$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft File: J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json) Hash identifier: 1JRGUHAg4xtgO5S+5QIHg66tXQdyO6i0krwg5OVVAvU= Subject key identifier: 1D:81:1E:AB:D5:7D:89:93:62:A4:6F:B4:90:49:79:AD:C5:6B:A4:B4 Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft Manifest number: 037B Signing time: Mon 27 Oct 2025 02:15:48 +0000 Manifest this update: Mon 27 Oct 2025 02:15:47 +0000 Manifest next update: Mon 03 Nov 2025 02:15:47 +0000 Files and hashes: 1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: CX7P67rRithwPMhqYMaKDB/CYiTKCWfvryvHXaTKcPs=) 2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: dxa4kBT2lvl3oboOGNPEyKat95ik2LOjHGB6LQMSuIY=) 3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: xwWWISkzf0btU4XnSYbv2CyxUkjvyAAYT2JHS7cyDnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Validity Not Before: Oct 27 02:15:47 2025 GMT Not After : Nov 3 02:15:47 2025 GMT Subject: CN=68fed5d3-ec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:b9:ca:f0:6c:36:78:4d:cd:61:ef:a3:b9: e7:60:dd:a9:e1:10:6a:f0:99:c3:63:78:89:71:43: f6:dd:02:00:3c:44:7c:50:3f:4f:48:d3:f6:7a:d4: 11:2a:33:4e:a8:b8:fa:32:7a:00:61:05:14:75:ca: a2:04:1a:f9:4e:70:f9:02:eb:b8:2e:aa:8d:3c:f2: 95:58:74:0f:96:77:c3:a0:ee:d3:0f:da:b5:46:27: f9:1e:d3:8f:0c:34:8e:c1:e5:68:10:bb:ce:d3:98: 7e:ec:ac:da:08:34:9c:95:87:4f:12:d0:96:50:06: ce:6a:99:e3:8a:63:03:62:45:3d:6b:64:ad:de:e0: 19:5b:fb:5c:a4:32:3d:e9:e5:a0:76:42:b9:37:bf: 24:c3:01:b8:29:25:f8:06:65:c3:cb:6a:b7:8f:dd: af:37:15:18:7b:7c:d0:e6:1d:a0:ce:fd:c4:7c:5f: e4:6f:a0:dc:4e:75:91:e4:96:35:ac:6c:0b:2b:c4: 1a:92:dd:42:c3:11:db:21:b0:6a:5e:b1:c5:3e:92: 3e:e4:52:a8:53:3d:e5:bf:ec:3a:7c:8d:81:63:61: 56:fe:d6:7b:75:e2:54:28:83:e5:e0:c9:96:88:75: 29:90:f2:de:09:cf:b5:76:64:2f:23:3a:2c:05:b6: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:1E:AB:D5:7D:89:93:62:A4:6F:B4:90:49:79:AD:C5:6B:A4:B4 X509v3 Authority Key Identifier: keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:89:7a:9f:7e:4f:12:fa:43:5b:f2:b6:47:42:b0:0e:24: 38:ea:1d:80:7f:1d:0a:8a:01:f4:b4:f1:7d:80:6b:0f:63:df: ac:c0:cd:1d:b9:30:26:65:70:92:c0:01:30:13:be:65:74:3d: 5e:75:3e:18:76:f7:15:85:f6:a9:9e:e0:0f:85:e5:07:5a:f1: 81:f5:61:cc:20:48:76:fa:ad:85:56:15:2c:c4:ca:dd:46:f1: 0b:6b:84:b5:02:1d:14:e0:cc:ca:fb:93:10:f1:28:cf:6c:f8: 5b:ca:ab:fe:96:ea:20:b9:59:94:95:2c:f5:c8:66:02:e8:cf: e6:55:6a:04:5d:e3:82:10:78:05:c3:aa:ed:89:43:f0:f5:64: c5:99:fc:85:3e:b3:98:03:e4:e5:ea:67:00:ca:e0:c6:a6:b3: 95:70:ce:e0:07:e4:8f:8e:22:cb:00:3b:0b:1b:0b:26:aa:61: ec:30:20:20:97:c0:af:86:30:92:d8:77:da:36:c4:bd:28:87: d6:7e:bc:73:58:a9:fd:a8:c7:eb:82:69:ef:87:27:53:de:f0: 3c:eb:de:da:04:e9:64:74:73:7a:bc:69:60:95:99:88:a9:6b: 33:16:3b:43:93:ff:44:53:ad:e4:99:e0:ec:f5:1c:e6:95:b4: 43:1b:4c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz RENBNjFCMUMwHhcNMjUxMDI3MDIxNTQ3WhcNMjUxMTAzMDIxNTQ3WjAYMRYwFAYD VQQDEw02OGZlZDVkMy1lYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseu5yvBsNnhNzWHvo7nnYN2p4RBq8JnDY3iJcUP23QIAPER8UD9PSNP2etQR KjNOqLj6MnoAYQUUdcqiBBr5TnD5Auu4LqqNPPKVWHQPlnfDoO7TD9q1Rif5HtOP DDSOweVoELvO05h+7KzaCDSclYdPEtCWUAbOapnjimMDYkU9a2St3uAZW/tcpDI9 6eWgdkK5N78kwwG4KSX4BmXDy2q3j92vNxUYe3zQ5h2gzv3EfF/kb6DcTnWR5JY1 rGwLK8Qakt1CwxHbIbBqXrHFPpI+5FKoUz3lv+w6fI2BY2FW/tZ7deJUKIPl4MmW iHUpkPLeCc+1dmQvIzosBba/SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2BHqvV fYmTYqRvtJBJea3Fa6S0MB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2 MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDBDQy9CNEE3Q0NFOEM2MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lX YlVOeE83Rzg2T0E5eW1HeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2Il6n35PEvpDW/K2R0KwDiQ46h2Afx0KigH0tPF9gGsPY9+swM0d uTAmZXCSwAEwE75ldD1edT4YdvcVhfapnuAPheUHWvGB9WHMIEh2+q2FVhUsxMrd RvELa4S1Ah0U4MzK+5MQ8SjPbPhbyqv+luoguVmUlSz1yGYC6M/mVWoEXeOCEHgF w6rtiUPw9WTFmfyFPrOYA+Tl6mcAyuDGprOVcM7gB+SPjiLLADsLGwsmqmHsMCAg l8CvhjCS2HfaNsS9KIfWfrxzWKn9qMfrgmnvhydT3vA8697aBOlkdHN6vGlglZmI qWszFjtDk/9EU63kmeDs9RzmlbRDG0zI -----END CERTIFICATE-----Generated at Mon Oct 27 17:34:34 2025 by rpki-client