$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft File: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft (raw, json) Hash identifier: Ki+dRUm0ZF7r56ndikpA91lFyVjYgHplJcDQ1l1bpeE= Subject key identifier: 6F:32:E3:27:23:71:1A:B1:EB:74:99:14:33:AC:8A:B5:9D:B9:D2:76 Authority key identifier: B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 Certificate issuer: /CN=A91F0017/serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft Manifest number: 02FC Signing time: Mon 27 Oct 2025 02:39:11 +0000 Manifest this update: Mon 27 Oct 2025 02:39:11 +0000 Manifest next update: Mon 03 Nov 2025 02:39:11 +0000 Files and hashes: 1: sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl (hash: LH9tztlRV8TACTfQmQb7owcTcvDuZd74uU7ML+35sfk=) 2: D3843904F79D11ECAFF03840C4F9AE02.roa (hash: G/i4Pg8jdMHmXjQNkM+eJFlsVzQq6gbZlmc97MQExQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0017, serialNumber=B23AD583632C60E067F53D66A45E950FBB0777C4 Validity Not Before: Oct 27 02:39:11 2025 GMT Not After : Nov 3 02:39:11 2025 GMT Subject: CN=68fedb4f-f2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:a8:d8:5b:1a:c2:18:ca:18:ba:b7:2c:79: e8:42:2f:20:a8:6b:66:99:53:e7:25:6a:ef:73:3a: 04:35:55:7b:3b:e6:f6:57:33:79:df:bb:f4:d7:ac: 3d:3a:db:6e:71:4e:7c:12:f8:18:4d:e5:ea:12:55: f7:fc:0f:25:62:f0:fb:a2:0e:6e:cc:c4:51:13:b9: 1a:8f:23:5a:2e:8b:f8:48:99:d8:2e:d3:30:5e:d0: ba:5c:6d:9f:ad:31:91:21:29:2d:4f:70:41:53:69: e1:8e:ce:ca:72:26:b8:b9:17:60:fb:52:cd:2b:e0: 1f:b1:ab:95:18:60:d2:d9:bd:0e:ca:e2:60:f7:34: 57:bc:5c:af:67:c7:69:ce:24:6e:29:b3:bd:41:ed: 8a:13:83:84:a9:63:5b:0e:4c:40:5d:04:1f:6a:79: 7d:93:a3:3a:be:0f:2e:89:99:a1:d1:cc:dd:45:90: 6e:b2:d0:b3:4b:44:dd:cf:53:e3:b2:40:c5:4b:57: b5:26:9b:13:77:29:fb:52:d3:af:25:68:33:13:5b: 9c:6f:0a:55:76:96:3a:05:f9:3a:16:eb:0f:8d:ce: e3:b8:f1:36:a6:cc:1b:4b:13:d2:89:f7:89:2c:1a: 03:76:ae:59:8e:96:97:2f:5d:37:f3:43:c1:32:a0: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:32:E3:27:23:71:1A:B1:EB:74:99:14:33:AC:8A:B5:9D:B9:D2:76 X509v3 Authority Key Identifier: keyid:B2:3A:D5:83:63:2C:60:E0:67:F5:3D:66:A4:5E:95:0F:BB:07:77:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0017/76171E54F79711ECB4C66835C4F9AE02/sjrVg2MsYOBn9T1mpF6VD7sHd8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2d:94:03:4e:cb:46:ed:a0:e4:a2:e1:c3:89:bd:1f:db:00: fc:8f:24:71:d9:df:60:c5:0e:b5:d1:96:0b:2d:9f:d1:5e:26: c9:a9:6b:21:c0:d7:b5:18:e0:0a:d1:11:26:ee:d4:5b:cf:6a: bc:b1:37:06:dc:71:48:8d:26:37:7e:80:d3:ff:5b:8f:15:fc: bc:b8:0d:53:57:11:2f:9c:45:10:a7:03:83:04:92:33:ad:18: 8e:73:dd:d7:ba:5a:0b:f1:c5:ff:2e:8e:df:4b:43:9c:f7:e2: ab:ba:d4:c1:4a:5a:db:de:dd:50:4e:76:53:bc:fd:19:26:ec: cf:ea:f3:60:76:ea:d4:62:83:b1:df:c2:4a:e3:c8:ae:ce:cf: b6:eb:02:fa:87:a5:1d:14:9f:ac:4e:42:a4:a4:fc:a6:29:72: 7f:bf:fc:47:98:81:76:59:e2:31:09:4d:2d:f5:6d:37:b1:81: 66:7c:c2:a5:23:e0:aa:c2:80:41:73:65:81:1f:c6:6b:41:b3: be:7e:79:13:9a:cc:be:9a:ca:f1:f4:d0:41:ce:e2:8f:06:6c: 9e:37:cf:f2:d0:db:22:68:ec:f8:a6:bd:e0:8a:6f:24:9e:e0: 7c:e4:15:eb:de:f8:50:73:b9:86:5f:89:b8:1f:a0:de:46:6a: 05:6b:cf:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAwMTcxMTAvBgNVBAUTKEIyM0FENTgzNjMyQzYwRTA2N0Y1M0Q2NkE0NUU5NTBG QkIwNzc3QzQwHhcNMjUxMDI3MDIzOTExWhcNMjUxMTAzMDIzOTExWjAYMRYwFAYD VQQDEw02OGZlZGI0Zi1mMmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+io2FsawhjKGLq3LHnoQi8gqGtmmVPnJWrvczoENVV7O+b2VzN537v016w9 OttucU58EvgYTeXqElX3/A8lYvD7og5uzMRRE7kajyNaLov4SJnYLtMwXtC6XG2f rTGRISktT3BBU2nhjs7Kcia4uRdg+1LNK+AfsauVGGDS2b0OyuJg9zRXvFyvZ8dp ziRuKbO9Qe2KE4OEqWNbDkxAXQQfanl9k6M6vg8uiZmh0czdRZBustCzS0Tdz1Pj skDFS1e1JpsTdyn7UtOvJWgzE1ucbwpVdpY6Bfk6FusPjc7juPE2pswbSxPSifeJ LBoDdq5ZjpaXL10380PBMqCr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8y4ycj cRqx63SZFDOsirWdudJ2MB8GA1UdIwQYMBaAFLI61YNjLGDgZ/U9ZqRelQ+7B3fE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDAxNy83NjE3MUU1NEY3 OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lPQm45VDFtcEY2VkQ3c0hk OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NqclZnMk1zWU9CbjlUMW1wRjZWRDdzSGQ4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDAxNy83NjE3MUU1NEY3OTcxMUVDQjRDNjY4MzVDNEY5QUUwMi9zanJWZzJNc1lP Qm45VDFtcEY2VkQ3c0hkOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLZQDTstG7aDkouHDib0f2wD8jyRx2d9gxQ610ZYLLZ/RXibJqWsh wNe1GOAK0REm7tRbz2q8sTcG3HFIjSY3foDT/1uPFfy8uA1TVxEvnEUQpwODBJIz rRiOc93XuloL8cX/Lo7fS0Oc9+KrutTBSlrb3t1QTnZTvP0ZJuzP6vNgdurUYoOx 38JK48iuzs+26wL6h6UdFJ+sTkKkpPymKXJ/v/xHmIF2WeIxCU0t9W03sYFmfMKl I+CqwoBBc2WBH8ZrQbO+fnkTmsy+msrx9NBBzuKPBmyeN8/y0NsiaOz4pr3gim8k nuB85BXr3vhQc7mGX4m4H6DeRmoFa88X -----END CERTIFICATE-----Generated at Tue Oct 28 09:28:44 2025 by rpki-client