$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft File: jDVX2x3V0rRlvYEV41POXeLMEdA.mft (raw, json) Hash identifier: /ulj6dh7P3SOX42xVtfceYJXxbuqxa4VlSKweII9X5I= Subject key identifier: 11:C0:50:3E:8A:BF:B9:8E:FD:00:A9:87:4D:5A:37:46:E2:37:56:91 Authority key identifier: 8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 Certificate issuer: /CN=A91CA0C1/serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft Manifest number: 01D2 Signing time: Wed 05 Nov 2025 02:57:13 +0000 Manifest this update: Wed 05 Nov 2025 02:57:12 +0000 Manifest next update: Wed 12 Nov 2025 02:57:12 +0000 Files and hashes: 1: jDVX2x3V0rRlvYEV41POXeLMEdA.crl (hash: 8zDOhUQPqG9EygDDt81Y/nSpuP0q3pWe5mK8h42g1po=) 2: 82230380996B11EE9AEF9314C4F9AE02.roa (hash: inMm5nvfP57Hl+fyHfmB7fCT1GborVKT6HpM1mM5xkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA0C1, serialNumber=8C3557DB1DD5D2B465BD8115E353CE5DE2CC11D0 Validity Not Before: Nov 5 02:57:12 2025 GMT Not After : Nov 12 02:57:12 2025 GMT Subject: CN=690abd09-7adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:35:7c:cd:ab:f9:f9:0b:d2:23:3e:e6:21: a1:be:e8:13:5b:27:f6:d1:a2:62:e7:c5:2b:82:57: 02:be:df:a6:2c:55:33:48:60:1c:7e:9c:31:18:52: a8:e4:6e:41:79:f3:df:10:62:db:df:3c:a2:74:08: be:df:7d:e4:1e:6c:48:27:a5:c9:69:ad:65:92:42: cb:a2:3a:1b:ea:81:a2:e5:fd:92:92:25:1c:e4:cb: f5:33:17:2e:e8:b3:d7:44:58:3e:55:c3:3c:f3:5c: 35:8c:e6:4e:2d:76:fc:c1:a4:94:6b:7c:01:da:e6: 50:72:f9:68:ba:45:20:1c:1c:8f:b8:4c:46:98:63: 24:77:f1:a7:ec:83:79:61:7b:67:b3:5f:8f:8b:2d: 78:39:42:df:81:9f:f3:51:50:97:6c:48:fd:5c:f8: b0:51:04:27:c4:da:11:42:e0:51:9f:46:1a:b3:39: 6b:c2:e8:95:2c:3a:dc:08:d8:e5:5a:47:3c:95:37: e8:86:23:a9:7b:03:e2:71:49:79:cd:3b:c7:89:16: 0f:a9:65:2d:fd:67:da:63:53:d2:f7:d7:ea:04:3a: 03:90:61:a5:e2:92:25:e7:f8:f1:a0:bd:00:6a:ca: 8f:c6:9a:86:d9:84:f8:96:79:76:1c:17:20:60:3f: 75:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:50:3E:8A:BF:B9:8E:FD:00:A9:87:4D:5A:37:46:E2:37:56:91 X509v3 Authority Key Identifier: keyid:8C:35:57:DB:1D:D5:D2:B4:65:BD:81:15:E3:53:CE:5D:E2:CC:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDVX2x3V0rRlvYEV41POXeLMEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA0C1/4A8F8068F2E711ED8A5F2577C4F9AE02/jDVX2x3V0rRlvYEV41POXeLMEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:4a:f0:5a:0f:d2:aa:53:bb:a5:53:c9:46:a2:29:7e:94:73: f5:4c:d9:c8:6b:c2:b1:67:8b:65:e8:b8:4c:19:9f:7e:69:a6: da:8c:ef:16:2f:18:f1:0f:0d:d1:e2:1e:48:ed:11:9e:f4:d5: cb:01:d0:64:c9:09:05:7c:82:6c:2b:ee:6b:62:00:bb:a1:52: 21:d6:ea:1f:29:aa:5f:a5:a2:64:99:b3:d7:79:c1:e9:7a:26: 35:b1:de:ea:3d:47:0c:49:cb:d3:f2:a8:34:df:fd:cc:cc:37: a6:83:13:c4:ba:41:5b:26:98:b5:aa:96:d1:e4:c2:58:91:9e: 29:56:1b:d7:12:36:1d:07:3c:eb:59:04:fa:17:ba:e0:9b:0e: 83:23:65:b6:2e:57:05:bc:50:c4:34:1a:c6:61:d0:2f:c8:ec: 63:ec:06:92:75:5c:1e:bb:a4:68:c8:10:55:51:df:8e:00:74: 38:7c:82:e0:9c:12:34:69:78:ee:37:6b:3f:5b:4c:04:9f:0b: 2d:67:f4:b4:f9:14:81:7f:33:e9:a3:f7:a0:c2:7e:ed:b7:b9: 8c:54:f6:5c:1b:a5:08:6d:37:93:7b:41:a5:34:78:5b:78:f8: de:c7:2f:41:94:b5:7c:84:16:da:d0:70:ab:4c:0e:c6:a8:30: 59:75:57:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EwQzExMTAvBgNVBAUTKDhDMzU1N0RCMURENUQyQjQ2NUJEODExNUUzNTNDRTVE RTJDQzExRDAwHhcNMjUxMTA1MDI1NzEyWhcNMjUxMTEyMDI1NzEyWjAYMRYwFAYD VQQDEw02OTBhYmQwOS03YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut81fM2r+fkL0iM+5iGhvugTWyf20aJi58UrglcCvt+mLFUzSGAcfpwxGFKo 5G5BefPfEGLb3zyidAi+333kHmxIJ6XJaa1lkkLLojob6oGi5f2SkiUc5Mv1Mxcu 6LPXRFg+VcM881w1jOZOLXb8waSUa3wB2uZQcvloukUgHByPuExGmGMkd/Gn7IN5 YXtns1+Piy14OULfgZ/zUVCXbEj9XPiwUQQnxNoRQuBRn0YaszlrwuiVLDrcCNjl Wkc8lTfohiOpewPicUl5zTvHiRYPqWUt/WfaY1PS99fqBDoDkGGl4pIl5/jxoL0A asqPxpqG2YT4lnl2HBcgYD91CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHAUD6K v7mO/QCph01aN0biN1aRMB8GA1UdIwQYMBaAFIw1V9sd1dK0Zb2BFeNTzl3izBHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTBDMS80QThGODA2OEYy RTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjByUmx2WUVWNDFQT1hlTE1F ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEVlgyeDNWMHJSbHZZRVY0MVBPWGVMTUVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTBDMS80QThGODA2OEYyRTcxMUVEOEE1RjI1NzdDNEY5QUUwMi9qRFZYMngzVjBy Umx2WUVWNDFQT1hlTE1FZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABSvBaD9KqU7ulU8lGoil+lHP1TNnIa8KxZ4tl6LhMGZ9+aabajO8W LxjxDw3R4h5I7RGe9NXLAdBkyQkFfIJsK+5rYgC7oVIh1uofKapfpaJkmbPXecHp eiY1sd7qPUcMScvT8qg03/3MzDemgxPEukFbJpi1qpbR5MJYkZ4pVhvXEjYdBzzr WQT6F7rgmw6DI2W2LlcFvFDENBrGYdAvyOxj7AaSdVweu6RoyBBVUd+OAHQ4fILg nBI0aXjuN2s/W0wEnwstZ/S0+RSBfzPpo/egwn7tt7mMVPZcG6UIbTeTe0GlNHhb ePjexy9BlLV8hBba0HCrTA7GqDBZdVfq -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:08 2025 by rpki-client