$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: WIihl1RhhVkzSuu7lXRCecObpUN0yDXcjNRjlDxaxhc= Subject key identifier: 17:3D:7A:19:95:7A:2C:81:E7:B3:CF:DF:1F:DA:7E:75:5A:C2:B7:47 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0ECC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0EBD Signing time: Tue 04 Nov 2025 17:44:33 +0000 Manifest this update: Tue 04 Nov 2025 17:44:32 +0000 Manifest next update: Tue 11 Nov 2025 17:44:32 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: qlrfGfUjHs6Kj1rBgYi10rR5j3N0hqhZLN7lc6YreBY=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 8/+2CfJXmYqPi0mhCMFrcurlLwZm0SOUBFUC6aCqVwY=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: 1G+5ZDyz2QsGf1HTn6iCWFVSURJLuJWTrhUJ5NvAbhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3788 (0xecc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Nov 4 17:44:32 2025 GMT Not After : Nov 11 17:44:32 2025 GMT Subject: CN=690a3b80-8561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:d9:7b:d6:fe:0b:d6:da:1f:14:37:fd:be: 4b:1b:06:b3:a0:37:90:e5:3a:ee:e3:ac:a6:ef:5c: d0:52:c1:bd:c3:f7:91:06:f4:d7:e0:bf:38:bd:58: f7:02:83:df:6e:c4:fe:79:4b:26:94:ec:a4:20:41: e2:e6:2e:c8:a8:d2:2a:cf:16:91:bf:e4:0e:04:46: 76:39:2c:a6:d3:90:bd:ea:93:06:b7:05:c3:9f:92: 06:35:8d:66:14:1d:83:48:9d:46:f9:7a:3b:b5:13: b4:c5:a8:74:78:13:88:30:d4:7d:3a:c1:39:af:c3: 13:f3:7f:97:57:fa:b8:a2:bf:59:49:bd:34:4f:3b: d6:d0:14:ca:28:6e:44:3e:b0:bd:fb:1b:c5:52:70: 86:b0:52:ed:7c:d9:7f:eb:f2:70:a3:d0:ff:c8:a6: 2d:d1:23:bc:fb:e5:29:88:58:f4:07:14:9d:e9:19: f6:48:8b:49:39:ac:2f:83:b3:0b:c1:94:e3:c1:48: 29:7f:87:1e:ab:74:2e:72:c2:ae:89:fd:ca:d8:71: 02:2e:15:3c:08:ab:f8:e0:86:33:56:95:3f:f3:92: 9b:f2:b6:63:c5:16:c9:51:82:47:6e:69:6a:8b:35: 0c:88:f1:ea:f4:80:06:07:50:3e:9a:fe:78:59:97: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3D:7A:19:95:7A:2C:81:E7:B3:CF:DF:1F:DA:7E:75:5A:C2:B7:47 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ba:2f:45:4e:31:39:b3:46:5c:d2:67:23:b5:1e:bd:57:65: 37:cc:fa:0d:85:26:20:91:cb:2c:7a:6c:99:39:5e:b6:0c:8c: 36:c8:c7:52:a8:54:a8:ab:83:ab:00:6a:6e:0a:d0:87:f4:43: a8:8c:87:c3:9a:c0:01:76:12:50:70:85:62:ad:39:1d:03:d5: 62:14:16:bd:ef:19:89:84:b3:81:b3:14:6c:f9:78:3e:74:a5: e5:a2:3a:7c:59:1d:94:be:84:b6:47:0d:cb:39:73:86:08:35: 2c:fd:04:6c:fa:2e:25:6b:f1:2e:6c:71:07:5c:58:5e:b4:1f: 09:27:a5:de:dc:be:a8:21:96:19:01:dd:f6:66:48:40:f0:e3: 70:f6:b8:a2:59:a2:43:c2:18:f1:29:c5:0b:6d:66:78:d9:c6: 8b:64:26:68:7f:89:eb:ab:53:7a:51:a0:25:8e:32:51:fc:45: 29:c4:f6:d0:53:8a:e6:2b:cf:b0:f9:2f:1a:6d:88:50:a1:5e: b3:a3:a4:14:47:35:73:bc:b7:02:ef:b9:45:99:27:10:ae:5f: 60:5d:bb:d8:af:f0:62:2b:4a:18:27:8a:02:1d:ce:1d:5f:2d: fe:6a:1b:cb:53:4e:2e:36:da:8c:a4:c6:32:4d:ed:17:23:11: 44:5f:bb:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjUxMTA0MTc0NDMyWhcNMjUxMTExMTc0NDMyWjAYMRYwFAYD VQQDEw02OTBhM2I4MC04NTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPfZe9b+C9baHxQ3/b5LGwazoDeQ5Tru46ym71zQUsG9w/eRBvTX4L84vVj3 AoPfbsT+eUsmlOykIEHi5i7IqNIqzxaRv+QOBEZ2OSym05C96pMGtwXDn5IGNY1m FB2DSJ1G+Xo7tRO0xah0eBOIMNR9OsE5r8MT83+XV/q4or9ZSb00TzvW0BTKKG5E PrC9+xvFUnCGsFLtfNl/6/Jwo9D/yKYt0SO8++UpiFj0BxSd6Rn2SItJOawvg7ML wZTjwUgpf4ceq3QucsKuif3K2HECLhU8CKv44IYzVpU/85Kb8rZjxRbJUYJHbmlq izUMiPHq9IAGB1A+mv54WZeK2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBc9ehmV eiyB57PP3x/afnVawrdHMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJui9FTjE5s0Zc0mcjtR69V2U3zPoNhSYgkcssemyZOV62DIw2yMdS qFSoq4OrAGpuCtCH9EOojIfDmsABdhJQcIVirTkdA9ViFBa97xmJhLOBsxRs+Xg+ dKXlojp8WR2UvoS2Rw3LOXOGCDUs/QRs+i4la/EubHEHXFhetB8JJ6Xe3L6oIZYZ Ad32ZkhA8ONw9riiWaJDwhjxKcULbWZ42caLZCZof4nrq1N6UaAljjJR/EUpxPbQ U4rmK8+w+S8abYhQoV6zo6QURzVzvLcC77lFmScQrl9gXbvYr/BiK0oYJ4oCHc4d Xy3+ahvLU04uNtqMpMYyTe0XIxFEX7uk -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:04 2025 by rpki-client