$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft File: JfnbYAet9vV-xO_3piv01C2nXsU.mft (raw, json) Hash identifier: XMgL2Z2+PlUaASNkiz8YdgcRnkZgkIqhmLAA350ddaU= Subject key identifier: 5B:32:A9:34:90:DA:A5:1F:50:6C:F5:C8:10:EB:F7:30:15:60:5E:5E Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft Manifest number: 017F Signing time: Mon 03 Nov 2025 03:41:43 +0000 Manifest this update: Mon 03 Nov 2025 03:41:43 +0000 Manifest next update: Mon 10 Nov 2025 03:41:43 +0000 Files and hashes: 1: JfnbYAet9vV-xO_3piv01C2nXsU.crl (hash: mTYmd0k+0qPO1JPh6bClOkkvXE8VBQv8IkFZU8PzqC8=) 2: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (hash: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Nov 3 03:41:43 2025 GMT Not After : Nov 10 03:41:43 2025 GMT Subject: CN=69082477-ac32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:0e:e8:c8:77:b8:5c:64:5e:58:8c:07:f2: 63:58:58:c9:98:c8:cd:66:df:5d:8d:bc:73:31:05: c4:4c:0b:53:c5:15:f9:77:39:39:56:d9:34:35:35: a5:83:9a:0b:ba:29:95:71:ac:d7:41:71:2f:2f:70: 71:e7:b0:fb:93:e3:cd:70:7f:fc:ac:4d:c0:f9:14: 13:6f:36:a5:57:64:c8:ab:bd:6c:f4:a4:42:a3:fb: 52:01:62:bb:e1:25:8f:56:6d:52:d0:02:17:a9:08: 75:6c:c7:03:af:09:db:bf:d3:89:2a:c8:51:e4:23: 1b:4e:01:2f:9d:4c:e9:9b:32:11:e4:8d:9d:40:29: 5b:e8:94:02:da:02:45:f2:b2:28:02:6b:73:e5:39: a8:f0:4a:c6:1b:b4:10:5d:aa:74:45:4d:ba:1e:53: 24:e4:67:a4:bd:ed:37:8b:ec:0b:c6:f2:1e:44:73: f3:5c:df:7d:74:bb:93:62:a3:5b:05:e4:48:dc:0f: 9d:ab:24:c6:66:cb:c2:92:42:6d:55:e0:fa:79:0c: 85:3a:82:d3:bc:3a:84:e6:d8:04:e8:b6:70:bf:ae: b2:f6:d2:fe:fb:8f:3a:a6:1f:d6:1e:5b:93:99:e2: 3d:0c:a9:1d:14:2d:ef:5e:f1:b2:0b:d3:15:b3:92: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:32:A9:34:90:DA:A5:1F:50:6C:F5:C8:10:EB:F7:30:15:60:5E:5E X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ba:25:91:ad:34:8d:2a:fa:9b:e7:d5:8d:4c:0a:31:27:61: b6:ab:96:00:ca:fb:64:fd:00:bb:e2:c5:f0:5c:a7:e0:b7:b3: 7e:cd:2b:39:ba:5b:b4:15:84:4a:db:85:f6:72:e8:67:e3:df: 82:23:65:16:62:33:12:c7:43:24:29:de:7a:ae:27:21:76:f6: b2:d1:8f:d3:cd:fd:63:de:f8:8c:64:2e:86:5c:5c:9c:40:e2: cc:3f:b7:e3:21:21:ee:a8:ff:0b:77:8c:17:22:2d:01:de:c6: 0f:69:b3:a2:ca:f2:f7:bd:0c:9d:c8:36:b0:53:96:1f:3c:a5: 8a:47:98:0d:bc:6e:7c:b9:ad:bd:57:6c:d6:f1:b4:96:f4:1c: 57:7a:c0:ad:cd:c5:ee:e4:f9:35:8d:57:3b:97:ba:ea:24:2d: 75:50:73:6f:28:f2:bb:4a:5f:ec:6d:05:0c:fa:be:0f:6a:3e: ac:0a:8a:55:2f:c6:a1:ff:5e:14:d3:02:1b:ca:5f:2d:f5:fd: 86:fd:b6:c0:26:d2:19:fb:4c:c3:f7:7e:2a:b0:cb:10:78:0c: b0:70:88:b6:ab:78:29:ed:c7:66:de:43:b1:dd:6e:5b:d8:ac: dd:80:bb:11:ca:ee:d7:cf:96:ef:64:20:5f:7b:11:f5:57:5c: d1:45:f0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUxMTAzMDM0MTQzWhcNMjUxMTEwMDM0MTQzWjAYMRYwFAYD VQQDEw02OTA4MjQ3Ny1hYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjwO6Mh3uFxkXliMB/JjWFjJmMjNZt9djbxzMQXETAtTxRX5dzk5Vtk0NTWl g5oLuimVcazXQXEvL3Bx57D7k+PNcH/8rE3A+RQTbzalV2TIq71s9KRCo/tSAWK7 4SWPVm1S0AIXqQh1bMcDrwnbv9OJKshR5CMbTgEvnUzpmzIR5I2dQClb6JQC2gJF 8rIoAmtz5Tmo8ErGG7QQXap0RU26HlMk5Gekve03i+wLxvIeRHPzXN99dLuTYqNb BeRI3A+dqyTGZsvCkkJtVeD6eQyFOoLTvDqE5tgE6LZwv66y9tL++486ph/WHluT meI9DKkdFC3vXvGyC9MVs5KrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsyqTSQ 2qUfUGz1yBDr9zAVYF5eMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y3OS9GQTMxQTJCMjZGMUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2 Vi14T18zcGl2MDFDMm5Yc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEuiWRrTSNKvqb59WNTAoxJ2G2q5YAyvtk/QC74sXwXKfgt7N+zSs5 ulu0FYRK24X2cuhn49+CI2UWYjMSx0MkKd56richdvay0Y/Tzf1j3viMZC6GXFyc QOLMP7fjISHuqP8Ld4wXIi0B3sYPabOiyvL3vQydyDawU5YfPKWKR5gNvG58ua29 V2zW8bSW9BxXesCtzcXu5Pk1jVc7l7rqJC11UHNvKPK7Sl/sbQUM+r4Paj6sCopV L8ah/14U0wIbyl8t9f2G/bbAJtIZ+0zD934qsMsQeAywcIi2q3gp7cdm3kOx3W5b 2KzdgLsRyu7Xz5bvZCBfexH1V1zRRfCv -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:20 2025 by rpki-client