$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: LVLre7M4lNKJIrd1HXnwjc4a7+stIfjPjA8dhggjs8o= Subject key identifier: 0C:98:0F:D0:83:FB:9D:3D:3D:A5:35:44:A9:6A:A5:9E:3D:57:B3:2F Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 07BC Signing time: Tue 04 Nov 2025 21:30:19 +0000 Manifest this update: Tue 04 Nov 2025 21:30:18 +0000 Manifest next update: Tue 11 Nov 2025 21:30:18 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: vDltVeskqCcieK8wcKQd4Ea6riobKxjjs6WOi1+Q5cs=) 2: 7C76080E08D611EE82522448C4F9AE02.roa (hash: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo=) 3: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: AlSQiWdBlK2D6fUaLlzUbdGdJEpnbwRmjimYOA50uq4=) 4: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: umP1jM7YynccOJheC11YvDxU2JNxDYT6vSOoFYsUbhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Nov 4 21:30:18 2025 GMT Not After : Nov 11 21:30:18 2025 GMT Subject: CN=690a706a-c7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:9e:50:71:e6:0b:24:8b:93:02:e7:27:23: 6c:fb:dd:27:39:4a:9f:ef:a7:11:80:01:ae:2c:55: 6a:ad:60:6b:2c:4f:28:01:d5:bb:99:02:71:6e:06: 2b:5f:77:79:46:07:a8:95:f6:80:98:8a:dd:b5:e8: 1f:57:39:65:ae:93:3d:94:24:51:1f:58:cf:25:21: 99:a7:b4:cb:67:a4:2e:f0:99:03:04:80:b4:40:99: a7:05:b9:90:af:b7:14:66:1b:38:35:47:ec:96:8b: 31:61:86:03:cd:85:65:76:11:15:6e:15:b1:4d:27: 7d:de:a4:58:b3:12:0d:c4:38:48:e7:5b:c8:8c:ce: d5:d3:25:9a:c5:47:0e:c1:48:24:40:3f:9e:c1:ea: 46:4c:37:bd:eb:b3:f4:9d:8f:eb:85:ac:27:8d:6e: 06:61:01:27:5d:54:40:50:42:ba:c2:18:a4:df:e6: 52:ea:b9:8f:ea:bd:56:bf:e4:46:7e:0a:75:d4:53: 88:e6:9d:c9:88:b8:b2:5b:55:b5:14:42:8e:44:a1: 80:e7:6e:aa:90:0e:6a:5b:dc:09:e5:ed:96:b7:d3: 3b:39:c0:0a:c7:e6:1b:02:62:36:57:4a:ce:ae:86: b9:98:6f:c4:aa:de:0a:53:35:0d:ba:9f:d2:a2:99: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:98:0F:D0:83:FB:9D:3D:3D:A5:35:44:A9:6A:A5:9E:3D:57:B3:2F X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c8:47:c5:34:c7:51:ea:68:27:6d:19:57:54:9a:91:81:86: 28:cf:68:78:03:e5:09:f2:0d:39:7b:03:12:83:c8:d0:05:d8: 44:03:e0:c0:77:57:a3:fa:5a:f9:e1:84:48:67:cc:2f:a5:83: 1a:f2:62:04:9b:1e:75:f9:f6:ba:03:aa:f6:ce:ea:74:ea:a7: 4e:c8:9d:5c:85:d9:c2:dd:4e:6b:d7:ea:5e:4d:e0:0c:79:dc: 17:c3:48:1f:36:80:f1:34:44:2d:79:a6:65:95:3b:f5:b6:0d: bc:1b:98:ba:2f:de:4a:13:7d:91:3c:38:a4:8c:9e:5c:6a:82: 83:a0:8f:54:9e:9d:7e:2d:40:9c:a9:43:b9:bd:d9:b4:16:1c: fe:df:52:95:bd:7b:64:f0:ec:c7:70:51:ab:c9:6f:f6:5b:f1: 42:3e:ed:08:b5:37:ad:38:e7:72:a0:84:fc:d4:d1:60:32:95: 9b:86:4a:ba:62:a4:2f:70:0e:6f:3a:89:d6:3f:ff:0c:35:c5: 98:36:af:cb:5e:86:28:fe:dc:4c:03:5b:dc:0b:4e:18:29:05: 86:94:33:54:6d:cc:56:5e:88:f0:28:d7:2c:70:92:bc:28:d5: 53:cc:93:4d:f6:90:ed:83:e5:70:bf:7f:fc:64:1e:2e:58:e5: 8c:6b:b5:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUxMTA0MjEzMDE4WhcNMjUxMTExMjEzMDE4WjAYMRYwFAYD VQQDEw02OTBhNzA2YS1jN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QOeUHHmCySLkwLnJyNs+90nOUqf76cRgAGuLFVqrWBrLE8oAdW7mQJxbgYr X3d5RgeolfaAmIrdtegfVzllrpM9lCRRH1jPJSGZp7TLZ6Qu8JkDBIC0QJmnBbmQ r7cUZhs4NUfslosxYYYDzYVldhEVbhWxTSd93qRYsxINxDhI51vIjM7V0yWaxUcO wUgkQD+ewepGTDe967P0nY/rhawnjW4GYQEnXVRAUEK6whik3+ZS6rmP6r1Wv+RG fgp11FOI5p3JiLiyW1W1FEKORKGA526qkA5qW9wJ5e2Wt9M7OcAKx+YbAmI2V0rO roa5mG/Eqt4KUzUNup/Sopk2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyYD9CD +509PaU1RKlqpZ49V7MvMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAyEfFNMdR6mgnbRlXVJqRgYYoz2h4A+UJ8g05ewMSg8jQBdhEA+DA d1ej+lr54YRIZ8wvpYMa8mIEmx51+fa6A6r2zup06qdOyJ1chdnC3U5r1+peTeAM edwXw0gfNoDxNEQteaZllTv1tg28G5i6L95KE32RPDikjJ5caoKDoI9Unp1+LUCc qUO5vdm0Fhz+31KVvXtk8OzHcFGryW/2W/FCPu0ItTetOOdyoIT81NFgMpWbhkq6 YqQvcA5vOonWP/8MNcWYNq/LXoYo/txMA1vcC04YKQWGlDNUbcxWXojwKNcscJK8 KNVTzJNN9pDtg+Vwv3/8ZB4uWOWMa7Xv -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:46 2025 by rpki-client