$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: +aqx2YmslGmMtN2nhxbuiArf02wmqBL2CUhF4aUtmpE= Subject key identifier: E3:3C:EF:29:57:47:73:0F:54:F9:09:4B:BB:F5:68:6E:FB:7A:88:71 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 0301 Signing time: Wed 05 Nov 2025 01:16:07 +0000 Manifest this update: Wed 05 Nov 2025 01:16:06 +0000 Manifest next update: Wed 12 Nov 2025 01:16:06 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: ja0ZNG4iJ9iFnqdTRPvUvt0l9W1XMqVTHXGzwg15ekQ=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Nov 5 01:16:06 2025 GMT Not After : Nov 12 01:16:06 2025 GMT Subject: CN=690aa556-19b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:ab:b9:e2:7a:50:c1:47:58:47:8f:2f:c7: 27:7d:1c:e0:5f:0c:b6:aa:89:63:8f:80:b2:d9:c3: 9e:f6:97:67:0d:d3:12:91:d0:e6:40:92:7b:5e:e6: 1b:81:38:65:a2:41:0c:fb:fc:48:c4:f5:b2:76:aa: 63:c6:f9:58:ed:03:0a:8c:54:41:45:63:4c:e2:29: 10:3d:23:d0:72:f6:e9:4d:09:71:a2:a9:79:ff:2e: 4e:2e:6c:b3:8d:b2:63:9c:c3:70:ee:d4:4a:2c:d6: 44:71:1b:10:8a:72:87:98:e8:87:2a:81:f3:70:f8: ec:67:ed:2f:4f:ac:5c:f6:1a:fb:17:ed:de:32:3b: 8b:f9:21:4f:3f:cd:d7:16:cf:b0:09:2f:ed:c5:35: 24:53:8a:5f:46:75:8b:85:1a:a8:af:fb:56:1f:9e: 4d:fc:58:74:ab:42:d5:fa:5e:14:78:72:b5:c3:04: 60:6e:1d:f2:14:c2:ff:f6:61:ee:9f:73:33:00:eb: 34:a7:33:b6:31:b1:d3:1a:5a:24:a1:8a:0f:68:ce: f9:5c:ac:49:12:f0:84:de:8a:ff:ff:d6:85:8d:43: 3e:93:d5:f5:de:96:53:35:c4:94:a1:c9:8c:67:ce: a5:f9:21:81:b3:a9:33:22:de:46:e6:15:26:2f:47: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:EF:29:57:47:73:0F:54:F9:09:4B:BB:F5:68:6E:FB:7A:88:71 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1a:aa:39:2c:df:a3:b4:76:5a:66:49:87:32:b8:0c:1c:0e: 1a:4c:eb:ab:4d:4f:0c:26:fb:94:d5:20:4d:a7:8c:6b:3f:a9: d0:ab:7d:3a:8b:e0:f2:ff:af:6b:7b:bc:be:67:90:42:5e:23: d1:78:e1:32:62:0f:d2:4a:57:69:a3:c6:ff:28:f4:e7:d1:76: 7c:f4:46:7d:87:70:df:27:ed:a8:81:a4:dd:54:80:2c:10:40: 9a:18:c0:55:8e:b1:fe:a0:b6:e2:16:41:86:a4:95:bd:11:1f: 0b:99:04:fd:6b:8e:f4:48:f0:ee:c7:17:11:73:d6:18:bc:7f: 49:79:40:fc:93:67:13:d6:b5:6e:6f:8c:80:81:0b:d5:e5:c0: 69:7c:80:48:ee:c8:cf:75:4f:f0:47:00:3f:70:d9:39:ae:cb: d5:a6:d6:91:23:e7:35:36:3f:a6:9e:4a:a2:f2:ac:9d:e9:47: 0d:6b:a8:d9:4f:f4:05:0f:88:0c:51:ec:12:6e:80:cf:19:8e: 0e:68:a7:cb:b5:de:51:f6:8a:1f:63:89:26:ad:b3:9f:3b:df: b3:db:2a:1b:5f:64:4b:d6:fa:23:dd:de:78:39:c2:f8:8a:9a: dc:3c:f8:61:af:1a:fe:bf:0f:7c:6d:5a:4f:a7:a2:ea:f1:e0: 86:81:89:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUxMTA1MDExNjA2WhcNMjUxMTEyMDExNjA2WjAYMRYwFAYD VQQDEw02OTBhYTU1Ni0xOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydWrueJ6UMFHWEePL8cnfRzgXwy2qoljj4Cy2cOe9pdnDdMSkdDmQJJ7XuYb gThlokEM+/xIxPWydqpjxvlY7QMKjFRBRWNM4ikQPSPQcvbpTQlxoql5/y5OLmyz jbJjnMNw7tRKLNZEcRsQinKHmOiHKoHzcPjsZ+0vT6xc9hr7F+3eMjuL+SFPP83X Fs+wCS/txTUkU4pfRnWLhRqor/tWH55N/Fh0q0LV+l4UeHK1wwRgbh3yFML/9mHu n3MzAOs0pzO2MbHTGlokoYoPaM75XKxJEvCE3or//9aFjUM+k9X13pZTNcSUocmM Z86l+SGBs6kzIt5G5hUmL0cVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM87ylX R3MPVPkJS7v1aG77eohxMB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMGqo5LN+jtHZaZkmHMrgMHA4aTOurTU8MJvuU1SBNp4xrP6nQq306 i+Dy/69re7y+Z5BCXiPReOEyYg/SSldpo8b/KPTn0XZ89EZ9h3DfJ+2ogaTdVIAs EECaGMBVjrH+oLbiFkGGpJW9ER8LmQT9a470SPDuxxcRc9YYvH9JeUD8k2cT1rVu b4yAgQvV5cBpfIBI7sjPdU/wRwA/cNk5rsvVptaRI+c1Nj+mnkqi8qyd6UcNa6jZ T/QFD4gMUewSboDPGY4OaKfLtd5R9oofY4kmrbOfO9+z2yobX2RL1voj3d54OcL4 iprcPPhhrxr+vw98bVpPp6Lq8eCGgYl/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:34 2025 by rpki-client