$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft File: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft (raw, json) Hash identifier: UgHK2cYk2IA8a0ytFXwVXB8ejxqrlRcvqnc/yJOO9es= Subject key identifier: 40:26:A4:96:D2:48:9A:2F:20:28:54:34:A2:05:AE:A1:FB:46:89:9A Authority key identifier: 26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 Certificate issuer: /CN=A91FC42F/serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft Manifest number: 0BB3 Signing time: Sun 02 Nov 2025 18:55:50 +0000 Manifest this update: Sun 02 Nov 2025 18:55:49 +0000 Manifest next update: Sun 09 Nov 2025 18:55:49 +0000 Files and hashes: 1: JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl (hash: w1DYfyeV0eG20OjjDjZwKGEAWJH2klC5I96pyji10zc=) 2: A540A624378611EABE283384C4F9AE02.roa (hash: wqMWiXdgCu3cScL0mYpc0UCwGRMk2VdkUHOf3iWaHHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42F, serialNumber=260C68A83476430C19AC86FC13613330DE10F9B9 Validity Not Before: Nov 2 18:55:49 2025 GMT Not After : Nov 9 18:55:49 2025 GMT Subject: CN=6907a936-52f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:e8:3d:23:b4:48:4e:89:0e:bd:6e:4a:e5: f7:07:9a:a0:3c:e2:17:96:1f:20:30:48:13:c1:95: 23:bb:71:35:59:9f:71:ae:2f:64:ee:68:ba:87:2f: 69:bb:fb:86:17:2a:9c:45:be:e1:d2:5b:33:13:3a: 07:00:25:d1:fb:99:4a:16:10:3d:20:4f:da:bc:c2: 5b:51:20:f9:d9:80:88:f7:fe:00:ae:63:1e:ec:4d: d0:66:94:22:03:76:6c:f1:e7:69:0e:51:f9:7c:fe: 16:6c:17:1f:26:bb:90:df:64:eb:cf:85:9f:9b:04: c0:aa:f6:ee:ac:d6:e2:2d:84:57:8e:bd:23:f1:40: 1f:74:03:f8:87:a7:e1:41:9c:bc:70:de:d7:7c:6e: 78:e6:92:ff:b2:1d:3a:30:ca:8d:9b:62:69:80:72: b9:ea:02:36:ef:7d:9e:9b:47:89:e5:0b:b6:a9:0b: 10:b7:6f:0f:ee:70:71:df:ba:93:24:d6:5a:28:de: c4:c4:3a:8b:07:49:23:33:3b:0d:ea:ba:36:13:45: e8:87:1c:6d:a7:db:a4:dc:a0:0e:a6:87:f9:3b:a9: 16:5a:da:3e:2c:92:28:f2:c2:70:cf:60:03:0f:21: 27:ca:3e:1b:cf:38:f7:8e:c7:0d:48:be:fc:f2:00: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:A4:96:D2:48:9A:2F:20:28:54:34:A2:05:AE:A1:FB:46:89:9A X509v3 Authority Key Identifier: keyid:26:0C:68:A8:34:76:43:0C:19:AC:86:FC:13:61:33:30:DE:10:F9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42F/63E6E392313611EA8BE2612BC4F9AE02/JgxoqDR2QwwZrIb8E2EzMN4Q-bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b6:e9:dd:44:49:d1:4b:cb:cf:ad:b8:34:e9:d6:e4:69:3d: b5:2f:c2:18:aa:5c:43:11:01:1d:52:b5:71:2f:e2:4c:0d:07: bc:af:40:d8:a3:cf:fd:d6:c2:8d:f7:87:1c:b1:1c:37:a2:0e: e2:a8:e1:ec:a8:63:4d:49:e6:f8:e9:01:5f:bd:27:0e:c3:10: 39:18:f5:f0:15:d0:94:66:5e:19:05:8a:72:44:57:d4:6e:ab: 42:9c:d7:9f:7c:3f:a4:7e:21:a2:39:6e:ac:63:ef:52:5a:c3: 6a:f3:f9:d6:fb:a6:f4:07:3d:fd:86:fc:52:91:31:d2:2e:a3: 73:df:73:d3:11:ba:ea:22:ab:1d:cd:be:f6:4f:ae:92:12:a8: 0b:10:e7:c8:53:51:b8:df:2c:fe:2a:f1:b2:91:bf:d1:df:19: a3:a5:66:a1:c6:3d:db:88:f9:21:a1:ba:e2:e6:03:b6:09:d1: c5:d9:72:d7:41:79:39:9b:6b:0b:1a:ba:ed:18:02:41:66:ee: c9:dc:20:d3:6d:49:e3:dd:82:b8:fa:4a:9b:1f:90:67:bf:43: b0:e2:7f:b3:a4:2c:58:6d:29:9e:b0:a4:bd:22:c1:13:fc:cd: 05:3d:00:79:56:8e:d4:96:1f:a8:66:ab:69:b1:72:80:8c:a7: 53:a8:63:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkYxMTAvBgNVBAUTKDI2MEM2OEE4MzQ3NjQzMEMxOUFDODZGQzEzNjEzMzMw REUxMEY5QjkwHhcNMjUxMTAyMTg1NTQ5WhcNMjUxMTA5MTg1NTQ5WjAYMRYwFAYD VQQDEw02OTA3YTkzNi01MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfXoPSO0SE6JDr1uSuX3B5qgPOIXlh8gMEgTwZUju3E1WZ9xri9k7mi6hy9p u/uGFyqcRb7h0lszEzoHACXR+5lKFhA9IE/avMJbUSD52YCI9/4ArmMe7E3QZpQi A3Zs8edpDlH5fP4WbBcfJruQ32Trz4WfmwTAqvburNbiLYRXjr0j8UAfdAP4h6fh QZy8cN7XfG545pL/sh06MMqNm2JpgHK56gI2732em0eJ5Qu2qQsQt28P7nBx37qT JNZaKN7ExDqLB0kjMzsN6ro2E0Xohxxtp9uk3KAOpof5O6kWWto+LJIo8sJwz2AD DyEnyj4bzzj3jscNSL788gBL7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAmpJbS SJovIChUNKIFrqH7RomaMB8GA1UdIwQYMBaAFCYMaKg0dkMMGayG/BNhMzDeEPm5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyRi82M0U2RTM5MjMx MzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3d1pySWI4RTJFek1ONFEt YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pneG9xRFIyUXd3WnJJYjhFMkV6TU40US1iay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyRi82M0U2RTM5MjMxMzYxMUVBOEJFMjYxMkJDNEY5QUUwMi9KZ3hvcURSMlF3 d1pySWI4RTJFek1ONFEtYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKtundREnRS8vPrbg06dbkaT21L8IYqlxDEQEdUrVxL+JMDQe8r0DY o8/91sKN94ccsRw3og7iqOHsqGNNSeb46QFfvScOwxA5GPXwFdCUZl4ZBYpyRFfU bqtCnNeffD+kfiGiOW6sY+9SWsNq8/nW+6b0Bz39hvxSkTHSLqNz33PTEbrqIqsd zb72T66SEqgLEOfIU1G43yz+KvGykb/R3xmjpWahxj3biPkhobri5gO2CdHF2XLX QXk5m2sLGrrtGAJBZu7J3CDTbUnj3YK4+kqbH5Bnv0Ow4n+zpCxYbSmesKS9IsET /M0FPQB5Vo7Ulh+oZqtpsXKAjKdTqGOV -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:35 2025 by rpki-client