$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft File: jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json) Hash identifier: bkinTPQ0c/5G6D8L7DPAAJJpiTCKY6W0Xv8DBDeIwOg= Subject key identifier: 56:24:0D:BB:61:E2:68:3A:9A:14:70:27:53:D9:FB:F2:FB:0F:7E:10 Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB Certificate issuer: /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft Manifest number: 02CC Signing time: Wed 05 Nov 2025 01:30:01 +0000 Manifest this update: Wed 05 Nov 2025 01:30:00 +0000 Manifest next update: Wed 12 Nov 2025 01:30:00 +0000 Files and hashes: 1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: UtpC4DtLjzYD15YfESR1JUGUy7NOJfIRPMa0poBnxW0=) 2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB Validity Not Before: Nov 5 01:30:00 2025 GMT Not After : Nov 12 01:30:00 2025 GMT Subject: CN=690aa898-8e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ee:f6:96:d5:95:3a:c2:ef:f8:b0:3e:ec:38: 2a:cf:7e:0a:0b:0e:f5:26:aa:b6:64:25:d3:c6:3d: 42:0d:4f:2c:96:c1:eb:14:35:0e:a7:f4:50:b6:93: 0b:be:80:1a:d5:6e:d5:9a:a2:da:6d:75:b0:90:8e: 7f:1e:d2:fe:88:89:10:23:9e:14:05:e3:d7:1f:f3: 98:7f:dd:89:18:0e:c7:e2:cf:27:72:f0:2b:a2:f4: cf:44:9f:3e:ff:4f:f7:36:af:06:9e:af:7e:3e:5d: f2:2a:68:8b:42:8a:03:3c:e4:27:a3:fa:99:f8:9c: 44:62:bd:51:2d:b4:2d:f2:79:94:93:17:dc:0e:fe: 0a:d5:a9:48:ec:19:fe:fa:71:ad:bc:27:30:92:a1: 52:03:55:55:61:c6:e5:80:40:0b:05:80:fc:67:69: 76:a3:6b:46:23:38:23:32:15:ad:01:3a:7d:8e:91: 0d:ab:23:6e:9c:bd:9f:78:c9:60:30:65:8c:2a:39: 95:f2:4b:02:38:b0:6a:00:e4:1e:7c:b4:bd:0c:bc: 0d:b2:72:b5:5b:47:1a:34:6e:cb:bd:34:b4:30:e7: b0:34:4e:af:8c:f9:7d:57:b1:b3:20:10:b0:4b:8d: 2d:c3:99:97:34:7d:63:0e:36:ca:30:23:89:78:82: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:24:0D:BB:61:E2:68:3A:9A:14:70:27:53:D9:FB:F2:FB:0F:7E:10 X509v3 Authority Key Identifier: keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:19:b0:3a:59:7b:17:61:f3:52:27:e8:04:7c:3b:1a:5d:25: 50:ea:ff:e6:61:a6:d6:e1:57:02:43:6a:fe:45:59:4b:4e:a1: 63:2e:7b:79:02:0b:bd:b4:1b:a3:df:ef:c6:08:25:bc:33:89: f3:be:84:14:a9:21:69:b2:0c:44:28:97:63:64:09:34:4b:88: 92:64:58:fe:58:b0:97:a9:c5:e7:92:11:bb:2a:1e:50:65:dc: 9d:46:a9:2e:c3:8a:6a:49:e0:8a:3f:ec:f9:42:5e:eb:0f:be: fc:9c:ec:47:9e:81:5c:3e:3a:e7:54:2f:82:5a:37:6f:41:82: c2:66:49:f1:5c:da:94:55:90:ec:39:35:75:b1:39:1f:1f:7c: 52:ad:e1:12:11:39:ec:84:5d:34:1c:ce:c5:82:46:1b:52:e3: bc:b7:97:d1:32:f7:db:2f:54:47:63:9f:f8:87:cd:21:1a:bd: e3:29:06:2e:57:1c:2c:56:09:cf:ff:e2:9e:82:aa:e8:c8:ee: 57:98:74:40:9f:9a:fa:45:35:30:62:a6:9e:b6:4f:1b:6b:bd: fb:1b:a7:c1:f1:70:cc:8b:d5:44:5d:4d:a2:38:86:3f:e8:a8: 21:37:d3:d8:7f:a0:b7:ae:e2:11:8b:bc:de:a2:f4:c0:6a:2a: 4c:41:90:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwQkMxMTAvBgNVBAUTKDhEMTIwQUUxN0I5MUFEQjBGNkEyRTU5RTRFQTRFQTRE MTc0NEM4REIwHhcNMjUxMTA1MDEzMDAwWhcNMjUxMTEyMDEzMDAwWjAYMRYwFAYD VQQDEw02OTBhYTg5OC04ZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu72ltWVOsLv+LA+7Dgqz34KCw71Jqq2ZCXTxj1CDU8slsHrFDUOp/RQtpML voAa1W7VmqLabXWwkI5/HtL+iIkQI54UBePXH/OYf92JGA7H4s8ncvArovTPRJ8+ /0/3Nq8Gnq9+Pl3yKmiLQooDPOQno/qZ+JxEYr1RLbQt8nmUkxfcDv4K1alI7Bn+ +nGtvCcwkqFSA1VVYcblgEALBYD8Z2l2o2tGIzgjMhWtATp9jpENqyNunL2feMlg MGWMKjmV8ksCOLBqAOQefLS9DLwNsnK1W0caNG7LvTS0MOewNE6vjPl9V7GzIBCw S40tw5mXNH1jDjbKMCOJeIJ86wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYkDbth 4mg6mhRwJ1PZ+/L7D34QMB8GA1UdIwQYMBaAFI0SCuF7ka2w9qLlnk6k6k0XRMjb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzBCQy8zODU3REVGMjBF MUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJiRDJvdVdlVHFUcVRSZEV5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pSSUs0WHVScmJEMm91V2VUcVRxVFJkRXlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzBCQy8zODU3REVGMjBFMUYxMUVEODUzQUY1NjVDNEY5QUUwMi9qUklLNFh1UnJi RDJvdVdlVHFUcVRSZEV5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2GbA6WXsXYfNSJ+gEfDsaXSVQ6v/mYabW4VcCQ2r+RVlLTqFjLnt5 Agu9tBuj3+/GCCW8M4nzvoQUqSFpsgxEKJdjZAk0S4iSZFj+WLCXqcXnkhG7Kh5Q ZdydRqkuw4pqSeCKP+z5Ql7rD778nOxHnoFcPjrnVC+CWjdvQYLCZknxXNqUVZDs OTV1sTkfH3xSreESETnshF00HM7FgkYbUuO8t5fRMvfbL1RHY5/4h80hGr3jKQYu VxwsVgnP/+KegqroyO5XmHRAn5r6RTUwYqaetk8ba737G6fB8XDMi9VEXU2iOIY/ 6KghN9PYf6C3ruIRi7zeovTAaipMQZCO -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:56 2025 by rpki-client