$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft File: jUig7lfmZHCQwks9Jf5fym-oBOE.mft (raw, json) Hash identifier: yAf+smGSVOnQ3asdbA49icvf35Gi8+9k0QAyeBSq9AE= Subject key identifier: 45:DD:4D:47:97:BD:26:C7:E8:FA:80:8A:31:F7:38:B2:EF:96:89:B1 Authority key identifier: 8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 Certificate issuer: /CN=A91D6210/serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft Manifest number: 0AE8 Signing time: Sun 02 Nov 2025 19:23:04 +0000 Manifest this update: Sun 02 Nov 2025 19:23:04 +0000 Manifest next update: Sun 09 Nov 2025 19:23:04 +0000 Files and hashes: 1: jUig7lfmZHCQwks9Jf5fym-oBOE.crl (hash: SzQTTZ7PKGSkoGMmCc3MbUbEn6aqrrFykh+iG8HYcBo=) 2: B3F0AAB8587211EAA4D4870FC4F9AE02.roa (hash: 7Rjkv9es3qmrpwGoh+nsTmGk0d+b2oIzwsuxat3h6cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6210, serialNumber=8D48A0EE57E6647090C24B3D25FE5FCA6FA804E1 Validity Not Before: Nov 2 19:23:04 2025 GMT Not After : Nov 9 19:23:04 2025 GMT Subject: CN=6907af98-fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:6b:e2:e4:44:2e:c4:1c:55:23:71:46:96: 95:c4:48:a4:ef:67:ab:18:ad:b2:aa:da:14:aa:9b: 24:6b:3e:09:41:f5:50:42:fc:7d:71:23:1b:58:24: b4:4f:b5:51:3e:a5:d9:83:fa:ac:ea:9c:03:9c:7f: 1c:1b:d2:bb:49:b4:83:3c:db:5c:b9:43:f6:02:55: fb:23:32:e3:24:d7:a6:dd:4a:5c:61:d3:6e:97:21: 6a:33:2e:d3:29:e7:59:2e:b8:1b:01:f8:2c:0a:55: a0:52:0e:8b:69:fb:a3:ce:c8:88:c8:9a:16:a9:e1: 21:15:cb:d0:fa:65:85:7f:a2:e6:ae:27:dc:0c:4d: 6b:cd:18:70:25:92:8e:8d:f7:40:c4:a5:ef:9a:8c: 55:ba:3c:32:a6:e9:8d:e9:1e:93:43:64:30:f1:99: 7c:53:77:b8:3c:be:f5:5c:ba:54:b5:8b:b3:3c:bc: c4:9f:6e:cc:89:39:76:ef:4c:75:57:a3:c2:76:b9: a0:7e:11:97:40:5a:50:b5:0e:8e:c6:f7:3d:d1:43: 88:3d:50:37:86:a1:5f:eb:3f:61:b8:10:a6:9f:87: 78:53:e8:df:fa:cb:8a:65:36:28:e0:16:49:03:05: 14:80:cc:30:88:12:76:2b:54:ef:c4:08:f0:02:69: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DD:4D:47:97:BD:26:C7:E8:FA:80:8A:31:F7:38:B2:EF:96:89:B1 X509v3 Authority Key Identifier: keyid:8D:48:A0:EE:57:E6:64:70:90:C2:4B:3D:25:FE:5F:CA:6F:A8:04:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUig7lfmZHCQwks9Jf5fym-oBOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6210/89090F44587111EAB37E090DC4F9AE02/jUig7lfmZHCQwks9Jf5fym-oBOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4c:34:1e:f9:94:c1:c5:8c:e3:d2:23:35:45:b5:9c:3d:ef: a4:22:12:c7:1c:90:18:41:76:8d:db:41:ed:97:f5:cf:f4:29: 8b:36:93:ce:2f:f6:dd:93:e1:d1:a8:58:ca:75:05:a1:a3:9d: be:ea:4b:8c:dc:06:4e:0f:87:6e:51:58:90:2f:fa:6a:b4:52: 0e:68:da:ff:8d:37:2f:4e:cc:46:16:70:4d:a0:5f:70:12:52: 7f:8c:9d:85:8a:6c:32:4f:45:03:60:21:c3:d4:1b:ab:3b:08: d2:9b:f4:c9:a7:9a:4e:91:4a:12:cc:8e:3d:df:d1:97:64:7e: 1b:75:ad:9c:8d:9f:eb:c6:7e:64:9d:a6:b2:90:ce:ea:9c:ae: 9e:39:00:87:ea:5c:2b:20:2d:d9:c0:fc:8c:b5:47:f5:18:10: 46:35:e2:fb:83:c4:a9:05:f0:38:dd:96:db:7c:59:d3:c4:7e: a6:6b:96:4e:9b:4c:a7:82:7f:89:b6:3f:aa:18:8b:b4:4e:fc: ae:36:87:67:ac:2a:61:95:1e:ab:45:9a:f1:49:41:41:0f:3e: e9:ab:17:f1:fc:2c:e0:7d:e4:8b:d9:9c:d1:05:68:3f:87:8f: 84:ac:a1:13:fd:a1:71:45:a2:6f:60:47:47:dc:5c:34:c0:d5: 72:95:e7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyMTAxMTAvBgNVBAUTKDhENDhBMEVFNTdFNjY0NzA5MEMyNEIzRDI1RkU1RkNB NkZBODA0RTEwHhcNMjUxMTAyMTkyMzA0WhcNMjUxMTA5MTkyMzA0WjAYMRYwFAYD VQQDEw02OTA3YWY5OC1mYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDpr4uRELsQcVSNxRpaVxEik72erGK2yqtoUqpskaz4JQfVQQvx9cSMbWCS0 T7VRPqXZg/qs6pwDnH8cG9K7SbSDPNtcuUP2AlX7IzLjJNem3UpcYdNulyFqMy7T KedZLrgbAfgsClWgUg6LafujzsiIyJoWqeEhFcvQ+mWFf6LmrifcDE1rzRhwJZKO jfdAxKXvmoxVujwypumN6R6TQ2Qw8Zl8U3e4PL71XLpUtYuzPLzEn27MiTl270x1 V6PCdrmgfhGXQFpQtQ6Oxvc90UOIPVA3hqFf6z9huBCmn4d4U+jf+suKZTYo4BZJ AwUUgMwwiBJ2K1TvxAjwAmmI1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXdTUeX vSbH6PqAijH3OLLvlomxMB8GA1UdIwQYMBaAFI1IoO5X5mRwkMJLPSX+X8pvqATh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjIxMC84OTA5MEY0NDU4 NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpIQ1F3a3M5SmY1ZnltLW9C T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVaWc3bGZtWkhDUXdrczlKZjVmeW0tb0JPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjIxMC84OTA5MEY0NDU4NzExMUVBQjM3RTA5MERDNEY5QUUwMi9qVWlnN2xmbVpI Q1F3a3M5SmY1ZnltLW9CT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVTDQe+ZTBxYzj0iM1RbWcPe+kIhLHHJAYQXaN20Htl/XP9CmLNpPO L/bdk+HRqFjKdQWho52+6kuM3AZOD4duUViQL/pqtFIOaNr/jTcvTsxGFnBNoF9w ElJ/jJ2FimwyT0UDYCHD1BurOwjSm/TJp5pOkUoSzI4939GXZH4bda2cjZ/rxn5k naaykM7qnK6eOQCH6lwrIC3ZwPyMtUf1GBBGNeL7g8SpBfA43ZbbfFnTxH6ma5ZO m0yngn+Jtj+qGIu0TvyuNodnrCphlR6rRZrxSUFBDz7pqxfx/CzgfeSL2ZzRBWg/ h4+ErKET/aFxRaJvYEdH3Fw0wNVyleeL -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:16 2025 by rpki-client