$ rpki-client -vvf rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft File: JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft (raw, json) Hash identifier: IMH2S86vr6VjeUztnyunL/8tUYnVUDAmoFhAeV/EOaQ= Subject key identifier: AC:23:FF:20:52:6B:B9:EA:B2:45:5B:01:47:6B:19:D3:A0:B2:03:39 Authority key identifier: 26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB Certificate issuer: /CN=A91E773E/serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Certificate serial: 0DB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft Manifest number: 0DB1 Signing time: Tue 04 Nov 2025 17:58:59 +0000 Manifest this update: Tue 04 Nov 2025 17:58:59 +0000 Manifest next update: Tue 11 Nov 2025 17:58:59 +0000 Files and hashes: 1: JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl (hash: M4O3iCfpg9Ay1vwm+bue3hV60fV88fwN3NZP86BiFds=) 2: FF41906ECD5711E9891EE882C4F9AE02.roa (hash: rQKpubYv7cW6+A5yMDDdgzCiTmEdYXOtyG9cRX0uQPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E773E, serialNumber=2678D1DA2E26059A17DA83DC30BBF7E526EA8DCB Validity Not Before: Nov 4 17:58:59 2025 GMT Not After : Nov 11 17:58:59 2025 GMT Subject: CN=690a3ee3-10e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:5b:ff:32:e7:22:06:72:1e:1c:fb:05:9a: e6:72:f0:68:fa:19:b9:dd:55:50:5d:a7:6a:90:68: 25:9c:be:a1:91:30:bf:27:19:f8:18:df:a8:bc:98: 1c:3e:8c:4d:b3:bb:7a:c1:3e:72:82:a1:fd:82:c4: e5:22:18:0d:6b:df:8d:ef:fa:4f:2c:92:96:91:e3: b9:e7:29:bd:33:61:92:73:92:0a:7d:0e:a1:10:3d: e4:97:86:f9:f8:8c:c4:24:40:c7:ed:34:e8:6c:88: 65:1c:52:b3:e6:3e:65:9e:5d:af:f8:e7:f0:a4:fd: 79:86:19:5f:66:03:6c:e0:e0:c6:57:f0:b3:03:26: f0:87:aa:9f:f7:5c:6d:55:03:43:94:94:86:9f:21: 55:c6:cb:ef:f5:fb:55:41:85:6e:7b:c2:21:94:89: df:4c:ef:f8:62:a0:8a:b5:9d:f6:23:79:0d:93:da: 22:9c:e4:63:e0:e5:d7:2d:0a:97:40:d3:fe:79:24: db:6a:ad:12:9c:11:57:bc:61:af:2e:e6:ce:db:ff: cd:53:08:52:44:cc:da:94:9d:18:27:39:88:80:f0: 21:f5:45:6e:a3:72:cc:7a:cc:e0:d4:20:fc:be:8e: 75:41:2e:fe:27:d1:b5:43:02:68:d7:cb:b6:4f:5e: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:23:FF:20:52:6B:B9:EA:B2:45:5B:01:47:6B:19:D3:A0:B2:03:39 X509v3 Authority Key Identifier: keyid:26:78:D1:DA:2E:26:05:9A:17:DA:83:DC:30:BB:F7:E5:26:EA:8D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JnjR2i4mBZoX2oPcMLv35Sbqjcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E773E/8BA7762ECD5611E9A367FB80C4F9AE02/JnjR2i4mBZoX2oPcMLv35Sbqjcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:25:18:9e:7f:96:d9:6d:3c:2b:ef:8b:0d:e2:11:f8:ba:02: 6b:51:08:09:41:f4:89:89:05:44:73:50:ea:06:50:de:aa:c5: 21:32:40:4e:94:90:08:0a:87:bd:e4:a2:d7:c6:c3:bb:e0:7b: fe:8f:0b:fd:e6:9b:19:43:79:32:59:02:7d:6c:84:20:da:7a: 7c:a9:19:11:dc:f6:8d:2d:a0:ec:2e:c9:e8:eb:31:91:4a:67: 11:50:76:da:af:db:d6:c9:94:8a:75:94:7c:97:bf:ad:bb:c1: bf:40:ae:15:99:07:8a:1d:30:7d:0e:d2:9e:85:10:98:c7:8c: 5b:d9:23:f3:e7:b5:1c:4c:e2:9a:e9:60:35:6a:c0:92:d8:5d: 20:df:53:15:3f:9c:90:aa:86:92:3a:46:30:fa:80:e9:a2:3f: 65:2a:38:07:07:eb:db:22:67:a9:19:4e:40:ae:33:64:14:2d: 1b:d7:de:7e:c3:11:c2:e9:da:70:56:58:3d:f0:77:a5:31:b0: db:53:bf:bf:a1:6b:f1:65:12:58:9d:c5:dd:fd:1c:fc:19:1a: 06:b5:a0:9c:ca:0d:91:69:e1:00:f9:d4:f9:0f:c0:c5:c8:0c: c6:dd:21:42:44:a6:14:72:62:37:fb:ab:08:a6:66:1a:74:43: 41:41:84:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3M0UxMTAvBgNVBAUTKDI2NzhEMURBMkUyNjA1OUExN0RBODNEQzMwQkJGN0U1 MjZFQThEQ0IwHhcNMjUxMTA0MTc1ODU5WhcNMjUxMTExMTc1ODU5WjAYMRYwFAYD VQQDEw02OTBhM2VlMy0xMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNNb/zLnIgZyHhz7BZrmcvBo+hm53VVQXadqkGglnL6hkTC/Jxn4GN+ovJgc PoxNs7t6wT5ygqH9gsTlIhgNa9+N7/pPLJKWkeO55ym9M2GSc5IKfQ6hED3kl4b5 +IzEJEDH7TTobIhlHFKz5j5lnl2v+OfwpP15hhlfZgNs4ODGV/CzAybwh6qf91xt VQNDlJSGnyFVxsvv9ftVQYVue8IhlInfTO/4YqCKtZ32I3kNk9oinORj4OXXLQqX QNP+eSTbaq0SnBFXvGGvLubO2//NUwhSRMzalJ0YJzmIgPAh9UVuo3LMeszg1CD8 vo51QS7+J9G1QwJo18u2T16PawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwj/yBS a7nqskVbAUdrGdOgsgM5MB8GA1UdIwQYMBaAFCZ40douJgWaF9qD3DC79+Um6o3L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzczRS84QkE3NzYyRUNE NTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJab1gyb1BjTUx2MzVTYnFq Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pualIyaTRtQlpvWDJvUGNNTHYzNVNicWpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzczRS84QkE3NzYyRUNENTYxMUU5QTM2N0ZCODBDNEY5QUUwMi9KbmpSMmk0bUJa b1gyb1BjTUx2MzVTYnFqY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdJRief5bZbTwr74sN4hH4ugJrUQgJQfSJiQVEc1DqBlDeqsUhMkBO lJAICoe95KLXxsO74Hv+jwv95psZQ3kyWQJ9bIQg2np8qRkR3PaNLaDsLsno6zGR SmcRUHbar9vWyZSKdZR8l7+tu8G/QK4VmQeKHTB9DtKehRCYx4xb2SPz57UcTOKa 6WA1asCS2F0g31MVP5yQqoaSOkYw+oDpoj9lKjgHB+vbImepGU5ArjNkFC0b195+ wxHC6dpwVlg98HelMbDbU7+/oWvxZRJYncXd/Rz8GRoGtaCcyg2RaeEA+dT5D8DF yAzG3SFCRKYUcmI3+6sIpmYadENBQYQh -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:43 2025 by rpki-client