$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: TQc3/TRupNVPG2wvM+BeRw/59aPk1TktanJbe46cdIg= Subject key identifier: B8:60:42:FE:C3:49:EF:3E:61:4A:4C:82:6E:3F:3C:BF:18:F5:8C:22 Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 24 Signing time: Mon 03 Nov 2025 07:45:52 +0000 Manifest this update: Mon 03 Nov 2025 07:45:51 +0000 Manifest next update: Mon 10 Nov 2025 07:45:51 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: SEqgvUQN55bTCLlPzTaRKHhXnTOS3c3VIBHXtgF/QNY=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Nov 3 07:45:51 2025 GMT Not After : Nov 10 07:45:51 2025 GMT Subject: CN=69085db0-e792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:74:3d:99:3d:95:f9:bb:05:21:de:da:c1: c7:c1:46:95:60:f6:cd:17:9d:28:b6:20:0f:9a:26: 4d:7a:fe:d3:a8:ba:00:da:1f:df:4d:4e:38:96:df: 01:ee:8d:79:98:f8:cd:37:c1:de:4d:ce:de:9a:2b: 4c:ec:e2:6e:31:be:fc:da:74:d7:08:29:18:48:92: 17:e3:a9:68:ea:f3:ac:98:2f:e3:23:7f:46:33:e8: 5d:42:61:fb:40:ef:54:0d:66:75:e8:dc:9e:44:c8: 00:3e:26:4b:c0:40:cc:8e:af:25:34:ab:b1:12:c9: 86:3d:92:ef:89:aa:f0:d0:78:53:29:a8:a5:42:52: 2e:bf:5c:ff:bd:8e:d0:55:b9:d3:51:19:16:9c:e5: 93:41:63:c6:e9:d6:ce:9d:35:52:a0:23:de:c4:20: 22:fe:a0:8e:c8:2d:6e:a2:74:1a:c1:26:5e:07:2e: 50:d4:ec:78:31:f1:a0:98:7f:69:50:50:0b:ba:3b: c0:09:0b:8f:ca:bc:25:86:fd:b6:7b:09:70:6c:a6: e9:f1:a5:13:a1:45:16:2d:91:89:7d:96:d0:af:9b: e7:11:d2:d7:c4:4b:1a:06:bd:1e:d2:e9:97:e2:13: f9:b0:d4:b6:b4:65:b8:60:e2:f6:83:a2:03:4d:d2: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:42:FE:C3:49:EF:3E:61:4A:4C:82:6E:3F:3C:BF:18:F5:8C:22 X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f5:77:f0:b7:97:e8:34:35:2b:75:df:47:7e:6a:f3:92:c7: 33:8e:95:c5:95:ed:56:b8:89:0b:e7:66:76:e9:df:77:20:d9: 50:94:64:4c:e4:d2:8d:a7:6b:88:c6:8a:c7:9e:c7:90:39:49: 1d:8a:95:3a:ce:f7:c9:2f:7f:98:e5:86:17:c7:3d:14:b8:e5: dd:db:64:ae:62:43:7f:b5:90:bb:dd:41:6d:90:89:69:62:d0: b7:b2:35:bf:67:ab:77:d6:c3:83:a0:52:89:a5:aa:6d:d4:8f: e8:e8:34:b3:6d:d8:d9:42:1e:e9:20:f2:9c:c2:6f:4d:d3:12: f3:a4:be:ca:b1:17:6b:0f:cb:54:a2:a3:a4:c7:86:dc:ed:5a: 89:6d:e4:5a:44:22:f4:5d:0d:e1:e7:2e:20:4b:a6:71:db:ae: 4c:0d:80:ed:e9:57:9d:5d:47:d5:10:0f:07:44:66:db:9e:7c: 63:1d:28:36:89:7c:34:33:96:24:f4:d0:7d:59:24:e5:36:7f: 9c:3b:03:e9:14:5e:b0:62:da:24:0d:47:e6:1b:16:f3:d3:6e: 2d:ab:75:f7:59:a1:0e:6a:28:bb:0c:ee:b0:f7:6c:40:89:ce: 98:9a:cc:94:8a:5d:c0:33:08:d4:01:b1:41:4a:9e:00:c8:48: 28:8e:f3:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTExMDMwNzQ1NTFaFw0yNTExMTAwNzQ1NTFaMBgxFjAUBgNV BAMTDTY5MDg1ZGIwLWU3OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG3nQ9mT2V+bsFId7awcfBRpVg9s0XnSi2IA+aJk16/tOougDaH99NTjiW3wHu jXmY+M03wd5Nzt6aK0zs4m4xvvzadNcIKRhIkhfjqWjq86yYL+Mjf0Yz6F1CYftA 71QNZnXo3J5EyAA+JkvAQMyOryU0q7ESyYY9ku+JqvDQeFMpqKVCUi6/XP+9jtBV udNRGRac5ZNBY8bp1s6dNVKgI97EICL+oI7ILW6idBrBJl4HLlDU7Hgx8aCYf2lQ UAu6O8AJC4/KvCWG/bZ7CXBspunxpROhRRYtkYl9ltCvm+cR0tfESxoGvR7S6Zfi E/mw1La0Zbhg4vaDogNN0mPJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuGBC/sNJ 7z5hSkyCbj88vxj1jCIwHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADH1d/C3l+g0NSt130d+avOSxzOOlcWV7Va4iQvnZnbp33cg2VCUZEzk 0o2na4jGiseex5A5SR2KlTrO98kvf5jlhhfHPRS45d3bZK5iQ3+1kLvdQW2QiWli 0LeyNb9nq3fWw4OgUomlqm3Uj+joNLNt2NlCHukg8pzCb03TEvOkvsqxF2sPy1Si o6THhtztWolt5FpEIvRdDeHnLiBLpnHbrkwNgO3pV51dR9UQDwdEZtuefGMdKDaJ fDQzliT00H1ZJOU2f5w7A+kUXrBi2iQNR+YbFvPTbi2rdfdZoQ5qKLsM7rD3bECJ zpiazJSKXcAzCNQBsUFKngDISCiO8y8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:22:35 2025 by rpki-client