$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft File: JgPGdCltNFZsjuj5fNtKSyD2I-k.mft (raw, json) Hash identifier: 6SVgdaT9WPY+xyWInnf9xwGxdlI/dFJ8h/v4p30uhsw= Subject key identifier: A8:88:A7:D2:B0:7F:81:27:78:16:34:D7:E6:C3:0D:B4:0C:54:8D:1B Authority key identifier: 26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 Certificate issuer: /CN=A91F1BF8/serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Certificate serial: 2F70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft Manifest number: 2F5D Signing time: Tue 04 Nov 2025 15:29:53 +0000 Manifest this update: Tue 04 Nov 2025 15:29:53 +0000 Manifest next update: Tue 11 Nov 2025 15:29:53 +0000 Files and hashes: 1: JgPGdCltNFZsjuj5fNtKSyD2I-k.crl (hash: 2AWUJPr/r9t5zxUY9K6/kmAWu6mkwxt/iZOngV3mg1s=) 2: 555FE26AB13D11E59299870AC4F9AE02.roa (hash: rIMMBkLsJhvHP3s43Vw8ftneFBn/jmHGzW7joo2aCks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12144 (0x2f70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1BF8, serialNumber=2603C674296D34566C8EE8F97CDB4A4B20F623E9 Validity Not Before: Nov 4 15:29:53 2025 GMT Not After : Nov 11 15:29:53 2025 GMT Subject: CN=690a1bf1-ca70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:f5:25:40:ac:24:20:57:ee:36:5e:de:2d: 9c:53:ea:cd:1e:cf:6d:d9:fc:6c:d5:53:87:29:7a: 35:5f:62:47:94:be:8a:e2:cb:04:20:15:b8:bd:c2: 8f:27:01:36:cb:8e:27:5e:12:d9:d6:e1:a3:2f:b8: a5:9d:63:42:27:32:ca:77:28:1e:e3:62:59:f2:63: 65:9f:28:07:31:18:7b:9c:55:c1:2a:6d:88:f5:73: b9:c5:09:1e:0d:d0:f1:a8:3d:57:64:cf:f6:88:ca: a7:a6:23:e5:ec:12:fe:5c:a2:3e:a9:6d:b5:cf:dd: 6d:cc:dc:0e:ea:f8:80:ad:bc:c3:0e:d9:b9:96:aa: 1c:4f:b0:96:79:e2:0d:42:aa:06:ae:6c:09:b3:ed: 2f:78:26:69:6f:00:2f:9b:cd:b3:e1:ca:35:f6:7a: b9:7a:26:b9:a8:f2:88:90:b9:8b:ff:45:38:61:d7: bb:75:7c:3f:67:4d:ce:9b:2a:a7:30:4f:8e:86:f4: 7f:f4:98:2b:06:5c:75:6a:db:45:4d:1f:7b:a1:23: 29:0e:c5:df:ba:de:5e:b1:7b:0d:8d:39:68:d2:fd: ef:b3:a4:9e:9a:99:39:77:3a:9f:31:bf:98:df:84: 91:53:70:e3:5c:94:4f:20:29:ae:df:2a:8a:0b:14: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:88:A7:D2:B0:7F:81:27:78:16:34:D7:E6:C3:0D:B4:0C:54:8D:1B X509v3 Authority Key Identifier: keyid:26:03:C6:74:29:6D:34:56:6C:8E:E8:F9:7C:DB:4A:4B:20:F6:23:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgPGdCltNFZsjuj5fNtKSyD2I-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BF8/D089349E348711E38FB5B7745911EA32/JgPGdCltNFZsjuj5fNtKSyD2I-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6e:4a:61:37:50:a7:59:73:bd:d7:ba:a0:2e:27:6b:16:b7: f3:b3:de:94:b2:c7:b7:5a:bb:ef:34:ed:67:67:b6:67:8c:ac: fb:12:49:b8:1c:2a:dd:1e:71:72:cb:09:06:65:0c:f8:86:b4: 91:17:40:79:08:a0:8c:0d:5b:6d:9a:60:ee:8b:72:a8:21:97: 7c:17:94:b2:1a:b1:9e:b2:42:7d:0d:49:3b:92:a4:7d:a9:07: 60:d9:b5:9e:47:07:7f:a2:76:38:91:2c:3f:79:f8:72:b2:10: 6e:da:09:45:02:3b:e1:a9:41:f1:55:81:e2:6f:59:b2:88:c7: 40:0e:9c:1e:61:4c:51:db:8f:5d:a3:29:55:99:d5:69:61:ef: e3:7f:89:f8:1d:04:f3:f1:35:56:f5:36:d8:bf:39:16:e9:8d: 92:13:95:da:63:d5:d4:62:c2:7c:d8:be:4f:63:c8:d0:f6:c7: 91:46:b4:4c:1f:e9:96:9c:48:3d:41:bc:fe:0d:0c:57:33:91: c0:e6:4b:fc:63:fd:e5:b4:67:cb:c8:5d:ad:54:6b:6d:23:18: 0e:bf:9b:8b:71:54:0c:b1:6b:40:86:af:86:f9:f3:d7:8f:df: 54:f8:80:51:90:bb:f0:3e:0f:72:5d:5e:92:a3:72:ca:a5:65: 37:4b:9e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCRjgxMTAvBgNVBAUTKDI2MDNDNjc0Mjk2RDM0NTY2QzhFRThGOTdDREI0QTRC MjBGNjIzRTkwHhcNMjUxMTA0MTUyOTUzWhcNMjUxMTExMTUyOTUzWjAYMRYwFAYD VQQDEw02OTBhMWJmMS1jYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKn1JUCsJCBX7jZe3i2cU+rNHs9t2fxs1VOHKXo1X2JHlL6K4ssEIBW4vcKP JwE2y44nXhLZ1uGjL7ilnWNCJzLKdyge42JZ8mNlnygHMRh7nFXBKm2I9XO5xQke DdDxqD1XZM/2iMqnpiPl7BL+XKI+qW21z91tzNwO6viArbzDDtm5lqocT7CWeeIN QqoGrmwJs+0veCZpbwAvm82z4co19nq5eia5qPKIkLmL/0U4Yde7dXw/Z03Omyqn ME+OhvR/9JgrBlx1attFTR97oSMpDsXfut5esXsNjTlo0v3vs6Sempk5dzqfMb+Y 34SRU3DjXJRPICmu3yqKCxRlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiIp9Kw f4EneBY01+bDDbQMVI0bMB8GA1UdIwQYMBaAFCYDxnQpbTRWbI7o+XzbSksg9iPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJGOC9EMDg5MzQ5RTM0 ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5GWnNqdWo1Zk50S1N5RDJJ LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pnUEdkQ2x0TkZac2p1ajVmTnRLU3lEMkktay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUJGOC9EMDg5MzQ5RTM0ODcxMUUzOEZCNUI3NzQ1OTExRUEzMi9KZ1BHZENsdE5G WnNqdWo1Zk50S1N5RDJJLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzbkphN1CnWXO917qgLidrFrfzs96Usse3WrvvNO1nZ7ZnjKz7Ekm4 HCrdHnFyywkGZQz4hrSRF0B5CKCMDVttmmDui3KoIZd8F5SyGrGeskJ9DUk7kqR9 qQdg2bWeRwd/onY4kSw/efhyshBu2glFAjvhqUHxVYHib1myiMdADpweYUxR249d oylVmdVpYe/jf4n4HQTz8TVW9TbYvzkW6Y2SE5XaY9XUYsJ82L5PY8jQ9seRRrRM H+mWnEg9Qbz+DQxXM5HA5kv8Y/3ltGfLyF2tVGttIxgOv5uLcVQMsWtAhq+G+fPX j99U+IBRkLvwPg9yXV6So3LKpWU3S57Z -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:07 2025 by rpki-client