$ rpki-client -vvf rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft File: jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft (raw, json) Hash identifier: uA2mzCC4Bx6FbhoTl2PZqNHsxPO8r1riLm+XIPAVdhU= Subject key identifier: 91:AD:D6:F9:55:83:54:07:25:12:BD:06:25:11:ED:A0:D1:DD:F4:EE Authority key identifier: 8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 Certificate issuer: /CN=A91385F2/serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft Manifest number: 0544 Signing time: Sun 02 Nov 2025 23:26:59 +0000 Manifest this update: Sun 02 Nov 2025 23:26:59 +0000 Manifest next update: Sun 09 Nov 2025 23:26:59 +0000 Files and hashes: 1: jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl (hash: 89+IkeUP8pr7JHzkEFFrCT58yRxmcApKn6M4xeEeP70=) 2: F85178E05DD111EF83CF1063C4F9AE02.roa (hash: DwXb+joRx9u0BG/TCkqlIKWQRw4604GMuFkdr4cvB14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91385F2, serialNumber=8C0A1FFF1AA31CEA6CC0C88B67AC22D594639C75 Validity Not Before: Nov 2 23:26:59 2025 GMT Not After : Nov 9 23:26:59 2025 GMT Subject: CN=6907e8c3-58c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:a0:67:3f:10:8e:3f:ca:03:a3:6e:49:ae: c7:99:a7:48:5c:ed:18:f3:17:2f:91:9f:db:aa:96: 3a:ef:55:13:0a:59:37:5e:fa:69:92:c7:50:63:2e: 87:b6:e5:bd:34:ac:54:58:05:67:67:6a:b4:5e:d0: 82:f1:84:d3:6f:9e:48:da:9d:18:95:d7:f8:a8:9a: bb:a7:b9:b8:6f:13:fe:08:09:98:5b:dd:58:44:1c: 29:50:2e:d4:37:0b:00:79:8c:ab:fb:58:2c:be:17: 4c:96:bd:33:92:c6:9a:0d:a8:61:43:dc:35:51:79: a2:1f:c4:11:3a:fc:f5:96:06:2d:8c:e2:03:44:8c: f6:49:ca:d3:c7:43:57:2f:62:68:b5:4f:6d:cc:6e: a3:8f:77:3e:e3:37:8e:de:b1:7b:10:be:6c:12:de: e0:88:13:ea:51:59:f5:cd:9c:7e:99:37:33:a7:f4: 1c:bf:0e:49:e0:98:50:53:e7:9c:fc:2c:3c:ca:15: 22:2c:39:55:06:0f:85:d0:9b:fe:1c:76:1c:18:fd: 8f:57:e2:9a:91:33:bb:56:72:12:b7:99:de:32:e5: 55:e2:83:52:f8:17:98:a2:c8:0d:1d:39:16:fb:fb: df:d0:ec:9c:ea:1b:32:ab:6c:4a:96:3e:53:da:77: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AD:D6:F9:55:83:54:07:25:12:BD:06:25:11:ED:A0:D1:DD:F4:EE X509v3 Authority Key Identifier: keyid:8C:0A:1F:FF:1A:A3:1C:EA:6C:C0:C8:8B:67:AC:22:D5:94:63:9C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAof_xqjHOpswMiLZ6wi1ZRjnHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91385F2/4D3016E8152111ECBE886A29C4F9AE02/jAof_xqjHOpswMiLZ6wi1ZRjnHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1b:3c:64:47:b9:ec:be:07:a2:b1:cb:64:0d:1e:c8:69:80: 2c:bf:50:b7:ef:4a:7c:bb:ea:90:51:76:4e:0e:ff:e8:b7:11: 04:94:38:fb:79:3a:ef:89:32:75:6b:f4:71:87:c2:bb:a5:1f: ce:6e:f1:be:f5:2d:14:04:ff:47:35:66:ad:c6:5d:32:00:64: 44:39:83:03:9e:54:64:8e:d8:e2:ab:b0:ab:81:92:f2:d1:51: 2a:46:91:6d:44:20:7f:89:c0:67:43:1a:52:4c:a9:dd:94:12: 18:e9:d3:6d:2c:2c:b1:1d:52:8e:65:b8:ee:dc:d1:a6:9c:cb: d9:af:68:1b:be:67:7f:2c:0e:9d:4b:47:5f:72:31:a4:84:cb: 7a:48:b8:49:07:b5:e1:7f:c7:50:2a:e2:d3:82:94:a1:ac:db: 46:16:3d:a0:41:c7:b5:04:ac:b2:0e:4d:9c:57:a0:4d:33:d1: 73:71:dc:16:fa:2a:96:28:d2:79:39:d7:3d:b4:00:df:dc:76: 6c:a9:30:fb:11:4a:0e:60:bf:00:41:89:94:9c:39:87:5f:20: 54:38:01:ef:d3:e4:78:41:f1:7d:d0:11:14:42:89:73:e2:8c: ef:6b:de:58:37:3b:d3:31:70:40:c7:3d:92:42:9a:ed:f1:cd: 73:a0:c4:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1RjIxMTAvBgNVBAUTKDhDMEExRkZGMUFBMzFDRUE2Q0MwQzg4QjY3QUMyMkQ1 OTQ2MzlDNzUwHhcNMjUxMTAyMjMyNjU5WhcNMjUxMTA5MjMyNjU5WjAYMRYwFAYD VQQDEw02OTA3ZThjMy01OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpmgZz8Qjj/KA6NuSa7HmadIXO0Y8xcvkZ/bqpY671UTClk3XvppksdQYy6H tuW9NKxUWAVnZ2q0XtCC8YTTb55I2p0Yldf4qJq7p7m4bxP+CAmYW91YRBwpUC7U NwsAeYyr+1gsvhdMlr0zksaaDahhQ9w1UXmiH8QROvz1lgYtjOIDRIz2ScrTx0NX L2JotU9tzG6jj3c+4zeO3rF7EL5sEt7giBPqUVn1zZx+mTczp/Qcvw5J4JhQU+ec /Cw8yhUiLDlVBg+F0Jv+HHYcGP2PV+KakTO7VnISt5neMuVV4oNS+BeYosgNHTkW +/vf0Oyc6hsyq2xKlj5T2neIsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGt1vlV g1QHJRK9BiUR7aDR3fTuMB8GA1UdIwQYMBaAFIwKH/8aoxzqbMDIi2esItWUY5x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODVGMi80RDMwMTZFODE1 MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhPcHN3TWlMWjZ3aTFaUmpu SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pBb2ZfeHFqSE9wc3dNaUxaNndpMVpSam5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODVGMi80RDMwMTZFODE1MjExMUVDQkU4ODZBMjlDNEY5QUUwMi9qQW9mX3hxakhP cHN3TWlMWjZ3aTFaUmpuSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeGzxkR7nsvgeisctkDR7IaYAsv1C370p8u+qQUXZODv/otxEElDj7 eTrviTJ1a/Rxh8K7pR/ObvG+9S0UBP9HNWatxl0yAGREOYMDnlRkjtjiq7CrgZLy 0VEqRpFtRCB/icBnQxpSTKndlBIY6dNtLCyxHVKOZbju3NGmnMvZr2gbvmd/LA6d S0dfcjGkhMt6SLhJB7Xhf8dQKuLTgpShrNtGFj2gQce1BKyyDk2cV6BNM9FzcdwW +iqWKNJ5Odc9tADf3HZsqTD7EUoOYL8AQYmUnDmHXyBUOAHv0+R4QfF90BEUQolz 4ozva95YNzvTMXBAxz2SQprt8c1zoMS0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:41 2025 by rpki-client