$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft File: jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json) Hash identifier: rWBuoArx4SIn30knNMiSm/jCm6aybHh115Td8kJU+6I= Subject key identifier: 62:79:3D:7F:BD:4A:60:5A:56:7F:DE:E6:09:8A:11:99:0C:0A:21:70 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft Manifest number: 02C4 Signing time: Wed 05 Nov 2025 01:31:13 +0000 Manifest this update: Wed 05 Nov 2025 01:31:13 +0000 Manifest next update: Wed 12 Nov 2025 01:31:13 +0000 Files and hashes: 1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: MyJmqCSh2o9V2xO6XgIrAvBF9vSLssUzweFREUAyTTY=) 2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: Af+2fxsg1OVRliv2YbtkhhRaDDPkEDX9Fcaj9HwzrTs=) 3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: zVP6Lu1oo3kp6gcWozNx0s9g3feGp/J0qR06fS1o9cs=) 4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: +LEU78x/LWwi5ap6sqbnvORUUGIW3bkmD1+ul2+yf4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Nov 5 01:31:13 2025 GMT Not After : Nov 12 01:31:13 2025 GMT Subject: CN=690aa8e1-9c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:ff:1a:dd:eb:58:ee:d8:aa:21:7a:28:38: b6:93:cc:07:f9:77:85:44:04:63:ba:7f:21:cb:5a: 4a:97:79:29:dc:7a:bd:02:08:71:b9:5e:54:75:8b: 95:ae:73:84:72:5d:36:5f:94:66:43:e7:a1:96:89: 4f:de:ec:0f:a2:2c:4e:11:c3:37:23:9c:2f:6e:7d: 5b:f5:29:02:f5:67:f9:0a:7d:09:83:1c:32:59:33: 7d:49:ce:b5:a1:eb:7d:4d:be:90:e0:c3:ae:af:b1: cb:09:d4:26:dc:1a:6f:37:2d:14:ea:49:a1:59:e1: 2b:f1:20:67:a2:06:e0:1c:ba:6d:2f:2b:69:1f:60: f3:15:34:54:14:b9:91:e7:5e:30:46:1a:dc:4e:79: 88:54:72:bf:1d:01:46:ae:33:48:85:1b:88:2b:35: 9f:31:02:72:e0:a3:33:97:9c:df:04:8c:e9:16:fc: 37:86:fe:19:f7:3b:54:7d:04:c0:fd:b7:30:15:c2: 0b:1d:10:31:a9:91:70:5c:64:c6:a6:d3:29:da:68: 3e:51:0c:67:20:ad:1e:92:f4:1e:96:68:27:8a:08: 0f:24:b3:bf:4e:29:ce:3f:09:f4:ed:d8:23:0a:d9: 72:be:e8:71:36:dc:ab:8c:5f:02:95:3e:1c:ac:b7: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:79:3D:7F:BD:4A:60:5A:56:7F:DE:E6:09:8A:11:99:0C:0A:21:70 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:39:7e:e5:9c:04:da:c6:a2:21:9a:b6:aa:ef:73:55:ef: 47:78:1d:21:41:96:06:a8:c7:e4:60:5e:a2:21:e9:9e:11:1f: 7a:1f:ce:a3:94:70:24:14:0d:c6:74:40:29:a3:9d:9b:91:72: bc:a1:19:3d:2a:b1:43:38:73:19:85:20:65:16:94:4d:5d:0c: 35:86:9b:2e:50:fd:ab:4a:d7:aa:24:4b:84:a4:d2:2d:c2:fe: a7:7e:cf:d0:7d:47:57:7c:7e:cd:70:5f:7a:de:f1:34:47:9f: 9d:b1:9b:c6:63:f1:18:f9:8c:e7:0f:d2:61:71:6d:9a:f8:05: 5f:ae:1e:7c:cc:f2:18:44:22:73:71:fe:02:f2:14:0e:9f:89: 9d:b7:5f:28:09:f5:bf:6b:00:a9:cc:1a:46:07:93:9a:e3:71: 29:b7:d9:68:1c:a9:ec:9d:c3:b4:b4:fc:7e:fb:30:4d:89:b7: 90:32:27:91:e8:cd:47:5f:ed:ec:87:35:7c:49:47:51:bb:12: 12:4b:b5:47:02:d4:ad:0c:18:8f:ca:17:27:71:1b:26:15:8e: 57:a7:2f:34:88:0f:83:4a:bf:d7:be:a0:a5:0b:39:57:06:8b: dc:82:b6:e2:1d:df:5c:50:e4:9c:9a:52:76:46:4b:6b:3d:69: 19:04:6f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUxMTA1MDEzMTEzWhcNMjUxMTEyMDEzMTEzWjAYMRYwFAYD VQQDEw02OTBhYThlMS05YzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq3/Gt3rWO7YqiF6KDi2k8wH+XeFRARjun8hy1pKl3kp3Hq9AghxuV5UdYuV rnOEcl02X5RmQ+ehlolP3uwPoixOEcM3I5wvbn1b9SkC9Wf5Cn0JgxwyWTN9Sc61 oet9Tb6Q4MOur7HLCdQm3BpvNy0U6kmhWeEr8SBnogbgHLptLytpH2DzFTRUFLmR 514wRhrcTnmIVHK/HQFGrjNIhRuIKzWfMQJy4KMzl5zfBIzpFvw3hv4Z9ztUfQTA /bcwFcILHRAxqZFwXGTGptMp2mg+UQxnIK0ekvQelmgniggPJLO/TinOPwn07dgj CtlyvuhxNtyrjF8ClT4crLfXtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ5PX+9 SmBaVn/e5gmKEZkMCiFwMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QThFOC85MDM5NzgzMDEwRDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRD SzdxUGpnd1NONzdiNi1Qdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhCDl+5ZwE2saiIZq2qu9zVe9HeB0hQZYGqMfkYF6iIemeER96H86j lHAkFA3GdEApo52bkXK8oRk9KrFDOHMZhSBlFpRNXQw1hpsuUP2rSteqJEuEpNIt wv6nfs/QfUdXfH7NcF963vE0R5+dsZvGY/EY+YznD9JhcW2a+AVfrh58zPIYRCJz cf4C8hQOn4mdt18oCfW/awCpzBpGB5Oa43Ept9loHKnsncO0tPx++zBNibeQMieR 6M1HX+3shzV8SUdRuxISS7VHAtStDBiPyhcncRsmFY5Xpy80iA+DSr/XvqClCzlX BovcgrbiHd9cUOScmlJ2RktrPWkZBG+L -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:49 2025 by rpki-client