$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: c6K2r/zjARQlSo7WYaSLFScEEEEPEDuYh9FHHtn7mdY= Subject key identifier: CC:F5:92:69:B4:F8:6D:89:FC:E9:5F:15:D9:E9:FE:DC:E2:6B:FE:54 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 01DD Signing time: Mon 03 Nov 2025 02:45:22 +0000 Manifest this update: Mon 03 Nov 2025 02:45:21 +0000 Manifest next update: Mon 10 Nov 2025 02:45:21 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: DWllE8Q+n1EzUQEXK4qKD0rkZvi5DhMnzjaDGmB4Xuc=) 2: FD678F40214E11F095B05918C4F9AE02.roa (hash: SE2tQtfXNh6RaSGSNFmLS6aWkLKk1NZamBIU1kOWDMs=) 3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4P/ZavUH4NM6wMd2wGqcFK1zMWVNSTlldDMPOXOpXSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Nov 3 02:45:21 2025 GMT Not After : Nov 10 02:45:21 2025 GMT Subject: CN=69081741-c62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:e3:67:ba:89:ff:b3:f6:10:7d:a0:85:84: 3c:11:6b:07:8c:61:11:e8:27:0c:97:f3:71:80:e8: ef:ee:e0:64:26:30:d3:a6:74:9c:87:fe:4d:cd:5e: c9:d3:df:18:a4:f4:80:b3:9c:af:1d:52:f6:86:1b: f9:46:c3:ff:7a:9c:2a:5d:97:0f:37:b9:2f:f5:04: 55:8f:94:fa:27:bb:e7:06:24:63:8b:5b:27:83:13: 93:39:f8:28:1f:53:86:db:d4:0d:b8:fb:3e:84:3d: 6d:6a:8b:90:c6:34:3c:1b:37:36:65:ad:4a:e6:42: 73:13:24:92:2b:f6:e4:2a:03:89:33:e1:23:b2:6e: a8:bc:da:d5:88:8a:24:ee:a3:33:4c:40:e9:22:10: 55:59:27:88:4f:38:2f:0f:01:a8:c8:65:17:8d:a1: f4:96:83:ce:99:8b:21:a1:c7:78:9a:99:7a:89:d6: b4:4a:54:3b:db:09:0c:8f:6c:d5:80:c8:3b:2c:d4: 74:bd:55:a6:83:a5:8b:d1:c9:c7:f6:1e:41:42:0e: 55:9b:36:d9:df:d2:0d:87:98:f9:41:14:ab:14:6a: 3a:52:d6:ce:c4:9e:e1:e8:df:28:8e:e0:22:c6:0a: b1:59:17:20:e3:e5:4a:63:d1:d7:14:4b:4a:77:36: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:92:69:B4:F8:6D:89:FC:E9:5F:15:D9:E9:FE:DC:E2:6B:FE:54 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2f:7a:ad:fc:c4:c9:d9:1b:9f:df:93:2b:bd:fa:99:82:16: fc:a1:25:a7:1b:54:96:d5:38:b6:72:23:60:5c:dd:ac:99:0b: 29:b4:c2:05:26:be:ad:d7:0f:65:ee:31:71:f6:ab:c9:7f:70: 26:24:5c:55:ca:68:2a:5b:44:06:aa:7f:d2:e1:1d:53:78:72: 2c:fc:14:67:21:48:db:21:75:61:f4:87:62:e2:f3:0c:d1:c6: d7:96:d4:82:ef:d6:08:d2:34:28:31:ae:ed:8c:2a:91:32:22: 96:d0:a0:ce:52:86:0e:8f:51:5e:55:f3:2d:e2:27:16:8c:1c: db:c4:76:16:87:23:bd:a2:5d:7c:82:19:15:78:76:12:4f:01: ca:23:54:4b:56:d7:f7:da:d9:00:db:b0:b8:95:76:43:3b:ce: 24:75:89:7b:5d:e2:e4:34:78:e0:1a:3f:c8:f3:47:04:64:70: 0f:5f:2c:04:cf:da:c1:7d:33:05:71:ed:8a:0d:1e:3f:5f:b1: ab:f4:4a:a0:b9:ea:81:27:b5:c7:35:7e:b9:96:3c:cc:2f:4a: 13:07:30:3d:a2:53:11:36:f5:15:41:cc:cc:b7:70:95:2d:13: 70:ba:5e:0e:96:4e:11:6d:a2:1f:6d:67:ee:f6:da:a6:51:d8: 76:b1:76:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjUxMTAzMDI0NTIxWhcNMjUxMTEwMDI0NTIxWjAYMRYwFAYD VQQDEw02OTA4MTc0MS1jNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRDjZ7qJ/7P2EH2ghYQ8EWsHjGER6CcMl/NxgOjv7uBkJjDTpnSch/5NzV7J 098YpPSAs5yvHVL2hhv5RsP/epwqXZcPN7kv9QRVj5T6J7vnBiRji1sngxOTOfgo H1OG29QNuPs+hD1taouQxjQ8Gzc2Za1K5kJzEySSK/bkKgOJM+Ejsm6ovNrViIok 7qMzTEDpIhBVWSeITzgvDwGoyGUXjaH0loPOmYshocd4mpl6ida0SlQ72wkMj2zV gMg7LNR0vVWmg6WL0cnH9h5BQg5VmzbZ39INh5j5QRSrFGo6UtbOxJ7h6N8ojuAi xgqxWRcg4+VKY9HXFEtKdzbzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz1kmm0 +G2J/OlfFdnp/tzia/5UMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUL3qt/MTJ2Ruf35MrvfqZghb8oSWnG1SW1Ti2ciNgXN2smQsptMIF Jr6t1w9l7jFx9qvJf3AmJFxVymgqW0QGqn/S4R1TeHIs/BRnIUjbIXVh9Idi4vMM 0cbXltSC79YI0jQoMa7tjCqRMiKW0KDOUoYOj1FeVfMt4icWjBzbxHYWhyO9ol18 ghkVeHYSTwHKI1RLVtf32tkA27C4lXZDO84kdYl7XeLkNHjgGj/I80cEZHAPXywE z9rBfTMFce2KDR4/X7Gr9EqgueqBJ7XHNX65ljzML0oTBzA9olMRNvUVQczMt3CV LRNwul4Olk4RbaIfbWfu9tqmUdh2sXb8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:16 2025 by rpki-client