$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft File: o_JydS7F2eEp5N_KCAuI05t5SUQ.mft (raw, json) Hash identifier: nlWVbef5LnBt/9aAQLgA1cAC+UdxnehUlebAbQNG2Zs= Subject key identifier: D2:A3:47:E3:4C:7A:36:4A:3F:50:3F:27:77:8F:0F:72:0D:17:6F:98 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 0410 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft Manifest number: 0403 Signing time: Mon 03 Nov 2025 00:26:06 +0000 Manifest this update: Mon 03 Nov 2025 00:26:05 +0000 Manifest next update: Mon 10 Nov 2025 00:26:05 +0000 Files and hashes: 1: o_JydS7F2eEp5N_KCAuI05t5SUQ.crl (hash: S4CjQGkt056bMPRJMNXwwv9aZXjeIMlfXLBPkeiqoac=) 2: 60523BEA0CA411ED96936D79C4F9AE02.roa (hash: 4GJunqqaJYIF16cCsMPgPX96ELnXrrR7663nppGhNhg=) 3: 39574A98960D11ECAAC81D60C4F9AE02.roa (hash: QyHX2tVKdXvBrNBfn6kDQfZOmLtDJUfGgQzAxEofZ58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Nov 3 00:26:05 2025 GMT Not After : Nov 10 00:26:05 2025 GMT Subject: CN=6907f69e-9b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:20:d7:d2:79:78:eb:7a:05:c4:e7:82:5e: 44:a0:95:4e:26:96:83:5b:9b:5b:8d:d6:6e:c1:04: 83:b9:f4:23:ae:82:9a:cd:34:d8:40:c2:c7:7b:5c: 71:7d:3b:dd:55:4f:e8:fd:dc:3a:72:3f:69:dd:2d: 12:72:3b:5f:f8:d7:40:89:78:67:49:0c:70:02:1e: 9b:3f:13:46:b3:1c:9c:8b:4f:54:6b:77:0a:c7:61: 26:3d:79:d6:0e:eb:85:6e:25:29:cb:33:3f:2a:e6: ed:8d:9a:9c:91:55:15:19:cd:09:33:f5:21:47:14: b3:cb:c5:85:c3:f2:b6:3e:49:a6:cb:e3:60:87:33: 8e:40:bb:d3:95:d0:c2:32:d4:67:ea:a3:af:25:cf: 20:d9:4c:be:e2:db:a3:de:b3:1f:5b:64:2e:30:4a: b3:be:87:a4:be:e0:4e:1a:72:15:11:28:38:0c:bd: d4:00:c7:98:60:55:c8:db:1d:05:b3:38:65:1d:f8: af:3d:2b:89:0c:5d:1d:8e:9a:c4:e0:5f:44:83:e9: 87:fe:bd:1c:94:45:a0:a7:1b:8d:f4:e6:00:71:00: 38:17:55:57:88:07:91:52:39:98:49:22:f6:c2:82: 3d:89:b2:71:be:dd:78:c6:6d:ce:9a:43:ed:06:6b: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A3:47:E3:4C:7A:36:4A:3F:50:3F:27:77:8F:0F:72:0D:17:6F:98 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:37:6a:d0:82:ba:58:8c:e7:d1:48:fb:43:27:a7:23:0c:36: 36:38:01:b5:fc:46:b7:09:74:98:6c:0f:70:84:2e:9d:12:3c: 02:4b:ee:70:b1:61:ab:ef:d2:a6:80:1f:6b:2e:51:f4:a9:53: d1:01:96:3d:35:bc:2f:2e:ff:5f:74:24:bb:7a:62:83:ff:ec: fa:b6:a4:a4:53:8f:59:7b:15:8a:62:a1:5d:5f:1f:5e:40:8e: 95:29:56:22:c8:dd:94:61:4b:21:60:d3:ec:53:60:d0:e8:20: f7:26:e8:3d:a9:29:4c:b9:0e:8e:69:67:ca:f4:6e:a8:da:be: 91:e7:14:c2:12:01:b3:e9:2c:1c:5d:5c:9e:1b:95:97:03:65: ed:74:32:8f:08:44:bd:8e:8d:5a:57:f9:52:bf:cc:81:28:81: 99:f1:5c:63:16:ef:51:44:ab:1f:b8:b1:8c:ce:51:96:ec:71: 01:84:d2:70:1c:c7:e9:16:4f:00:71:98:b7:01:2f:4e:18:4e: ae:65:b5:2c:32:d8:74:bf:00:e4:85:ab:97:b2:b5:94:43:d2: 3a:31:da:e1:70:f4:24:84:50:8e:f2:83:50:bb:fa:86:3c:37: 97:c9:70:92:cb:35:d5:92:f8:5c:11:ba:3b:03:65:c3:03:39: b0:12:8e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUxMTAzMDAyNjA1WhcNMjUxMTEwMDAyNjA1WjAYMRYwFAYD VQQDEw02OTA3ZjY5ZS05YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqcg19J5eOt6BcTngl5EoJVOJpaDW5tbjdZuwQSDufQjroKazTTYQMLHe1xx fTvdVU/o/dw6cj9p3S0Scjtf+NdAiXhnSQxwAh6bPxNGsxyci09Ua3cKx2EmPXnW DuuFbiUpyzM/KubtjZqckVUVGc0JM/UhRxSzy8WFw/K2Pkmmy+NghzOOQLvTldDC MtRn6qOvJc8g2Uy+4tuj3rMfW2QuMEqzvoekvuBOGnIVESg4DL3UAMeYYFXI2x0F szhlHfivPSuJDF0djprE4F9Eg+mH/r0clEWgpxuN9OYAcQA4F1VXiAeRUjmYSSL2 woI9ibJxvt14xm3OmkPtBmvzswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKjR+NM ejZKP1A/J3ePD3INF2+YMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS81OTA5NDk5MDk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJl RXA1Tl9LQ0F1STA1dDVTVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQN2rQgrpYjOfRSPtDJ6cjDDY2OAG1/Ea3CXSYbA9whC6dEjwCS+5w sWGr79KmgB9rLlH0qVPRAZY9NbwvLv9fdCS7emKD/+z6tqSkU49ZexWKYqFdXx9e QI6VKVYiyN2UYUshYNPsU2DQ6CD3Jug9qSlMuQ6OaWfK9G6o2r6R5xTCEgGz6Swc XVyeG5WXA2XtdDKPCES9jo1aV/lSv8yBKIGZ8VxjFu9RRKsfuLGMzlGW7HEBhNJw HMfpFk8AcZi3AS9OGE6uZbUsMth0vwDkhauXsrWUQ9I6MdrhcPQkhFCO8oNQu/qG PDeXyXCSyzXVkvhcEbo7A2XDAzmwEo5P -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:08 2025 by rpki-client