY4flsmLzaSZFwzxXDdyN4ad+XEdVpKQ367TA=) 2: 659779341A4511EAA4C46765C4F9AE02.roa (hash: COZjXXHmsAr243ikhBQiH/+xCiQuWS4OIqMygfy8ftc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C81E8, serialNumber=8F56EB8E7277A217F467E89C81F64B75DFB87D1E Validity Not Before: Nov 4 18:48:19 2025 GMT Not After : Nov 11 18:48:19 2025 GMT Subject: CN=690a4a73-65af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a5:ae:ed:d7:c3:d0:76:a6:a1:35:b8:e2:6c: 27:51:17:76:6f:89:c0:75:8a:8c:38:64:d6:de:22: 9e:79:95:5a:cf:71:7b:49:36:57:35:89:1c:14:25: e1:c2:a1:7f:cf:64:82:93:3c:72:45:43:6a:2c:d9: 29:30:61:1f:4b:1f:a7:0b:4a:3f:e4:ca:ae:93:f2: 41:91:a2:4d:72:bc:eb:53:3b:eb:ca:c9:db:9d:4c: 05:dd:a8:5b:4f:38:3d:f8:29:90:83:5c:90:b1:cf: 5d:c7:0d:42:08:fa:b7:cf:4c:9a:9c:74:53:bd:9d: c5:4a:86:d1:03:62:f1:a7:1d:5b:52:c9:50:2b:db: 77:38:ef:61:36:bd:be:5a:48:16:fb:16:5f:d7:09: d7:c5:27:d8:0e:82:43:bb:a4:12:94:58:a1:0b:29: 87:a9:1a:f8:92:72:4e:ab:91:34:2d:be:39:1f:d9: 06:98:da:2e:2d:26:c8:ef:4b:be:92:ca:16:ce:dd: 1f:1c:e4:1b:ac:5f:a6:7b:d7:98:ae:98:68:ce:f2: fe:c6:f7:08:21:e3:ed:3a:64:b6:c8:5c:c0:e3:2a: 14:56:0e:e2:8c:7e:f2:5d:ec:2e:d9:75:60:1e:34: 26:d6:71:22:fc:17:17:45:4a:22:0c:58:e5:aa:18: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1E:8D:D2:27:F2:30:95:CA:12:A6:33:E4:6D:A3:48:A7:6D:7F:4B X509v3 Authority Key Identifier: keyid:8F:56:EB:8E:72:77:A2:17:F4:67:E8:9C:81:F6:4B:75:DF:B8:7D:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j1brjnJ3ohf0Z-icgfZLdd-4fR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C81E8/951252081A4311EAA1A5F161C4F9AE02/j1brjnJ3ohf0Z-icgfZLdd-4fR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:61:6d:34:46:ef:49:62:e9:7c:92:66:4b:65:ec:2f:57:5a: c3:d3:c7:ae:99:18:f5:0a:38:0a:35:b9:c5:55:5f:9f:af:b1: 74:b5:b1:2d:49:5b:e2:c4:c1:3a:88:a2:11:8e:9e:79:39:86: ed:68:27:cd:c2:b0:32:87:72:8d:34:08:fd:f0:da:75:4c:d5: a0:7e:7f:3b:38:3e:78:c4:43:84:ed:c3:9c:52:ed:64:10:d1: c2:51:68:4c:ef:30:53:6b:12:3c:88:11:26:a0:a8:ea:02:29: b6:ae:41:06:9b:11:fd:97:0f:4c:21:63:cd:ae:20:bc:32:26: 7f:a0:7e:ae:42:4e:57:17:26:6b:fe:64:bb:de:d5:e1:4d:ec: 06:a7:77:48:c4:b4:d4:8f:e1:b6:d5:91:b3:fd:90:eb:49:83: 90:1f:d5:08:d1:c7:a7:76:6c:27:54:50:d2:31:97:85:ca:a4: 2b:b8:23:07:0b:d5:65:9f:73:30:e2:0e:22:c8:8b:76:99:92: 02:1d:2a:1c:1e:67:83:b6:1a:9c:74:a8:1a:55:a1:1f:bd:a8: af:b4:9e:bd:24:aa:4f:b0:00:d5:db:44:31:be:7a:50:74:a3: 90:b6:4b:d1:4a:e6:2c:df:c7:59:84:6b:70:38:95:f0:b3:97: 25:f9:cd:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgxRTgxMTAvBgNVBAUTKDhGNTZFQjhFNzI3N0EyMTdGNDY3RTg5QzgxRjY0Qjc1 REZCODdEMUUwHhcNMjUxMTA0MTg0ODE5WhcNMjUxMTExMTg0ODE5WjAYMRYwFAYD VQQDEw02OTBhNGE3My02NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KWu7dfD0HamoTW44mwnURd2b4nAdYqMOGTW3iKeeZVaz3F7STZXNYkcFCXh wqF/z2SCkzxyRUNqLNkpMGEfSx+nC0o/5Mquk/JBkaJNcrzrUzvrysnbnUwF3ahb Tzg9+CmQg1yQsc9dxw1CCPq3z0yanHRTvZ3FSobRA2Lxpx1bUslQK9t3OO9hNr2+ WkgW+xZf1wnXxSfYDoJDu6QSlFihCymHqRr4knJOq5E0Lb45H9kGmNouLSbI70u+ ksoWzt0fHOQbrF+me9eYrphozvL+xvcIIePtOmS2yFzA4yoUVg7ijH7yXewu2XVg HjQm1nEi/BcXRUoiDFjlqhhGvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsejdIn 8jCVyhKmM+Rto0inbX9LMB8GA1UdIwQYMBaAFI9W645yd6IX9GfonIH2S3XfuH0e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODFFOC85NTEyNTIwODFB NDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29oZjBaLWljZ2ZaTGRkLTRm UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2oxYnJqbkozb2hmMFotaWNnZlpMZGQtNGZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODFFOC85NTEyNTIwODFBNDMxMUVBQTFBNUYxNjFDNEY5QUUwMi9qMWJyam5KM29o ZjBaLWljZ2ZaTGRkLTRmUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWYW00Ru9JYul8kmZLZewvV1rD08eumRj1CjgKNbnFVV+fr7F0tbEt SVvixME6iKIRjp55OYbtaCfNwrAyh3KNNAj98Np1TNWgfn87OD54xEOE7cOcUu1k ENHCUWhM7zBTaxI8iBEmoKjqAim2rkEGmxH9lw9MIWPNriC8MiZ/oH6uQk5XFyZr /mS73tXhTewGp3dIxLTUj+G21ZGz/ZDrSYOQH9UI0cendmwnVFDSMZeFyqQruCMH C9Vln3Mw4g4iyIt2mZICHSocHmeDthqcdKgaVaEfvaivtJ69JKpPsADV20QxvnpQ dKOQtkvRSuYs38dZhGtwOJXws5cl+c08 -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:18 2025 by rpki-client